NSA, CISA Provide VPN Security Tips For Hacker Protection

Share post:

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have issued guidelines to improve the security of virtual private network (VPN) solutions.

Both agencies co-authored the document to help organizations improve their defenses against attacks by nation-state cybercriminals who exploited bugs in VPN systems to “steal credentials, remotely execute code, weaken encrypted traffic’s cryptography, hijack encrypted traffic sessions, and read sensitive data from the device.”

Organizations should also purchase products from reputable vendors who already have experience in fixing known vulnerabilities quickly.

Both agencies recommend reducing the server’s attack surface by:

  • Strong cryptography and authentication
  • Running on strictly necessary features
  • Protection and monitoring of access to and from the VPN

The guidelines come after financially motivated and state-supported cybercriminals have recently focused on exploiting VPN vulnerabilities to achieve their goal.

The attack vector has attracted government-backed hackers who leveraged vulnerabilities in VPN devices to enter networks of government organizations and defense companies in many nations.

Ransomware gangs have also shown a massive interest in this type of network access vector. At least seven operations have exploited bugs in VPN solutions from Fortinet, Ivanti Pulse and SonicWall.

Cring, Ragnar Locker, Black Kingdom, HelloKitty, LockBit, REvil or Conti ransomware operations have exploited the systems of many companies by exploiting VPN security issues.

For more information, read the original story in Bleeping Computer.

Featured Tech Jobs


Related articles

Sam Altman’s move to Microsoft may not happen

Will Sam Altman move to Microsoft or return to OpenAI? The answer is anything but certain. Altman, along...

Microsoft Hires Sam Altman And Greg Brockman To Spearhead New AI Research Unit

Microsoft announced that OpenAI CEO Sam Altman and ex-president Greg Brockman will lead a newly formed advanced AI...

Sam Altman steps down as CEO of OpenAI

OpenAI has announced a significant leadership transition, with Sam Altman stepping down as CEO and Chief Technology Officer...

Apple unveils new MacBook Pro with M3 family of chips

Apple has announced a new MacBook Pro lineup featuring the all-new M3 family of chips: M3, M3 Pro,...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways