A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm ...
New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.
A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.
The new Dausos connection protocol has been independently audited and includes a few key innovations not found in other VPNs.