Surfshark has said it is proud to have backed Disinfo2026 after the EU’s diplomatic service, Canada and Lithuania pulled out of the event following political pressure.

On Thursday, the VPN issued a statement explaining its decision to continue sponsoring the annual event, which tackles disinformation and online deception, despite government sponsors withdrawing their support.

As further evidence of its commitment to intellectual freedom, the VPN – one of the best on the market – emphasised the importance of safeguarding the free exchange of ideas. “Open debate must never be silenced. It is essential for building a safer internet,” stressed the VPN.

A diplomatic issue

Organised by independent Brussels-based non-profit EU Disinfo Lab and held at a hotel in Vilnius, Lithuania, the two-day conference brought together hundreds of researchers, journalists, technologists and policymakers to collaborate on countering disinformation.

As reported by the Guardian, the Trump administration had pressured several countries to withdraw their sponsorship from the conference, prompting Canada, Lithuania, and the EU’s diplomatic service to retract their backing a few days before the event took place.

According to documents seen by the newspaper, the pressure centred on a panel discussion in which the US was reportedly regarded as “a foreign information threat.” The debate focused on how the European community, committed to combating disinformation, can strengthen its resilience without Washington; three US speakers took part in the debate, including a former CIA official.

After the countries said in a statement that the conference programme “didn’t align with their official views on the US role in disinformation,” a series of logos – including those of the Lithuanian Ministry of Foreign Affairs, the European External Action Service (EEAS) and Global Affairs Canada, the Canadian Ministry of Foreign Affairs – were taken down from the event website.

The logos were removed from the event’s signage at such short notice that organisers had no time to replace it and had to improvise a quick fix, with official conference materials being left bearing white stickers covering the logos of the departing sponsors, as photos circulating online show.

Lithuania, Canada, and EEAS pulled out of #Disinfo2026 at such short notice they didn't have time to redo the signage.

— @eliothiggins.bsky.social (@eliothiggins.bsky.social.bsky.social) 2026-10-09T14:03:51.262Z

Supporting independent research

However, Surfshark’s logo remained visible. The VPN provider said that independent research and open debate are essential to its mission of protecting people’s digital lives. “We will continue supporting the communities working to keep the internet open and secure,” it said.

During the event, the VPN presented research carried out in collaboration with students from Malmö University. The study revealed that over half of those surveyed are unable to identify bots or distinguish between social media accounts generated by AI and those managed by real people, leaving them vulnerable to digital threats. It also highlighted how false content contributes to creating a climate of mistrust, disinformation and hostile and malicious online environments.

Recent research by Surfshark also found that more than 6.3 billion fake accounts are removed from major social media platforms annually, and AI only exacerbates the problem, facilitating scams involving identity theft, fraudulent calls, financial fraud and disinformation spreading.

In this context, Surfshark emphasised that fostering open debate remains crucial for raising public awareness of these issues, regardless of diplomatic complexities. “We believe that independent forums examining digital threats must continue to exist – regardless of geopolitical sensitivities – because cybersecurity concerns everyone, and digital risks know no borders,” the VPN said.

It’s pretty unusual to find yourself at a cybersecurity event playing basketball in Times Square. Add in NBA legend Shaquille O’Neal as the host, and you'd be describing the stuff of dreams.

Yet that’s what a lucky crowd got at NordVPN’s latest event on Thursday. The provider went big on online defence with its ambassador Shaq on hand to teach Americans about digital threats.

At the event, professional basketball players also challenged members of the public to slam dunk, echoing how the VPN’s next-generation antivirus intercepts and blocks malware and phishing attempts before they can even reach a user’s device.

More than shots blocked

The NBA Hall of Famer, entrepreneur, and philanthropist has been NordVPN’s official ambassador since September. The collaboration focuses on raising awareness of digital threats while also boosting NordVPN’s marketing efforts as the company transitions from a simple VPN to a comprehensive, all-in-one security suite.

A key part of this is NordVPN's 'Next Gen Antivirus', which scans 12 million unique URLs daily and blocks an average of 130,000 malicious pages. It blocked nearly 5 million malware attempts in the US in the first months of 2026, NordVPN says.

At the event, the VPN drew parallels with sport and digital security, using pro-basketball players to showcase what real defence in action means and presenting malicious activity as slam dunks on a court.

The audience was invited to try to score against experienced players, only to have professionals with years of experience in the field block their attempts, much like how NordVPN defends against digital risks.

But why?

The poetic parallels are timely, as NordVPN recently warned that Americans are suffering from a delulu-clash over their cybersecurity knowledge.

Frighteningly, recent research by NordVPN found that 71 per cent of respondents believe that common sense is simply enough to navigate digital threats.

What’s more, almost three-quarters of respondents believe they are perfectly capable of spotting online scams in spite of evidence to the contrary.

Findings revealed that 74 per cent of Americans were unable to spot a fake URL and 82 per cent failed to recognise a fake CAPTCHA, while less than half correctly identified a phishing email disguised as a job recruitment message.

More than half – 51 per cent – reuse the same password or similar passwords across different accounts. Unsurprisingly, it is the users who are most confident in their own abilities who tend to do this, says NordVPN.

It is therefore even less surprising that 73 per cent of Americans have already fallen victim to a scam recently, with nearly a quarter having suffered or being at risk of suffering a financial loss.

Shaq’s profile arguably makes the case better than any cyber-security expert: “These scammers are getting smarter, and sometimes all it takes is one click or sharing one piece of information. You don’t have to be a cybersecurity expert. You just have to stay alert, make smart choices, and use the right tools to protect yourself.”

Check out the event here

AmneziaVPN has unveiled new discounts to celebrate its sixth birthday, but they come with a twist.

Unlike a regular discount like you might see from some of the best VPNs, AmneziaVPN is giving you the opportunity to save up to 30% via its spin-the-wheel offer. There's also a chance to win up to 14 days of free Amnezia Premium.

For an even better prize, sign up to the Amnezia Hub Telegram Bot to get the chance to win 6-month Amnezia Premium gift subscriptions. There are 500 up for grabs.

Want to know your odds? According to the company, you've got a one in four chance of getting a 15% discount or a 14-day complimentary subscription, and a 16.67% chance of winning a 20%, 25%, or 30% discount.

What's more, if you open the Amnezia website in Incognito or across multiple devices, you can make multiple attempts to get the discount you want.

Six years, what's changed?

AmneziaVPN began as a self-hosting solution that gave people a quick and easy way to spin up their very own VPN. Now, it's considered among the top VPNs for people experiencing high levels of internet censorship, like in Russia.

Its proprietary protocol, AmneziaWG, is built on WireGuard and tackles Deep Packet Inspection (DPI) through several complex means of obfuscation, such as ever-changing header and packet sizes. This helps ensure VPN traffic appears as regular internet traffic both at the point of connection and while data is being transmitted.

AmneziaWG is completely open-source and, since it's proven to be an effective solution, has been adopted by other hyper-privacy-focused VPNs such as Windscribe and NymVPN.

AmneziaVPN has expanded. Alongside its paid VPN service, it now also offers a free VPN for people in regions with extreme internet restrictions. The service restores access to specific apps and websites with no fee needed.

The company has focused on security and unrestricted access to the internet, so in its six-year lifespan, it hasn't built the additional bells and whistles you'd expect from other top VPNs.

Instead, its protocol selection and advanced obfuscation technologies mean that should you enter countries such as China or Russia, you'll still be protected.

How to claim

To access the discount giveaway, head to Amnezia.org, and you'll see the spin wheel appear in the bottom corner of your screen.

To enter the six-month giveaway, head to the birthday announcement, click the link to the Telegram hub, and follow the instructions.

Hurry though — you've only got until October 31 to get one of the new discounts.

• IPVanish has announced a swathe of changes as it embarks on a broader mission to help users outside of its VPN
• Key changes include an improved antivirus, alongside 3 new subscription tiers.
• The new antivirus product is being integrated across Windows and Mac

IPVanish has announced how it plans to transition from a traditional VPN to a comprehensive digital security solution.

The move aims to address the growing reality that modern cyber threats require a multi-layered defense. While a VPN is excellent for hiding your IP address and encrypting your web traffic on public Wi-Fi, it cannot stop you from accidentally downloading a malicious file.

"A VPN was never meant to be the whole answer," explained Subbu Sthanu, General Manager of Consumer Cybersecurity at IPVanish. "It protects your Internet connections and your privacy, but does not shield you from malicious downloads, fake login pages, and other threats."

Next generation protection

At the heart of this revamp is a brand-new, next-gen antivirus integrated seamlessly into IPVanish desktop clients for both Windows and macOS. Rather than users juggling multiple dashboards or downloading separate software, the new malware protection lives directly inside the existing VPN app.

According to the announcement, the new antivirus suite goes far beyond basic scanning. It offers robust Device protection, letting users run full malware scans on their hard drives and external devices, either on-demand or on a set schedule.

Crucially, the software also includes Real-time protection. Using AI-driven technology, this feature actively guards against ransomware, monitors file downloads for unexpected changes, prevents malicious software exploits, and blocks hostile background tasks.

Additionally, the suite's Web protection will block ads, trackers, and malicious websites, monitoring network activity for threats even when the VPN connection is turned off.

The antivirus is powered by the same engine used in VIPRE-branded AV products. In the March 2026 Malware Protection Test conducted by independent lab AV-Comparatives, the VIPRE Advanced Security engine achieved a staggering 99.91% protection rate against 10,000 recent malware samples, earning the lab's highest Advanced+ ★ ★ ★ rating.

New pricing structures

To accommodate the expanded feature set, IPVanish is restructuring its plans into three distinct tiers, giving customers more flexibility over their cybersecurity toolkit.

• Essential: This is the traditional VPN package. Starting at $2.39 per month, it includes the core VPN service and Threat Protection.
• Complete: The mid-tier plan adds the new next-gen Antivirus to the Essential package. On a two-year plan, this tier costs just $3.09 per month (an extra 70 cents).
• Advanced: The premium tier gives you everything in the Complete plan, while adding 1TB of Cloud Storage and the company's proprietary Secure Browser solution.

The expanded lineup marks a significant step forward for the brand, perfectly aligning with its new tagline, 'Control your digital world'.

By bringing high-tier antivirus and cloud backups under the same roof as its reliable VPN, IPVanish is making it easier than ever for users to secure their entire digital footprint.

You need far more than a VPN to protect your data online. Password managers, antivirus software, and secure cloud storage are also key to ensuring your personal data doesn't end up in the wrong hands.

Unfortunately, many of the best VPNs only offer a couple of these necessities, while those that do them all, like NordVPN, charge a lot for the additional access. Luckily, TechRadar's exclusive deal with Norton VPN solves this.

A Norton VPN Plus plan starts from $3.49 per month — the same price you'd pay for basic NordVPN access. But with Norton, you get its antivirus, password management, dark web monitoring, and 10GB of cloud storage included alongside the VPN.

The only VPN that rivals Norton for value right now is Surfshark. However, at $2.79 per month, a Surfshark One plan doesn't include password management and secure storage like Norton does.

What's more, Norton VPN is one of the fastest-evolving VPNs on the market today. Twelve months ago, it offered only 5 device connections, had several bugs on iOS, and only included a few additional features. Now, you get a full security suite for less than $3.50 per month, and we expect the improvements to keep coming.

That means by signing up now, you could pay $3.49/month for a VPN that looks and feels even better by the time your plan ends. Plus, it'll likely still be cheaper than NordVPN.

If you're unsure, Norton VPN also comes with the benefit of a huge 60-day money-back guarantee. That means you have the best part of two months to decide if you're entirely happy, and if not, you can get your money back, risk-free.

• Surfshark has integrated ML-DSA certificates into WireGuard to achieve full post-quantum security.
• The upgrade focuses on server authentication to prevent future session takeovers.
• The feature is currently live for users on iOS, macOS, and Windows.

Quantum computers might still sound like science fiction, but cybersecurity experts are already preparing for the day these super-powered machines can effortlessly crack today’s encryption. Now, Surfshark has taken a massive step toward quantum-proofing your daily browsing.

The popular provider has announced the completion of its full post-quantum WireGuard implementation. By tackling the incredibly tricky challenge of server authentication, the company claims it has secured every pillar of a private connection against future quantum threats.

While many tech giants and rival VPNs have begun integrating basic post-quantum key exchanges, fully securing the authentication process remains incredibly rare. Surfshark's latest update ensures bad actors armed with futuristic quantum tech can't impersonate VPN servers and hijack your connection.

The 'forgotten' pillar of quantum security

Earlier this year, Surfshark rolled out post-quantum encryption and key exchanges (known as ML-KEM) to the WireGuard protocol. Other providers have made similar moves recently, with rivals like NordVPN extending post-quantum protection across its applications.

However, Surfshark has now added the final critical component: certificates using ML-DSA (digital signature algorithm) for authentication.

"A truly full post-quantum secure VPN rests on three pillars: encryption, key exchange, and authentication. While the industry has widely adopted quantum-safe encryption and key exchange (like ML-KEM), authentication remains the 'forgotten' step," explained Karolis Kaciulis, Leading System Engineer at Surfshark.

"Many, including Big Tech, hesitate here because certificates for authentication are difficult to scale and currently lack a global public infrastructure for post-quantum certificates.”

Beating Big Tech to the punch

So, why does authentication matter for the average user? If an attacker uses a quantum computer to break a VPN's authentication layer, they can perform a session takeover, essentially pretending to be the secure server right as you connect, intercepting all your data.

“However, ignoring this last step creates a vulnerability when quantum computers become accessible," Kaciulis said. "At Surfshark, we took the ML-DSA standards and integrated them with our certificates into a protocol to make the authorization fully quantum-resistant. By using the ML-DSA certificates, we have completed the final pillar, achieving the first full post-quantum WireGuard implementation."

This technical milestone stems from the launch of Dausos, Surfshark’s proprietary VPN protocol engineered with complete post-quantum security from the ground up, which paved the way for this WireGuard upgrade.

Remarkably, Surfshark is deploying a level of security rarely seen in the consumer space. An evaluation by the company of 15 major tech platforms found that only two, AWS KMS and Google Cloud KMS, have actually deployed ML-DSA, and both are cloud key-management services, not consumer applications.

While giants like Apple and Microsoft have access to ML-DSA, neither has enabled it by default in primary user-facing software like Safari or Edge.

“It comes as no surprise that industry peers prioritize implementing ML-KEM key exchange before placing authentication on their engineering roadmaps," Kaciulis noted.

"Although quantum computing poses no immediate threat today, delaying authentication security until these machines emerge leaves connections vulnerable. That is why Surfshark is taking proactive measures to deliver complete post-quantum defense ahead of potential quantum threats.”

If you're eager to test out these proactive protections, Surfshark's fully post-quantum WireGuard implementation is currently accessible to users on iOS, macOS, and Windows. The company plans to bring support to additional platforms in future releases.

Or to read more about this Surfshark upgrade, read its blog post outlining the move to post-quantum.

• Psiphon says it has started planning a move out of Canada over Bill C-22
• The provider warns the law would undermine its open-source trust
• The bill has cleared the House of Commons and now faces Senate scrutiny

Psiphon has become the latest tech provider to threaten to leave Canada over Bill C-22, the government's contentious lawful access bill.

The Toronto-based company told The Globe and Mail it has started drawing up plans to move its operations out of the country. It says the bill would force it to compromise the safety features protecting users in authoritarian countries like Iran, Russia, and China.

Psiphon joins Signal, NordVPN, and Windscribe, all of which have warned they could pull out of Canada. For Canadians relying on the best VPN to protect their privacy, that list is getting uncomfortably long.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Psiphon says open-source code can't hide a backdoor

Psiphon began as a Citizen Lab project at the University of Toronto in 2006 and now has around 20 million monthly users, many of whom rely on the tool to circumvent state censorship.

