Personal VPN and Its Evasions: Risk Factors and How to Maintain Network Visibility
Summary: Palo Alto Networks Unit 42 reports that employees are increasingly using personal VPNs, Tor, and incognito mode to bypass corporate proxies, which removes InfoSec teams' visibility into network traffic and can hide data exfiltration. The article cites a review of PC Magazine's best VPN products of 2021, listing known CVEs per product, and describes evasion techniques including Hotspot Shield's self-signed certificate, SetupVPN's use of the HTTP proxy-authorization header, and Thunder VPN mimicking DNS on UDP port 53 and SSL on TCP port 443.
Key Takeaway: A personal VPN on one endpoint can route traffic past the proxy that blocks command-and-control communication, so an infected machine's data reaches the attacker unseen by the InfoSec team. The same products are targeted by advanced persistent threats, and the article notes criminals exploit known and patched vulnerabilities on the bet that not all users have updated.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026