• Bitdefender launches privacy tool built specifically for autonomous AI agents
• Each agent task gets a disposable, temporary connection that deactivates when the task is done
• VPN for AI Agents runs on a Model Context Protocol server architecture entirely

Bitdefender has introduced VPN for AI Agents, a standalone privacy tool built specifically for the autonomous software agents now browsing, researching, and transacting on behalf of everyday users.

The company says this public beta is a direct answer to the growing anxiety over machine-driven data exposure.

Unlike a conventional privacy tool that stays connected at all times, this tool activates only when an AI agent needs it, then deactivates once the task is done.

Why agents need their own privacy layer

Cybersecurity researchers have increasingly warned that autonomous agents occupy an ambiguous identity space, often borrowing a person's own credentials or shared workload logins to complete tasks online.

Without a clear separation, every website an agent visits and every transaction it completes remains traceable back to a single household IP address.

Recent Pew Research Center data found 71% of adults in the United States believe wider AI adoption will make their personal data less secure, a fear that extends well beyond American borders.

Bitdefender's new offering, built on a Model Context Protocol server architecture, spins up a disposable digital workspace for each prompt and discards it when the task is done.

Each prompt opens its own encrypted tunnel and exits through the VPN server's IP address, so no cookies, cache, or session state carries over to the next task.

The tool covers network transport and IP masking only, leaving the actual content of a prompt exchanged directly between the user and whichever AI provider is running it.

"AI agents are quickly becoming an extension of the people who use them, showing up in both our workdays and our personal lives," said Ciprian Istrate, senior vice president of operations, Consumer Solutions Group at Bitdefender.

"That means security can no longer stop at protecting the person behind the screen; it has to extend to the agent itself acting on their behalf."

This approach treats each agent like an independent team member requiring its own security boundary rather than inheriting the user's existing protections wholesale.

Bitdefender also describes this as clean-IP browsing, useful for QA checks on pages that display different content depending on the visitor's country.

The tool supports up to four simultaneous exit locations, or eight under the recommended testing configuration.

Access remains limited during the beta period

For now, the tool works only on macOS devices, though Bitdefender has confirmed plans to expand to additional operating systems after beta testing.

The beta specifically requires macOS 13 or later and an Apple silicon processor, meaning Intel Macs are not supported.

Bitdefender recommends macOS 15, 16 GB of memory, and roughly 10 GB of free disk space for smoother testing.

Once installed, it operates automatically across several popular AI platforms, including Claude Desktop, Cursor, Codex, and OpenCode, without requiring manual configuration from the user.

Bitdefender lists several practical use cases, including letting an agent compare prices across regions or complete multi-country research in one session.

The company frames these tasks as a productivity gain too, since they would otherwise need manual, country-by-country effort from a person.

Bitdefender is explicit about the tool's limits as well. It does not protect a device's other apps or browser.

It also does not hide prompts from the AI provider running them, and does not override a site's terms of service, rate limits, or an existing IP ban.

"With Bitdefender VPN for AI Agents, we're giving students, workers, and everyday consumers the confidence to let their AI agents work freely, knowing their identity and activity stay protected," Istrate added.

VPN for AI Agents public beta is currently available for free, but whether the free offering continues after the beta testing remains to be seen.

• Fight for the Future is running its 2nd annual Defend VPNs Day of Action
• VPN restrictions are increasingly being tucked inside new internet laws
• Utah, Michigan, the UK, Russia are among those targeting VPNs this year

Digital rights advocates are once again asking people around the world to stand up for VPNs, as lawmakers increasingly treat privacy tools as a loophole to be closed.

September 25 marks the second annual Defend VPNs Day of Action, organized by digital rights group Fight for the Future. The campaign asks users to sign an open letter and call their representatives, urging them not to ban or restrict VPNs.

Whether you rely on the best VPN on the market or a free app to stay safe on public Wi-Fi, the rules around how you can use it are changing fast.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What is the Defend VPNs Day of Action?

The campaign launched in 2025, when Fight for the Future says it engaged around 20,000 people. This year, the group wants to build on that number.

Supporters can sign a letter to government leaders at DefendVPNs.com, which calls VPNs an essential tool for privacy and access to information. The site can also connect users directly to their lawmakers' offices by phone, and it provides a suggested script.

VPN providers are getting involved, too. Amnezia VPN and IPVanish have already announced their support and are encouraging users to sign the petition, while Surfshark is also listed as a supporter.

Why VPNs need defending

According to Fight for the Future, VPN bans and restrictions rarely appear on their own. Instead, they are most often bundled into age verification bills, or "online ID checks," that require people to prove their age before accessing certain sites.

Advocates argue the stakes go far beyond adult content. Fight for the Future says the most vulnerable people rely on VPNs to reach loved ones, seek healthcare, and find information that is increasingly locked behind ID checks and biometric scans.

"Using VPNs is not criminal," said Sarah Philips, Campaign Director at Fight for the Future, adding that "Using VPNs is a right that must be defended at all costs from governments who are doing their best to break down what little privacy we have in the current tech landscape."

A year of attacks on VPNs

Here's a quick look at the biggest threats since last year's Day of Action.

Despite lawmakers in Wisconsin scrapping a provision forcing sites to block VPN users after widespread backlash, SB 73 made Utah the first US state to target VPNs in an age verification law.

A proposed "public morals" bill in Michigan would make ISPs block VPNs, with fines of up to $500,000 for promoting them. It remains in play.

In the UK, Ministers ruled out age-gating or banning VPNs, but platforms are now expected to stop users from circumventing age checks themselves.

Australia's officials explored ways to block age verification workarounds, while the EU has signaled VPNs could be next in line after announcing a social media ban for teens.

In Brazil, VPN use became an aggravating factor in crimes, Reclaim The Net reported.

In Russia, Human Rights Watch reported this week that at least 469 VPNs had been blocked by February, with authorities now turning to bulk IP blocks and app store takedowns. Amnezia VPN itself was targeted in June and needed around six weeks to fully recover.

With youth social media bans spreading to Indonesia, Malaysia, and the UAE, Fight for the Future warns that VPNs will only face more scrutiny.

Anyone who wants to add their voice can do so at DefendVPNs.com.

• Opera's free built-in VPN can now switch itself on public, unsecured Wi-Fi
• The opt-in feature is rolling out to users in the US and France first
• Opera VPN Free still only protects your browser

Opera browser is making it harder to forget about your VPN.

The company's free, built-in VPN for desktop can now turn itself on when you connect to a public or unsecured Wi-Fi network.

The feature is opt-in, so you'll need to enable it in settings first, and it's rolling out to desktop users in the US and France starting today.

Even the best VPN can't protect you if it isn't switched on, and Opera is betting that removing that manual step will get more people covered on risky networks.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Opera VPN Free goes on autopilot

Opera has offered its built-in VPN since 2016. It's free, doesn't require an account, and has no fixed bandwidth cap. Its no-logs policy has also been independently audited by Deloitte. Until now, though, you had to remember to switch it on yourself.

With this new setting, however, the Opera browser turns the VPN on automatically when it spots a public network. So, working from a café, studying on campus, or browsing at an airport no longer means activating the VPN manually every time.

The option first surfaced in testing earlier this month, when release notes for Opera Developer 137 listed an option for the VPN to connect automatically on public networks.

Arjan van Leeuwen, Head of Opera One Engineering, said VPNs "are a vital part of users' digital hygiene".

The company also notes that competitors like Chrome and Safari still don't offer built-in browser VPN features by default. It also cites We Are Social data showing that only 23% of internet users worldwide used a VPN as of Q4 2025.

Why public Wi-Fi is a risk

Public Wi-Fi is convenient, but open networks can be joined by anyone nearby, who can then snoop on or inject malicious traffic.

A trustworthy VPN encrypts your traffic, which makes it much harder for attackers to intercept and steal your data.

Automating that step closes the gap between knowing you should use a VPN and actually doing it.

Opera VPN Free vs Pro: a quick overview

Opera VPN Free is built into the browser and costs nothing. However, it only protects traffic inside Opera, so apps like Spotify, Steam, or a standalone email client still use your regular connection.

Opera VPN Pro, which launched as a paid tier in 2022, is a system-wide VPN. It covers up to six Windows, macOS, or Android devices, and it has run on ExpressVPN's Lightway protocol since mid-2025, with 48 server locations.

Lightway also brings post-quantum protection by default. Opera lists Pro from $4 per month, and new users can try it with a 7-day free trial.

If you mainly want to keep your browsing safe on the odd café hotspot, the free VPN with auto-connect is an easy win. If you want every app on your device protected, you'll need Pro or a dedicated VPN app.

• Obscura VPN has released a native Linux app, with both GUI and CLI
• Official packages cover Debian, Ubuntu, Fedora, Arch, and other derivatives
• The provider has also switched to an open-source GPLv3 license

Obscura VPN has finally arrived on Linux. The privacy-focused provider has launched a native desktop app for the platform, meaning Linux users no longer need to set up the service manually.

This rounds off a busy year for the newcomer, which only recently landed on Windows. With this release, Obscura now supports macOS, iOS, Android, Windows, and Linux.

For privacy-minded Linux fans hunting for the best VPN for their setup, Obscura's unusual two-party design makes it one of the more interesting options.

