A recent report published by network insurance provider At-Bay highlights the significant increase in ransomware attacks on enterprises using local VPN devices from major vendors such as Cisco and Citrix. The report analyzed over 100,000 network insurance claims data and found that enterprises using local VPN devices from these vendors were 6.8 times more likely to experience ransomware attacks between January 2024 and March 2025. Other local VPN device vendors such as SonicWall, Palo Alto Global Protect, and Fortinet also significantly increased the risk of attacks. In general, enterprises using any local VPN device were 3.7 times more likely to be attacked compared to those using cloud-based VPN or no VPN detected. The report emphasizes that device complexity and maintenance difficulties are the primary vulnerabilities, with many enterprises struggling to maintain patch updates and configuration management, leading to frequent security vulnerabilities. The report's findings are a wake-up call for enterprises to reassess their VPN and security strategies to mitigate the growing risk of ransomware attacks.