News archive — Page 4
Source-backed reporting on VPNs, privacy, scams, data breaches and online security—plus the practical steps worth taking next.
News archive
Reports 31–40
Clear summaries, visible dates and direct source links—without turning every security story into a VPN sales pitch.
Fake Copyright Claims Trigger Instagram Ransom Demands
Creators told the BBC that bogus copyright complaints are being used to suspend Instagram accounts before the claimants demand money to withdraw them. The scam exploits platform enforcement rather than stealing a password first.
Read analysis
BigBear Phishing Steals Microsoft 365 Sessions After MFA
CloudSEK says a live phishing-as-a-service operation used reverse-proxy pages to capture Microsoft 365 passwords and authenticated session cookies. Ordinary one-time-code or push MFA may not stop this kind of adversary-in-the-middle attack.
Read analysis
UK Gambling Sites Accused of Widespread Cookie-Consent Failures
A Swansea University study of 624 licensed British gambling websites found that 86% appeared to breach at least one GDPR requirement. The findings focus on tracking before consent, missing rejection choices and designs that steer visitors towards sharing more data.
Read analysis
Mathspace Data Breach Affects More Than One Million Users
Mathspace says attackers exploited an unpatched vulnerability in its self-hosted reporting software and downloaded account information belonging to 1,079,819 students, staff and parents or guardians in Australia and New Zealand.
Read analysis
Doda Orders a Two-Month Ban on VPN Use
An order dated 5 September prohibits VPN use across Doda district in Jammu and Kashmir for two months, according to Indian news reports. It covers individuals, institutions, cyber cafes, businesses and internet providers unless officially authorised.
Read analysis
Mullvad Is Closing Its Public Encrypted DNS Service
Mullvad will switch off the encrypted DNS servers it offers to the wider public on 2 November and sponsor the nonprofit Quad9 service instead. Most Mullvad VPN customers are unaffected, but manual DNS users need to change their settings.
Read analysisX Password-Reset Email Flood: What Users Should Do
X is investigating a wave of password-reset messages as its X Money service expands. The company says it has found no evidence of a breach or successful account takeovers, but the genuine alerts can create cover for phishing and reset-code scams.
Read analysisPaperCut Attacks Are Stealing Credentials From Education Networks
Researchers have now documented credential theft and privileged-account creation after attackers exploited two PaperCut flaws. Schools and universities should patch, restrict exposure and hunt for compromise rather than treating the update alone as proof they are clean.
Read analysisInvisible Unicode Is Helping Phishing Emails Evade Filters
Microsoft found a finance-themed phishing campaign inserting non-rendering Unicode characters inside ordinary words. The message can look normal to a person while breaking simple keyword checks, so inbox placement must never be treated as proof an email is safe.
Read analysisChrome Zero-Day CVE-2026-85046: Update Your Browser Now
Google has released a Chrome update for an actively exploited V8 flaw. Desktop users should restart into the fixed build, while people using other Chromium-based browsers should watch for their vendor's update.
Read analysis