Accepted as one of the most secure ways to connect to the internet, the use of a Virtual Private Network (VPN) is a popular choice among UK businesses. But – considering all the recent hype about VPN hacks and all the usual data privacy issues – is VPN the way you should go?
What is a VPN?
You can think of a VPN as a secure tunnel between your device and the internet. As PC Mag says: “When you switch it on, a VPN creates an encrypted tunnel between you and a remote server operated by a VPN service. All your internet traffic is routed through this tunnel, so your data is secure from prying eyes along the way. Because your traffic is exiting the VPN server, your true IP address is hidden, masking your identity and location”.
This comes in especially useful when using public Wi-Fi, where hackers could view your every move. Even when working online at home, where you would think you are safest, your Internet Service Provider could be making money from your data. So, when you run your secure connections through a VPN you add an extra layer of cyber security to your daily business practices.
VPN cyber security issues and solutions
Here are some potential cyber security issues associated with VPNs and how you can, or the industry has, addressed them.
VPN providers – When you use a VPN, you might keep away some prying eyes. But your VPN provider will still be privy to your browsing habits. For this reason, VPN providers are an obvious target for hackers and so choosing a VPN provider should not be taken lightly. Make sure you stick to those who have been independently audited by cyber security firms.
VPN hacks – This year has seen its fair share of international high-value target VPN hacks, particularly involving Pulse Secure VPN. As reported by Wired, because VPNs create a secure connection to a network, once the hackers find their way in it can be a free for all! SolarWinds caused a supply chain malfunction that impacted many large organisations while FireEye’s cyber security fail resulted in no less than 12 malware families across several hacking groups. To combat SolarWinds, businesses were advised to patch the five VPN and cloud vulnerabilities exploited in the attacks. Software updates, antivirus software installation and enabled firewalls should be your cyber security strategy’s first ports of call to prevent most cyber-attacks. When it comes to huge money-making hacks such as SolarWinds though, SMEs are far from a cyber criminal’s ideal catch.
VPNs and WireGuard – While some VPNs promote their use of WireGuard protocol, for now, there are some privacy issues that need to be ironed out before it gets the green light. It may provide a speed boost to your connection speed as well as slightly improved security and platform compatibility features as it is open source, but WireGuard can store IP addresses on a server and fails to use AES-256 encryption. So, beware before you buy-in.
Smartphone VPN apps – Since you likely store everything from mobile banking passwords to social media logins on your mobile, smartphone VPNs are an important consideration for UK business owners and their staff. But, as with all apps, they come with some cyber security concerns including fake VPN scams or logging and selling your data. To help combat this, earlier this year the Internet of Secure Things Alliance launched a new security certification for mobile apps and VPNs and the Google One VPN app was one of the first to receive the seal of approval.
VPNs and password managers – An easy target because they hold so much data (personal and business), you must take as much care when using password managers as you do when using smartphone apps.While logging in to websites that only use HTTPS connections is a no-brainer, and using two-factor authentication is thankfully becoming more commonplace, make sure to log in using a VPN for that extra layer of cyber security. A VPN still offers your most secure connection and will help keep your passwords encrypted.
Switch2IT for your cyber security needs
While there are potential issues with using VPN there are many ways to guard against these impacting you. And VPN still provides the best all-around protection for your business, whether connecting to the internet in the office or while working on the go. But, if you still have concerns, we can address them with an excellent cyber security strategy and managed IT support designed especially to suit your needs and budget. Get in touch today to find out more.
