Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
LastPass has confirmed that attackers accessed customer data from its Salesforce environment after stealing OAuth tokens from Klue, a third-party market intelligence platform used by…
Agentic AI is changing cyber offense because it can move from advice to action. Instead of only writing phishing text or suggesting exploit ideas, an…
Security researchers have found three malicious npm packages that pretend to be PostCSS-related developer tools while delivering a Windows remote access trojan. The campaign was…
Security researchers have disclosed four vulnerabilities in Dify that could allow attackers to read private AI conversations, preview uploaded files, and reach internal platform APIs…
Security researchers at Paradigm Shift have released usbliter8, a BootROM exploit that can run code inside the SecureROM of Apple devices using A12, A13, S4,…
A newly documented botnet called AryStinger has infected more than 4,300 legacy routers and turned them into a distributed proxy and reconnaissance network for attackers.…
A phishing campaign is targeting users in India with a fake GST debit note attachment that installs Remcos RAT, a remote access trojan used for…
Security researchers found a new npm malware campaign that targets Windows developers through packages disguised as PostCSS-related utilities. The main package, postcss-minify-selector-parser, posed as a…
Security researchers found 23 code-executing ClawHub plugins that used official-looking @openclaw and @clawhub scopes even though unrelated third-party accounts published them. The findings came from…
OpenAI has released the full version of GPT-5.5-Cyber, a specialized cybersecurity model built to help verified defenders find vulnerabilities, validate exploitability, generate patches, and prepare…
Security researchers say hackers are using a custom tool called FortigateSniffer to turn compromised FortiGate firewalls into passive credential collectors. The tool does not need…
A high-severity FFmpeg vulnerability called PixelSmash can let attackers crash applications or, in some cases, execute code by tricking a system into processing a crafted…
A critical vulnerability in libssh2 can allow remote attackers to corrupt heap memory and potentially execute code by sending specially crafted SSH packets to vulnerable…
A new phishing technique is abusing Outlook Groups and Microsoft 365 collaboration features to make malicious activity look like normal workplace communication. Instead of sending…
Tata Electronics has confirmed a cybersecurity incident after a data-extortion group claimed to leak more than 200,000 files allegedly stolen from the Indian electronics manufacturer,…