The company is also relicensing its code under GPLv3, which will appeal to open-source purists.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What's new in Obscura's Linux app

Obscura's Linux app ships with a full graphical interface, alongside an experimental command-line interface for users who prefer the terminal. Until now, Linux users had to rely on a manual WireGuard setup guide to connect. The native app means no more juggling configuration files, making the service far more accessible.

Obscura offers official packages for Debian, Ubuntu, Fedora (including Atomic Desktops like Silverblue), and Arch, as well as derivatives like Linux Mint, RHEL, Silverblue, CachyOS, and Omarchy. Minimum requirements include Ubuntu 24.04, Debian 13, Fedora 44, and RHEL 10, and the app is installed through Obscura's own package repository.

The Linux client also supports Obscura's QUIC-based stealth protocol, which makes VPN traffic look like ordinary HTTP/3 web browsing. This can help you get past networks that block VPNs.

To mark the launch, Obscura is offering 25% off for a limited time with the promo code LINUX26. The service normally costs around $8 per month, with no free tier.

Obscura goes GPLv3

Alongside the launch, Obscura has moved from the PolyForm Noncommercial License 1.0.0 to the GNU General Public License v3.0, which it says furthers its commitment to open-source software.

Obscura's code has been public since day one, but GPLv3 is a true open-source license, giving the community more freedom to inspect, modify, and share it. It's the same license Mullvad uses for its own apps.

What is Obscura VPN?

Obscura was founded by Carl Dong, a former Bitcoin Core contributor, and first launched on macOS in February 2025. It promised to set the standard for next-gen VPNs, and has since expanded to iOS, then Android, Windows, and now Linux.

Its big selling point is a two-party relay. Obscura acts as the entry node and sees your real IP address, while Mullvad VPN handles the exit node and sees the websites you visit. This means no single provider knows both who you are and what you browse.

That design has already been tested. Security firm Cure53 audited Obscura and found no major security vulnerabilities, as we reported last December.

• ExpressVPN has released version 14.3.1 for its Windows, Mac, and Linux apps
• Advanced Protection's ad and tracker blocking now works beyond the Lightway protocol
• The update also brings a rebuilt speed test, stronger screen reader support, and fixes for each platform

ExpressVPN has pushed out another update for its desktop VPN apps, and this one packs in more than the last few. Version 14.3.1 landed on Windows, Mac, and Linux on September 22.

The biggest change is that Advanced Protection, ExpressVPN's set of ad, tracker, and malicious site blockers, now works across all VPN protocols. There's also a rebuilt speed test, smarter split tunneling, and plenty of reliability fixes.

It's the latest in a busy year for one of TechRadar's best VPN recommendations, following a visual makeover and a stable MCP server for AI tools in June.

Advanced Protection finally works on every protocol

Until now, Advanced Protection on ExpressVPN's desktop apps only functioned with the VPN switched on and the Lightway or Automatic protocol selected.

Version 14.3.1 lifts that restriction, so you can now block ads, trackers, and harmful sites while using OpenVPN or WireGuard.

That's a welcome change for anyone who switches protocols to cope with tricky networks, since you no longer have to give up those protections to do it. ExpressVPN notes the feature is rolling out gradually, so not everyone will see it straight away.

Faster speed tests and smarter split tunneling

The built-in speed test has been rebuilt to run faster and deliver more precise results, which should make choosing the quickest server an easier job.

Split tunneling is more reliable for apps you exclude from the VPN, and the setup guidance has been refreshed. On Windows, the feature no longer keeps scanning for new apps when it's switched off, which cuts CPU usage. On Mac, split tunneling now leaves DNS traffic alone, so it can run alongside Advanced Protection.

On the accessibility side, screen readers can now navigate the location list, protocol settings, split tunneling, and auto-connect rules. The app also announces connection status and settings changes. That builds on the accessibility push in version 14.1.0, an area where our review rated the app just three out of five.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Fixes for every platform

Mac users get a fix that stops Docker containers from disrupting networking while connected, and the app now launches even when there's no network after waking or booting.

On Windows, the VPN stays connected when your screen turns off on Modern Standby PCs, and installation is more reliable on ARM64 devices.

Linux users benefit from improved Lightway routing and DNS configuration on systems that use resolvectl, including Pop!_OS, along with native desktop notifications. It's another step forward for ExpressVPN as a Linux VPN option, following the arrival of its rebuilt Qt-based Linux app in late 2025.

If you already use ExpressVPN, the update should install automatically. Otherwise, you can download the latest build from ExpressVPN's website. To confirm you're on 14.3.1, check the app version, which now sits at the bottom of the sidebar.

• Apple's latest iOS update has been found to undermine NordVPN's anti-phishing tool
• The feature that causes the issue, Connectivity Assist, is turned on by default as part of the update
• According to NordVPN, the issues could have been prevented

Apple's new iOS 27 operating system update is undermining NordVPN’s anti-phishing tool, leaving users exposed to privacy vulnerabilities, the VPN has warned.

Connectivity Assist, a Wi-Fi Assist feature included in Apple’s twentieth operating system release, conflicts with NordVPN’s real-time protection, preventing it from working properly, the provider has found.

What’s worse? The tool is enabled by default, meaning users may not even know. What's more, other privacy tools on your phone may also have been compromised.

The problem with Connectivity Assist

Connectivity Assist optimises your Wi-Fi connection by supplementing slow or unreliable Wi-Fi connections with mobile data, detecting connection issues, and redirecting requests to your mobile operator’s DNS servers instead.

However, when NordVPN’s anti-fraud protection blocks a phishing site, Apple may also interpret the failed connection as a Wi-Fi issue and switch to mobile data—outside the VPN’s protection—thereby compromising the functionality of the NordVPN tool.

The only option currently available to ensure full protection is to disable Connectivity Assistant, so it can’t switch to mobile data when real-time protection blocks a website.

Alternatively, you can choose only to enable real-time protection when using a VPN by disabling NordVPN’s ‘always on’ option - but this still leaves them unprotected when using mobile data - just now by choice.

“People are being made to choose between two things they shouldn't have to choose between, and there's no good way for us to fix it,” Laura Tyrylyte, Head of Public Relations at NordVPN, tells TechRadar.

Can this be prevented?

Could Apple have helped resolve these issues before the release? Perhaps, according to the VPN representative. “Apple knew the feature interferes with DNS-based filtering before it shipped,” Tyrylyte notes. “Their own support page tells people running an ad blocker to switch Connectivity Assist for that network. Somebody spotted the conflict, it just didn’t get fixed.”

Users of Pi-hole, Firewalla, and other DNS-based filtering tools had previously reported the same behaviour, and Cloudflare's WARP also stopped blocking malicious sites following the update, NordVPN stressed.

Apple engineers have suggested alternative solutions in the forums, but these only work if users configure the DNS settings themselves, notes Tyrylyte.

“Deciding to treat deliberate filtering as a failed connection is a choice somebody made. They could have written it the other way: if a user-installed DNS service decides to resolve or block the query, leave that judgement alone,” Tyrylyte adds.

“Instead, the problem got handed to users, who now need to end up fielding the support tickets for something we can’t change,” she stresses.

NordVPN states that this is not the first time a change made by Apple to the network has compromised a security feature on iOS, with the VPN having to inform users.

In 2023, Apple’s VPN API contained vulnerabilities that disrupted NordVPN operations. “Both times users ended up having to pick between an Apple feature and their own protection, and both times Apple was the only one who could have prevented that,” Tyrylyte says.

“Apple makes the call, and we find out what the call was when the release lands, she stressed.

Whoever’s responsibility this is, one thing is for certain: it is users who stand to pay the highest price when tools quietly stop working. And reporting the issue in the press as a solution seems a poor substitute for preventing the problem in the first place.

Apple is yet to respond to a request for comment.

NymVPN's latest update has shaken up its entire pricing structure. Two-year plans are completely gone, and, oddly, some prices have gone up, but, with the product better than ever before, it may be time to take notice.

NymVPN has rapidly been maturing. Most recently, its v2026.12 update added improved connection stability on WireGuard and a simpler onboarding experience to its deliberately complex VPN architecture.

All the best VPNs use complex security methods to ensure your data is never at risk, but NymVPN's mixnet takes this one step further.

Data you send from your device bounces between five different servers, and is encrypted at each, before exiting at the designated end server. In short, it adds five times the number of steps of additional security to your connection before sending you where you desire online. The idea is that it makes you next to impossible to identify and track.

Before subscriptions to NymVPN were for 1 month, 1 year or 2 years but they company has now switched that around by axing the 2-year plan and adding in a 6 month version.

Monthly plans are comparatively cheap for the VPN industry at $8 per month. That's about half what you'd pay for NordVPN, for example. Equally, at $4 per month, the 1-year plans are also good value.

And the 6-month plan is smack in the middle at $6/month.

Is NymVPN only good for security?

NymVPN's security technology is among the most sophisticated available. There are no other VPNs that run a decentralized noise-generating mixnet, but that doesn't mean that it lacks any of the more consumer-friendly features.

It offers over 70 server locations, split tunnelling capabilities, kill switch protection, obfuscation technology, and streaming unblocking.

When we completed our NymVPN review, back in 2024, at the time of its launch, far fewer of these capabilities were deemed possible. Now, its combination of security and functionality makes NymVPN a must-watch VPN over the coming months.

If you want a more mature product right away, then one of the very best VPNs might suit you better.

NordVPN, for example, performs best for overall performance. Surfshark is the best cheap VPN available, and Proton VPN is the next best thing if you're looking for privacy.

