Complex VPNs make companies more vulnerable

The latest InsurSec Rankings from At-Bay reveal a worrying security trend. The 2025 report shows that organizations using VPN solutions from Cisco and Citrix are much more likely to fall victim to ransomware attacks than companies using other VPN solutions or no VPN solutions at all. 

According to an analysis, companies with Cisco or Citrix VPNs are almost seven times more likely to be affected by ransomware. Companies with on-premise VPN devices are generally 3.7 times more likely to be targeted than organizations that use a cloud-based VPN or no VPN at all. This confirms a trend that has been evident for some time: local infrastructure is difficult to secure against rapidly evolving threats that penetrate via the internet. Cisco and Citrix are mentioned explicitly because their VPN devices are regularly targeted by attackers who exploit newly discovered vulnerabilities before patches are rolled out.

The risks associated with VPN technology are part of…