Who Owns NordVPN? Its Ownership and Company Structure Explained
NordVPN is owned by Nord Security, a European cybersecurity company founded by Tom Okman and Eimantas Sabaliauskas. The VPN service itself is operated by NordVPN…
News
Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
OpenAI Agents Exploited Zero-Days and Breached Hugging Face Servers
OpenAI has disclosed that AI agents running during an internal cybersecurity evaluation escaped their restricted test environment and breached part of Hugging Face’s production infrastructure.…
Google Chrome Update Fixes 12 High-Severity Vulnerabilities
Google has released an important Chrome security update that fixes 12 High-severity vulnerabilities across the browser’s graphics, JavaScript, audio, extension, certificate, and user interface components.…
Hackers Exploit Critical ServiceNow Vulnerability in Active Attacks
Hackers are actively exploiting CVE-2026-6875, a critical ServiceNow AI Platform vulnerability that can allow an unauthenticated attacker to execute code on a vulnerable instance. The…
Authorities Shut Down Kratos Phishing Platform Behind 15,000 Monthly Campaigns
German, US, and Indonesian authorities have dismantled Kratos, a phishing-as-a-service platform linked to around 15,000 phishing campaigns every month. Investigators disabled the platform’s central infrastructure,…
Hacker Turns Jailbroken Claude Into an AI-Powered Pentesting Platform
A Russian-speaking threat actor known as Trim has reportedly turned Claude jailbreak methods into a commercial AI-powered penetration testing platform called AI Pentest Checker. The…
GolangGhost Steals Chrome Secrets and Targets MetaMask on macOS
A fake job interview campaign is infecting macOS devices with GolangGhost, a remote access trojan capable of stealing Chrome credentials, collecting cryptocurrency wallet data, and…
YubiKey 5.8 Expands Passkeys to Secure AI Workflow Approvals
Yubico has launched YubiKey 5.8, extending hardware-backed passkeys beyond account login into digital signatures, enterprise approvals, identity wallets, and payment workflows. The company announced the…
Hackers Use Compromised Outlook Accounts to Steal Microsoft 365 Sessions
Hackers are using compromised organizational Outlook accounts to distribute phishing emails that can steal MFA-protected Microsoft 365 sessions. The campaign targets universities, businesses and multinational…
Spain Fines 23andMe €2.4 Million Over 2023 Data Breach
Spain’s data protection authority has fined 23andMe €2.4 million for security and notification failures connected to its major 2023 data breach. The incident exposed personal…
Azure DevOps MCP Flaw Lets Hidden PR Instructions Hijack AI Agents
A prompt injection weakness in Microsoft’s Azure DevOps MCP server can let an attacker hide malicious instructions inside a pull request description. An AI coding…
Exploitarium Repository Publishes 204 Files Across 35 Vulnerability Projects
An anonymous security researcher using the GitHub handle “bikini” has published a growing collection of proof-of-concept exploits and vulnerability research without documenting advance notification to…
FBI Warns Scammers Use AI Deepfakes and Fake IC3 Sites to Target Fraud Victims
The FBI has warned that scammers are impersonating its Internet Crime Complaint Center to steal more money and personal information from previous fraud victims. The…
Zimbra 10.1.20 Fixes Critical SNMP Command Injection Flaw
Zimbra has released Zimbra Collaboration Suite 10.1.20 to fix a command injection vulnerability in its SNMP monitoring component. The flaw affects servers that have SNMP…
CISA Warns Hackers Are Exploiting WordPress wp2shell Flaws
CISA has added two actively exploited WordPress Core vulnerabilities to its Known Exploited Vulnerabilities catalog. Attackers can chain CVE-2026-63030 and CVE-2026-60137 to execute code remotely…