Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
A cyber-espionage group known as SloppyLemming has been linked to a year-long campaign targeting government and critical infrastructure organizations in Pakistan and Bangladesh. Recent reporting…
A persistent malvertising operation known as D-Shortiez has been using forced redirects and browser-manipulation tricks to push users into scam pages, with iPhone and Safari…
A threat actor calling itself FulcrumSec has claimed it stole 2.04 GB of data from LexisNexis Legal & Professional, allegedly after exploiting React2Shell, a critical…
Microsoft says attackers are abusing a normal OAuth redirect behavior in Microsoft Entra ID to send victims from trusted login pages to attacker-controlled sites. The…
Zerobot is back, and this time it is going after both consumer networking gear and business automation servers. Akamai said on February 27 that its…
A fresh software supply chain campaign is targeting developers through npm packages that appear harmless at first glance. Security reporting published around March 2 and…
Telegram has become a serious concern for enterprise defenders. Recent threat research shows that cybercriminals now use Telegram channels and bots to advertise stolen credentials,…
The cyber side of the Iran conflict is clearly growing, but the picture is messy. After the United States and Israel launched their joint campaign…
Attackers now use Google Search ads to lure macOS users onto fake help pages that tell them to paste a Terminal command. When the victim…
If you want to cut MTTR in a SOC, start with better threat visibility. Faster response usually does not begin with a new dashboard. It…
A critical security flaw in Langflow, a popular platform used to build and deploy AI-powered agents and workflows, can allow attackers to execute arbitrary code…
Google Chrome is shifting to Merkle Tree Certificates (MTCs) as its main way to protect HTTPS against future quantum‑computing threats. Instead of stuffing every TLS…
Threat actors are using an AI‑driven offensive security tool called CyberStrikeAI to breach Fortinet FortiGate firewalls and other edge network devices. This open‑source platform, written…
Threat actors compromised two versions of the Aqua Trivy VS Code extension on OpenVSX on February 27 and 28, 2026. They injected malicious code that…
Anthropic launched a groundbreaking memory import tool for Claude on March 3, 2026. This feature lets users transfer stored preferences, habits, and context from ChatGPT,…