Either way, Nym is a sure-fire up-and-comer, and not a VPN to ignore.

• NymVPN has launched a new version of its app - v2026.12
• It introduces a host of speed-focused improvements, alongside improved usability, better onboarding, and new anti-censorship capabilities
• Alongside the technical changes, a new pricing structure has removed the 2-year plan entirely

NymVPN's latest update marks its latest move to put the best VPNs in its crosshairs. The provider has launched version 2026.12, bringing a massive wave of usability improvements, anti-censorship tools, and a brand-new pricing structure across its desktop and mobile apps.

According to the Nym Core Team, this release is laser-focused on "getting the safest connection to more people, in more places, with less in the way."

To that end, NymVPN has completely reworked its WireGuard handshake to deliver faster, more stable cellular connections. This means your VPN is far less likely to drop when switching from Wi-Fi to a spotty mobile data network. It also introduced a new onboarding experience to help you get started smoothly with the VPN's unique, decentralized mixnet.

One-click routing and smarter split tunneling

The most immediate change users will notice is the introduction of one-click connections. NymVPN has introduced a "Safest" default setting that automatically picks a strong-performing server in a country next to yours, ensuring your entry point sits safely outside your home jurisdiction. Users can also select "Random" to constantly break traffic analysis patterns, or rely on "Favorites" and "Recents" for instant access to trusted nodes.

NymVPN is also expanding on its earlier beta tests by officially launching geo-exclusion alongside traditional split tunneling for desktop (macOS, Windows, Linux).

While basic split tunneling lets you send a whole app outside the VPN, geo-exclusion is far more precise. It splits a single app's traffic by destination, allowing you to route local services (like a banking app) outside the tunnel while keeping international traffic protected. The team notes this feature is currently available for Chinese IPs, with more countries coming soon.

Beating censorship on the go

For users in restrictive regimes, simply having a VPN app visible on your phone can be dangerous. Following earlier iOS icon disguises, NymVPN has now brought a camouflage icon feature to Android, allowing users to hide the software behind a discreet alternative logo in their device settings.

The provider is also expanding its global accessibility, launching five new languages: Traditional Chinese, Traditional Chinese (Hong Kong), Japanese, Italian, and Indonesian. As the developer noted in its release, "for people living under censorship, a VPN they can actually read is a necessity, not a nicety."

Pricing shake-up and what's next

NymVPN is tweaking its subscription model to reflect the app's growing feature set. The provider has introduced a new six-month plan at $6 per month, while maintaining a standard monthly tier at $8.

However, the company is retiring its two-year subscription tier. The best value is now the one-year plan at $4 per month. NymVPN confirmed that existing two-year subscribers will keep their current plan, but it will automatically renew as a one-year plan when it expires.

The provider claims it remains one of the most affordable options on the market, adding that its "privacy is guaranteed by design, not by a promise a centralized VPN structurally can't keep."

Looking ahead, the NymVPN roadmap promises QR-code support for faster activations, expanded geo-exclusion for Russia, and customizable entry-and-exit server profiles.

• Surfshark has split the iOS locations tab into two views
• The browser extension gets a visual refresh
• The update is a design change rather than a new security feature

If you open the Surfshark app on your iPhone right now, something might look a little different. The provider has rolled out a redesign of its iOS locations tab, with the goal of speeding up server selection.

If you use Surfshark (one of the best VPN services out there) every day, small friction points in the user interface add up. Hunting through a single long list of countries every time you connect is exactly the kind of thing Surfshark says it wanted to fix. The company has redesigned the locations tab on its iOS app to make it easier to use.

This is not a new security tool or protocol. It's a usability update, and it lands alongside a refreshed browser VPN extension that gets its own visual makeover.

What's changed in Surfshark's iOS app

The main change is that the locations tab is now divided into two clear sections.

The Recommended view brings together your most popular country options, recently used servers, and your dedicated IP if you have one set up. The design surfaces the servers you use most first, so you don't have to search over and over. The Advanced view is where the more specialized options live, namely static IP servers and Multi Hop.

Multi Hop, Surfshark's version of double VPN, routes your traffic through two separate VPN servers at once for an extra layer of protection.

Static IP servers, meanwhile, hand you the same address every time you connect, which is handy for services that get suspicious when your IP keeps changing.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Changes to Surfshark's browser extension

The redesign for the browser extension is more significant. The home view now shows how many ads and trackers Surfshark has blocked on the site you're visiting, and it gathers all your protection tools in one place: the ad blocker, cookie pop-up blocker, malicious site warnings, data leak alerts, and email scam checker.

As Surfshark has added more features over the years, from category-based web filtering to the ability to block specific websites, its interface has grown busier. This redesign is about stripping out some of the resulting clutter and making the app feel effortless to use.

It fits a wider pattern, too. In our Surfshark review, we noted the provider keeps its apps well maintained, with a clean and consistent experience across platforms.

How to use the new layout

Open the app and tap the Locations tab at the bottom, and you'll land in Recommended by default, with your most-used servers ready to go.

If you want the specialized options, tap Advanced at the top to reach Static IP and Multi Hop, then switch back to Recommended whenever you like.

• Mullvad has released version 2026.10 of its Android app
• A rotatable globe and advanced multi-hop feature are the main highlights
• The VPN has also reported a glitch affecting connection

Mullvad has released version 2026.10 of its Android VPN app, introducing new features designed to boost speed and security while making the overall user experience more fun.

An interactive map showing VPN server locations and an advanced multi-hop feature, alongside a few bug fixes, are the key additions in this release, currently available on GitHub.

Interestingly, Google Play has yet to list the upgrade, with Mullvad still showing the previous version 2026.08 as its latest release on the official website, too.

The new redesign was quietly announced on the cloud platform over the past two days, following months of meticulous preparation that had already included the release of new features in beta in August, with the VPN testing them for almost a month before the launch.

Meanwhile, the Sweden-based VPN continues to ensure transparency, alerting users to an issue with the new version and reflecting the accountability expected by the best VPNs.

More interaction, please

The new version features a rotating globe that highlights server locations available to users, making the discovery process more immersive and playful. Users can now zoom in, pan, scroll, and explore the globe region by region to discover the exact locations of all VPN servers, as well as view their own connection routes.

Additionally, its multi-hop function, which routes traffic through two servers for additional privacy and to make it easier to route your traffic, can now be enabled automatically when relevant settings require it and off when it is unnecessary.

The multi-hop feature is a staple of Mullvad’s functionality — indeed, it first reached Android in 2025, following earlier arrivals on desktop and iOS, when Mullvad had labelled it “a tunnel within a tunnel.”

However, by selecting the new button, you won’t need to manually enable the function, as the Android VPN app will now activate it automatically when it’s called for.

This becomes particularly relevant when DAITA, a security technique that obscures network traffic patterns to prevent interception, is enabled and the selected servers do not support it directly, but you still desire a high level of security.

Specifically, the system will now recognise this preference and will automatically activate multihop mode, as DAITA requires it or benefits from it in order to function effectively. If you disable DAITA, the system will automatically revert to a faster, single-server connection to save you bandwidth, allowing the VPN to maintain its fast speeds reputation.

The VPN has also optimised the server location search function. Specifically, the results displayed in the ‘Select location’ field are now sorted by relevance, based on how closely they match users’ queries. Approximate search results have also been included to recognise imperfect matches and improve the overall user experience.

Finally, a few bugs have also been fixed, such as the sorting of the list of positions in English and previous revocation flags appearing during an API rejection.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Fixing the bugs

Only two days ago, Mullvad released version 2026.09. However, the release contained an error that could cause the tunnel to get stuck in connecting and disconnecting when the QUIC obfuscator is used, causing the entire tunnel state machine to freeze and requiring the app to be restarted.

While the new version has indeed fixed the glitch in the previous version— and for this reason, the VPN explicitly advised to abandon version number 09 — it also warned that 2026.10 may cause the first connection attempt to fail when using features such as quantum-resistant tunnels or Daita.

A future release is expected soon to fix the connection issue, Mullvad said.

September isn't the greatest month for VPN deals. Black Friday is around the corner and, generally speaking, the big bargains are to be had from late October onwards. But, if you need a subscription now, then, no problem. There are still one or two real deals to be had, including this one from Private Internet Access.

The average base price for PIA sits at $2.18 which very much puts it in the category for a cheap VPN – cheap but very good. That's for the 27-month plan, which then works out as around $57, all in.

Instead, right now, you can pick up this VPN for $1.79 as the lowest per-month price. But, make sure to pay attention because things aren't quite as straightforward as they seem.

This $1.79 per month price is possible because PIA is offering a longer subscription. It's for 39 months, instead of 2 years. So, the overall cost – which, bear in mind, you need to pay up front – is more than the above. It's $69.81.

Now, if you ask me, that's a pretty good deal given that PIA is a TechRadar recommended VPN and that the extra year's service is pretty cheap at about $12.

But, what I really like about this deal is that the auto-renew price is exactly the same. So, no nasty surprises if you forget to cancel in 3.5 years' time.

That's important because, like a lot of subscription services, many of the top VPNs have some eye-watering auto-renew prices. Windscribe, Mullvad and, with this deal, PIA are some of the ones that don't.

PIA is a particularly good choice for people looking to do some torrenting. There are good safety features to keep you protected while you use P2P networks and it's very configurable if you want to maximise you download/upload speeds too.

