Explore the latest news and trends  

Sign up for our weekly security newsletter

Be the first to receive important updates on security


Servers that NordVPN relied upon breached in a hacking attack

NordVPN a renowned provider of VPN service lately admitted though not wanting to that it lost its TLS certificate code in a hacking attack. The certificate key, which had become obsolete, used to make a protective connection between NordVPN's web-servers and the company's clients. Evidently, the attack took place during early last year at certain service provider's data center located in Finland. NordVPN is a user of this service provider. The attack exploited one security flaw within an interface for remote management and NordVPN wasn't informed of it.

VPN providers have become extremely popular for maintaining Web-surfers' privacy from their online service providers as also of websites visited. Because of this advantage, activists and journalists frequently utilize VPN services, especially when they engage inside hostile regions. The VPN providers funnel the entire online traffic of an end-user via an encrypted pipe thereby placing great hazards to anybody trying for viewing the websites the end-user is visiting alternatively the applications he's using. Nonetheless, that often implies removing the end-user's browser history that was so long in his Internet provider and placing it in his VPN provider. As a result, many providers are now prone to scrutiny, since many-a-times it isn't known whether the provider has logged the website the end-user accesses.

NordVPN, meanwhile, has said it follows the policy of "zero logs." Accordingly, it doesn't trace down, garner else share end-users' confidential data. www.techcrunch.com posted this, October 21, 2019. However, alarm can set in following the hack such that cyber intruders may've gained ground to reach certain end-user data. In usual cases, VPN suppliers depend upon intermediate data centers to avail of compute resources which's risky; therefore VPN vendors eventually depend upon data centers for pursuing best practices so there is security resilience.

Oy Creanova Hosting Solutions Ltd., the provider of the hacked server, posts on its website that it provides remote management. Effectively, there can be no question of ignorance on NordVPN's part regarding the center, which provides it data, as utilizing remote management. In fact, the company admits it could've done more for quarantining untrustworthy server providers as also making sure clients were sufficiently secured.

» SPAMfighter News - 10/28/2019

3 simple steps to update drivers on your Windows PCSlow PC? Optimize your Slow PC with SLOW-PCfighter!Email Cluttered with Spam? Free Spam Filter!

Dear Reader

We are happy to see you are reading our IT Security News.

We do believe, that the foundation for a good work environment starts with fast, secure and high performing computers. If you agree, then you should take a look at our Business Solutions to Spam Filter & Antivirus for even the latest version of Exchange Servers - your colleagues will appreciate it!

Go back to previous page