There’s a widely shared idea, especially among non-technical folks, that a virtual private network (VPN) represents the height of computing security. That might explain the popularity of all those banner ads screaming, “Protect your identity with a VPN!”
Workplaces have been guilty of this kind of thinking too. As the adoption of software as a service (SaaS) increased, many organizations implemented SaaS solutions that were VPN dependent. While these might have been SaaS in a loose sense, their reliance on VPNs offset some of the security advantages that real SaaS solutions bring to the table.
And now that the sizes of remote workforces have exploded, IT departments are quickly discovering the limits and risks of VPNs. Even before the pandemic-related rise in remote work, one article by InfoSecurity highlighted the many problems with VPNs.
Without mincing words, that same article described VPNs as a “devastating point of initial compromise.” Ouch.