At this time of year, the only other VPN deal out there of note is Windscribe's Back to School offer which is still live despite the intended September 14 deadline.

But, like we say, if you've got your heart set on a different product, and you can wait another four weeks, you'll probably find more options.

• CyberGhost has rebuilt the server list in its iOS app from the ground up
• Browse, Streaming, and Favourites now live in their own tabs
• The overhaul is CyberGhost's most meaningful iPhone update in a while

CyberGhost has pushed out a new update for its iOS app, and this time it's one iPhone users will actually notice. The update includes a completely rebuilt server list, the part of the app you touch every time you pick a location.

According to the release notes, Browse (All), Streaming, and Favourites now sit in their own tabs. You can search for any country or city instantly, and scrolling and animations have been smoothed out throughout.

CyberGhost is not on our list of the best VPN services currently, but it remains one of the fastest, most reliable picks for streaming, so any polish to the everyday experience is welcome.

The move also mirrors what we have seen elsewhere. Private Internet Access, another Kape-owned service, recently broke a long silence with a wave of app and network upgrades of its own.

What's new in CyberGhost's iOS update

The core change is structural. Instead of one long scrolling list, the server picker is now split into three tabs: Browse for all countries, Streaming for servers optimised for platforms like Netflix, and Favourites for the locations you have saved.

A new search bar sits alongside those tabs, so you can type a country or city and jump straight to it rather than thumbing through the whole roster. CyberGhost offers servers in 100 countries, so it's a much-needed shortcut.

This is a quality-of-life update, not a new feature drop, and it targets friction most users feel daily: finding the right server quickly.

Splitting streaming servers into their own tab is especially useful given CyberGhost's strong unblocking record, and instant search removes the guesswork when you need a specific city for local content.

It's worth noting the update does not touch privacy tooling, and CyberGhost's no-logs policy was last put under an independent Deloitte audit back in 2024.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to use the new features

After updating the iPhone app, tap the location area on the home screen to open the rebuilt server list.

Use the tabs along the top to switch between Browse, Streaming, and Favourites, or tap the search bar to find a country or city by name.

To save a location, tap the star next to it and it will appear under Favourites next time.

• Proton VPN adds a native app for Amazon Fire TV Sticks running on Vega OS
• Users can download the app directly from their smart TVs
• Proton joins a few major VPNs in supporting Amazon's latest OS

Amazon's transition to its brand-new operating system has caused quite a stir in the streaming world, but the industry's top security providers are catching up. Proton VPN is now the latest provider to release a dedicated app for Amazon Fire TV Sticks running Vega OS.

If you've recently upgraded to one of Amazon's next-generation streaming devices, you might have noticed that older Android-based apps no longer work. By rolling out a native application tailored specifically for this new Linux-based ecosystem, Proton VPN ensures you won't have to sacrifice your privacy just to watch your favorite shows.

When looking for the best VPN for streaming, device compatibility is just as crucial as connection speed. Securing a smart TV or streaming stick shouldn't require complex manual router configurations, which is why native apps are so vital for the average consumer.

Unblocking your favorite streams on Vega OS

Amazon's shift from its traditional Android-based Fire OS to the streamlined Vega OS meant that app developers had to build entirely new software from the ground up. For VPN users, this initially caused a major headache, as older Fire Stick applications simply wouldn't install on the new hardware architecture.

With Proton VPN's new release, users can easily secure their internet connection, hide their IP address, and unblock geo-restricted streaming libraries directly from their television.

Whether you want to avoid bandwidth throttling from your internet service provider or keep your late-night binge-watching habits out of the hands of third-party trackers, a dedicated TV app makes the entire process seamless.

To get the new app running on your smart TV setup, Vega OS users can find detailed download instructions on Proton's dedicated support page.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

The growing Vega OS VPN ecosystem

Proton isn't the only provider that has scrambled to accommodate Amazon's sweeping software changes over the past year. In fact, the race to build the ultimate Vega OS application has been fiercely competitive among the industry's biggest players.

When VPN support first landed on the next-gen Amazon Fire TV Stick, consumer options were severely limited. However, the streaming privacy landscape has rapidly expanded. NordVPN was among the first to break ground with its Linux-based VPN app, setting a high standard for speed and usability on the platform.

Shortly after that initial wave, IPVanish joined NordVPN in the race to support the new hardware, bringing its simultaneous connections to the Vega OS ecosystem. Following suit, Surfshark launched its own native app, with ExpressVPN also joining this list more recently.

With Proton VPN now entering the fray, consumers have a highly robust lineup of premium privacy tools to choose from. If you value open-source transparency, Proton's arrival on Vega OS is a massive win for your smart home security.

• ExpressVPN has replaced its Aircove router with Fortify, a faster Wi-Fi 6 model built on GL.iNet's Flint 2 platform
• For $199.99, you get the Fortify router and 12 months of ExpressVPN's Advanced plan
• Aircove and Aircove Go are retiring from sale, but existing owners keep support and qualify for a Fortify discount

ExpressVPN, regularly ranked among the best VPN providers, has announced Fortify, a new Wi-Fi 6 VPN router that takes over from its Aircove line and shifts the company's router-level protection onto hardware built by networking specialist GL.iNet.

The idea is a familiar division of labour: GL.iNet supplies the hardware, firmware, and router interface, while ExpressVPN brings the VPN service and privacy technology as part of what both companies describe as a longer-term partnership.

Zac Eller, GM of Global Partnerships at ExpressVPN, says that "together we can do more for customers than either of us would alone."

The launch also draws a line under Aircove. ExpressVPN is retiring both Aircove and the portable Aircove Go from sale, positioning Fortify as the upgrade path for anyone who wants router-level ExpressVPN on more capable hardware.

ExpressVPN Fortify: a big step up from Aircove

Fortify is a dual-band Wi-Fi 6 AX6000 router, a clear jump from Aircove's AX1800 rating. It uses a 4x4 MU-MIMO layout, up from 2x2, and tops out at 1148 Mbps on the 2.4GHz band and 4804 Mbps on 5GHz.

Inside sits a quad-core 2.0GHz processor with 1GB of DDR4 memory and 8GB of eMMC storage, alongside two 2.5 Gigabit Ethernet ports and four Gigabit LAN ports for multi-gig home setups.

For VPN users, speed is the real draw. ExpressVPN says Fortify handles VPN throughput of up to 900 Mbps on WireGuard, compared with up to 330 Mbps on Aircove, and supports as many as 86 devices at once.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How Fortify works, and what's included

As with Aircove, Fortify runs the VPN at the router level, so every supported device on the network can be routed through ExpressVPN, including smart TVs, game consoles, security cameras, and other gadgets that cannot install a VPN app of their own.

The connection uses the WireGuard protocol at launch and is configured through GL.iNet's router interface, which retains the platform's networking tools such as Multi-WAN failover, Smart Queue Management, and AdGuard Home for network-wide ad and tracker blocking.

Fortify ships with 12 months of ExpressVPN's Advanced plan (a value of $119.95) for both new and returning users. That covers the VPN through the router as well as ExpressVPN's apps on personal devices. It also bundles extras including the ExpressKeys password manager, ad and tracker blocking, ExpressMailGuard, and more.

On trust, ExpressVPN points to its no-logs policy and RAM-only TrustedServer infrastructure, independently audited by firms including PwC, Cure53 and KPMG. Aircove also passed a Cure53 security audit at launch.

Fortify goes on sale from GL.iNet's website on September 16 at an MSRP of $199.99.

What Aircove owners need to know

ExpressVPN's router journey began in 2016 with dedicated router firmware, followed by the first Aircove in 2022 and the portable Aircove Go in 2024. Both are now being retired, and ExpressVPN will not produce any more units.

If you already own one, there's nothing to do right now. Existing routers keep working, and ExpressVPN says critical security updates and customer support will continue through 2027 for Aircove and through 2028 for Aircove Go.

There's also an incentive to upgrade: existing Aircove and Aircove Go owners qualify for 20% off Fortify. To claim it, contact ExpressVPN Customer Support to confirm ownership and receive a discount code.

• Surfshark has added an allowed websites list to its web content blocker
• The feature is currently limited to Windows only
• Web content blocker is a Surfshark One and One+ exclusive feature

Surfshark has rolled out a useful upgrade to one of its household safety tools. The web content blocker can now keep an entire category of sites blocked while still letting through the specific pages you actually need, thanks to a new allowed websites list.

The catch is that this new list is only available on Windows for now. Anyone hoping to use the allow list on their phone or Mac will have to wait for the rollout to widen.

Surfshark's web Content blocker first arrived on Android and iOS back in October 2025 and has since expanded to desktop, so it's fitting that a PC-first feature is the next piece of the puzzle.

In a way, it's only a small change, but it addresses one of the most common annoyances with category-based filtering. Until now, blocking a category was an all-or-nothing affair, and if a legitimate site got swept up in a broad filter, your only option was to disable the whole thing.

This is exactly the kind of quality-of-life refinement that helps keep Surfshark near the top of our best VPN rankings, where it currently sits as our pick for the best cheap VPN.

A quick refresher: what is web content blocker?

Web content blocker is Surfshark's category-based filtering feature, available to subscribers on its Surfshark One and One+ plans.

The tool automatically blocks access to whole categories of websites you would rather keep off your devices, and you don't need to keep the VPN turned on for it to work. The feature currently lets you filter seven categories of content, including those related to pornography, gambling, weapons, drugs, and malware.

