VPN Security Concerns | UpGuard

This document explains how VPNs provide encrypted connectivity for remote access and outlines associated risks such as provider logging, breaches, phishing-driven credential compromise, and malware that can traverse encrypted tunnels. It recommends due diligence on VPN providers, strong authentication and passwords, MFA, zero-trust and least privilege, logging and audits, leak protection testing, and considering firewall-based VPN solutions. It also notes UpGuard’s capabilities to detect exposed VPN ports and identify VPN products, highlighting the value of quickly addressing critical vulnerabilities like Fortigate CVE-2023-27997 and Ivanti Connect Secure CVE-2024-21887.