Unlike many VPN providers, Psiphon publishes all its code, but Bill C-22 could require it to change its systems to enable law enforcement's access, while keeping those changes secret.

Vice-president Kenzie Elsworthy said Psiphon is trusted thanks to the open-source model, and that it would be impossible to add a secret back door into a system that's completely public. "That is not lawful access. It is a published vulnerability," Elsworthy said.

Elsworthy stressed that the company doesn't want to leave, but if the law passes unchanged, relocating would be the only option. That would be awkward for Ottawa, which gave Psiphon about $600,000 in National Research Council funding this year.

What is Bill C-22?

Introduced on March 12, 2026, Bill C-22 would require telecoms, internet companies, and other electronic service providers to build surveillance capabilities for police and CSIS. Its backers argue Canada lags behind its Five Eyes allies without such powers.

The definition of "electronic service provider" is broad enough to cover messaging apps and VPNs. The government amended the bill before it passed the House on June 18, adding protections for end-to-end encryption and cutting metadata retention to six months instead of a year. It now heads to the Senate.

Tech companies are preparing for the worst

Because the bill won't define exactly who faces obligations until after it passes, all "ESP" companies are being forced to prepare for the worst.

Last month, 23 companies, including Windscribe, Nord Security, and ExpressVPN's parent company Kape Technologies, urged the government to fix the bill. Citizen Lab founder Ron Deibert warned that, as written, it would make it impossible for many vital privacy tools to operate in Canada.

With the Senate now in charge and European privacy groups also raising concerns, Psiphon's warning is hard to ignore.

• Muse is the most data-hungry chatbot, warns Surfshark
• It is surpassed only by Meta AI
• The VPN reiterates caution about entrusting your data to Big Tech

Meta’s Muse has been out for barely a month, yet it has already won the competition for the title of the most data-hungry chatbot.

The warning comes from Surfshark, one of the best VPNs, which recently conducted research ranking the most privacy-invasive AI chatbots. In its findings, Meta’s AI agent Muse, embodied by Jolly, the Labubu-style character that promises to execute tasks on your behalf, has already outperformed all its competitors when it comes to data harvesting.

Only another AI tool stands between Muse and the top spot: the older sibling, Meta AI, remains the undisputed data-harvesting front-runner.

Hungry for data

“Meta is unbeatable in data collection," stresses Surfshark. In its latest analysis, the VPN makes its case by comparing 13 widely used AI chatbots and the types of data they collect, as listed on the Apple App Store.

Indeed, Meta's Muse and Meta AI collect almost twice as many types of data as their competitors: 31 and 33 out of 35 types, respectively.

Next comes Google Gemini with 24 types. The trio uniquely collects highly sensitive information including ethnic data, sexual orientation, trade union, political opinion, genetic and biometric data.

ChatGPT comes fourth with 17 data types - a number that has alarmingly increased by 70 per cent since last year, with the chatbot now extending its data snatch to health and fitness, audio recordings and search history.

Gemini, Meta AI, Muse and Perplexity also capture location data, while ChatGPT, DeepSeek, Claude and Copilot retrieve approximate location information.

The winners of the ‘least intrusive’ title are Pi, Duck.ai and Mistral Vibe, with Pi remarkably collecting only user ID, product interaction and crash data.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

My data to Meta? I’ll think about it

While Muse is marketed as a tool capable of understanding users’ objectives and pursuing them autonomously, Surfshark points out that the large-scale data collection practices employed by the agentic AI app represent a frightening concern for online privacy.

Indeed, Muse’s invasive nature enables it to collect an extraordinary amount of highly sensitive information from calendars, emails, and bank accounts. It then combines this with the contextual data gathered from the user’s interactions, thereby managing to draw up an exceptionally accurate profile of your digital identity.

This information can then be merged with other datasets for advertising or training purposes, leaving users with very little control over how their data is stored, sold, potentially leaked, or corrupted.

Indeed, a security researcher has already warned that Muse can be manipulated into sending your voice recordings to a hacker’s server. Users have also reported instances in which the tool allegedly read their personal messages without permission and then lied about it, as well as cases in which its severe execution faults backfired on users, exposing sensitive information.

And while there’s debate over whether Muse is genuinely useful for what it claims to offer or whether it truly helps users perform better rather than merely wasting their time, others describe growing unease at the prospect of giving the keys to their digital life to a company that never showed any remorse for monetising user data.

Indeed, Meta is currently also facing hefty fines ranging from $18 billion relating to addiction amongst minors, to €1.2 billion for the improper handling of user data in 2023. This is also the same company known for its ‘pervert glasses’, which can record people without their consent and which have sparked widespread controversy as they have reportedly been used for harassment and stalking.

Given all this, steering clear of this major data collector for a while longer might simply be a marvelous idea.

Better enforceability is needed

Additionally, while these fines may seem exorbitant, it is worrying that the financial impact of such punishments rarely acts as a deterrent to these large technology companies, whose market capitalisation runs into the hundreds of billions of dollars.

In its research, Proton previously found that the $7.8 billion in privacy and competition fines imposed on Big Tech in 2025 could be collectively paid by these firms in less than a month.

However, Costa argues that the issue is more complex and regulators might be working toward targeted changes. "First, regulators are escalating the financial stakes, shifting toward massive penalties like Anthropic's $1.5 billion and Meta's $1.4 billion settlements."

Additionally, a major challenge right now is actually enforceability — particularly as some companies have already been exploiting loopholes to avoid paying fines. Clearview AI, for example, managed to avoid paying $105 million in fines imposed by four different European regulatory authorities by arguing that it did not fall within European jurisdiction.

"Even if these early fines are manageable for tech giants, their real value lies in establishing the firm legal precedents that will govern how AI must operate in the future," Costa concludes.

• PIA adds 15 locations, bringing its network to 170 locations in 104 countries
• The update targets the Caribbean, Central Asia, and Southeast Asia
• Some new locations are virtual and include some that rivals don't offer

Private Internet Access (PIA) has added 15 new server locations to its VPN network, taking it to 170 locations across 104 countries and territories, up from 91 countries.

The expansion covers 13 countries and territories PIA didn't serve before, including Cuba, Belarus, Myanmar, Pakistan, and the Cayman Islands. It also adds new city-level servers in Naples and Tottenham.

If you're shopping for the best VPN, network reach is usually one of the first things to compare, and this update fills some notable gaps on PIA's map. It follows a recent wave of network upgrades and comes shortly after PIA more than doubled its streaming-optimized network, from 13 locations to 35.

Where PIA's new servers are

PIA says it targeted underserved regions where demand is highest: the Caribbean, Central Asia, and Southeast Asia.

Here's the full list:

• Americas: Cayman Islands, Cuba, Jamaica
• Europe: Belarus, Jersey, Naples (Italy), Tottenham (UK)
• Asia Pacific: Bhutan, Brunei, Guam, Laos, Myanmar, Thailand
• Middle East, Africa, and Central Asia: Pakistan, Uzbekistan

You don't need to do anything to access them. The new locations appear automatically in every PIA app, with no reinstall or plan change required.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What the expansion means for you

More locations mean more choice. Connecting to a VPN server closer to your real location can help cut latency, and extra options make it easier to switch away from a congested server. You also get local IP addresses in more places, which helps when reaching local websites and services at home or abroad.

The Naples and Tottenham servers go a step further, letting your connection appear local to a specific city rather than just a country. PIA says this can help with regional content and reduce lag in busy metro areas.

However, nearly all of the new locations are virtual (except Tottenham), meaning your IP address matches the country you pick while the physical VPN server is hosted elsewhere. PIA says it does this where local infrastructure or laws don't meet its privacy standards, and it flags virtual locations in its apps.

How PIA's network compares with rivals

International reach has long been a weak point for PIA. Our PIA review found its US coverage strong but its wider international network less impressive.

At 104 countries and territories, PIA now edges past Surfshark, which advertises 4,500+ servers in 100 countries. However, it still trails behind ExpressVPN at 113 countries, Proton VPN at 148, and NordVPN at 150.

PIA does have a couple of unique selling points. At the time of writing, neither NordVPN's nor Surfshark's public server lists include Cuba or Belarus.

Raw numbers aren't the whole story, either. NordVPN and Surfshark have both argued that capacity, speed, and reliability matter more than server count. The real test for PIA's new locations will be how they perform in everyday use.

Celebrity Traitors Season 2 arrives October 1, but if you're travelling and at risk of missing out, you needn't worry.

BBC iPlayer is the free home of the popular UK series, meaning if you're a UK resident on holiday, you'll be stuck without due to the BBC limiting access to only those on home soil. Thankfully, a VPN can fix this, and I've found the cheapest way to ensure you don't miss out on the chaos: PrivadoVPN.

PrivadoVPN ranks among the fastest VPNs we've tested and offers the best free VPN alternative too. But, more importantly, it's also a top streaming VPN for BBC iPlayer.

When I tried using PrivadoVPN to watch the last series of Celebrity Traitors, it was flawless. I connected to a UK server quickly, and never experienced any buffering or dropouts.

What's more, unlike alternatives such as NordVPN, PrivadoVPN costs only $1.11 per month. This means you can get two years of stress-free streaming access for only $30. That's over $60 less than an equivalent NordVPN plan.

PrivadoVPN's streaming performance excels beyond iPlayer too. We put it through rigorous testing with global Netflix libraries, Prime Video, Disney+, and more, and, compared to far more expensive alternatives, it proved effective.

Its biggest hurdle was Prime Video which, like many VPNs, it failed with altogether. Aside from that, it worked with all the global and local streaming services we tested it with, despite its budget price. This is helped by its servers in 49 countries being regularly optimized for streaming.

• Proton VPN sign-ups soared in the Philippines amid a brief Discord block
• The ban disrupted the gig economy of an estimated 15,000 freelancers
• Proton VPN usage remains high due to inconsistent network restorations

When the Philippine government abruptly blocked access to Discord last week, millions of users found themselves cut off from their digital communities overnight. The controversial move didn't just frustrate gamers; it severed the financial lifelines of thousands of remote workers, prompting a frantic rush toward privacy tools to circumvent the restriction.

Proton VPN saw hourly sign-ups from the Philippines explode by more than 1,400% compared to the previous week. Daily sign-ups also surged by nearly 300% as citizens scrambled for the best VPN software to bypass the sudden digital blackout.

Following public backlash and a hurried agreement with the platform, authorities have since reversed the ban. However, the story doesn't end there. Proton VPN’s usage data shows that sign-ups have remained significantly above the normal baseline, proving that users are refusing to log off their newly installed virtual private networks.

A messy ban leaves workers stranded

The chaos began on September 21, 2026, when the Philippines' Cybercrime Investigation and Coordinating Center (CICC) issued a 24-hour ultimatum to Discord and Reddit.

The agency demanded that both platforms designate local representatives following a tragic string of school shootings in the country. While Reddit successfully negotiated an extension, Discord's initial response fell short. By September 23, local telecom operators began enforcing a network-level block.

In the Philippines, Discord is far more than a gaming chat app; it functions as a critical infrastructure hub for the nation's booming remote-work economy. Former DICT Undersecretary Jeffrey Ian Dy estimated that the shutdown jeopardized the livelihoods of at least 15,000 Filipino freelancers and virtual assistants.

The technical reality of the block was also chaotic. Because the ban appeared to have been enforced network by network, Discord disappeared for some users while remaining fully active for others.

This same fragmentation haunted the reversal. When Discord finally agreed to the CICC’s terms and the ban was lifted, some internet service providers (ISPs) were excruciatingly slow to restore access.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Proton VPN usage still high

This patchy technical rollout is exactly why Proton VPN's numbers haven't dropped back to normal. Users who were left entirely in the dark are now keeping their VPNs active as a reliable failsafe against unpredictable ISP behavior.

A Proton VPN spokesman confirmed to TechRadar that sign-ups were still high because of delays in the rollback, and that usage also remains "elevated."

"This is suspected to be due to a combination of ongoing uncertainty and privacy concerns around Discord's rollout of ID scanning there," the spokesman said.

For now, the message from the Philippines is clear: when a government proves it can sever access to essential communication tools overnight, citizens won't easily give up the software that helps them keep the lights on.

• NymVPN is upgrading its decentralized system
• Users stuck on older app versions could have connection problems
• Nym has also shared what's coming next, and how users can have their say

NymVPN users have a small job to do — update their apps.

The provider has announced a scheduled upgrade to part of the network that keeps NymVPN private, and while nothing will look different in the app, it's asking everyone to make sure they're running the latest release.

The upgrade touches the system that keeps your VPN access separate from your identity. That's the core promise that sets NymVPN apart from most contenders for the title of best VPN.

Nym hasn't confirmed an exact date yet, but says there's no reason to hold off, since updating now means you'll be ready whenever the switch happens.

What is NymVPN changing?

When you pay for NymVPN, your payment is converted into NYM tokens, which are used to issue an anonymous credential called a zk-nym. Your app uses that credential to access the network, and nobody, including Nym itself, can link your payment details to your activity.

Those credentials are signed by a group of independent operators rather than a single company. Each operator only holds part of the signing key, so none of them can reconstruct the full key and de-anonymize you. The technical documentation describes this as threshold issuance, where only a set number of signers need to take part.

The upgrade will rotate this system's signing keys and refresh the operators who run it, which Nym says will give its credentials a more robust and more decentralized foundation.

Key rotation is standard security hygiene. Replacing cryptographic keys on a regular schedule limits how much damage can be done if any single key is ever compromised.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What's next for NymVPN, and how to have your say

Nym has also published a fresh roadmap. Coming up next are saved profiles for entry and exit server combinations, QR code support for faster free-pass activation, geo-exclusion for Russia, and more languages.

Further ahead, Nym plans to decentralize the network's remaining controls, merge NymVPN with its Nym wallet, and expand residential IP coverage for stronger censorship resistance. It's also working on per-app split tunneling between NymVPN's dVPN and Mixnet modes.

Perhaps most interesting is that users can have their say on what the team builds next.

The roadmap page includes a feature request board where anyone can vote, and faster speeds across all modes currently sit at the top of the list and are marked as in planning. Optional automatic server rotation and destination address routing, for services like Tor, follow close behind.

It's another sign of a VPN that's developing quickly, with other recent updates including its pay-as-you-go option and post-quantum protections as standard.

• Bitdefender launches privacy tool built specifically for autonomous AI agents
• Each agent task gets a disposable, temporary connection that deactivates when the task is done
• VPN for AI Agents runs on a Model Context Protocol server architecture entirely

Bitdefender has introduced VPN for AI Agents, a standalone privacy tool built specifically for the autonomous software agents now browsing, researching, and transacting on behalf of everyday users.

The company says this public beta is a direct answer to the growing anxiety over machine-driven data exposure.

Unlike a conventional privacy tool that stays connected at all times, this tool activates only when an AI agent needs it, then deactivates once the task is done.

Why agents need their own privacy layer

Cybersecurity researchers have increasingly warned that autonomous agents occupy an ambiguous identity space, often borrowing a person's own credentials or shared workload logins to complete tasks online.

Without a clear separation, every website an agent visits and every transaction it completes remains traceable back to a single household IP address.

Recent Pew Research Center data found 71% of adults in the United States believe wider AI adoption will make their personal data less secure, a fear that extends well beyond American borders.

Bitdefender's new offering, built on a Model Context Protocol server architecture, spins up a disposable digital workspace for each prompt and discards it when the task is done.

Each prompt opens its own encrypted tunnel and exits through the VPN server's IP address, so no cookies, cache, or session state carries over to the next task.

The tool covers network transport and IP masking only, leaving the actual content of a prompt exchanged directly between the user and whichever AI provider is running it.

"AI agents are quickly becoming an extension of the people who use them, showing up in both our workdays and our personal lives," said Ciprian Istrate, senior vice president of operations, Consumer Solutions Group at Bitdefender.