Crucially, Surfshark built the feature to safeguard people without surveilling them. As Justas Pukys, a Senior Product Manager at Surfshark, has explained, the blocker "helps users protect their family members from seeing malicious content or websites" without monitoring the sites they visit.

That means no screen time limits, no app blocking, and no activity logs, which is consistent with the company's independently audited no-logs stance.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to use the allowed websites list

If you are running Surfshark's web content blocker on Windows, adding a trusted site to your allow list is straightforward:

1. Open your Surfshark app.
2. Click the Settings cogwheel icon in the left navigation menu.
3. Navigate to Web content blocker.
4. Scroll down and click on Allowed websites.
5. Press Add.
6. Enter the specific website URLs you want to allow.

Any site you add stays reachable while the rest of its category remains filtered, and you can toggle the web content blocker on or off whenever you like.

• Obscura VPN has introduced a new "Circle of Trust" network to champion independent, privacy-focused tech companies
• Secure image storage platform Ente Photos is the very first member
• Paid Obscura users can claim a 25% discount on their first year of Ente Photos, with a reciprocal offer available for Ente users

Obscura VPN has officially launched its new Circle of Trust initiative, a dedicated network of independent, privacy-focused companies designed to benefit users across multiple secure platforms.

The provider, which recently landed on Windows and Android with its unique next-generation infrastructure, is aiming to create a collaborative ecosystem of digital rights advocates.

To kick off the Circle of Trust, Obscura has announced that the end-to-end encrypted image storage app, Ente Photos, is the first official member to enter the program.

If you are currently paying for one of the best VPN services and are looking to expand your privacy toolkit, this new partnership offers a direct financial incentive. According to Obscura, paid users will receive 25% off their first 12 months of an Ente Photos subscription, while Ente users will be granted a reciprocal special offer for Obscura's VPN service.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What is Obscura's Circle of Trust?

The Circle of Trust is positioned as a curated network of trusted, privacy-centric applications. Rather than building a monopoly of in-house tools to lock customers into a single brand, Obscura is choosing to elevate external companies that share its strict ethos regarding user data protection.

This collaborative approach mirrors a growing trend in the wider cybersecurity space. Earlier this year, Windscribe launched a similar initiative to build an ecosystem of privacy-first apps without directly owning them. This strategy effectively creates a coalition of independent developers focused on user security, rather than relying on corporate consolidation.

To claim the new Ente Photos discount, active Obscura subscribers simply need to navigate to the 'friends' section within their account dashboard on the provider's website to generate their unique promo code.

A quick look at Ente Photos and Obscura VPN

For those unfamiliar with the service, Ente Photos is an open-source, end-to-end encrypted alternative to mainstream cloud storage solutions like Google Photos or Apple iCloud.

It ensures that your private images and videos are secured locally on your device before they ever reach the cloud, meaning nobody, not even Ente's own developers, can view your sensitive data. It also features cross-platform support and family plans, making it an accessible stepping stone for users wanting to decouple from Big Tech.

Meanwhile, Obscura VPN itself is a relatively new player that promises to set the standard for the next generation of VPNs. Unlike traditional providers, Obscura uses a unique two-party relay architecture and a custom QUIC-based obfuscation protocol.

Your internet traffic enters through an Obscura server, which sees your originating IP address but cannot read your encrypted traffic, and exits through an entirely independent node operated by Mullvad.

Obscura goes a step further by allowing users to pay securely via Bitcoin's Lightning Network or Monero, alongside traditional methods, ensuring complete financial anonymity.

Because these two distinct entities do not share data, it removes the need to blindly trust a single provider. It is structurally impossible for a single company to log both your connection source and what you are doing online.

Having already aced its first independent audit, the launch of the Circle of Trust marks another proactive step forward in Obscura's mission to reshape how consumers approach digital privacy.

• NordVPN partners with Shaquille O'Neal to raise digital security awareness
• It highlights NordVPN's evolution to a full, all-in security suite
• Live launch event headlining O'Neal to take place in NYC this fall

NordVPN has officially drafted one of the biggest names in sports history to help internet users defend against an ever-growing wave of digital threats. Today, the provider announced a global partnership with NBA Hall of Famer, entrepreneur, and broadcaster Shaquille O'Neal.

The collaboration, operating under the slogan "Go big on your online protection," aims to educate everyday users about the importance of digital security. It also serves as a major marketing push for NordVPN as it continues to evolve its brand from a standalone VPN tool into an all-in-one, comprehensive cybersecurity suite.

If you're currently in the market for the best VPN, you've likely noticed that top-tier providers are increasingly bundling extra security features into their apps. NordVPN has been leading this charge, and enlisting a globally recognized powerhouse like O'Neal is a clear signal that the company wants to make advanced cybersecurity accessible to the masses.

A slam dunk for cybersecurity awareness

Despite our daily reliance on the internet, many people still find digital security intimidating. O'Neal isn't just a 15-time NBA All-Star; his post-playing career as a highly successful investor, entrepreneur, and even touring DJ has solidified him as a universally recognized global brand.

This mass appeal is exactly what NordVPN is banking on to reach audiences who normally wouldn't pay attention to cybersecurity software.

"I only work with people and brands I believe in, and NordVPN is serious about helping people stay protected online," said Shaquille O'Neal, the new NordVPN ambassador.

"Everybody is online every day, but a lot of people still think cybersecurity is too complicated or that it doesn’t apply to them. NordVPN makes it easier to understand, and I can help make sure people pay attention. We are a strong team," added O'Neal.

For O'Neal, the transition from dominating the paint to defending against online scammers is all about vigilance. "I tell my family the same thing I tell everybody: don't make it easy for the bad guys. Scams are getting harder to spot, so you have to stay alert and think before you click."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Beyond the VPN: NordVPN's all-in-one evolution

While O'Neal is the face of the new campaign, the real MVP of the provider's recent pivot is its next-generation antivirus. Built directly into the NordVPN's app, the tool is designed to stop malware, trackers, and phishing attempts before they can even reach a user's device.

The scale of these everyday threats is staggering. According to NordVPN's telemetry, its next-gen antivirus scans roughly 12 million unique URLs every day, successfully blocking an average of 130,000 malicious pages. In the first half of 2026 alone, the company claims to have blocked nearly 5 million malware attempts in the US.

We've seen the efficacy of these tools firsthand. In recent independent testing, NordVPN's next-gen antivirus (previously known as Threat Protection suite) initially blocked 94% of phishing sites, a figure that later jumped to 96% in subsequent assessments.

"NordVPN is no longer just a VPN, and this partnership makes that clear," said Toma Sabaliauskienė, CMO at NordVPN, adding that Shaq was the obvious fit to help spread the message.

"He brings a unique blend of strength, trust, and relatable humor to the table, supporting the idea that world-class cybersecurity doesn't have to be intimidating," Sabaliauskienė added.

The Shaq partnership is slated to last for more than a year and will feature a live event in New York City later this fall.

• IPVanish just completed a two-year, ground-up network rebuild
• The upgrade leans on faster ports, direct peering, and dual data centers
• The provider now promises a 41% speed boost at peak times

IPVanish has just called time on a project most of its users never saw: a two-year, ground-up rebuild of its entire server network.

Server count, the company argues, is not what makes a network fast. How those servers are built, connected, and peered is what's actually important. Anyone weighing up the best VPN for speed will want to pay attention.

The rebuild now promises a 41% average increase in per-server throughput across the network. It's a meaningful jump, but the more interesting story is how IPVanish got there.

It comes down to four things: faster hardware, smarter peering, more redundancy, and a leaner software stack. Individually, none of these are flashy. Together, they're meant to do one thing, which is to keep your connection steady enough that you forget the VPN is on.

Faster hardware, more headroom

IPVanish has moved its entire network to 50Gbps server ports, a fivefold jump over the 10Gbps setup it ran before.

More capacity per VPN server means more headroom when everyone piles on at once.

On a busy Sunday evening, a higher-capacity server is better placed to keep traffic moving rather than choking under load.

The peering upgrade most VPNs skip

Your traffic does not just bounce between data centers. It travels from your ISP, through the virtual private network (VPN), and out to whatever site or stream you are using.

A network with fast server-to-server benchmarks but a poor path to the networks its customers actually use will still crawl through congested middle-mile transit.

IPVanish says it now peers directly at more than 40 internet exchanges worldwide, placing its servers in the same meet-me rooms as the ISPs carrying your traffic. In practice, that can mean fewer hops and a shorter, more direct route to your destination.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Redundancy, reach, a greener engine, and OpenVPN boost

On coverage, IPVanish now spans 150 locations across 55 countries, and it labels which servers are physical and which are virtual so you know where each one actually sits. It told us earlier this year that the expansion was aimed at easing peak-hour congestion in high-demand regions.

The bigger reliability play is redundancy. Every major city now runs two independent data centers with separate providers and connectivity, so if one goes dark from a power cut or fiber break, you stay online on the other.

Behind the scenes, a switch from IPTables to NFTables lets servers process traffic more efficiently, drawing less power and heat along the way.

IPVanish also added OpenVPN Data Channel Offload on Windows recently, promising almost three times faster connections. That is expected to narrow the old gap between OpenVPN's trusted security and WireGuard's speed.

A VPN you never want to turn off

On paper, 50Gbps ports and direct peering push IPVanish ahead of the 10Gbps hardware many rivals still run.

