Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
A new SHub Stealer variant called Reaper is targeting macOS users with a more convincing infection chain that impersonates trusted technology brands and abuses Apple’s…
Microsoft has resolved a Microsoft 365 service degradation that caused some managed Windows devices to install driver updates even when policies were configured to prevent…
Microsoft has introduced Scout, a new always-on AI agent designed to keep work moving across Microsoft 365 apps without waiting for a user to prompt…
A new ClickFix-style phishing campaign is impersonating Claude Code and OpenAI Codex to trick developers into running malicious setup instructions. The attack uses Google Sites…
Bots now generate more web page requests than humans in Cloudflare’s latest Radar data, marking a major shift in how the open web gets used.…
Acer is preparing a firmware update for two critical vulnerabilities affecting its Wave 7 routers. The flaws can expose router credentials and allow attackers to…
A new phishing campaign is targeting Chrome extension developers with fake copyright removal notices that pretend to come from the Chrome Web Store. The goal…
CISA has added CVE-2025-48595, an Android Framework integer overflow vulnerability, to its Known Exploited Vulnerabilities catalog after evidence of real-world exploitation. The flaw can lead…
Cisco has patched a critical vulnerability in Unified Communications Manager and Unified Communications Manager Session Management Edition that could let an unauthenticated remote attacker abuse…
A newly disclosed zero-day vulnerability in Comodo Internet Security can allow a remote attacker to crash a Windows system running the product’s firewall driver. Security…
Hackers are abusing trusted enterprise platforms such as Microsoft Teams, Microsoft SharePoint, Windows Quick Assist, Pastebin, Google Drive, and Google Sheets to compromise systems and…
Hackers are actively exploiting a critical vulnerability in Everest Forms Pro that lets unauthenticated attackers inject and run PHP code on vulnerable WordPress sites. The…
Payouts King is emerging as a post-BlackBasta ransomware threat that combines social engineering, data theft, selective file encryption, and advanced endpoint evasion. The group first…
Kali365, a phishing-as-a-service platform first seen in April 2026, has expanded beyond Microsoft 365 token theft and now impersonates Okta, Xerox DocuShare, LiveDrive, AWS-style endpoints,…
A fake ChatGPT download site is being promoted through sponsored search results to infect Windows and macOS users with malware. The campaign uses convincing OpenAI…