Microsoft Outlook.com Issue Blocks Some Users From Accessing Emails
Microsoft is investigating an Outlook.com service issue that is preventing some users from signing in and accessing their mailboxes. The disruption began on Monday, April…
News
Here you can find the latest news and developments in the VPN world. Read about new breakthroughs, bypassing online censorship, and much more!
New ClickFix Attack Uses Cmdkey and Regsvr32 Instead of PowerShell to Evade Detection
A new ClickFix variant is replacing PowerShell with native Windows tools, making the social engineering attack harder for security teams to detect. The campaign tricks…
North Korean Hackers Target Drug Companies With Fake Excel Files and Dropbox-Based Malware
North Korean hackers linked to the Kimsuky group are targeting pharmaceutical companies with a fake Excel-themed file that secretly launches malware on Windows systems. The…
EU Wants Google to Share Search Data With Rival Search Engines and AI Chatbots
The European Commission wants Google to share anonymized search data with rival search engines under the Digital Markets Act. The proposed measures would apply to…
macOS textutil and KeePassXC Can Create Security Risks in Automated Pipelines
Security researchers are warning that two trusted tools, macOS textutil and KeePassXC, can become risky when automated systems process attacker-controlled files with unsafe assumptions. The…
New Malware Campaign Uses Fake Government Project Emails to Target Pakistan Officials
A new malware campaign is targeting government employees in Pakistan through spear-phishing emails that impersonate trusted internal communication. The attack uses fake project documents, staged…
Vidar Malware Campaign Uses Fake YouTube Downloads to Steal Corporate Credentials
Vidar malware is being spread through fake software downloads promoted in YouTube videos, putting corporate users at risk of credential theft, browser data theft, and…
Critical Gemini CLI Flaw Lets Attackers Target CI Workflows With Remote Code Execution
Google has patched a critical Gemini CLI vulnerability that could allow remote code execution in automated development workflows. The issue affects the npm package @google/gemini-cli…
ClickUp API Key Exposure Reportedly Revealed 959 Corporate and Government Email Addresses
ClickUp is facing scrutiny after a security researcher reported that a hardcoded API key in a public JavaScript file exposed 959 email addresses and 3,165…
Notepad++ 8.9.4 Fixes Vulnerability That Could Crash the App and Expose Memory Data
Notepad++ users should update to version 8.9.4 after maintainers fixed a security issue that could allow attackers to crash the application or expose memory address…
France Titres Confirms Data Breach After Hacker Claims 19 Million Records for Sale
France Titres, also known as ANTS, has confirmed a security incident on the ants.gouv.fr portal after a hacker claimed to have stolen and offered French…
New Lotus Wiper Targets Venezuelan Energy and Utility Firms
A newly documented data-wiping malware called Lotus was used in destructive attacks against energy and utility organizations in Venezuela. Kaspersky says the malware was designed…
How Businesses Can Stop Fraud Across the Customer Journey Without Slowing Real Users
Fraud prevention works best when it starts before damage happens. Businesses now need to check risk at signup, login, checkout, and account recovery without forcing…
UK Regulator Investigates Telegram and Teen Chat Sites Over Child Safety Concerns
Ofcom has opened formal investigations into Telegram, Teen Chat, and Chat Avenue under the UK’s Online Safety Act. The regulator is looking at whether Telegram…
CISA Orders Agencies to Secure Cisco SD-WAN Systems After New Flaw Hits Exploited List
CISA has added CVE-2026-20133, a Cisco Catalyst SD-WAN Manager vulnerability, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The agency gave U.S. federal…