Experts call to retire VPNs as AI-driven exploits expose networks

Analysts point to a wave of exploited flaws in VPN gateways from Palo Alto, Ivanti, Citrix and SonicWall and to AI models finding zero-days at scale. They argue the VPN architecture is obsolete and should be replaced by zero-trust with per-application access.

• Qilin and Settra ransomware groups exploit CVE-2026-0257 in PAN-OS GlobalProtect
• CISA has flagged 36 exploited Ivanti vulnerabilities since 2021
• Claude Mythos Preview found thousands of zero-days, including a 27-year-old OpenBSD bug
• Glasswing partners found over 10,000 high- or critical-severity flaws in one month