Researchers at Citizen Lab have revealed that more than 20 VPN applications available on Google Play contain serious security flaws that compromise user privacy and could allow attackers to decrypt transmitted data. Collectively, these apps have been downloaded nearly 1 billion times (972 million installations). Interconnected Providers Although these VPN
Researchers at Red Canary have identified a new Linux malware strain dubbed DripDropper, which is being used in an unusual campaign. In these attacks, hackers exploit a critical vulnerability in Apache ActiveMQ—then patch the very flaw they leveraged. Exploiting and Closing the Door The attackers are exploiting an old
The Raspberry Pi Foundation has introduced a new touch component designed for single-board computer enthusiasts building compact touchscreen devices. The 5-inch Raspberry Pi Touch Display 2 features a 720×1280 resolution, an IPS multi-touch panel, and native support for Raspberry Pi OS. The display is priced at $40 USD and
Microsoft has acknowledged that the August security updates for Windows are disrupting the reset and recovery functions on Windows 10 and older versions of Windows 11. “After installing the August security update for Windows on any of the client versions mentioned below in the ‘Affected Platforms’ section, attempts to reset
Yegor Filatov, a specialist at Positive Technologies, has discovered and helped remediate a serious vulnerability in Tunnelblick, a graphical interface for working with OpenVPN. The flaw allowed privilege escalation on macOS systems and the potential for data theft. What made the issue especially dangerous was that it could still be
The U.S. Department of Justice (DOJ) has seized more than $2.8 million in cryptocurrency from Yannis Aleksandrovich Antropenko, the alleged operator of the Zeppelin ransomware. Antropenko faces charges in Texas for computer fraud and money laundering. He is accused of operating Zeppelin, a now-defunct ransomware strain active between
Between May and July 2025, specialists at Positive Technologies uncovered more than 180 compromised systems within Russian organizations. The malicious activity was traced back to the hacker group PhantomCore, which appears to have focused exclusively on targeting Russia’s critical infrastructure. Who Was Targeted The victims spanned a wide range
In 2023, researchers dropped a bombshell on the world of secure communications. They revealed TETRA:BURST, a set of vulnerabilities in the Terrestrial Trunked Radio (TETRA) standard — the digital radio system used by law enforcement, the military, and operators of critical infrastructure in more than 100 countries. The flaws meant
Experts from Kaspersky and BI.ZONE are warning about renewed activity linked to the PipeMagic backdoor. Kaspersky highlights the malware’s evolution and the shifting tactics of its operators, while BI.ZONE has published a technical analysis of the latest flaw exploited in attacks—CVE-2025-29824. A Persistent Threat Since 2022
Cybercriminals are exploiting the Unicode character «ん» from the Japanese hiragana script to disguise phishing links as legitimate. In certain systems and fonts, this character can resemble a forward slash, tricking users into believing a malicious URL is authentic. Homoglyph Tricks in Action This technique is part of a broader
Mozilla representatives report that a recent ruling by Germany's Federal Court of Justice (BGH) has reignited an old legal dispute over whether browser-based ad blockers violate copyright law. The organization warns this development could eventually lead to a ban on such tools in the country. The Legal Battle
In the second quarter of 2025, specialists at Positive Technologies observed a sharp increase in cybercriminal and hacktivist activity targeting Russian organizations. Phishing emails emerged as the most common initial attack vector, used in both mass campaigns and more sophisticated zero-day operations. Phishing Tactics on the Rise Attackers employed several