CISA Issues Alert on Potential VPN Security Issues as Telework Due to COVID-19 Ramps Up

The Cybersecurity and Infrastructure Security Agency is calling on organizations to "adopt a heightened state of cybersecurity" as they implement telework amid the COVID-19 outbreak.

In an alert issued March 13, CISA reminded firms about the considerations regarding the use of virtual private network solutions. The agency also listed several mitigations and other guidance regarding VPN usage, MeriTalk reported.

According to CISA, organizations are less likely to keep VPNs updated with the latest security updates and patches. Another factor to consider is that malicious cyber actors may increase phishing emails targeting teleworkers to steal their usernames and passwords. The agency also said that a decreased availability in VPN connections may affect IT security personnel’s ability to perform cybersecurity tasks.