That said, NordVPN, ExpressVPN, and Proton VPN remain the names to beat on raw speed and scale.

Port capacity is shared, so the real proof is testing, not the spec sheet. Our fastest VPN rankings and latest results will show how much of this you actually feel. The ambition, in IPVanish's words, is a VPN you never want to turn off.

• Surfshark confirms an unauthorized third party accessed an internal server
• No user data or browsing traffic was compromised
• The firm has committed to a new independent security audit

Surfshark has published a detailed incident report regarding a security breach that occurred in early September 2026, confirming that an internal test server was accessed by an unauthorized third party.

If you rely on the best VPN to protect your online privacy, the provider was quick to reassure users that its live production systems remained completely secure. According to the official disclosure, "no user data and VPN services were affected" during the incident.

The breach was ultimately traced back to a human error that left an internal engineering test server misconfigured and exposed to the public internet. Through this server, the unauthorized party accessed limited internal engineering materials, including system binaries and internal configurations.

Crucially, Surfshark emphasized that personal information "was never held and accessible from here," and customer VPN traffic is never logged in the first place.

Speaking to TechRadar, Patricija Cerniauskaite, Head of Communications at Surfshark, reiterated that the compromised system was kept completely separate from live production systems.

"By design, it does not store or process any user data," Cerniauskaite explained. "While the incident does not affect our customers, we take it very seriously and believe that being open about security is an important part of earning customer trust. We remain committed to protecting our customers' privacy and security."

How Surfshark responded to the breach

According to Surfshark's official incident timeline, the first signs of unusual activity were detected on August 31. Because the alerts originated from an isolated test environment that held no sensitive data, the company initially handled it as a lower-risk case rather than triggering its most urgent protocols.

However, once the full scope was confirmed on September 2, Surfshark immediately contained the incident, backed up the affected server, and disconnected its external connections.

The provider noted that the unauthorized actor also gained access to an isolated content accessibility optimization server, which acted purely as a proxy with no access to user IP addresses or encryption keys.

"Although none of these credentials provided access to user data or to the production systems that serve our users, we reviewed the available access logs, and while no malicious activity was detected, as a precaution, we rotated or retired every secret we identified," Surfshark explained in its blog post.

Complete infrastructure remediation and secret rotation were finalized by September 5.

The incident highlights the ongoing challenges of securing internal testing infrastructure, a gap Surfshark openly acknowledged. The provider now confirms the intention of raising its test and experimental environments to the exact same security standards as its live production systems.

To further harden its security posture, Surfshark then vows to improve access controls and credential management throughout its build process. It will also enhance the detection and monitoring of its testing infrastructure to ensure internal servers are never accidentally exposed to the internet again.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

A commitment to transparency

Surfshark has built a strong reputation for maintaining customer trust, often working alongside the security community to validate its services.

Independent auditors confirm Surfshark's VPN infrastructure as secure on a regular basis. The provider also regularly backs up its no-log claims with third-party audits.

Because the service is fundamentally designed not to retain or monitor browsing activity, incidents involving isolated test servers are far less likely to result in catastrophic user data leaks.

That said, following this incident, Cerniauskaite told TechRadar that the team is currently selecting an independent cybersecurity firm to conduct a new broad infrastructure audit.

She also confirmed other third-party assessments are ongoing, including an audit of Dausos, its proprietary protocol.

• NordVPN blocked over 5 million malware attempts in January alone
• 99% of phishing attacks impersonate just 300 brands
• AI tools and fraud kits mean attackers no longer need advanced skills

We are well past the days when a cyberattack meant mass-mailing a poorly spelled virus. In 2026, cybercriminals are heavily leveraging generative AI to make their scams highly personal, industrializing fraud on a massive scale.

That is the stark warning from the Consumer Cybersecurity Report: Dismantling the Evolving Threat Landscape, published today by NordVPN. Analyzing threat intelligence data from the first half of the year, the prominent cybersecurity and best VPN provider uncovered that the most exploited vulnerability right now isn't outdated software; it is human trust.

Armed with unrestricted AI models and ready-to-use fraud kits, scammers have drastically lowered the entry barrier for digital crime. The focus has decisively shifted from complex technical exploits to highly targeted campaigns that weaponize greed, urgency, and our faith in familiar brands.

"Bad actors are weaponizing our natural instinct to believe what we see and hear," says Marijus Briedis, CTO at NordVPN, warning that these attacks no longer require advanced skills or significant resources. "Anyone with an internet connection can launch them."

It's in this context that "A single human error is now more likely than ever and likely to be more devastating than ever," Briedis added.

The numbers behind the threat

NordVPN analyzes 12 million unique URLs daily, blocking an average of 130,000 malicious pages every 24 hours before they can reach a user — a critical defense mechanism as NordVPN’s antivirus tool continues to block massive volumes of malicious sites.

Malware remains the single largest threat by volume. January 2026 saw a massive peak of over 5 million blocked attempts as attackers preyed on post-holiday shoppers. Most of these were infostealers aiming to grab saved login credentials.

The US was the hardest hit with 4.89 million attempts across the first half of the year, followed by the UK (2 million) and Germany (1.32 million).

Phishing is equally rampant. NordVPN blocked over 4.4 million phishing attempts in the first half of the year, noting that 99% of these attacks impersonate a narrow list of just 300 brands, often disguised as fake job recruiter campaigns.

Microsoft was the most impersonated company (16.12%), followed by Roblox (12.32%), Google (9.94%), and Netflix (5.99%). Adding to the danger, attackers frequently exploit the trusted .com domain, which accounts for 43.2% of all intercepted scams.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Hijacked sessions and the Dark Web

While users are increasingly wary of downloading fake apps or clicking shady links hidden in pirate sites, attackers are finding stealthier ways in.

Between January 1 and May 26, 2026, a staggering 94 billion cookies were exposed online. Of these, 1.2 billion were active session cookies, which cybercriminals can use to hijack accounts without needing a password, often completely bypassing multi-factor authentication (MFA).

Once data is stolen, it is swiftly commodified. Using its Dark Web Monitoring tools, NordVPN identified 8.4 million compromised accounts in just 90 days.

Frighteningly, over 47% of the exchanged data involved physical addresses and full names, allowing attackers to weave digital and real-world identifiers together into comprehensive victim profiles.

Telephony isn't safe, either. Between the service's launch and June 16, NordVPN blocked nearly 29,000 scam calls and issued spam warnings to over 525,000 users.

How to stay safe

Because technical barriers for criminals are lower than ever, defensive strategies must evolve. NordVPN's report stresses that consumer protection now requires a mix of both technological defenses and behavioral resilience.

Alongside using security tools like a virtual private network (VPN) and antivirus software, users must cultivate a healthy skepticism. If a message, email, or website demands urgent action or offers something too good to be true, pause and verify.

In the age of AI-driven fraud, a moment of hesitation is your best line of defense.

Proton's Unlimited plan has dropped $120, making now the cheapest time to ditch Google entirely, should you wish.

The plan includes everything you'd expect from Google's privacy-unfriendly suite: Docs, Drive, Calendar, Mail, Sheets, and so on. But, it also throws in extras such as Proton VPN, one of the best VPNs available, and Proton Pass, a premium password manager which includes the super-handy email aliasing feature.

Normally, the Proton Unlimited bundle costs $12.99 per month over two years, billed as $311.76.

This deal brings a 38% discount, making it $7.99/month. That saves $120, bringing the total 2-year cost to $191.76.

Unlike Google's suite, all of Proton's tools are end-to-end encrypted and ad-free. This means whatever you send, upload, or create is protected from snoopers looking to intercept your information to use maliciously or sell online.

This is the lowest Proton Unlimited price we've seen in 2026 but we don't know how long it'll last. So, if you're interested, sign up now to lock in the deal, and you can always make use of Proton's 30-day money-back guarantee if you change your mind.

While ditching Google entirely might seem scary, Proton is taking steps to make it as simple as possible.

Its 'Easy Switch' tool sits at the heart of this. It allows you to sign into your old email account, from which Proton automatically pulls information such as your emails, contacts, and calendar.

Files aren't quite so slick but Proton has guides for transferring from services such as Google Drive, OneDrive and more to help you get started.

I've used Proton's privacy suite for nearly two years now. Since the addition of Meet and Sheets (alongside Calendar, Docs, Drive, Mail, Pass and Wallet) it now feels more like Google Workspace than ever, and it's all far more secure.

All of the tools included can be signed up for separately. Most are pricey on their own but the Unlimited bundle makes it really good value.

• Proton VPN has added a China Smart Routing server
• Main use case is connecting to Chinese content and services from abroad
• Proton joins a short list of VPNs offering a (virtual) Chinese IP

Proton VPN has just added one of the hardest server locations in the industry to offer: China.

As of September 3, 2026, Proton VPN offers Smart Routing servers in China, adding a Chinese IP address to a network that already spans well over 140 countries.

It's notable because a genuine China option is something even some of the best VPN services don't provide. Serving up a Chinese IP address is technically and politically fraught, and the list of providers willing to do it is short.

How Proton's new China VPN server works

The new China location isn't a physical VPN server inside the country.

Instead, it uses Proton's Smart Routing technology, which lets the provider offer servers in countries where it might not otherwise be able to, using infrastructure located elsewhere. In China's case, that infrastructure sits in Hong Kong.

When you connect, you appear to access the internet from China while keeping all of Proton's features and security.

These servers run on Proton's own bare-metal hardware, so they're as secure as any other on the network.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

When you should use Proton's China VPN server

Proton is being careful about expectations. In a comment on the X thread announcing the change, Proton VPN's General Manager emphasised that "the primary supported use-case is for connecting *into* China from abroad to reach Chinese content and services."

In plain terms, this server is for people outside China who need to look like they're inside it: expats, travellers, and businesses reaching region-locked Chinese platforms, banking apps, or streaming.

It is not a fix for people inside China trying to escape the Great Firewall, though there is still some chance that Proton can help with that.

Getting a Chinese IP from a VPN is rare, because most providers don't offer a China server at all. Only a handful do: Private Internet Access, CyberGhost, and PureVPN all use servers to hand you a virtual Chinese IP.

Most of the bigger names, however, don't. ExpressVPN, Surfshark, and NordVPN don't offer a dedicated China server location. Their focus is the opposite direction, helping users inside China tunnel out via obfuscation, rather than providing a domestic Chinese presence.

If beating the Great Firewall from inside China is your goal, though, read our guide to the best VPN for China.

• Proton VPN sign-ups in Vietnam have spiked 450%
• New law mandates extensive internet logging and user identification
• It follows a similar August spike, triggered by severe social media fines

For internet users in Vietnam, preserving online privacy is becoming an increasingly uphill battle. Following the introduction of a restrictive new cybersecurity law, demand for the best VPN services has skyrocketed as citizens seek to protect their digital footprints from encroaching government surveillance.

According to data from the Proton VPN Observatory shared by David Peterson, General Manager at Proton VPN, new sign-ups from Vietnam have spiked by a staggering 450% above the usual baseline.

The massive influx of new users aligns directly with the enactment of sweeping new internet regulations, which tighten online speech controls and place heavy data-logging obligations on internet service providers (ISPs) and tech companies.

Talking to TechRadar, Peterson confirmed that daily registrations reached 450% above baseline on September 1. "This is on top of an elevated level following the 170% spike after the fake news fines in July, and another in August," he added.

A growing threat to digital privacy

The latest surge in VPN usage isn't an isolated incident, in fact. This 450% spike follows a similar increase recorded just last month when the Proton VPN Observatory logged an initial jump in sign-ups.

That earlier surge coincided with the government introducing severe financial penalties for individuals sharing what authorities broadly define as "fabricated" or "false" information on social media.

By forcing domestic and foreign telecommunications platforms to store granular user data, including IP addresses and account names, the Vietnamese government is rapidly shrinking the space for anonymous online expression.

"It's difficult to isolate a single driver of this surge in VPN use," Peterson noted. "A flurry of laws and fines — from social media penalties to crypto crackdowns and ISP logging requirements —have compounded one another. But they all send a single message to the Vietnamese public that ordinary online activity now carries legal risk."

According to Peterson, this environment is driving demand for VPNs in ways no single measure could achieve alone. "A secondary factor is that some Vietnamese news outlets (and their social media accounts) that have been subject to censorship have been recommending VPNs to their readers," he added.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What this means for people in Vietnam

For everyday internet users in Vietnam, these sweeping rules mean that ISPs and tech platforms now possess a highly detailed, identifiable record of their online activities. This could create a chilling effect on free speech, as expressing dissenting opinions on social media platforms can now easily lead to significant financial fines or further legal action.

This is exactly why virtual private networks (VPN) have become an essential lifeline. A reliable VPN encrypts a user's web traffic, ensuring that local ISPs and government monitors cannot see which websites they are visiting or what messages they are sending. Furthermore, VPNs mask the user's actual IP address, making it significantly harder for third parties to track their physical location.

However, it is worth noting that while a VPN protects data in transit, it does not bypass the legal requirement to provide identification when registering for local social media accounts or trading platforms.

As internet restrictions continue to tighten, the continued surge in Proton VPN registrations highlights a clear reality: when governments attempt to clamp down on digital liberties, citizens will inevitably find a way to take their privacy back into their own hands.

"This is a pattern we see worldwide," said Peterson, while noting how te recent Vietnam's VPN usage spikes revals how residents' calculations of their online activity are changing.

"Internet freedom isn't just about access; it's about people's fundamental right to communicate, do business, and express themselves without fear that their activity will bring a fine, or worse."

• Surfshark Group acquires a majority stake in data removal service Optery
• It joins Incogni, Ironwall, HeyPolo, while running as an independent brand
• The acquisition is expected to expand Surfshark's data broker coverage

Surfshark, the company behind one of the best VPN services around, is growing its privacy footprint again. The group has completed its acquisition of a majority stake in Optery, a US-based data removal specialist, adding a fifth brand to its expanding cybersecurity ecosystem.

Announced on September 7, the deal places Optery alongside existing group members Incogni, Ironwall, and HeyPolo. Financial terms were not disclosed.

For a group built around online privacy, buying another company that scrubs personal information from data brokers is a natural fit. It also marks another step in the steady consolidation of the booming data removal industry.

What Optery brings to the table

Optery is a US data removal service that finds and deletes personal details from data brokers, people-search sites, and search engine results.

According to Surfshark, it stands out for its specialized scanning technology, detailed screenshot reporting, and broad US data broker coverage.

In our Optery review, we called it one of the strongest data removal tools of 2026, praising its transparent before-and-after reporting and genuinely useful free tier. For now, Optery is available only in the US and Canada, though it has signaled plans to expand internationally.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why Surfshark made the move

Surfshark frames the acquisition as a response to growing demand for data control in an AI-driven world, where personal information increasingly surfaces in search results and AI-generated summaries.

The wider data broker market is expected to top $440 billion by 2032, making removal services a valuable long-term bet.

"At Surfshark Group, our goal is to empower people to take full control of their digital lives," said Vytautas Kaziukonis, founder and chairman of the board at Surfshark Group.

Optery is the group's second acquisition, following its 2024 purchase of Ironwall, a removal service aimed at government employees and executives.

Surfshark itself merged with NordVPN parent Nord Security in 2022, so growth through consolidation is well-trodden ground.

What Optery's acquisition means for Surfshark users

If you already use a Surfshark or Incogni product, not much changes overnight. Optery will keep operating independently, with its own teams, products, and technology, so there's no bundling or migration right now.

The bigger payoff should come over time. Surfshark says the deal will let it expand data broker coverage, deepen its knowledge of search-related removals, and ship new privacy tools faster across the group. Pairing Optery's US expertise with Incogni's global scale, in particular, could sharpen both services.

"By pooling our knowledge with Incogni, Ironwall, and Surfshark, we can collaborate extensively to deliver even greater protection for our users," said Lawrence Gentilello, CEO and founder of Optery.

• NordVPN has launched an extension to boost holiday savings
• PriceMice shows you better prices from other countries
• The extension is available on Chrome and is completely free to use

Have you ever felt ripped off when booking a holiday or found that your search for the best accommodation deals never actually resulted in saving a penny? NordVPN has just launched a tool that might help relieve that stress.

PriceMice is a free browser extension that shows how much the same hotel room costs when booked from other countries. This way, you can check whether a lower price is available before confirming your booking and, if so, save money.

TechRadar's best VPN pick continues to leverage its security features to the full. With PriceMice, it now offers you a useful way to use the service for your personal needs too. Even better, you don't need to be an actove NordVPn's subcribers to use the tool.

How PriceMice works

PriceMice compares the final prices of the same room in different locations, helping you find the best deal before completing your online payment.

The tool addresses the fact that holiday companies can sometimes advertise the same accommodation at different prices depending on the customer’s specific geographical location. If you’re not aware of this, it could end up costing you money that you could otherwise spend on your holiday, such as dinner or museums.

Even if you are aware of regional price differences, checking whether a better price is available elsewhere often means manually changing your location or switching to a different version of the website to repeat the search. As the process can take a long time, it could mean that places are already fully booked by the time you make a decision.

PriceMice promises to speed up the process significantly. Once the extension is installed, it works alongside your usual browsing on Booking.com when searching for hotels.

When you find a room, you can click on 'find better price,' and it automatically goes on a best price hunt without requiring you to open new tabs or windows. Within seconds, it checks prices across dozens of regions and displays the lowest option, including taxes.

You can then just connect to that region using a virtual private network (VPN) app like NordVPN and return to your booking, where you’ll see the adjusted price before completing the booking.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why using PriceMice

Savings might be worth the look. For example, prices can vary considerably between the US and the United Arab Emirates: NordVPN cites an example where using PriceMice resulted in a claimed saving of almost $150.

The company suggests that you can save at least $20 per stay, with maximum savings of up to $500.

As more platforms are expected to be added to the list soon, Domininkas Virbickas, product director at NordVPN, stressed that the goal is to provide users with the transparency they need "to know for sure before they book."

Indeed, the VPN points out that several factors can affect the final amount a traveller has to pay. For example, some destinations only add accommodation costs at the time of payment or charge them on arrival.

Final rates may also vary due to exchange rate fluctuations, while booking platforms may carry out real-time price testing that affects final prices.

Nevertheless, although the responsibility to check the final price and booking details before getting your wallet out remains with you, the prospect of saving money, particularly as the next holiday season approaches, still makes PriceMice definitely worth a look.

• Mullvad is discontinuing its public encrypted DNS (DoH) servers
• The VPN firms will instead funnel resources into the Quad9 Foundation
• Manual users must migrate to a new service before November 2

Mullvad has officially announced that it is shutting down its public encrypted DNS servers.

