News archive — Page 2
Source-backed reporting on VPNs, privacy, scams, data breaches and online security—plus the practical steps worth taking next.
News archive
Reports 11–20
Clear summaries, visible dates and direct source links—without turning every security story into a VPN sales pitch.
Burger King Japan App Breach: Watch for Impersonation
A notice covers about 11.18 million app-member records in Japan. Contact details leaked, but the company says it did not hold card numbers and has not confirmed a password leak.
Read analysisLegal Aid Breach Update: Older Records Were Stolen
New analysis of the 2025 attack identifies roughly 250,000 records from before 2007. That is a count of records, not people—and it does not mean every former legal aid applicant was affected.
Read analysis
Proxyjacking Turns NAS and Video Devices Into Exit Nodes
GreyNoise reports attackers installing bandwidth-sharing software on vulnerable equipment without consent. The priority is securing the device, not hiding your laptop behind another VPN.
Read analysis
Windows 11 Fixes Stuck Always On VPN Connections
October's Windows updates address a specific work-VPN failure after September's patches. If your connection stays on Connecting, ask IT about the update—not a replacement VPN subscription.
Read analysisIvanti VPN Attacks: Patching and Incident Checks Matter
Ivanti has disclosed active exploitation of Connect Secure appliances. For people using a work VPN, the response belongs with IT: a personal VPN cannot repair a compromised company gateway.
Read analysis
Calendar Phishing: Check Unexpected Meetings and Renewals
Fresh UK reporting highlights fake meetings and renewal reminders arriving through calendar invitations. An event beside your real appointments is not proof that its link or phone number is genuine.
Read analysisASOS Breach: Shopping Profiles Raise Scam Risks
BBC reporting on stolen ASOS customer profiles adds shopping searches and dates of birth to the picture. Treat personal details in a message as information a scammer may know, not proof of identity.
Read analysisWindows Update Certificates Expire in 2027: What to Check
Microsoft's new reminder is about staying connected to Windows Update, not an immediate shutdown. Current supported PCs generally need no special action; neglected and unsupported installations need attention.
Read analysisBrevo ClickFix Attack: Beware Fake Verification Commands
Brevo's post-mortem explains how compromised website scripts showed some visitors a fake verification prompt. The crucial boundary: a human check should not ask you to run a command on your computer.
Read analysisFake LastPass Downloads on GitHub Spread Rapuncel Malware
New LastPass and Delphos research describes a Windows malware campaign hiding behind software-brand impersonation on GitHub. It is not a breach of LastPass vaults: the danger is running a fake installer found through search.
Read analysis