Zscaler ThreatLabz 2024 VPN Risk Report

The Zscaler ThreatLabz 2024 VPN Risk Report summarizes survey and telemetry evidence that VPN vulnerabilities and high-profile CVEs have driven a surge in VPN-targeted attacks across enterprises—56% reported at least one VPN-related attack in the past year, many experienced lateral movement and repeated incidents, and respondents cite ransomware, malware, and DDoS as top threats. The report concludes that traditional VPN architectures pose significant security and third-party risk and that organizations are rapidly moving toward zero trust/ZTNA as a mitigation strategy.