OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

Help Net Security coverage highlights multiple cybersecurity developments, including known DTLS 1.3 bugs in OpenSSL 4.1.0, critical PHP vulnerabilities, exploitation of a Palo Alto GlobalProtect VPN flaw, Microsoft 365 account compromises through stolen session replay and inbox rules, a Capcom data breach affecting 11.7 million records, and abuse of exposed AI models for cyberattacks and cryptomining. The most immediately actionable risks are session-token theft against Microsoft 365 and exploitation of internet-facing VPN infrastructure.