"That means security can no longer stop at protecting the person behind the screen; it has to extend to the agent itself acting on their behalf."

This approach treats each agent like an independent team member requiring its own security boundary rather than inheriting the user's existing protections wholesale.

Bitdefender also describes this as clean-IP browsing, useful for QA checks on pages that display different content depending on the visitor's country.

The tool supports up to four simultaneous exit locations, or eight under the recommended testing configuration.

Access remains limited during the beta period

For now, the tool works only on macOS devices, though Bitdefender has confirmed plans to expand to additional operating systems after beta testing.

The beta specifically requires macOS 13 or later and an Apple silicon processor, meaning Intel Macs are not supported.

Bitdefender recommends macOS 15, 16 GB of memory, and roughly 10 GB of free disk space for smoother testing.

Once installed, it operates automatically across several popular AI platforms, including Claude Desktop, Cursor, Codex, and OpenCode, without requiring manual configuration from the user.

Bitdefender lists several practical use cases, including letting an agent compare prices across regions or complete multi-country research in one session.

The company frames these tasks as a productivity gain too, since they would otherwise need manual, country-by-country effort from a person.

Bitdefender is explicit about the tool's limits as well. It does not protect a device's other apps or browser.

It also does not hide prompts from the AI provider running them, and does not override a site's terms of service, rate limits, or an existing IP ban.

"With Bitdefender VPN for AI Agents, we're giving students, workers, and everyday consumers the confidence to let their AI agents work freely, knowing their identity and activity stay protected," Istrate added.

VPN for AI Agents public beta is currently available for free, but whether the free offering continues after the beta testing remains to be seen.

• Fight for the Future is running its 2nd annual Defend VPNs Day of Action
• VPN restrictions are increasingly being tucked inside new internet laws
• Utah, Michigan, the UK, Russia are among those targeting VPNs this year

Digital rights advocates are once again asking people around the world to stand up for VPNs, as lawmakers increasingly treat privacy tools as a loophole to be closed.

September 25 marks the second annual Defend VPNs Day of Action, organized by digital rights group Fight for the Future. The campaign asks users to sign an open letter and call their representatives, urging them not to ban or restrict VPNs.

Whether you rely on the best VPN on the market or a free app to stay safe on public Wi-Fi, the rules around how you can use it are changing fast.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What is the Defend VPNs Day of Action?

The campaign launched in 2025, when Fight for the Future says it engaged around 20,000 people. This year, the group wants to build on that number.

Supporters can sign a letter to government leaders at DefendVPNs.com, which calls VPNs an essential tool for privacy and access to information. The site can also connect users directly to their lawmakers' offices by phone, and it provides a suggested script.

VPN providers are getting involved, too. Amnezia VPN and IPVanish have already announced their support and are encouraging users to sign the petition, while Surfshark is also listed as a supporter.

Why VPNs need defending

According to Fight for the Future, VPN bans and restrictions rarely appear on their own. Instead, they are most often bundled into age verification bills, or "online ID checks," that require people to prove their age before accessing certain sites.

Advocates argue the stakes go far beyond adult content. Fight for the Future says the most vulnerable people rely on VPNs to reach loved ones, seek healthcare, and find information that is increasingly locked behind ID checks and biometric scans.

"Using VPNs is not criminal," said Sarah Philips, Campaign Director at Fight for the Future, adding that "Using VPNs is a right that must be defended at all costs from governments who are doing their best to break down what little privacy we have in the current tech landscape."

A year of attacks on VPNs

Here's a quick look at the biggest threats since last year's Day of Action.

Despite lawmakers in Wisconsin scrapping a provision forcing sites to block VPN users after widespread backlash, SB 73 made Utah the first US state to target VPNs in an age verification law.

A proposed "public morals" bill in Michigan would make ISPs block VPNs, with fines of up to $500,000 for promoting them. It remains in play.

In the UK, Ministers ruled out age-gating or banning VPNs, but platforms are now expected to stop users from circumventing age checks themselves.

Australia's officials explored ways to block age verification workarounds, while the EU has signaled VPNs could be next in line after announcing a social media ban for teens.

In Brazil, VPN use became an aggravating factor in crimes, Reclaim The Net reported.

In Russia, Human Rights Watch reported this week that at least 469 VPNs had been blocked by February, with authorities now turning to bulk IP blocks and app store takedowns. Amnezia VPN itself was targeted in June and needed around six weeks to fully recover.

With youth social media bans spreading to Indonesia, Malaysia, and the UAE, Fight for the Future warns that VPNs will only face more scrutiny.

Anyone who wants to add their voice can do so at DefendVPNs.com.

• Opera's free built-in VPN can now switch itself on public, unsecured Wi-Fi
• The opt-in feature is rolling out to users in the US and France first
• Opera VPN Free still only protects your browser

Opera browser is making it harder to forget about your VPN.

The company's free, built-in VPN for desktop can now turn itself on when you connect to a public or unsecured Wi-Fi network.

The feature is opt-in, so you'll need to enable it in settings first, and it's rolling out to desktop users in the US and France starting today.

Even the best VPN can't protect you if it isn't switched on, and Opera is betting that removing that manual step will get more people covered on risky networks.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Opera VPN Free goes on autopilot

Opera has offered its built-in VPN since 2016. It's free, doesn't require an account, and has no fixed bandwidth cap. Its no-logs policy has also been independently audited by Deloitte. Until now, though, you had to remember to switch it on yourself.

With this new setting, however, the Opera browser turns the VPN on automatically when it spots a public network. So, working from a café, studying on campus, or browsing at an airport no longer means activating the VPN manually every time.

The option first surfaced in testing earlier this month, when release notes for Opera Developer 137 listed an option for the VPN to connect automatically on public networks.

Arjan van Leeuwen, Head of Opera One Engineering, said VPNs "are a vital part of users' digital hygiene".

The company also notes that competitors like Chrome and Safari still don't offer built-in browser VPN features by default. It also cites We Are Social data showing that only 23% of internet users worldwide used a VPN as of Q4 2025.

Why public Wi-Fi is a risk

Public Wi-Fi is convenient, but open networks can be joined by anyone nearby, who can then snoop on or inject malicious traffic.

A trustworthy VPN encrypts your traffic, which makes it much harder for attackers to intercept and steal your data.

Automating that step closes the gap between knowing you should use a VPN and actually doing it.

Opera VPN Free vs Pro: a quick overview

Opera VPN Free is built into the browser and costs nothing. However, it only protects traffic inside Opera, so apps like Spotify, Steam, or a standalone email client still use your regular connection.

Opera VPN Pro, which launched as a paid tier in 2022, is a system-wide VPN. It covers up to six Windows, macOS, or Android devices, and it has run on ExpressVPN's Lightway protocol since mid-2025, with 48 server locations.

Lightway also brings post-quantum protection by default. Opera lists Pro from $4 per month, and new users can try it with a 7-day free trial.

If you mainly want to keep your browsing safe on the odd café hotspot, the free VPN with auto-connect is an easy win. If you want every app on your device protected, you'll need Pro or a dedicated VPN app.

• Obscura VPN has released a native Linux app, with both GUI and CLI
• Official packages cover Debian, Ubuntu, Fedora, Arch, and other derivatives
• The provider has also switched to an open-source GPLv3 license

Obscura VPN has finally arrived on Linux. The privacy-focused provider has launched a native desktop app for the platform, meaning Linux users no longer need to set up the service manually.

This rounds off a busy year for the newcomer, which only recently landed on Windows. With this release, Obscura now supports macOS, iOS, Android, Windows, and Linux.

For privacy-minded Linux fans hunting for the best VPN for their setup, Obscura's unusual two-party design makes it one of the more interesting options.

The company is also relicensing its code under GPLv3, which will appeal to open-source purists.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What's new in Obscura's Linux app

Obscura's Linux app ships with a full graphical interface, alongside an experimental command-line interface for users who prefer the terminal. Until now, Linux users had to rely on a manual WireGuard setup guide to connect. The native app means no more juggling configuration files, making the service far more accessible.

Obscura offers official packages for Debian, Ubuntu, Fedora (including Atomic Desktops like Silverblue), and Arch, as well as derivatives like Linux Mint, RHEL, Silverblue, CachyOS, and Omarchy. Minimum requirements include Ubuntu 24.04, Debian 13, Fedora 44, and RHEL 10, and the app is installed through Obscura's own package repository.

The Linux client also supports Obscura's QUIC-based stealth protocol, which makes VPN traffic look like ordinary HTTP/3 web browsing. This can help you get past networks that block VPNs.

To mark the launch, Obscura is offering 25% off for a limited time with the promo code LINUX26. The service normally costs around $8 per month, with no free tier.

Obscura goes GPLv3

Alongside the launch, Obscura has moved from the PolyForm Noncommercial License 1.0.0 to the GNU General Public License v3.0, which it says furthers its commitment to open-source software.

Obscura's code has been public since day one, but GPLv3 is a true open-source license, giving the community more freedom to inspect, modify, and share it. It's the same license Mullvad uses for its own apps.

What is Obscura VPN?

Obscura was founded by Carl Dong, a former Bitcoin Core contributor, and first launched on macOS in February 2025. It promised to set the standard for next-gen VPNs, and has since expanded to iOS, then Android, Windows, and now Linux.

Its big selling point is a two-party relay. Obscura acts as the entry node and sees your real IP address, while Mullvad VPN handles the exit node and sees the websites you visit. This means no single provider knows both who you are and what you browse.

That design has already been tested. Security firm Cure53 audited Obscura and found no major security vulnerabilities, as we reported last December.

• ExpressVPN has released version 14.3.1 for its Windows, Mac, and Linux apps
• Advanced Protection's ad and tracker blocking now works beyond the Lightway protocol
• The update also brings a rebuilt speed test, stronger screen reader support, and fixes for each platform

ExpressVPN has pushed out another update for its desktop VPN apps, and this one packs in more than the last few. Version 14.3.1 landed on Windows, Mac, and Linux on September 22.

The biggest change is that Advanced Protection, ExpressVPN's set of ad, tracker, and malicious site blockers, now works across all VPN protocols. There's also a rebuilt speed test, smarter split tunneling, and plenty of reliability fixes.

It's the latest in a busy year for one of TechRadar's best VPN recommendations, following a visual makeover and a stable MCP server for AI tools in June.

Advanced Protection finally works on every protocol

Until now, Advanced Protection on ExpressVPN's desktop apps only functioned with the VPN switched on and the Lightway or Automatic protocol selected.

Version 14.3.1 lifts that restriction, so you can now block ads, trackers, and harmful sites while using OpenVPN or WireGuard.

That's a welcome change for anyone who switches protocols to cope with tricky networks, since you no longer have to give up those protections to do it. ExpressVPN notes the feature is rolling out gradually, so not everyone will see it straight away.

Faster speed tests and smarter split tunneling

The built-in speed test has been rebuilt to run faster and deliver more precise results, which should make choosing the quickest server an easier job.

Split tunneling is more reliable for apps you exclude from the VPN, and the setup guidance has been refreshed. On Windows, the feature no longer keeps scanning for new apps when it's switched off, which cuts CPU usage. On Mac, split tunneling now leaves DNS traffic alone, so it can run alongside Advanced Protection.

On the accessibility side, screen readers can now navigate the location list, protocol settings, split tunneling, and auto-connect rules. The app also announces connection status and settings changes. That builds on the accessibility push in version 14.1.0, an area where our review rated the app just three out of five.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Fixes for every platform

Mac users get a fix that stops Docker containers from disrupting networking while connected, and the app now launches even when there's no network after waking or booting.

On Windows, the VPN stays connected when your screen turns off on Modern Standby PCs, and installation is more reliable on ARM64 devices.

Linux users benefit from improved Lightway routing and DNS configuration on systems that use resolvectl, including Pop!_OS, along with native desktop notifications. It's another step forward for ExpressVPN as a Linux VPN option, following the arrival of its rebuilt Qt-based Linux app in late 2025.

If you already use ExpressVPN, the update should install automatically. Otherwise, you can download the latest build from ExpressVPN's website. To confirm you're on 14.3.1, check the app version, which now sits at the bottom of the sidebar.

• Apple's latest iOS update has been found to undermine NordVPN's anti-phishing tool
• The feature that causes the issue, Connectivity Assist, is turned on by default as part of the update
• According to NordVPN, the issues could have been prevented

Apple's new iOS 27 operating system update is undermining NordVPN’s anti-phishing tool, leaving users exposed to privacy vulnerabilities, the VPN has warned.

Connectivity Assist, a Wi-Fi Assist feature included in Apple’s twentieth operating system release, conflicts with NordVPN’s real-time protection, preventing it from working properly, the provider has found.

What’s worse? The tool is enabled by default, meaning users may not even know. What's more, other privacy tools on your phone may also have been compromised.

The problem with Connectivity Assist

Connectivity Assist optimises your Wi-Fi connection by supplementing slow or unreliable Wi-Fi connections with mobile data, detecting connection issues, and redirecting requests to your mobile operator’s DNS servers instead.

However, when NordVPN’s anti-fraud protection blocks a phishing site, Apple may also interpret the failed connection as a Wi-Fi issue and switch to mobile data—outside the VPN’s protection—thereby compromising the functionality of the NordVPN tool.

The only option currently available to ensure full protection is to disable Connectivity Assistant, so it can’t switch to mobile data when real-time protection blocks a website.

Alternatively, you can choose only to enable real-time protection when using a VPN by disabling NordVPN’s ‘always on’ option - but this still leaves them unprotected when using mobile data - just now by choice.

“People are being made to choose between two things they shouldn't have to choose between, and there's no good way for us to fix it,” Laura Tyrylyte, Head of Public Relations at NordVPN, tells TechRadar.

Can this be prevented?

Could Apple have helped resolve these issues before the release? Perhaps, according to the VPN representative. “Apple knew the feature interferes with DNS-based filtering before it shipped,” Tyrylyte notes. “Their own support page tells people running an ad blocker to switch Connectivity Assist for that network. Somebody spotted the conflict, it just didn’t get fixed.”

Users of Pi-hole, Firewalla, and other DNS-based filtering tools had previously reported the same behaviour, and Cloudflare's WARP also stopped blocking malicious sites following the update, NordVPN stressed.

Apple engineers have suggested alternative solutions in the forums, but these only work if users configure the DNS settings themselves, notes Tyrylyte.

“Deciding to treat deliberate filtering as a failed connection is a choice somebody made. They could have written it the other way: if a user-installed DNS service decides to resolve or block the query, leave that judgement alone,” Tyrylyte adds.

“Instead, the problem got handed to users, who now need to end up fielding the support tickets for something we can’t change,” she stresses.

NordVPN states that this is not the first time a change made by Apple to the network has compromised a security feature on iOS, with the VPN having to inform users.

In 2023, Apple’s VPN API contained vulnerabilities that disrupted NordVPN operations. “Both times users ended up having to pick between an Apple feature and their own protection, and both times Apple was the only one who could have prevented that,” Tyrylyte says.

“Apple makes the call, and we find out what the call was when the release lands, she stressed.

Whoever’s responsibility this is, one thing is for certain: it is users who stand to pay the highest price when tools quietly stop working. And reporting the issue in the press as a solution seems a poor substitute for preventing the problem in the first place.

Apple is yet to respond to a request for comment.

NymVPN's latest update has shaken up its entire pricing structure. Two-year plans are completely gone, and, oddly, some prices have gone up, but, with the product better than ever before, it may be time to take notice.

NymVPN has rapidly been maturing. Most recently, its v2026.12 update added improved connection stability on WireGuard and a simpler onboarding experience to its deliberately complex VPN architecture.

All the best VPNs use complex security methods to ensure your data is never at risk, but NymVPN's mixnet takes this one step further.

Data you send from your device bounces between five different servers, and is encrypted at each, before exiting at the designated end server. In short, it adds five times the number of steps of additional security to your connection before sending you where you desire online. The idea is that it makes you next to impossible to identify and track.

Before subscriptions to NymVPN were for 1 month, 1 year or 2 years but they company has now switched that around by axing the 2-year plan and adding in a 6 month version.

Monthly plans are comparatively cheap for the VPN industry at $8 per month. That's about half what you'd pay for NordVPN, for example. Equally, at $4 per month, the 1-year plans are also good value.

And the 6-month plan is smack in the middle at $6/month.

Is NymVPN only good for security?

NymVPN's security technology is among the most sophisticated available. There are no other VPNs that run a decentralized noise-generating mixnet, but that doesn't mean that it lacks any of the more consumer-friendly features.

It offers over 70 server locations, split tunnelling capabilities, kill switch protection, obfuscation technology, and streaming unblocking.

When we completed our NymVPN review, back in 2024, at the time of its launch, far fewer of these capabilities were deemed possible. Now, its combination of security and functionality makes NymVPN a must-watch VPN over the coming months.

If you want a more mature product right away, then one of the very best VPNs might suit you better.

NordVPN, for example, performs best for overall performance. Surfshark is the best cheap VPN available, and Proton VPN is the next best thing if you're looking for privacy.

Either way, Nym is a sure-fire up-and-comer, and not a VPN to ignore.

• NymVPN has launched a new version of its app - v2026.12
• It introduces a host of speed-focused improvements, alongside improved usability, better onboarding, and new anti-censorship capabilities
• Alongside the technical changes, a new pricing structure has removed the 2-year plan entirely

NymVPN's latest update marks its latest move to put the best VPNs in its crosshairs. The provider has launched version 2026.12, bringing a massive wave of usability improvements, anti-censorship tools, and a brand-new pricing structure across its desktop and mobile apps.

According to the Nym Core Team, this release is laser-focused on "getting the safest connection to more people, in more places, with less in the way."

To that end, NymVPN has completely reworked its WireGuard handshake to deliver faster, more stable cellular connections. This means your VPN is far less likely to drop when switching from Wi-Fi to a spotty mobile data network. It also introduced a new onboarding experience to help you get started smoothly with the VPN's unique, decentralized mixnet.

One-click routing and smarter split tunneling

The most immediate change users will notice is the introduction of one-click connections. NymVPN has introduced a "Safest" default setting that automatically picks a strong-performing server in a country next to yours, ensuring your entry point sits safely outside your home jurisdiction. Users can also select "Random" to constantly break traffic analysis patterns, or rely on "Favorites" and "Recents" for instant access to trusted nodes.

NymVPN is also expanding on its earlier beta tests by officially launching geo-exclusion alongside traditional split tunneling for desktop (macOS, Windows, Linux).

While basic split tunneling lets you send a whole app outside the VPN, geo-exclusion is far more precise. It splits a single app's traffic by destination, allowing you to route local services (like a banking app) outside the tunnel while keeping international traffic protected. The team notes this feature is currently available for Chinese IPs, with more countries coming soon.

Beating censorship on the go

For users in restrictive regimes, simply having a VPN app visible on your phone can be dangerous. Following earlier iOS icon disguises, NymVPN has now brought a camouflage icon feature to Android, allowing users to hide the software behind a discreet alternative logo in their device settings.

The provider is also expanding its global accessibility, launching five new languages: Traditional Chinese, Traditional Chinese (Hong Kong), Japanese, Italian, and Indonesian. As the developer noted in its release, "for people living under censorship, a VPN they can actually read is a necessity, not a nicety."

Pricing shake-up and what's next

NymVPN is tweaking its subscription model to reflect the app's growing feature set. The provider has introduced a new six-month plan at $6 per month, while maintaining a standard monthly tier at $8.

However, the company is retiring its two-year subscription tier. The best value is now the one-year plan at $4 per month. NymVPN confirmed that existing two-year subscribers will keep their current plan, but it will automatically renew as a one-year plan when it expires.

The provider claims it remains one of the most affordable options on the market, adding that its "privacy is guaranteed by design, not by a promise a centralized VPN structurally can't keep."

Looking ahead, the NymVPN roadmap promises QR-code support for faster activations, expanded geo-exclusion for Russia, and customizable entry-and-exit server profiles.

• Surfshark has split the iOS locations tab into two views
• The browser extension gets a visual refresh
• The update is a design change rather than a new security feature

If you open the Surfshark app on your iPhone right now, something might look a little different. The provider has rolled out a redesign of its iOS locations tab, with the goal of speeding up server selection.

If you use Surfshark (one of the best VPN services out there) every day, small friction points in the user interface add up. Hunting through a single long list of countries every time you connect is exactly the kind of thing Surfshark says it wanted to fix. The company has redesigned the locations tab on its iOS app to make it easier to use.

This is not a new security tool or protocol. It's a usability update, and it lands alongside a refreshed browser VPN extension that gets its own visual makeover.

What's changed in Surfshark's iOS app

The main change is that the locations tab is now divided into two clear sections.

The Recommended view brings together your most popular country options, recently used servers, and your dedicated IP if you have one set up. The design surfaces the servers you use most first, so you don't have to search over and over. The Advanced view is where the more specialized options live, namely static IP servers and Multi Hop.

Multi Hop, Surfshark's version of double VPN, routes your traffic through two separate VPN servers at once for an extra layer of protection.

Static IP servers, meanwhile, hand you the same address every time you connect, which is handy for services that get suspicious when your IP keeps changing.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Changes to Surfshark's browser extension

The redesign for the browser extension is more significant. The home view now shows how many ads and trackers Surfshark has blocked on the site you're visiting, and it gathers all your protection tools in one place: the ad blocker, cookie pop-up blocker, malicious site warnings, data leak alerts, and email scam checker.

As Surfshark has added more features over the years, from category-based web filtering to the ability to block specific websites, its interface has grown busier. This redesign is about stripping out some of the resulting clutter and making the app feel effortless to use.

It fits a wider pattern, too. In our Surfshark review, we noted the provider keeps its apps well maintained, with a clean and consistent experience across platforms.

How to use the new layout

Open the app and tap the Locations tab at the bottom, and you'll land in Recommended by default, with your most-used servers ready to go.

If you want the specialized options, tap Advanced at the top to reach Static IP and Multi Hop, then switch back to Recommended whenever you like.

• Mullvad has released version 2026.10 of its Android app
• A rotatable globe and advanced multi-hop feature are the main highlights
• The VPN has also reported a glitch affecting connection

Mullvad has released version 2026.10 of its Android VPN app, introducing new features designed to boost speed and security while making the overall user experience more fun.

An interactive map showing VPN server locations and an advanced multi-hop feature, alongside a few bug fixes, are the key additions in this release, currently available on GitHub.

Interestingly, Google Play has yet to list the upgrade, with Mullvad still showing the previous version 2026.08 as its latest release on the official website, too.

The new redesign was quietly announced on the cloud platform over the past two days, following months of meticulous preparation that had already included the release of new features in beta in August, with the VPN testing them for almost a month before the launch.

Meanwhile, the Sweden-based VPN continues to ensure transparency, alerting users to an issue with the new version and reflecting the accountability expected by the best VPNs.

More interaction, please

The new version features a rotating globe that highlights server locations available to users, making the discovery process more immersive and playful. Users can now zoom in, pan, scroll, and explore the globe region by region to discover the exact locations of all VPN servers, as well as view their own connection routes.

Additionally, its multi-hop function, which routes traffic through two servers for additional privacy and to make it easier to route your traffic, can now be enabled automatically when relevant settings require it and off when it is unnecessary.

The multi-hop feature is a staple of Mullvad’s functionality — indeed, it first reached Android in 2025, following earlier arrivals on desktop and iOS, when Mullvad had labelled it “a tunnel within a tunnel.”

However, by selecting the new button, you won’t need to manually enable the function, as the Android VPN app will now activate it automatically when it’s called for.

This becomes particularly relevant when DAITA, a security technique that obscures network traffic patterns to prevent interception, is enabled and the selected servers do not support it directly, but you still desire a high level of security.

Specifically, the system will now recognise this preference and will automatically activate multihop mode, as DAITA requires it or benefits from it in order to function effectively. If you disable DAITA, the system will automatically revert to a faster, single-server connection to save you bandwidth, allowing the VPN to maintain its fast speeds reputation.

The VPN has also optimised the server location search function. Specifically, the results displayed in the ‘Select location’ field are now sorted by relevance, based on how closely they match users’ queries. Approximate search results have also been included to recognise imperfect matches and improve the overall user experience.

Finally, a few bugs have also been fixed, such as the sorting of the list of positions in English and previous revocation flags appearing during an API rejection.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Fixing the bugs

Only two days ago, Mullvad released version 2026.09. However, the release contained an error that could cause the tunnel to get stuck in connecting and disconnecting when the QUIC obfuscator is used, causing the entire tunnel state machine to freeze and requiring the app to be restarted.

While the new version has indeed fixed the glitch in the previous version— and for this reason, the VPN explicitly advised to abandon version number 09 — it also warned that 2026.10 may cause the first connection attempt to fail when using features such as quantum-resistant tunnels or Daita.

A future release is expected soon to fix the connection issue, Mullvad said.

September isn't the greatest month for VPN deals. Black Friday is around the corner and, generally speaking, the big bargains are to be had from late October onwards. But, if you need a subscription now, then, no problem. There are still one or two real deals to be had, including this one from Private Internet Access.

The average base price for PIA sits at $2.18 which very much puts it in the category for a cheap VPN – cheap but very good. That's for the 27-month plan, which then works out as around $57, all in.

Instead, right now, you can pick up this VPN for $1.79 as the lowest per-month price. But, make sure to pay attention because things aren't quite as straightforward as they seem.

This $1.79 per month price is possible because PIA is offering a longer subscription. It's for 39 months, instead of 2 years. So, the overall cost – which, bear in mind, you need to pay up front – is more than the above. It's $69.81.

Now, if you ask me, that's a pretty good deal given that PIA is a TechRadar recommended VPN and that the extra year's service is pretty cheap at about $12.

But, what I really like about this deal is that the auto-renew price is exactly the same. So, no nasty surprises if you forget to cancel in 3.5 years' time.

That's important because, like a lot of subscription services, many of the top VPNs have some eye-watering auto-renew prices. Windscribe, Mullvad and, with this deal, PIA are some of the ones that don't.

PIA is a particularly good choice for people looking to do some torrenting. There are good safety features to keep you protected while you use P2P networks and it's very configurable if you want to maximise you download/upload speeds too.

At this time of year, the only other VPN deal out there of note is Windscribe's Back to School offer which is still live despite the intended September 14 deadline.

But, like we say, if you've got your heart set on a different product, and you can wait another four weeks, you'll probably find more options.

• CyberGhost has rebuilt the server list in its iOS app from the ground up
• Browse, Streaming, and Favourites now live in their own tabs
• The overhaul is CyberGhost's most meaningful iPhone update in a while

CyberGhost has pushed out a new update for its iOS app, and this time it's one iPhone users will actually notice. The update includes a completely rebuilt server list, the part of the app you touch every time you pick a location.

According to the release notes, Browse (All), Streaming, and Favourites now sit in their own tabs. You can search for any country or city instantly, and scrolling and animations have been smoothed out throughout.

CyberGhost is not on our list of the best VPN services currently, but it remains one of the fastest, most reliable picks for streaming, so any polish to the everyday experience is welcome.

The move also mirrors what we have seen elsewhere. Private Internet Access, another Kape-owned service, recently broke a long silence with a wave of app and network upgrades of its own.

What's new in CyberGhost's iOS update

The core change is structural. Instead of one long scrolling list, the server picker is now split into three tabs: Browse for all countries, Streaming for servers optimised for platforms like Netflix, and Favourites for the locations you have saved.

A new search bar sits alongside those tabs, so you can type a country or city and jump straight to it rather than thumbing through the whole roster. CyberGhost offers servers in 100 countries, so it's a much-needed shortcut.

This is a quality-of-life update, not a new feature drop, and it targets friction most users feel daily: finding the right server quickly.

Splitting streaming servers into their own tab is especially useful given CyberGhost's strong unblocking record, and instant search removes the guesswork when you need a specific city for local content.

It's worth noting the update does not touch privacy tooling, and CyberGhost's no-logs policy was last put under an independent Deloitte audit back in 2024.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to use the new features

After updating the iPhone app, tap the location area on the home screen to open the rebuilt server list.

Use the tabs along the top to switch between Browse, Streaming, and Favourites, or tap the search bar to find a country or city by name.

To save a location, tap the star next to it and it will appear under Favourites next time.

• Proton VPN adds a native app for Amazon Fire TV Sticks running on Vega OS
• Users can download the app directly from their smart TVs
• Proton joins a few major VPNs in supporting Amazon's latest OS

Amazon's transition to its brand-new operating system has caused quite a stir in the streaming world, but the industry's top security providers are catching up. Proton VPN is now the latest provider to release a dedicated app for Amazon Fire TV Sticks running Vega OS.

If you've recently upgraded to one of Amazon's next-generation streaming devices, you might have noticed that older Android-based apps no longer work. By rolling out a native application tailored specifically for this new Linux-based ecosystem, Proton VPN ensures you won't have to sacrifice your privacy just to watch your favorite shows.

When looking for the best VPN for streaming, device compatibility is just as crucial as connection speed. Securing a smart TV or streaming stick shouldn't require complex manual router configurations, which is why native apps are so vital for the average consumer.

Unblocking your favorite streams on Vega OS

Amazon's shift from its traditional Android-based Fire OS to the streamlined Vega OS meant that app developers had to build entirely new software from the ground up. For VPN users, this initially caused a major headache, as older Fire Stick applications simply wouldn't install on the new hardware architecture.

With Proton VPN's new release, users can easily secure their internet connection, hide their IP address, and unblock geo-restricted streaming libraries directly from their television.

Whether you want to avoid bandwidth throttling from your internet service provider or keep your late-night binge-watching habits out of the hands of third-party trackers, a dedicated TV app makes the entire process seamless.

To get the new app running on your smart TV setup, Vega OS users can find detailed download instructions on Proton's dedicated support page.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

The growing Vega OS VPN ecosystem

Proton isn't the only provider that has scrambled to accommodate Amazon's sweeping software changes over the past year. In fact, the race to build the ultimate Vega OS application has been fiercely competitive among the industry's biggest players.

When VPN support first landed on the next-gen Amazon Fire TV Stick, consumer options were severely limited. However, the streaming privacy landscape has rapidly expanded. NordVPN was among the first to break ground with its Linux-based VPN app, setting a high standard for speed and usability on the platform.

Shortly after that initial wave, IPVanish joined NordVPN in the race to support the new hardware, bringing its simultaneous connections to the Vega OS ecosystem. Following suit, Surfshark launched its own native app, with ExpressVPN also joining this list more recently.

With Proton VPN now entering the fray, consumers have a highly robust lineup of premium privacy tools to choose from. If you value open-source transparency, Proton's arrival on Vega OS is a massive win for your smart home security.

• ExpressVPN has replaced its Aircove router with Fortify, a faster Wi-Fi 6 model built on GL.iNet's Flint 2 platform
• For $199.99, you get the Fortify router and 12 months of ExpressVPN's Advanced plan
• Aircove and Aircove Go are retiring from sale, but existing owners keep support and qualify for a Fortify discount

ExpressVPN, regularly ranked among the best VPN providers, has announced Fortify, a new Wi-Fi 6 VPN router that takes over from its Aircove line and shifts the company's router-level protection onto hardware built by networking specialist GL.iNet.

The idea is a familiar division of labour: GL.iNet supplies the hardware, firmware, and router interface, while ExpressVPN brings the VPN service and privacy technology as part of what both companies describe as a longer-term partnership.

Zac Eller, GM of Global Partnerships at ExpressVPN, says that "together we can do more for customers than either of us would alone."

The launch also draws a line under Aircove. ExpressVPN is retiring both Aircove and the portable Aircove Go from sale, positioning Fortify as the upgrade path for anyone who wants router-level ExpressVPN on more capable hardware.

ExpressVPN Fortify: a big step up from Aircove

Fortify is a dual-band Wi-Fi 6 AX6000 router, a clear jump from Aircove's AX1800 rating. It uses a 4x4 MU-MIMO layout, up from 2x2, and tops out at 1148 Mbps on the 2.4GHz band and 4804 Mbps on 5GHz.

Inside sits a quad-core 2.0GHz processor with 1GB of DDR4 memory and 8GB of eMMC storage, alongside two 2.5 Gigabit Ethernet ports and four Gigabit LAN ports for multi-gig home setups.

For VPN users, speed is the real draw. ExpressVPN says Fortify handles VPN throughput of up to 900 Mbps on WireGuard, compared with up to 330 Mbps on Aircove, and supports as many as 86 devices at once.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How Fortify works, and what's included

As with Aircove, Fortify runs the VPN at the router level, so every supported device on the network can be routed through ExpressVPN, including smart TVs, game consoles, security cameras, and other gadgets that cannot install a VPN app of their own.

The connection uses the WireGuard protocol at launch and is configured through GL.iNet's router interface, which retains the platform's networking tools such as Multi-WAN failover, Smart Queue Management, and AdGuard Home for network-wide ad and tracker blocking.

Fortify ships with 12 months of ExpressVPN's Advanced plan (a value of $119.95) for both new and returning users. That covers the VPN through the router as well as ExpressVPN's apps on personal devices. It also bundles extras including the ExpressKeys password manager, ad and tracker blocking, ExpressMailGuard, and more.

On trust, ExpressVPN points to its no-logs policy and RAM-only TrustedServer infrastructure, independently audited by firms including PwC, Cure53 and KPMG. Aircove also passed a Cure53 security audit at launch.

Fortify goes on sale from GL.iNet's website on September 16 at an MSRP of $199.99.

What Aircove owners need to know

ExpressVPN's router journey began in 2016 with dedicated router firmware, followed by the first Aircove in 2022 and the portable Aircove Go in 2024. Both are now being retired, and ExpressVPN will not produce any more units.

If you already own one, there's nothing to do right now. Existing routers keep working, and ExpressVPN says critical security updates and customer support will continue through 2027 for Aircove and through 2028 for Aircove Go.

There's also an incentive to upgrade: existing Aircove and Aircove Go owners qualify for 20% off Fortify. To claim it, contact ExpressVPN Customer Support to confirm ownership and receive a discount code.

• Surfshark has added an allowed websites list to its web content blocker
• The feature is currently limited to Windows only
• Web content blocker is a Surfshark One and One+ exclusive feature

Surfshark has rolled out a useful upgrade to one of its household safety tools. The web content blocker can now keep an entire category of sites blocked while still letting through the specific pages you actually need, thanks to a new allowed websites list.

The catch is that this new list is only available on Windows for now. Anyone hoping to use the allow list on their phone or Mac will have to wait for the rollout to widen.

Surfshark's web Content blocker first arrived on Android and iOS back in October 2025 and has since expanded to desktop, so it's fitting that a PC-first feature is the next piece of the puzzle.

In a way, it's only a small change, but it addresses one of the most common annoyances with category-based filtering. Until now, blocking a category was an all-or-nothing affair, and if a legitimate site got swept up in a broad filter, your only option was to disable the whole thing.

This is exactly the kind of quality-of-life refinement that helps keep Surfshark near the top of our best VPN rankings, where it currently sits as our pick for the best cheap VPN.

A quick refresher: what is web content blocker?

Web content blocker is Surfshark's category-based filtering feature, available to subscribers on its Surfshark One and One+ plans.

The tool automatically blocks access to whole categories of websites you would rather keep off your devices, and you don't need to keep the VPN turned on for it to work. The feature currently lets you filter seven categories of content, including those related to pornography, gambling, weapons, drugs, and malware.

Crucially, Surfshark built the feature to safeguard people without surveilling them. As Justas Pukys, a Senior Product Manager at Surfshark, has explained, the blocker "helps users protect their family members from seeing malicious content or websites" without monitoring the sites they visit.

That means no screen time limits, no app blocking, and no activity logs, which is consistent with the company's independently audited no-logs stance.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to use the allowed websites list

If you are running Surfshark's web content blocker on Windows, adding a trusted site to your allow list is straightforward:

1. Open your Surfshark app.
2. Click the Settings cogwheel icon in the left navigation menu.
3. Navigate to Web content blocker.
4. Scroll down and click on Allowed websites.
5. Press Add.
6. Enter the specific website URLs you want to allow.

Any site you add stays reachable while the rest of its category remains filtered, and you can toggle the web content blocker on or off whenever you like.

• Obscura VPN has introduced a new "Circle of Trust" network to champion independent, privacy-focused tech companies
• Secure image storage platform Ente Photos is the very first member
• Paid Obscura users can claim a 25% discount on their first year of Ente Photos, with a reciprocal offer available for Ente users

Obscura VPN has officially launched its new Circle of Trust initiative, a dedicated network of independent, privacy-focused companies designed to benefit users across multiple secure platforms.

The provider, which recently landed on Windows and Android with its unique next-generation infrastructure, is aiming to create a collaborative ecosystem of digital rights advocates.

To kick off the Circle of Trust, Obscura has announced that the end-to-end encrypted image storage app, Ente Photos, is the first official member to enter the program.

If you are currently paying for one of the best VPN services and are looking to expand your privacy toolkit, this new partnership offers a direct financial incentive. According to Obscura, paid users will receive 25% off their first 12 months of an Ente Photos subscription, while Ente users will be granted a reciprocal special offer for Obscura's VPN service.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What is Obscura's Circle of Trust?

The Circle of Trust is positioned as a curated network of trusted, privacy-centric applications. Rather than building a monopoly of in-house tools to lock customers into a single brand, Obscura is choosing to elevate external companies that share its strict ethos regarding user data protection.

This collaborative approach mirrors a growing trend in the wider cybersecurity space. Earlier this year, Windscribe launched a similar initiative to build an ecosystem of privacy-first apps without directly owning them. This strategy effectively creates a coalition of independent developers focused on user security, rather than relying on corporate consolidation.

To claim the new Ente Photos discount, active Obscura subscribers simply need to navigate to the 'friends' section within their account dashboard on the provider's website to generate their unique promo code.

A quick look at Ente Photos and Obscura VPN

For those unfamiliar with the service, Ente Photos is an open-source, end-to-end encrypted alternative to mainstream cloud storage solutions like Google Photos or Apple iCloud.

It ensures that your private images and videos are secured locally on your device before they ever reach the cloud, meaning nobody, not even Ente's own developers, can view your sensitive data. It also features cross-platform support and family plans, making it an accessible stepping stone for users wanting to decouple from Big Tech.

Meanwhile, Obscura VPN itself is a relatively new player that promises to set the standard for the next generation of VPNs. Unlike traditional providers, Obscura uses a unique two-party relay architecture and a custom QUIC-based obfuscation protocol.

Your internet traffic enters through an Obscura server, which sees your originating IP address but cannot read your encrypted traffic, and exits through an entirely independent node operated by Mullvad.

Obscura goes a step further by allowing users to pay securely via Bitcoin's Lightning Network or Monero, alongside traditional methods, ensuring complete financial anonymity.

Because these two distinct entities do not share data, it removes the need to blindly trust a single provider. It is structurally impossible for a single company to log both your connection source and what you are doing online.

Having already aced its first independent audit, the launch of the Circle of Trust marks another proactive step forward in Obscura's mission to reshape how consumers approach digital privacy.

• NordVPN partners with Shaquille O'Neal to raise digital security awareness
• It highlights NordVPN's evolution to a full, all-in security suite
• Live launch event headlining O'Neal to take place in NYC this fall

NordVPN has officially drafted one of the biggest names in sports history to help internet users defend against an ever-growing wave of digital threats. Today, the provider announced a global partnership with NBA Hall of Famer, entrepreneur, and broadcaster Shaquille O'Neal.

The collaboration, operating under the slogan "Go big on your online protection," aims to educate everyday users about the importance of digital security. It also serves as a major marketing push for NordVPN as it continues to evolve its brand from a standalone VPN tool into an all-in-one, comprehensive cybersecurity suite.

If you're currently in the market for the best VPN, you've likely noticed that top-tier providers are increasingly bundling extra security features into their apps. NordVPN has been leading this charge, and enlisting a globally recognized powerhouse like O'Neal is a clear signal that the company wants to make advanced cybersecurity accessible to the masses.

A slam dunk for cybersecurity awareness

Despite our daily reliance on the internet, many people still find digital security intimidating. O'Neal isn't just a 15-time NBA All-Star; his post-playing career as a highly successful investor, entrepreneur, and even touring DJ has solidified him as a universally recognized global brand.

This mass appeal is exactly what NordVPN is banking on to reach audiences who normally wouldn't pay attention to cybersecurity software.

"I only work with people and brands I believe in, and NordVPN is serious about helping people stay protected online," said Shaquille O'Neal, the new NordVPN ambassador.

"Everybody is online every day, but a lot of people still think cybersecurity is too complicated or that it doesn’t apply to them. NordVPN makes it easier to understand, and I can help make sure people pay attention. We are a strong team," added O'Neal.

For O'Neal, the transition from dominating the paint to defending against online scammers is all about vigilance. "I tell my family the same thing I tell everybody: don't make it easy for the bad guys. Scams are getting harder to spot, so you have to stay alert and think before you click."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Beyond the VPN: NordVPN's all-in-one evolution

While O'Neal is the face of the new campaign, the real MVP of the provider's recent pivot is its next-generation antivirus. Built directly into the NordVPN's app, the tool is designed to stop malware, trackers, and phishing attempts before they can even reach a user's device.

The scale of these everyday threats is staggering. According to NordVPN's telemetry, its next-gen antivirus scans roughly 12 million unique URLs every day, successfully blocking an average of 130,000 malicious pages. In the first half of 2026 alone, the company claims to have blocked nearly 5 million malware attempts in the US.

We've seen the efficacy of these tools firsthand. In recent independent testing, NordVPN's next-gen antivirus (previously known as Threat Protection suite) initially blocked 94% of phishing sites, a figure that later jumped to 96% in subsequent assessments.

"NordVPN is no longer just a VPN, and this partnership makes that clear," said Toma Sabaliauskienė, CMO at NordVPN, adding that Shaq was the obvious fit to help spread the message.

"He brings a unique blend of strength, trust, and relatable humor to the table, supporting the idea that world-class cybersecurity doesn't have to be intimidating," Sabaliauskienė added.

The Shaq partnership is slated to last for more than a year and will feature a live event in New York City later this fall.

• IPVanish just completed a two-year, ground-up network rebuild
• The upgrade leans on faster ports, direct peering, and dual data centers
• The provider now promises a 41% speed boost at peak times

IPVanish has just called time on a project most of its users never saw: a two-year, ground-up rebuild of its entire server network.

Server count, the company argues, is not what makes a network fast. How those servers are built, connected, and peered is what's actually important. Anyone weighing up the best VPN for speed will want to pay attention.

The rebuild now promises a 41% average increase in per-server throughput across the network. It's a meaningful jump, but the more interesting story is how IPVanish got there.

It comes down to four things: faster hardware, smarter peering, more redundancy, and a leaner software stack. Individually, none of these are flashy. Together, they're meant to do one thing, which is to keep your connection steady enough that you forget the VPN is on.

Faster hardware, more headroom

IPVanish has moved its entire network to 50Gbps server ports, a fivefold jump over the 10Gbps setup it ran before.

More capacity per VPN server means more headroom when everyone piles on at once.

On a busy Sunday evening, a higher-capacity server is better placed to keep traffic moving rather than choking under load.

The peering upgrade most VPNs skip

Your traffic does not just bounce between data centers. It travels from your ISP, through the virtual private network (VPN), and out to whatever site or stream you are using.

A network with fast server-to-server benchmarks but a poor path to the networks its customers actually use will still crawl through congested middle-mile transit.

IPVanish says it now peers directly at more than 40 internet exchanges worldwide, placing its servers in the same meet-me rooms as the ISPs carrying your traffic. In practice, that can mean fewer hops and a shorter, more direct route to your destination.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Redundancy, reach, a greener engine, and OpenVPN boost

On coverage, IPVanish now spans 150 locations across 55 countries, and it labels which servers are physical and which are virtual so you know where each one actually sits. It told us earlier this year that the expansion was aimed at easing peak-hour congestion in high-demand regions.

The bigger reliability play is redundancy. Every major city now runs two independent data centers with separate providers and connectivity, so if one goes dark from a power cut or fiber break, you stay online on the other.

Behind the scenes, a switch from IPTables to NFTables lets servers process traffic more efficiently, drawing less power and heat along the way.

IPVanish also added OpenVPN Data Channel Offload on Windows recently, promising almost three times faster connections. That is expected to narrow the old gap between OpenVPN's trusted security and WireGuard's speed.

A VPN you never want to turn off

On paper, 50Gbps ports and direct peering push IPVanish ahead of the 10Gbps hardware many rivals still run.

That said, NordVPN, ExpressVPN, and Proton VPN remain the names to beat on raw speed and scale.

Port capacity is shared, so the real proof is testing, not the spec sheet. Our fastest VPN rankings and latest results will show how much of this you actually feel. The ambition, in IPVanish's words, is a VPN you never want to turn off.

• Surfshark confirms an unauthorized third party accessed an internal server
• No user data or browsing traffic was compromised
• The firm has committed to a new independent security audit

Surfshark has published a detailed incident report regarding a security breach that occurred in early September 2026, confirming that an internal test server was accessed by an unauthorized third party.

If you rely on the best VPN to protect your online privacy, the provider was quick to reassure users that its live production systems remained completely secure. According to the official disclosure, "no user data and VPN services were affected" during the incident.

The breach was ultimately traced back to a human error that left an internal engineering test server misconfigured and exposed to the public internet. Through this server, the unauthorized party accessed limited internal engineering materials, including system binaries and internal configurations.

Crucially, Surfshark emphasized that personal information "was never held and accessible from here," and customer VPN traffic is never logged in the first place.

Speaking to TechRadar, Patricija Cerniauskaite, Head of Communications at Surfshark, reiterated that the compromised system was kept completely separate from live production systems.

"By design, it does not store or process any user data," Cerniauskaite explained. "While the incident does not affect our customers, we take it very seriously and believe that being open about security is an important part of earning customer trust. We remain committed to protecting our customers' privacy and security."

How Surfshark responded to the breach

According to Surfshark's official incident timeline, the first signs of unusual activity were detected on August 31. Because the alerts originated from an isolated test environment that held no sensitive data, the company initially handled it as a lower-risk case rather than triggering its most urgent protocols.

However, once the full scope was confirmed on September 2, Surfshark immediately contained the incident, backed up the affected server, and disconnected its external connections.

The provider noted that the unauthorized actor also gained access to an isolated content accessibility optimization server, which acted purely as a proxy with no access to user IP addresses or encryption keys.

"Although none of these credentials provided access to user data or to the production systems that serve our users, we reviewed the available access logs, and while no malicious activity was detected, as a precaution, we rotated or retired every secret we identified," Surfshark explained in its blog post.

Complete infrastructure remediation and secret rotation were finalized by September 5.

The incident highlights the ongoing challenges of securing internal testing infrastructure, a gap Surfshark openly acknowledged. The provider now confirms the intention of raising its test and experimental environments to the exact same security standards as its live production systems.

To further harden its security posture, Surfshark then vows to improve access controls and credential management throughout its build process. It will also enhance the detection and monitoring of its testing infrastructure to ensure internal servers are never accidentally exposed to the internet again.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

A commitment to transparency

Surfshark has built a strong reputation for maintaining customer trust, often working alongside the security community to validate its services.

Independent auditors confirm Surfshark's VPN infrastructure as secure on a regular basis. The provider also regularly backs up its no-log claims with third-party audits.

Because the service is fundamentally designed not to retain or monitor browsing activity, incidents involving isolated test servers are far less likely to result in catastrophic user data leaks.

That said, following this incident, Cerniauskaite told TechRadar that the team is currently selecting an independent cybersecurity firm to conduct a new broad infrastructure audit.

She also confirmed other third-party assessments are ongoing, including an audit of Dausos, its proprietary protocol.

• NordVPN blocked over 5 million malware attempts in January alone
• 99% of phishing attacks impersonate just 300 brands
• AI tools and fraud kits mean attackers no longer need advanced skills

We are well past the days when a cyberattack meant mass-mailing a poorly spelled virus. In 2026, cybercriminals are heavily leveraging generative AI to make their scams highly personal, industrializing fraud on a massive scale.

That is the stark warning from the Consumer Cybersecurity Report: Dismantling the Evolving Threat Landscape, published today by NordVPN. Analyzing threat intelligence data from the first half of the year, the prominent cybersecurity and best VPN provider uncovered that the most exploited vulnerability right now isn't outdated software; it is human trust.

Armed with unrestricted AI models and ready-to-use fraud kits, scammers have drastically lowered the entry barrier for digital crime. The focus has decisively shifted from complex technical exploits to highly targeted campaigns that weaponize greed, urgency, and our faith in familiar brands.

"Bad actors are weaponizing our natural instinct to believe what we see and hear," says Marijus Briedis, CTO at NordVPN, warning that these attacks no longer require advanced skills or significant resources. "Anyone with an internet connection can launch them."

It's in this context that "A single human error is now more likely than ever and likely to be more devastating than ever," Briedis added.

The numbers behind the threat

NordVPN analyzes 12 million unique URLs daily, blocking an average of 130,000 malicious pages every 24 hours before they can reach a user — a critical defense mechanism as NordVPN’s antivirus tool continues to block massive volumes of malicious sites.

Malware remains the single largest threat by volume. January 2026 saw a massive peak of over 5 million blocked attempts as attackers preyed on post-holiday shoppers. Most of these were infostealers aiming to grab saved login credentials.

The US was the hardest hit with 4.89 million attempts across the first half of the year, followed by the UK (2 million) and Germany (1.32 million).

Phishing is equally rampant. NordVPN blocked over 4.4 million phishing attempts in the first half of the year, noting that 99% of these attacks impersonate a narrow list of just 300 brands, often disguised as fake job recruiter campaigns.

Microsoft was the most impersonated company (16.12%), followed by Roblox (12.32%), Google (9.94%), and Netflix (5.99%). Adding to the danger, attackers frequently exploit the trusted .com domain, which accounts for 43.2% of all intercepted scams.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Hijacked sessions and the Dark Web

While users are increasingly wary of downloading fake apps or clicking shady links hidden in pirate sites, attackers are finding stealthier ways in.

Between January 1 and May 26, 2026, a staggering 94 billion cookies were exposed online. Of these, 1.2 billion were active session cookies, which cybercriminals can use to hijack accounts without needing a password, often completely bypassing multi-factor authentication (MFA).

Once data is stolen, it is swiftly commodified. Using its Dark Web Monitoring tools, NordVPN identified 8.4 million compromised accounts in just 90 days.

Frighteningly, over 47% of the exchanged data involved physical addresses and full names, allowing attackers to weave digital and real-world identifiers together into comprehensive victim profiles.

Telephony isn't safe, either. Between the service's launch and June 16, NordVPN blocked nearly 29,000 scam calls and issued spam warnings to over 525,000 users.

How to stay safe

Because technical barriers for criminals are lower than ever, defensive strategies must evolve. NordVPN's report stresses that consumer protection now requires a mix of both technological defenses and behavioral resilience.

Alongside using security tools like a virtual private network (VPN) and antivirus software, users must cultivate a healthy skepticism. If a message, email, or website demands urgent action or offers something too good to be true, pause and verify.

In the age of AI-driven fraud, a moment of hesitation is your best line of defense.

Proton's Unlimited plan has dropped $120, making now the cheapest time to ditch Google entirely, should you wish.

The plan includes everything you'd expect from Google's privacy-unfriendly suite: Docs, Drive, Calendar, Mail, Sheets, and so on. But, it also throws in extras such as Proton VPN, one of the best VPNs available, and Proton Pass, a premium password manager which includes the super-handy email aliasing feature.

Normally, the Proton Unlimited bundle costs $12.99 per month over two years, billed as $311.76.

This deal brings a 38% discount, making it $7.99/month. That saves $120, bringing the total 2-year cost to $191.76.

Unlike Google's suite, all of Proton's tools are end-to-end encrypted and ad-free. This means whatever you send, upload, or create is protected from snoopers looking to intercept your information to use maliciously or sell online.

This is the lowest Proton Unlimited price we've seen in 2026 but we don't know how long it'll last. So, if you're interested, sign up now to lock in the deal, and you can always make use of Proton's 30-day money-back guarantee if you change your mind.

While ditching Google entirely might seem scary, Proton is taking steps to make it as simple as possible.

Its 'Easy Switch' tool sits at the heart of this. It allows you to sign into your old email account, from which Proton automatically pulls information such as your emails, contacts, and calendar.

Files aren't quite so slick but Proton has guides for transferring from services such as Google Drive, OneDrive and more to help you get started.

I've used Proton's privacy suite for nearly two years now. Since the addition of Meet and Sheets (alongside Calendar, Docs, Drive, Mail, Pass and Wallet) it now feels more like Google Workspace than ever, and it's all far more secure.

All of the tools included can be signed up for separately. Most are pricey on their own but the Unlimited bundle makes it really good value.

• Proton VPN has added a China Smart Routing server
• Main use case is connecting to Chinese content and services from abroad
• Proton joins a short list of VPNs offering a (virtual) Chinese IP

Proton VPN has just added one of the hardest server locations in the industry to offer: China.

As of September 3, 2026, Proton VPN offers Smart Routing servers in China, adding a Chinese IP address to a network that already spans well over 140 countries.

It's notable because a genuine China option is something even some of the best VPN services don't provide. Serving up a Chinese IP address is technically and politically fraught, and the list of providers willing to do it is short.

How Proton's new China VPN server works

The new China location isn't a physical VPN server inside the country.

Instead, it uses Proton's Smart Routing technology, which lets the provider offer servers in countries where it might not otherwise be able to, using infrastructure located elsewhere. In China's case, that infrastructure sits in Hong Kong.

When you connect, you appear to access the internet from China while keeping all of Proton's features and security.

These servers run on Proton's own bare-metal hardware, so they're as secure as any other on the network.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

When you should use Proton's China VPN server

Proton is being careful about expectations. In a comment on the X thread announcing the change, Proton VPN's General Manager emphasised that "the primary supported use-case is for connecting *into* China from abroad to reach Chinese content and services."

In plain terms, this server is for people outside China who need to look like they're inside it: expats, travellers, and businesses reaching region-locked Chinese platforms, banking apps, or streaming.

It is not a fix for people inside China trying to escape the Great Firewall, though there is still some chance that Proton can help with that.

Getting a Chinese IP from a VPN is rare, because most providers don't offer a China server at all. Only a handful do: Private Internet Access, CyberGhost, and PureVPN all use servers to hand you a virtual Chinese IP.

Most of the bigger names, however, don't. ExpressVPN, Surfshark, and NordVPN don't offer a dedicated China server location. Their focus is the opposite direction, helping users inside China tunnel out via obfuscation, rather than providing a domestic Chinese presence.

If beating the Great Firewall from inside China is your goal, though, read our guide to the best VPN for China.

• Proton VPN sign-ups in Vietnam have spiked 450%
• New law mandates extensive internet logging and user identification
• It follows a similar August spike, triggered by severe social media fines

For internet users in Vietnam, preserving online privacy is becoming an increasingly uphill battle. Following the introduction of a restrictive new cybersecurity law, demand for the best VPN services has skyrocketed as citizens seek to protect their digital footprints from encroaching government surveillance.

According to data from the Proton VPN Observatory shared by David Peterson, General Manager at Proton VPN, new sign-ups from Vietnam have spiked by a staggering 450% above the usual baseline.

The massive influx of new users aligns directly with the enactment of sweeping new internet regulations, which tighten online speech controls and place heavy data-logging obligations on internet service providers (ISPs) and tech companies.

Talking to TechRadar, Peterson confirmed that daily registrations reached 450% above baseline on September 1. "This is on top of an elevated level following the 170% spike after the fake news fines in July, and another in August," he added.

A growing threat to digital privacy

The latest surge in VPN usage isn't an isolated incident, in fact. This 450% spike follows a similar increase recorded just last month when the Proton VPN Observatory logged an initial jump in sign-ups.

That earlier surge coincided with the government introducing severe financial penalties for individuals sharing what authorities broadly define as "fabricated" or "false" information on social media.

By forcing domestic and foreign telecommunications platforms to store granular user data, including IP addresses and account names, the Vietnamese government is rapidly shrinking the space for anonymous online expression.

"It's difficult to isolate a single driver of this surge in VPN use," Peterson noted. "A flurry of laws and fines — from social media penalties to crypto crackdowns and ISP logging requirements —have compounded one another. But they all send a single message to the Vietnamese public that ordinary online activity now carries legal risk."

According to Peterson, this environment is driving demand for VPNs in ways no single measure could achieve alone. "A secondary factor is that some Vietnamese news outlets (and their social media accounts) that have been subject to censorship have been recommending VPNs to their readers," he added.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What this means for people in Vietnam

For everyday internet users in Vietnam, these sweeping rules mean that ISPs and tech platforms now possess a highly detailed, identifiable record of their online activities. This could create a chilling effect on free speech, as expressing dissenting opinions on social media platforms can now easily lead to significant financial fines or further legal action.

This is exactly why virtual private networks (VPN) have become an essential lifeline. A reliable VPN encrypts a user's web traffic, ensuring that local ISPs and government monitors cannot see which websites they are visiting or what messages they are sending. Furthermore, VPNs mask the user's actual IP address, making it significantly harder for third parties to track their physical location.

However, it is worth noting that while a VPN protects data in transit, it does not bypass the legal requirement to provide identification when registering for local social media accounts or trading platforms.

As internet restrictions continue to tighten, the continued surge in Proton VPN registrations highlights a clear reality: when governments attempt to clamp down on digital liberties, citizens will inevitably find a way to take their privacy back into their own hands.

"This is a pattern we see worldwide," said Peterson, while noting how te recent Vietnam's VPN usage spikes revals how residents' calculations of their online activity are changing.

"Internet freedom isn't just about access; it's about people's fundamental right to communicate, do business, and express themselves without fear that their activity will bring a fine, or worse."

• Surfshark Group acquires a majority stake in data removal service Optery
• It joins Incogni, Ironwall, HeyPolo, while running as an independent brand
• The acquisition is expected to expand Surfshark's data broker coverage

Surfshark, the company behind one of the best VPN services around, is growing its privacy footprint again. The group has completed its acquisition of a majority stake in Optery, a US-based data removal specialist, adding a fifth brand to its expanding cybersecurity ecosystem.

Announced on September 7, the deal places Optery alongside existing group members Incogni, Ironwall, and HeyPolo. Financial terms were not disclosed.

For a group built around online privacy, buying another company that scrubs personal information from data brokers is a natural fit. It also marks another step in the steady consolidation of the booming data removal industry.

What Optery brings to the table

Optery is a US data removal service that finds and deletes personal details from data brokers, people-search sites, and search engine results.

According to Surfshark, it stands out for its specialized scanning technology, detailed screenshot reporting, and broad US data broker coverage.

In our Optery review, we called it one of the strongest data removal tools of 2026, praising its transparent before-and-after reporting and genuinely useful free tier. For now, Optery is available only in the US and Canada, though it has signaled plans to expand internationally.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why Surfshark made the move

Surfshark frames the acquisition as a response to growing demand for data control in an AI-driven world, where personal information increasingly surfaces in search results and AI-generated summaries.

The wider data broker market is expected to top $440 billion by 2032, making removal services a valuable long-term bet.

"At Surfshark Group, our goal is to empower people to take full control of their digital lives," said Vytautas Kaziukonis, founder and chairman of the board at Surfshark Group.

Optery is the group's second acquisition, following its 2024 purchase of Ironwall, a removal service aimed at government employees and executives.

Surfshark itself merged with NordVPN parent Nord Security in 2022, so growth through consolidation is well-trodden ground.

What Optery's acquisition means for Surfshark users

If you already use a Surfshark or Incogni product, not much changes overnight. Optery will keep operating independently, with its own teams, products, and technology, so there's no bundling or migration right now.

The bigger payoff should come over time. Surfshark says the deal will let it expand data broker coverage, deepen its knowledge of search-related removals, and ship new privacy tools faster across the group. Pairing Optery's US expertise with Incogni's global scale, in particular, could sharpen both services.

"By pooling our knowledge with Incogni, Ironwall, and Surfshark, we can collaborate extensively to deliver even greater protection for our users," said Lawrence Gentilello, CEO and founder of Optery.

• NordVPN has launched an extension to boost holiday savings
• PriceMice shows you better prices from other countries
• The extension is available on Chrome and is completely free to use

Have you ever felt ripped off when booking a holiday or found that your search for the best accommodation deals never actually resulted in saving a penny? NordVPN has just launched a tool that might help relieve that stress.

PriceMice is a free browser extension that shows how much the same hotel room costs when booked from other countries. This way, you can check whether a lower price is available before confirming your booking and, if so, save money.

TechRadar's best VPN pick continues to leverage its security features to the full. With PriceMice, it now offers you a useful way to use the service for your personal needs too. Even better, you don't need to be an actove NordVPn's subcribers to use the tool.

How PriceMice works

PriceMice compares the final prices of the same room in different locations, helping you find the best deal before completing your online payment.

The tool addresses the fact that holiday companies can sometimes advertise the same accommodation at different prices depending on the customer’s specific geographical location. If you’re not aware of this, it could end up costing you money that you could otherwise spend on your holiday, such as dinner or museums.

Even if you are aware of regional price differences, checking whether a better price is available elsewhere often means manually changing your location or switching to a different version of the website to repeat the search. As the process can take a long time, it could mean that places are already fully booked by the time you make a decision.

PriceMice promises to speed up the process significantly. Once the extension is installed, it works alongside your usual browsing on Booking.com when searching for hotels.

When you find a room, you can click on 'find better price,' and it automatically goes on a best price hunt without requiring you to open new tabs or windows. Within seconds, it checks prices across dozens of regions and displays the lowest option, including taxes.

You can then just connect to that region using a virtual private network (VPN) app like NordVPN and return to your booking, where you’ll see the adjusted price before completing the booking.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why using PriceMice

Savings might be worth the look. For example, prices can vary considerably between the US and the United Arab Emirates: NordVPN cites an example where using PriceMice resulted in a claimed saving of almost $150.

The company suggests that you can save at least $20 per stay, with maximum savings of up to $500.

As more platforms are expected to be added to the list soon, Domininkas Virbickas, product director at NordVPN, stressed that the goal is to provide users with the transparency they need "to know for sure before they book."

Indeed, the VPN points out that several factors can affect the final amount a traveller has to pay. For example, some destinations only add accommodation costs at the time of payment or charge them on arrival.

Final rates may also vary due to exchange rate fluctuations, while booking platforms may carry out real-time price testing that affects final prices.

Nevertheless, although the responsibility to check the final price and booking details before getting your wallet out remains with you, the prospect of saving money, particularly as the next holiday season approaches, still makes PriceMice definitely worth a look.

• Mullvad is discontinuing its public encrypted DNS (DoH) servers
• The VPN firms will instead funnel resources into the Quad9 Foundation
• Manual users must migrate to a new service before November 2

Mullvad has officially announced that it is shutting down its public encrypted DNS servers.

In a surprising but practical move, the provider, widely regarded as a major contender for the title of best VPN, revealed it will redirect its resources toward financially sponsoring the Quad9 Foundation rather than running its own standalone DNS service.

Having operated its public DNS over HTTPS (DoH) servers since 2022, Mullvad originally offered the tool as a free public service to protect DNS queries for internet users outside of its core VPN network. However, the company has now decided to step back from the highly complex infrastructure required to maintain it.

For most dedicated Mullvad VPN subscribers, this change will be entirely invisible. The company noted in its September 3 announcement that public DoH servers are "unnecessary when using Mullvad VPN," as subscriber traffic is already encrypted and handled directly by the provider’s internal DNS routing.

TechRadar has reached out to Mullvad for further comment regarding the financial details of its new Quad9 sponsorship, and we will update this article if we receive a response.

Why is Mullvad closing its DNS servers?

Mullvad's decision boils down to resource allocation and industry expertise. Running a fast, secure, and privacy-focused public DNS service at scale is incredibly difficult. Rather than competing with established non-profits, the company is choosing to fund them.

"Running a privacy-focused public DNS service is a highly specialized undertaking, and the Quad9 Foundation is the undisputed leader in the field," Mullvad explained. "Rather than duplicating their efforts to achieve only part of what they do, we're putting those resources toward financially supporting Quad9 instead."

For users familiar with Mullvad VPN, this pragmatic approach is on-brand. The company has a history of retiring legacy features in the name of security and efficiency, such as when it removed port forwarding or when Mullvad retired OpenVPN support on desktop to push users toward the modern WireGuard protocol.

Backing Quad9 DNS makes logical sense for a brand so heavily invested in the wider open-source privacy ecosystem.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What this means for users (and how to switch)

If you rely on Mullvad’s public DNS servers when disconnected from the VPN, you have until November 2, 2026, to make the switch before the service goes dark. The migration process depends entirely on how you currently access the servers.

For users of the privacy-centric Mullvad Browser, the transition will largely be seamless. If you have kept the default DoH settings or the included ad-blocking variant active, your browser will automatically migrate to Quad9 without requiring any manual input. However, if you have customized your DoH to a specific Mullvad variant (such as base, extended, or family), you must change your settings back to the default.

The situation is stricter for users who rely on configuration profiles. According to Mullvad, any existing iOS and macOS Mullvad DoH profiles will simply "stop working" after the shutdown. These users must proactively replace their current setups with dedicated Quad9 iOS or macOS profiles before the November deadline.

Finally, if you have manually configured your router or operating system to point to Mullvad’s DoH servers, you will need to manually input the new Quad9 addresses. Mullvad advises these users to follow the official configuration guides provided by Quad9 to ensure their browsing remains secure.

• NordVPN has released a UI upgrade for its browser extension
• It promises improved search and better navigation
• The app is available for Chrome and Edge browsers

NordVPN has released an update to its browser extension, promising a completely revamped look and an overall visual reorganisation that will make navigating the interface easier.

As the company explains in a blog post, the changes mainly involve new visual updates to the connection screen, a redesign of the features, and an improved search function.

Currently available on Chrome and Edge, the new look arrives with update 6.0.0, the ninth of the year, while the VPN continues to evolve in a bid to maintain its status as one of the best VPNs in the world.

A restyled look for the everyday

While the changes introduced are mainly cosmetic, the update aims to deliver a more engaging experience and a clearer visual hierarchy for faster navigation.

Indeed, the way users browse and select VPN server locations and select one has changed, with the connection screen now displaying a world map showing server positions. This should be appealing to users who prefer more visual information to a simple list of locations, giving them an immediate idea of where they are connected.

Additionally, several key features have been reorganised and moved to more functional areas of the interface to reduce visual clutter and create a cleaner, more intuitive experience. Users will find features such as ‘Exclude from VPN’ and ‘Spoofing’, along with a variety of basic settings in the profiles menu in the top bar.

The VPN’s search function has also been moved to the top of the interface and can now be accessed from any tab: users can simply click on it to find the country or city they wish to connect from and establish the connection without having to return to a specific screen.

Over the past year, NordVPN has implemented a new update on its Linux app and released similar UI updates on its mobile experience for easier navigation. These changes were inspired by research and user feedback, so it’s likely the company has taken a similar approach in this case, identifying the areas users wanted improvement in without compromising on advanced features.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

NordVPN app vs browser extension

Just as with a dedicated VPN app, a browser extension will encrypt your traffic, which is arguably the most important task of a VPN. However, while a standalone VPN app typically secures traffic across the entire device, a browser extension operates within the browser rather than at the system level.

This means it usually only routes the browser's traffic through the VPN, whilst other apps on the device continue to use their normal connection. Its system is similar to split tunnelling, which allows only certain data to pass through the VPN.

While cybercriminals are increasingly using fake VPN extensions to pose as services such as NordVPN and Proton, genuine VPN browser extensions can offer certain advantages of their own: speed is one of them.

As they generally have less of an impact on performance, since they only manage browser traffic rather than traffic from the entire device, they are reliable allies for streaming devices.

Indeed, you should give it a go if your dream is to watch a TV series without interruptions while on the train, and continue to benefit from security features — including malware protection and ad-blocking tools — for a user-friendly and worry-free experience.

• ExpressVPN adds support for Vega OS Fire TV devices
• The app features remote-friendly sign-in and quick location switching
• It joins NordVPN, IPVanish, and Surfshark on VegaOS devices

ExpressVPN has released a native app for Amazon Fire TV devices running Vega OS, giving owners of the newest streaming sticks a mainstream option many have been waiting months for.

For anyone shopping for the best VPN to pair with a next-gen Fire TV Stick, this launch is significant. ExpressVPN is one of the biggest names in the category (you can read our full ExpressVPN review for the details), and its arrival noticeably widens a field that had so far been stuck at three providers.

Fire TV VPN users with supported Vega OS devices can now download ExpressVPN from the Amazon Appstore and connect in just a few clicks.

The rollout covers all supported hardware, including the Fire TV Stick 4K Select, the first device to ship with Amazon's Linux-based platform.

Built for easy TV use

ExpressVPN says the Vega OS app was designed around the way people actually use a TV, keeping the main controls within easy reach rather than buried in menus. Users can connect or disconnect, choose a VPN location, and manage the connection with a remote, and frequently used locations can be pinned to Favorites for quick access later.

Sign-in is handled with the remote in mind, too. The app supports TV-friendly sign-in, including QR code sign-in where available, so you don't have to type out a long password. Under the hood, it runs ExpressVPN's Lightway protocol, which is built to keep connections fast and stable for HD and 4K streaming.

Setup is straightforward. Open the Amazon Appstore on a supported Fire TV device, search for ExpressVPN, and download the app. Sign in with your account, then choose a location and connect. You will be asked to allow the one-time system VPN permission that Amazon introduced when it enabled VPN support on the platform.

If the app does not appear, check that your device is supported and updated to the latest software. TechRadar's Fire TV Stick VPN guide and setup walkthrough cover the wider basics.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Every VPN available on Fire TV Vega

The field is still small but finally competitive.

NordVPN broke ground first with a native Linux-based app, and IPVanish joined it shortly after, making them the only two providers ready when Amazon finally turned on VPN support at the end of November.

Surfshark followed in May 2026 with a WireGuard-based app. ExpressVPN's arrival now brings the total to four.

Expect the list to keep growing as Amazon's developer tools mature, and as ExpressVPN says, it plans to expand support as new devices and updates arrive.

Windscribe has reduced its annual plan from $69 to $39 upfront ($3.25/month), just in time for the new academic year.

The plan includes unlimited simultaneous connections — a feature missing from competitors like NordVPN or Proton — along with a built-in ad, tracker, and malware blocker.

Its user-friendly apps are available across desktop, mobile, and many smart TVs, so it can cover everything you need: whether you're securing public Wi-Fi in the library or streaming back in the dorm.

Crucially, this isn't a first-year teaser rate. You'll be billed $39 every 12 months for as long as you keep the subscription active, avoiding the steep renewal price hikes standard across the VPN industry.

Few premium VPNs match this pricing, particularly when accounting for renewal costs. For example, NordVPN's one-year plans start at $65.88, over $20 more, and renew at $139 per year. It's a similar story when you look at the likes of Surfshark and ExpressVPN, too.

It's also among the fastest VPNs we reviewed during our most recent tests, achieving over 2,000 Mbps over WireGuard. Plus, it reliably unblocks major streaming platforms and bypasses regional internet blocks.

If you're not keen on Windscribe but want to keep top speeds, PrivadoVPN is another top choice that achieved over 2000 Mbps in testing. Equally, for streaming performance, no VPN performed better than NordVPN with global services this time around.

If you want to test it first, Windscribe offers a solid free tier. While bandwidth and server locations are capped, it gives you a risk-free way to test the interface before upgrading.

• Surfshark has relaunched its Beta Tester Program
• Testers get a direct line to the development team
• Joining is free but available only to Windows, Android users

If you like being first in line to try new tools, Surfshark has launched an updated Beta Tester Program that gives users early access to unreleased features, design changes, and app updates.

For now, the scheme is limited to the company's Windows and Android apps. It invites everyday users to test, poke at, and help refine tools that are still works in progress, rather than waiting for a polished public release.

Plenty of the best VPN services make use of beta programs to squash bugs and gather real-world feedback. What Surfshark is leaning on to stand out is the promise of a direct line to the people actually building the product.

What's new in the Beta Tester Program

Enrolled testers can try upcoming features and updates before anyone else, then flag any bugs or quirks they run into. The twist is the communication channel: participants are invited into a closed Discord hub built for direct, two-way conversation with Surfshark's developers.

The company says input from testers will directly influence feature improvements and even the development of new products.

"Our mission is to build the most beloved security product for everyone, but for that, we need input from our community," said Gabriele Sinkeviciute, Head of Product at Surfshark. "Oftentimes, we are buried so deep into our product that we don't see the small details or inconveniences."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why it matters

For Surfshark, the appeal is a tighter feedback loop that catches the small annoyances developers tend to miss. The company has been shipping quickly of late, recently rolling out real-time scam text protection, so a structured way to stress-test new tools makes sense.

It also puts Surfshark in good company. IPVanish launched a similar beta scheme in August, and Proton VPN has been running its Proton Protocols rewrite in beta across all major apps.

Just be aware of the trade-off. Early builds can be buggy; the program is a volunteer effort with no financial reward, and you can opt out whenever you like.

How to join

Any active Surfshark subscriber can take part, regardless of plan.

On Windows, open the app and head to Settings > App settings, scroll to Beta Testing, and click Join Beta. On Android, open the Surfshark page in the Google Play Store, scroll to the Join Beta section, and tap Join.

Once enrolled, you will be invited into the private Discord hub to connect with developers and fellow testers. You can read our full Surfshark review if you want to know how the service performs today.

• AdGuard's TrustTunnel is now available as a native macOS app
• The protocol camouflages VPN traffic as standard HTTPS web browsing
• A new feature allows users to resolve connection problems much faster

For those looking to secure their online privacy in regions with heavy digital censorship, choosing the best VPN is crucial. However, the most advanced anti-censorship tools often require technical know-how that can alienate everyday users. AdGuard is changing that dynamic for Apple users with a major update to its custom stealth VPN protocol.

AdGuard’s open-source VPN protocol, TrustTunnel, has officially launched a native macOS client. Previously restricted to those comfortable tinkering in the command line, the protocol is now easily accessible to anyone via the Mac App Store.

"Let’s be honest: not everyone gets excited about opening Terminal," the TrustTunnel development team admitted in the version 1.2 release notes on GitHub. "Until now, that’s exactly what macOS users had to do to use TrustTunnel. With version 1.2, those days are over."

The update means Mac users no longer need complex terminal commands or extra setups to run a self-hosted VPN server. By giving the protocol a simple, native graphical interface (GUI), AdGuard is bringing highly effective network-bypassing technology to the everyday consumer, effectively removing the usual steep learning curve.

Blending in with the crowd

TrustTunnel's primary selling point is its ability to bypass deep packet inspection (DPI). This is the aggressive monitoring method that restrictive networks, from strict university campus Wi-Fi to oppressive regime firewalls, use to identify and block traditional VPN traffic.

It achieves this stealth by routing connections through TLS with HTTP/2 or HTTP/3 protocols. To an outside observer or a network administrator monitoring the firewall, a TrustTunnel VPN connection simply looks like ordinary, harmless HTTPS web browsing. Because it seamlessly blends in with everyday internet traffic, it becomes incredibly difficult to detect, throttle, or block.

This advanced stealth functionality is now paired with the standard quality-of-life features that macOS users expect. The new client includes a handy menu bar status icon for checking connections at a glance, an automatic launch setting when macOS starts up, and an auto-connect feature that activates the moment the application opens.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Troubleshooting made easy

Alongside the shiny new interface, the 1.2 update brings practical under-the-hood improvements across all platforms. Chief among them is a new "Export logs" option conveniently located in the app's settings menu.

Previously, diagnosing a failed connection or a sudden drop in server performance meant manually digging through hidden files. Now, users can export diagnostic logs in just a few clicks, streamlining the process of sharing critical error information with AdGuard's support or development teams.

To further reduce confusion, the developers also renamed the "Query log" to "Connection log," clarifying exactly what data users are looking at when troubleshooting their self-hosted servers.

This Mac App Store release continues AdGuard's broader push to make its privacy tools more accessible across all operating systems. It follows similar consumer-friendly moves, such as bringing the AdGuard VPN to the Microsoft Store, launching a dedicated iPhone app, and offering a simplified desktop client for Apple users.

By bringing TrustTunnel out of the Terminal and into the Mac App Store, AdGuard ensures that advanced stealth VPN technology is no longer strictly reserved for power users.

• NordVPN blocked 94% of malicious URLs in latest AV-Comparatives test
• The provider's next-gen antivirus registered zero false positives
• NordVPN ranked third overall, behind Avast and Norton antivirus tools

If you're hunting for the best VPN to secure your digital life, a provider's ability to evolve beyond basic encryption is rapidly becoming a critical deciding factor. Case in point: NordVPN has just proven its security chops yet again, not just as a privacy tool, but as a formidable shield against targeted cyber threats.

According to the newly released AV-Comparatives' 2026 Q3 Anti-Phishing Comparative Test, NordVPN's next-gen antivirus achieved a highly impressive 94% phishing detection rate.

This isn't an isolated victory. The provider has a history of strong showings in independent evaluations. Back in June 2024, it became the first VPN provider to earn the AV-Comparatives anti-phishing protection badge, a strict certification that requires at least an 85% block rate with zero false alarms on legitimate banking and related sites.

'A second pair of eyes' against scammers

Conducted between August 12 and 22, the rigorous independent evaluation pitted the security tool against 250 active phishing URLs.

Crucially, AV-Comparatives also tested the software against 250 legitimate URLs to check for false alarms. NordVPN registered exactly zero false positives, accurately distinguishing between safe websites and malicious traps every single time.

A 94% phishing detection rate and no false positives ultimately ranked NordVPN third among all tested security products, only behind Avast One Free Antivirus and Norton Antivirus Plus.

So, what does this mean for the average user?

Phishing attacks, where cybercriminals use deceptive emails, texts, or fake websites to steal login credentials and financial data, are growing increasingly sophisticated. Having an automated safety net working in the background can save you from a momentary lapse in judgment.

Domininkas Virbickas, product director at NordVPN, describes the provider's next-gen antivirus as having "a second pair of eyes."

