Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
ANY.RUN has introduced in-browser data inspection for URL analysis, giving security analysts a browser-level view of how phishing pages behave after a suspicious link is…
Dropping Elephant is using a malicious Windows shortcut, DLL side-loading, and a scheduled task named GoogleErrorReport to keep a new memory-resident remote access trojan active…
CISA has added three critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities catalog, warning federal agencies to act by June 26, 2026. The…
Cisco has patched a critical vulnerability in Cisco Unified Communications Manager and Unified Communications Manager Session Management Edition that can let a remote, unauthenticated attacker…
A large credential-harvesting campaign known as FortiBleed has targeted more than 430,000 FortiGate firewalls globally, according to SOCRadar’s Dismantling FortiBleed report. The campaign did not…
Scammers are using fake GTA 6 early-access websites to trick gamers into sending cryptocurrency for a game download that does not exist. The pages promise…
Claude Fable 5 generated the core of a bootable NT-shaped kernel in Rust in 38 minutes of active model work, according to a Tolmo report…
A malicious AI agent skill built for a controlled security experiment reached more than 26,000 agents after passing security scanners and gaining credibility through public…
Hackers are using unpatched on-premises SharePoint servers as an entry point for ransomware attacks, credential theft, remote access, and custom backdoors, according to a new…
A new security analysis says several agentic red-team AI tools share design weaknesses that can let attackers steal API keys, compromise worker containers, persist across…
A new malware cluster called GhostShell is targeting Ukraine’s drone operations and defense supply chain with a highly tailored attack chain built around malicious RAR…
A Browser-in-the-Browser phishing kit is being used to trick users into downloading malware installers that look like legitimate software updates or fixes. Palo Alto Networks’…
A public proof-of-concept exploit is now available for CVE-2026-55200, a critical remote code execution vulnerability in libssh2. The flaw affects libssh2 through version 1.11.1 and…
The White House has ordered federal civilian agencies to move high-value and high-impact systems to post-quantum cryptography, setting firm deadlines for the government’s largest cryptographic…
Webmin administrators should upgrade to the latest release after multiple security issues were disclosed in the web-based server administration tool. The flaws affect older Webmin…