NSA, CISA Provide VPN Security Tips For Hacker Protection

Share post:

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have issued guidelines to improve the security of virtual private network (VPN) solutions.

Both agencies co-authored the document to help organizations improve their defenses against attacks by nation-state cybercriminals who exploited bugs in VPN systems to “steal credentials, remotely execute code, weaken encrypted traffic’s cryptography, hijack encrypted traffic sessions, and read sensitive data from the device.”

Organizations should also purchase products from reputable vendors who already have experience in fixing known vulnerabilities quickly.

Both agencies recommend reducing the server’s attack surface by:

  • Strong cryptography and authentication
  • Running on strictly necessary features
  • Protection and monitoring of access to and from the VPN

The guidelines come after financially motivated and state-supported cybercriminals have recently focused on exploiting VPN vulnerabilities to achieve their goal.

The attack vector has attracted government-backed hackers who leveraged vulnerabilities in VPN devices to enter networks of government organizations and defense companies in many nations.

Ransomware gangs have also shown a massive interest in this type of network access vector. At least seven operations have exploited bugs in VPN solutions from Fortinet, Ivanti Pulse and SonicWall.

Cring, Ragnar Locker, Black Kingdom, HelloKitty, LockBit, REvil or Conti ransomware operations have exploited the systems of many companies by exploiting VPN security issues.

For more information, read the original story in Bleeping Computer.


Related articles

Cyber Security Today, May 20, 2024 -Ransomware gang claims it hit a Canadian internet provider

A ransomware gang claims it hit a Canadian internet provider. Welcome to Cyber Security Today. It's Monday May 20th,...

Resignations at OpenAI. Hashtag Trending for Friday, May 17, 2024

The question changes from “where’s Ilya” to what took so long?  Did Musk’s Neuralink team know there might...

Google does the unthinkable – reportedly erasing a 125 billion dollar pension fund

It's reported that Google inadvertently erased the Google Cloud account of UniSuper, an Australian pension fund valued at...

MIT students exploit blockchain vulnerability to steal 25 million dollars

Two MIT students have been implicated in a highly sophisticated cryptocurrency heist, where they reportedly exploited a vulnerability...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways