Back 
Legacy VPNs have become a significant security liability for businesses and governments. VPNs require inbound access to corporate networks, significantly broadening the attack surface for malware. This makes them prime targets for threat actors, increasing the risk of disruption to your business. VPNs are built on a foundation of excessive implicit trust, which can inadvertently allow attackers to move laterally within a network and escalate privileges without detection, gaining access to high-value systems far beyond their initial point of entry. Perhaps most alarmingly, VPNs are plagued by a long history of software vulnerabilities that have been persistently exploited by both individual hackers and nation-state actors.
CISA’s stark warning: “Just Disconnect” Ivanti Connect Secure VPN appliances
The widely used VPN Ivanti Connect Secure, previously known as Pulse Secure, starkly highlights these security risks. In recent years, Ivanti Secure Connect has been the breeding ground for several zero-day vulnerabilities, which have been widely exploited, sometimes leading to devastating consequences. Now, Ivanti finds itself in the crosshairs once again, with attackers actively exploiting new zero-day vulnerabilities in its software.
So, the pressing question arises: why is this happening now, and why do we believe VPNs are a clear and present danger? The root of the problem can be traced back to the age and evolution of VPN technology. Most legacy VPNs ha