"Anybody might slip up eventually, and when you do click on something you shouldn't, that's where we step in. Results like this are what we work for, because our users deserve protection they can count on," Virbickas added.

This latest 94% success rate continues a trend of robust independent test results. Previously, NordVPN has secured a 96% phishing block rate and a 92% block rate in similar independent testing, while also consistently outpacing competitors in speed and malware protection.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Beyond basic VPN protection

Over the last few years, NordVPN has actively rebranded as an all-in-one app for next-generation protection, stepping far beyond the traditional bounds of IP masking.

Available on its Complete subscription tier, the next-gen antivirus — previously known as NordVPN Threat Protection Pro —runs seamlessly alongside its standard VPN tunnel to block trackers, intrusive ads, and malicious sites in real-time.

However, while software can block 94% of threats, human awareness remains your best defense against the remaining 6%. Cybersecurity experts continually advise practicing strong digital hygiene to avoid falling victim to online scams.

Always scrutinize URLs for suspicious prefixes or typos that indicate a spoofed domain, and verify that the site uses the secure HTTPS protocol rather than just HTTP.

Additionally, enabling two-factor authentication (2FA) ensures that even if a phishing site manages to steal your password, hackers still cannot access your accounts without the secondary code sent to your device.

Surfshark's latest deal shows why it's long been our best cheap VPN. Its One plan, the best-value option, is down to $67.23 for a two-year subscription, saving you nearly $10 upfront.

This is the lowest price we've seen since Surfshark adjusted its prices a couple of months ago and likely the best deal available until Black Friday.

The One plan offers several key features alongside the VPN including Antivirus, Dark Web Monitoring, and Scam Protection. At $2.49 per month, this Surfshark deal is actually $1 cheaper per month than NordVPN’s entry-level tier alone — saving you roughly $27 over the plan.

Tempted? You've only got 3 days left to claim; the offer ends on August 31, when the price will return to $2.79/month.

Surfshark remains among the best VPNs I've tested in 2026. It delivers over 1,000 Mbps download speeds over WireGuard, unblocks most top streaming services with ease, and offers plenty of extra features to protect your data online.

While the recent price hike was noticeable, it remains the best cheap VPN out there. What's more, despite its extensive feature list, the app is simple enough for beginners on any platform.

If you're after superior performance, be prepared for a higher price tag. NordVPN, our best VPN overall, starts at $94.23 for 27 months, $27 more than Surfshark. Meanwhile, Proton VPN is $83.76 for 24 months and ExpressVPN is $83.72 for 28 months, both over $16 more.

While higher-tier competitors offer minor improvements in raw speed, privacy, or unblocking capabilities, you'll rarely notice the difference during everyday browsing. So why pay the extra?

One of the worst parts about getting scammed is the shame, and that shame just plays into the hands of the crooks. If we don't spread the personal stories, then no one gets warned. So, good on Les Howard who told his story of getting QR code scammed to the BBC earlier this week.

Les, quite understandably, feel victim to what's widely known in the security industry as quishing (QR phishing). Les scanned a QR code that he thought was to pay for his parking, downloaded the app, put in his card details and then watched as chunks of cash were removed from his account day after day. Not great.

There are a number of different ways that QR scams work. Les Howard experienced the fake app routine, but it could just have easily been a link to a fake website, mocked up to look exactly like the real one. AI can work marvels these days when it comes to creating duplicate web pages.

You can just as easily get done by the QR scanner apps themselves, which will take a legitimate QR and send you anywhere it wants to, adding all sorts of other links or scraping the details that you send through.

Now, this doesn't mean that we shouldn't use QR codes. We just need to be a bit more careful about it. The two most important pieces of advice are to use the QR scanner that comes baked into your phone's camera app, if you have one, and, second, use a QR code checker app to make sure what you're scanning isn't a scam.

There are free online tools for the job, such as Is This QR Safe and DNS Checker but they also come bundled in with other tools such as antivirus and VPNs. Kaspersky antivirus has a QR code scammer. The VPN to choose to get one is IPVanish.

The IPVanish QR code checker – like all good QR code checkers – loads a live version of the destination page, rather than just relying on domain blacklists that may not be up to date.

It checks all the facets of the page for anything malicious, and follows any redirects that may be trying to throw it off the scent, until it's sure the QR code is safe. If all is well, it presents you with the page and allows you to continue. If not, you'll be told it's a scam code. Pretty simple stuff from the user end.

We rate IPVanish as solid, 4-star VPN. It's only short of the very best VPNs on features like server count and some streaming service unblocking that's not a priority for this use case.

In terms of QR code checking and other security features, it's right up there. So, if you're VPN-curious and definitely want in on a QR code checker, then give it a go.

If a QR code checker is all you want, though, then make sure to take some of those free options above for a spin, instead, before you settle on which one to use full time.

• Obscura VPN releases a native app for Windows 10 and Windows 11
• The simultaneous device limit has been upgraded from three to five
• New and existing users can grab a 25% discount using a special code

Finding the best Windows VPN is getting more exciting as emerging privacy provider Obscura VPN officially expands its reach to desktop PCs, rolling out a fully native app for Windows 10 and 11.

The move brings Obscura VPN's unique approach to digital privacy — which includes a two-party relay architecture and QUIC obfuscation — straight to the world's most popular desktop operating system. It marks a massive step forward for the service, making its modern privacy infrastructure accessible to a much wider demographic.

To sweeten the deal, Obscura is treating the launch as a milestone to reward its entire user base. The provider is bumping its simultaneous connection limit from three to five devices. This means you can now secure your smartphone, tablet, and desktop without having to manually log out of active sessions to free up slots.

Alongside the free device bump, Obscura is celebrating its desktop debut with a launch promotion. It is offering a 25% discount to users who apply the promo code WINDOWS26 at checkout.

For those outside the Microsoft ecosystem, the developer has confirmed that a native Linux application is also in the pipeline, complete with an active waitlist for early access.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why the Windows launch matters

Launched only as a Mac VPN when it entered the market in February 2025, Obscura then expanded to mobile platforms — first on iOS, then landing on Google Play and Obtainum for Android users.

That left desktop fans eagerly waiting for a native solution. "Windows was our most requested platform," Carl Dong, founder of Obscura, told TechRadar.

"Today we’re delivering it, a fully native app included with every subscription, and we're raising everyone’s device limit from 3 to 5, free," he added.

The decision to support both Windows 10 and 11 is a deliberate nod to accessibility. According to Obscura, roughly a third of all Windows users remain on the older operating system, with the provider noting that "privacy tools shouldn’t require a new PC."

What makes Obscura VPN different?

If you are unfamiliar with the provider, Obscura VPN promises to set the standard for the next generation of VPNs. Instead of the traditional single-server approach used by most legacy services, Obscura routes your web traffic through a dual-relay system.

This means that your IP address is kept completely separate from the websites you visit. The first server knows who you are but not where you're going, while the second server knows where you're going but not who you are. As a result, not even Obscura can tie your internet traffic back to your personal identity.

The service also employs advanced QUIC obfuscation to mask your VPN traffic, making it incredibly difficult for network administrators or strict internet censors to detect and block your connection.

Proving that it stands by these robust privacy claims, Obscura VPN just aced its first independent audit, which confirmed that its underlying infrastructure is secure and that its strict zero-logs policy holds up to real-world scrutiny.

• Surfshark's web content blocker now runs on the Dausos protocol
• The integration lets you filter risky site categories when using Dausos
• The feature is rolling out first to macOS for Surfshark One and One+ users

Surfshark has brought its web content blocker to Dausos, the proprietary VPN protocol it built in-house, meaning users of one of the best VPN services can now filter unwanted websites without switching away from the company's fastest, most future-proof connection option.

Until now, running the blocker alongside an active VPN connection meant sticking to WireGuard, since that was the protocol it supported. Bringing the tool to Dausos closes that gap, so households no longer have to trade the protocol's advantages for a safer browsing experience.

Dausos uses a hybrid post-quantum secure key exchange and delivers up to 30% faster speeds than other industry-standard protocols. Pairing that with category-based filtering means you get speed, privacy, and content protection in a single connection rather than picking two of the three.

What's new, and why it helps

The web content blocker is a filtering tool designed to keep an entire household safer without watching what anyone does online.

Unlike traditional parental-control apps, it is built to control access rather than log every click, and Surfshark says it does not record individual browsing history. You can read more on how it differs from conventional parental controls in our earlier coverage.

In practice, you pick from a set of predefined categories such as adult websites, gambling, profanity, phishing, and malware, and any site that falls under them is blocked. According to Surfshark's Karolis Kaciulis, the aim is to protect people from threats "caused by curiosity or carelessness" and to cut their exposure to a growing wave of online scams.

The headline benefit of the Dausos integration is that you keep the protocol's performance. Surfshark says users can retain up to 30% higher speeds and ultra-low latency while filtering runs, all while staying fully post-quantum secure.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to turn it on

While connected through the Dausos protocol, open the Surfshark app settings and toggle on the web content blocker.

From there, you choose which categories to restrict, and two-factor authentication can lock the configuration so only an approved admin can change it.

The rollout is currently limited to Surfshark One and Surfshark One+ subscribers running the latest app version on macOS. If you're on the cheaper Starter plan or a different platform, you'll need to wait or upgrade.

A quick look at the Dausos protocol

Dausos, which means "paradise" in Lithuanian, is Surfshark's first homegrown protocol, and it takes a different approach to most rivals.

Rather than pooling everyone's traffic through a single tunnel, it gives each user session its own dedicated, private data tunnel, which is where much of its speed advantage comes from.

On security, it uses a hybrid ML-KEM and X25519 key exchange plus an ML-DSA self-signed root certificate system to guard against future quantum threats, along with post-compromise security, port randomization, and AEGIS-256X2 encryption.

It has also been independently audited by Cure53, and a recent update improved its behaviour on the locked-down networks that often trip up VPNs on school and office firewalls.

• Proton VPN’s Stealth protocol has graduated to a stable release on Linux
• Users no longer need to switch to beta channels to use it
• This upgrade follows a string of major Linux-focused improvements

If you use one of the best VPN services on a Linux machine, bypassing restrictive firewalls and internet blockades just got significantly easier. After spending months in a rigorous testing phase, Proton VPN has officially moved its custom anti-censorship Stealth protocol into the stable Linux release.

Announced directly by the Proton Team on Reddit, the highly anticipated update means Linux users no longer have to opt into experimental testing channels just to disguise their VPN traffic. Instead, the feature is now rolling out to the main branch for everyday users to access out of the box.

This move marks a major milestone following the initial news of Proton VPN’s anti-censorship Stealth protocol finally landing on Linux in beta. Originally launched to help users in highly restrictive regions like Russia and Iran, Stealth works by obfuscating your connection. It wraps your VPN traffic in an extra layer of TLS encryption, making it look like completely standard, secure web browsing (HTTPS).

By hiding in plain sight, Stealth makes it incredibly difficult for network administrators, internet service providers (ISPs), and government censors to detect and block your VPN usage using deep packet inspection (DPI).

What you need to know about Stealth on Linux

Early feedback from the community has been largely positive, though a few users on specific distros, like Debian Sid, noted they temporarily had to revert to WireGuard to maintain a stable connection.

If you hit an issue, the developers request that you submit a bug report including your distro and version, app version, what you were doing, and what exactly went wrong.

While the obfuscation feature has officially graduated to the main stable release, the Proton Team was quick to note that users will still see a "beta" label next to the protocol inside the application itself.

"The beta label stays until we're confident it holds up across every distro, network condition, and edge case you throw at it, so keep the reports coming," the company explained to its Reddit community.

To try the feature, users simply need to update the Proton VPN Linux app to the latest version and navigate to the application settings to switch protocols. Because the update is actively rolling out across various mirrors, a handful of users on the Reddit thread reported a slight delay in receiving the newest patch (v4.17.2).

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Proton VPN Linux's updates recap

This stable release is just the latest in a rapid-fire series of updates for the open-source operating system. Earlier this year, Proton VPN revealed a major Linux makeover for both GUI and CLI users, bringing the Linux client much closer to feature parity with its Windows and Mac counterparts.

The Swiss-based privacy company has also been busy making the app more accessible. Recently, Proton VPN on Linux got a huge accessibility boost with 20 new languages. For those who prefer streamlined software management, Proton VPN brought official one-click installs to the Linux Snap Store as well.

With Stealth now readily available in the main client, Linux users can finally enjoy the full everyday benefits of Proton VPN, quietly unveiling massive under-the-hood protocol upgrades.

Whether you're trying to bypass a strict university firewall or secure your communications in a country with heavy internet censorship, Stealth ensures your private connection remains protected.

• The BBC is moving to dismiss Donald Trump's $10 billion defamation lawsuit over a 2024 documentary
• Trump’s amended complaint relies on 34 unauthorized play-starts in Florida accessed via virtual private networks (VPNs)
• The BBC argues that penalizing broadcasters for viewers bypassing geo-blocks could have "massive implications"

Donald Trump’s $10 billion defamation lawsuit against the BBC may ultimately hinge on how a federal judge views the legal mechanics of virtual private networks (VPNs).

On Monday, the British broadcaster filed a motion in a Florida federal court to dismiss Trump’s amended complaint regarding a 2024 documentary about his reelection campaign. The core of the BBC’s defense tackles a major streaming loophole: the UK broadcaster never broadcast or licensed the program in the United States.

Trump's legal team is arguing that the Florida court has jurisdiction because the documentary was played 34 times in the state. However, those 34 alleged play-starts were initiated by just 10 users employing a VPN to bypass the BBC’s strict geo-blocking measures.

For tech experts and everyday consumers who use the best VPN to protect their privacy or access overseas content, this lawsuit threatens to open a Pandora's box.

If the court sides with Trump, it could mean that any foreign streaming service, news outlet, or online company could be dragged into foreign courts simply because a handful of users spoofed their IP address to circumvent regional blocks.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

The VPN jurisdiction battle

The dispute centers on a documentary that Trump alleges maliciously edited his January 6, 2021 speech to make it seem as though he was inciting violence, combining phrases spoken nearly 55 minutes apart.

While the BBC later apologized for the edit and pulled the documentary from its streaming platforms, it continues to aggressively fight the defamation claim and the massive $10 billion price tag.

In its motion to dismiss, the BBC took aim at the idea that unauthorized VPN streams represent the broadcaster conducting business in Florida.

The corporation argued that the 34 Florida streams represent just 0.006% of the 570,000 successful requests for the documentary, characterizing them as unconfirmed and completely unauthorized.

To enforce its UK-only streaming rule, the BBC uses third-party cybersecurity services like GeoGuard to perform technical checks and block viewers employing VPNs or proxy servers. The BBC also said it strictly prohibits circumvention in its Terms of Use.

"The unilateral activity of a third party . . . cannot satisfy the requirement of contact with the forum State," the BBC’s legal team noted in the court filing, quoting legal precedent. No court has ever established jurisdiction based on a user forcibly bypassing geographical restrictions with a VPN.

The broadcaster issued a stark warning to the federal judge, stating that validating this legal strategy would have "massive implications for foreign companies with online presences."

A threat to international streaming

If a user bypassing a digital fence is enough to establish legal jurisdiction, the wider impact on the tech and streaming industries could be devastating.

Foreign media companies might be forced to cut off international access entirely or invest heavily in draconian geo-blocking tech to avoid the risk of multi-billion-dollar lawsuits in jurisdictions where their content was never officially offered.

Despite the BBC's warnings about the dangerous legal precedent this could set, Trump's team is pushing forward with the lawsuit. The president is seeking $5 billion for defamation and another $5 billion under Florida’s Deceptive and Unfair Trade Practices Act — TheWrap reported.

The judge has yet to rule on the motion to dismiss. Unless the Florida court throws out the case based on the BBC's VPN arguments, the defamation suit is slated for a two-week trial in February 2027.