Пять причин перейти на ZTNA и Zero Trust: почему компании «переросли» VPN

Kaspersky's blog argues that the classic perimeter-plus-VPN model is losing its edge, citing At-Bay data showing nearly three-quarters of 2025 ransomware incidents began with a VPN compromise. Recent cases illustrate the risk: a zero-day chain against fully patched Ivanti Connect Secure appliances let the UTA0576 group harvest domain credentials and BitLocker keys, while earlier incidents abused flaws in Check Point and SonicWall gateways, the latter tied to Akira ransomware. The article also points to Qilin ransomware exploiting an authentication bug in Palo Alto GlobalProtect, tracked as CVE-2026-0257, to blend in with legitimate VPN traffic and evade detection. As a remedy, the piece recommends moving to Zero Trust Network Access (ZTNA), which grants per-application access based on user identity, device posture and context rather than broad subnet-level VPN trust, thereby shrinking the attack surface, limiting damage from stolen credentials, improving visibility for SOC teams, and simplifying temporary contractor access through just-in-time permissions.