Skip to content
November 12, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • ADVISORIES
    • Microsoft
    • Fortinet
    • Ivanti
    • Cisco
    • Linux
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q3 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
  • Home
  • Technique
  • ZTNA versus Remote Access VPN
  • Technique

ZTNA versus Remote Access VPN

Do Son March 22, 2022 5 minutes read
tech-work

As we move into an era where remote work is transforming enterprise business models, the need for data security is also increasing. Before 2020, remote work was gaining traction, albeit slow, but the pandemic has pushed this transition ahead. Due to lockdowns, the necessity to stay at home forced businesses to adopt this new way of life and carry out their daily activities.

Virtual Private Networks (VPNs) and Zero Trust Network Access (ZTNA) solutions make remote access possible. VPNs have been the mainstay for decades, but organizations are looking for alternatives that better meet their objectives. Therefore, Zero Trust Network Access solutions are gaining momentum since they provide a secure remote solution that implements Zero Trust security principles aligning with application-specific permissions. According to Statista, in 2021, more than 42% of people planned to adopt the ZTNA model for their businesses globally. 

Reasons why VPNs had limitations

Traditionally, VPN solutions have been the de facto methodology for secure remote data exchange between client-server business models. Over the years, however, companies realized that they were ill-suited for modern enterprise infrastructures due to several limitations while using VPNs. Some of these restrictions were:

  • Perimeter focused data security
    VPN enforces the perimeter-based security model where a user is allowed full access to the corporate network making the system vulnerable to attacks. After compromised credentials grants access, the perpetrator can move laterally through the corporate network.
  • Network-level access control
    There’s little to no control over the application layer protocols at the network level. Users connected to the network have overly-permissive rights to functions like reading, writing, and execution rights to resources within different applications.   
  • Lack of Cloud Support
    VPNs provide secure remote access to a corporate network. Hence, the users have limited support for cloud-based resources and applications that do not fall inside the traditional perimeter.
  • Support for Bring Your Own Devices (BYODs)
    When BYODs connect to the corporate VPN, access to corporate resources from unmanaged and non-corporate endpoints becomes permissible. Hence malware and cyber threats are allowed direct access to the corporate network that damages data, facilitates data stealing, and disrupts digital life in general. 

The use of ZTNAs

Cybercriminals primarily target endpoints that are easily exploited. When employees work remotely, home offices connect to largely unsecured networks. Furthermore, these networks do not come under enterprise-grade security solutions; they become prime targets for social engineering tactics and malware.

VPN architectures, developed using the conventional approach, cannot withstand the level of complexities of the corporate world of today. They struggle to provide access to everything that a remote worker might need. 

Today, abundant people are trying to access critical resources and applications outside the network. So, the need to shift away from the paradigm of an open network built around inherent trust to a zero-trust model has become apparent. 

The traditional VPN operates under the assumption that anyone who passes through the network barrier can be trusted. The zero-trust approach, on the contrary, functions under the model that no user is to be trusted unless proven otherwise. You can explore remote access VPNs by going to https://nordlayer.com/remote-access-vpn/ 

Why the world prefers Remote Access VPNs

Remote access is a way to connect devices and networks that operate from different locations, thus making everything more efficient. Software and hardware tools help achieve efficiency as they are compatible with multiple platforms and devices. Let’s explore some of the advantages of accessing workload remotely.

Troubleshooting at your fingertips

One of the main advantages of remote access is troubleshooting worldwide without traveling from one location to another. This helps cut down costs as what may have taken a technician one whole day can be done within a few minutes while sitting in front of their computer screens.

Comprehensive remote access solutions provide organizations and vendors with the means to maintain Service Level Agreements (SLAs) and give them a chance to keep up with these partnerships by timely delivering their services.

Streaming work for employees

Since the COVID-19 pandemic, businesses are reconsidering the way they work. Remote access is gaining popularity since it provides the luxury to access the devices, platforms, and networks within the comfort of our homes. This easy access workflow helps in streaming responsibilities for the employees.  

Collaborating easily

Remote access promotes seamless communication with clients on the other side of the country or simply across town. Remote tools provide quick, secure, and effective workflow collaborations.

Although you can use these tools within your office’s premises, knowing that communication can still safely continue via these platforms when you work remotely makes work-from-home a lot more productive.

Logging all activities

Logging activities are also one of the critical features of remote access software. All video sessions and details on who is trying to access your networking can be recorded via these logs. They also provide the required information for auditing, which is a common practice for organizations that need to maintain regulatory guidelines.

Reducting overhead expenses

Allowing employees to work from home and hiring remote talent also helps cut down on expenses since the workers use their desktops, software, furniture, and utilities, thus enabling less load over the organization’s logistics.

Conclusion

There’s no denying that remote access offers countless benefits, both for the employees and the employer. When organizations go through total shutdowns like during a pandemic, remote access provides a secure and robust solution to deal with these crises. From making work from home productive to boosting long-term revenue and profitability, remote access solutions are a game-changer today for enterprise-level businesses.

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-90908CVSS 9.3
    A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote, unauthenticated...
    📅 Updated: Nov 12, 2026
  • CVE-2026-110003CVSS 9.3
    A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin...
    📅 Updated: Nov 12, 2026
  • CVE-2026-8333CVSS 9.4
    A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store...
    📅 Updated: Nov 12, 2026
  • CVE-2026-12591CVSS 9.9
    Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration...
    📅 Updated: Nov 12, 2026
  • CVE-2026-12507CVSS 9.1
    Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and...
    📅 Updated: Nov 12, 2026
  • CVE-2026-107935CVSS 9.3
    A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated...
    📅 Updated: Nov 12, 2026
  • CVE-2026-125883CVSS 9.3
    Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects...
    📅 Updated: Nov 12, 2026
  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 12, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About Daily CyberSecurity
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DMCA
  • Privacy Policy

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.