Police boast of hacking VPN where criminals "believed themselves to be safe"
2026-05-25T08:51:51Z•4555ccde6d6631034615b03e4c85898e3b641749a78239dc3078e0e9922120ea
ai-assisted-bug-findingaspnet-vulnerabilitybitlocker-bypasscanvas-attackchromium-exploitcisa-credentialscopyfailcredential-theftdaemon-tools-backdoorelement-dataexposed-credentialsgithub-leakgpt-5.5law-enforcement-hackinglinux-vulnerabilitiesmicrosoft-patchmythosopen-source-malwarepost-quantum-ransomwaresupply-chain-attackteampcpubuntu-outagevpn-takedownzero-day
What happened
A cluster of high-impact security incidents and trends: law enforcement compromised a VPN service and arrested its operator; Google published exploit code for a long-reported Chromium bug before a patch was widely available; a zero-day fully defeats default Windows 11 BitLocker protections; and multiple severe Linux vulnerabilities (including CopyFail) are disrupting systems. There are widespread supply-chain attacks (Daemon Tools backdoored, TeamPCP poisoning open-source), a public leak of CISA credentials on GitHub, an open-source package (element-data) found stealing credentials, and an ASP
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 4555ccde6d6631034615b03e4c85898e3b641749a78239dc3078e0e9922120ea
- Enrichment time
- 2026-05-25T08:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.