Tag
6 results in the archive.
Chinese government-linked threat actors exploit Microsoft Exchange vulnerabilities using automated scanning and manual methods to steal data from global targets including US critical infrastructure.
Check Point confirmed active exploitation of a pre-authentication remote code execution vulnerability (CVE-2026-85102) affecting the VPN certificate handling of its Security Gateway product, enabling remote attackers to execute code without authentication.
The Dutch Nationaal Cyber Security Centrum warns of imminent exploitation of critical vulnerabilities CVE-2026-85102 and CVE-2026-85103 affecting Check Point VPN appliances.
Over 737 fake VPN and proxy extensions on the Chrome Web Store routed user traffic through SOCKS5 proxies controlled by a single entity, posing serious privacy and security risks.
CERT-UA reports Sandworm subgroup UAC-0145 targets Ukrainian IT workers with fake job interviews to deploy malware via a malicious VPN tool.
Researchers tested 281 popular free Android VPN apps and discovered many leak user traffic, transmit unencrypted data, and include tracking. These apps, collectively installed over 2.4 billion times, fail to meet basic privacy and security standards.