Password tokens used by a number of enterprise virtual private networking ( VPN ) apps are at risk of being stolen by attackers , the National Cybersecurity and Infrastructure Security Agency has warned . The agency says the apps , developed by Palo Alto Networks , Cisco , F5 Networks and Pulse Secure , have a security bug which stores both the password and session cookies on users ’ computers . So far, only Palo Alto Networks has confirmed its GlobalProtect app was vulnerable. If compromised , the information could be used by attackers to remotely break into a company ’s internal network . Enterprise VPN apps are often used by companies to give remote workers access to the company network .
Password tokens used by a number of enterprise virtual private networking ( VPN ) apps are at risk of being stolen by attackers , the National Cybersecurity and Infrastructure Security Agency has warned . The agency says the apps , developed by Palo Alto Networks , Cisco , F5 Networks and Pulse Secure , have a security bug which stores both the password and session cookies on users ’ computers . If compromised , the information could be used by attackers to remotely break into a company ’s internal network . Enterprise VPN apps are often used by companies to give remote workers access to the company network .