INDUSTRY REPORT
Zscaler ThreatLabz 2025
VPN Risk Report with
Cybersecurity Insiders
Learn why 81% of enterprises are pivoting to zero trust by 2026
The Zscaler ThreatLabz 2025 VPN Risk Report reveals that VPN technology remains a considerable security risk and operational challenge for enterprises securing their hybrid workforces.
Ransomware attacks and 3rd-party supply chain risks, in particular, remain critical concerns for enterprises, primarily due to VPN vulnerabilities that enable unauthorized access, lateral movement, and data loss.
Overall, the findings are clear: nearly two-thirds (65%) of enterprises are moving to replace VPN this year, while 81% plan to implement zero trust strategies over the same timeline.
Based on insights from a survey of 600+ IT and security professionals, the report highlights rising concerns over:
- Unpatched vulnerabilities are driving ransomware risk
- VPNs expose organizations to lateral threat movement
- Third-party access remains a major concern for ransomware attacks
- VPNs increase IT complexity and operational overhead
- Zero Trust adoption is gaining traction