VPN (Virtual private network)

A virtual private network creates an encrypted connection over the internet between a device and a network, allowing users to reach business resources securely from remote locations.

A business VPN lets employees working from home, a hotel or a job site connect to office systems as though they were on the local network. The encrypted tunnel protects data from being read on untrusted networks such as public Wi-Fi. This differs from consumer VPN services, which are mainly marketed for privacy while browsing.

VPNs remain widely used, but VPN devices themselves have become a favourite target. Attackers look for VPN appliances with unpatched vulnerabilities or accounts protected only by a password. A compromised VPN gives direct access to the internal network, which can lead to ransomware.

Practical tip: require multi-factor authentication on every VPN account, patch VPN appliances as soon as security updates are released and disable accounts for departed staff immediately. Limit what VPN users can reach to what they actually need. For businesses whose data is mostly in the cloud, ask your IT provider whether zero trust access tools are a better fit.