In a surprising but practical move, the provider, widely regarded as a major contender for the title of best VPN, revealed it will redirect its resources toward financially sponsoring the Quad9 Foundation rather than running its own standalone DNS service.

Having operated its public DNS over HTTPS (DoH) servers since 2022, Mullvad originally offered the tool as a free public service to protect DNS queries for internet users outside of its core VPN network. However, the company has now decided to step back from the highly complex infrastructure required to maintain it.

For most dedicated Mullvad VPN subscribers, this change will be entirely invisible. The company noted in its September 3 announcement that public DoH servers are "unnecessary when using Mullvad VPN," as subscriber traffic is already encrypted and handled directly by the provider’s internal DNS routing.

TechRadar has reached out to Mullvad for further comment regarding the financial details of its new Quad9 sponsorship, and we will update this article if we receive a response.

Why is Mullvad closing its DNS servers?

Mullvad's decision boils down to resource allocation and industry expertise. Running a fast, secure, and privacy-focused public DNS service at scale is incredibly difficult. Rather than competing with established non-profits, the company is choosing to fund them.

"Running a privacy-focused public DNS service is a highly specialized undertaking, and the Quad9 Foundation is the undisputed leader in the field," Mullvad explained. "Rather than duplicating their efforts to achieve only part of what they do, we're putting those resources toward financially supporting Quad9 instead."

For users familiar with Mullvad VPN, this pragmatic approach is on-brand. The company has a history of retiring legacy features in the name of security and efficiency, such as when it removed port forwarding or when Mullvad retired OpenVPN support on desktop to push users toward the modern WireGuard protocol.

Backing Quad9 DNS makes logical sense for a brand so heavily invested in the wider open-source privacy ecosystem.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What this means for users (and how to switch)

If you rely on Mullvad’s public DNS servers when disconnected from the VPN, you have until November 2, 2026, to make the switch before the service goes dark. The migration process depends entirely on how you currently access the servers.

For users of the privacy-centric Mullvad Browser, the transition will largely be seamless. If you have kept the default DoH settings or the included ad-blocking variant active, your browser will automatically migrate to Quad9 without requiring any manual input. However, if you have customized your DoH to a specific Mullvad variant (such as base, extended, or family), you must change your settings back to the default.

The situation is stricter for users who rely on configuration profiles. According to Mullvad, any existing iOS and macOS Mullvad DoH profiles will simply "stop working" after the shutdown. These users must proactively replace their current setups with dedicated Quad9 iOS or macOS profiles before the November deadline.

Finally, if you have manually configured your router or operating system to point to Mullvad’s DoH servers, you will need to manually input the new Quad9 addresses. Mullvad advises these users to follow the official configuration guides provided by Quad9 to ensure their browsing remains secure.

• NordVPN has released a UI upgrade for its browser extension
• It promises improved search and better navigation
• The app is available for Chrome and Edge browsers

NordVPN has released an update to its browser extension, promising a completely revamped look and an overall visual reorganisation that will make navigating the interface easier.

As the company explains in a blog post, the changes mainly involve new visual updates to the connection screen, a redesign of the features, and an improved search function.

Currently available on Chrome and Edge, the new look arrives with update 6.0.0, the ninth of the year, while the VPN continues to evolve in a bid to maintain its status as one of the best VPNs in the world.

A restyled look for the everyday

While the changes introduced are mainly cosmetic, the update aims to deliver a more engaging experience and a clearer visual hierarchy for faster navigation.

Indeed, the way users browse and select VPN server locations and select one has changed, with the connection screen now displaying a world map showing server positions. This should be appealing to users who prefer more visual information to a simple list of locations, giving them an immediate idea of where they are connected.

Additionally, several key features have been reorganised and moved to more functional areas of the interface to reduce visual clutter and create a cleaner, more intuitive experience. Users will find features such as ‘Exclude from VPN’ and ‘Spoofing’, along with a variety of basic settings in the profiles menu in the top bar.

The VPN’s search function has also been moved to the top of the interface and can now be accessed from any tab: users can simply click on it to find the country or city they wish to connect from and establish the connection without having to return to a specific screen.

Over the past year, NordVPN has implemented a new update on its Linux app and released similar UI updates on its mobile experience for easier navigation. These changes were inspired by research and user feedback, so it’s likely the company has taken a similar approach in this case, identifying the areas users wanted improvement in without compromising on advanced features.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

NordVPN app vs browser extension

Just as with a dedicated VPN app, a browser extension will encrypt your traffic, which is arguably the most important task of a VPN. However, while a standalone VPN app typically secures traffic across the entire device, a browser extension operates within the browser rather than at the system level.

This means it usually only routes the browser's traffic through the VPN, whilst other apps on the device continue to use their normal connection. Its system is similar to split tunnelling, which allows only certain data to pass through the VPN.

While cybercriminals are increasingly using fake VPN extensions to pose as services such as NordVPN and Proton, genuine VPN browser extensions can offer certain advantages of their own: speed is one of them.

As they generally have less of an impact on performance, since they only manage browser traffic rather than traffic from the entire device, they are reliable allies for streaming devices.

Indeed, you should give it a go if your dream is to watch a TV series without interruptions while on the train, and continue to benefit from security features — including malware protection and ad-blocking tools — for a user-friendly and worry-free experience.

• ExpressVPN adds support for Vega OS Fire TV devices
• The app features remote-friendly sign-in and quick location switching
• It joins NordVPN, IPVanish, and Surfshark on VegaOS devices

ExpressVPN has released a native app for Amazon Fire TV devices running Vega OS, giving owners of the newest streaming sticks a mainstream option many have been waiting months for.

For anyone shopping for the best VPN to pair with a next-gen Fire TV Stick, this launch is significant. ExpressVPN is one of the biggest names in the category (you can read our full ExpressVPN review for the details), and its arrival noticeably widens a field that had so far been stuck at three providers.

Fire TV VPN users with supported Vega OS devices can now download ExpressVPN from the Amazon Appstore and connect in just a few clicks.

The rollout covers all supported hardware, including the Fire TV Stick 4K Select, the first device to ship with Amazon's Linux-based platform.

Built for easy TV use

ExpressVPN says the Vega OS app was designed around the way people actually use a TV, keeping the main controls within easy reach rather than buried in menus. Users can connect or disconnect, choose a VPN location, and manage the connection with a remote, and frequently used locations can be pinned to Favorites for quick access later.

Sign-in is handled with the remote in mind, too. The app supports TV-friendly sign-in, including QR code sign-in where available, so you don't have to type out a long password. Under the hood, it runs ExpressVPN's Lightway protocol, which is built to keep connections fast and stable for HD and 4K streaming.

Setup is straightforward. Open the Amazon Appstore on a supported Fire TV device, search for ExpressVPN, and download the app. Sign in with your account, then choose a location and connect. You will be asked to allow the one-time system VPN permission that Amazon introduced when it enabled VPN support on the platform.

If the app does not appear, check that your device is supported and updated to the latest software. TechRadar's Fire TV Stick VPN guide and setup walkthrough cover the wider basics.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Every VPN available on Fire TV Vega

The field is still small but finally competitive.

NordVPN broke ground first with a native Linux-based app, and IPVanish joined it shortly after, making them the only two providers ready when Amazon finally turned on VPN support at the end of November.

Surfshark followed in May 2026 with a WireGuard-based app. ExpressVPN's arrival now brings the total to four.

Expect the list to keep growing as Amazon's developer tools mature, and as ExpressVPN says, it plans to expand support as new devices and updates arrive.

Windscribe has reduced its annual plan from $69 to $39 upfront ($3.25/month), just in time for the new academic year.

The plan includes unlimited simultaneous connections — a feature missing from competitors like NordVPN or Proton — along with a built-in ad, tracker, and malware blocker.

Its user-friendly apps are available across desktop, mobile, and many smart TVs, so it can cover everything you need: whether you're securing public Wi-Fi in the library or streaming back in the dorm.

Crucially, this isn't a first-year teaser rate. You'll be billed $39 every 12 months for as long as you keep the subscription active, avoiding the steep renewal price hikes standard across the VPN industry.

Few premium VPNs match this pricing, particularly when accounting for renewal costs. For example, NordVPN's one-year plans start at $65.88, over $20 more, and renew at $139 per year. It's a similar story when you look at the likes of Surfshark and ExpressVPN, too.

It's also among the fastest VPNs we reviewed during our most recent tests, achieving over 2,000 Mbps over WireGuard. Plus, it reliably unblocks major streaming platforms and bypasses regional internet blocks.

If you're not keen on Windscribe but want to keep top speeds, PrivadoVPN is another top choice that achieved over 2000 Mbps in testing. Equally, for streaming performance, no VPN performed better than NordVPN with global services this time around.

If you want to test it first, Windscribe offers a solid free tier. While bandwidth and server locations are capped, it gives you a risk-free way to test the interface before upgrading.

• Surfshark has relaunched its Beta Tester Program
• Testers get a direct line to the development team
• Joining is free but available only to Windows, Android users

If you like being first in line to try new tools, Surfshark has launched an updated Beta Tester Program that gives users early access to unreleased features, design changes, and app updates.

For now, the scheme is limited to the company's Windows and Android apps. It invites everyday users to test, poke at, and help refine tools that are still works in progress, rather than waiting for a polished public release.

Plenty of the best VPN services make use of beta programs to squash bugs and gather real-world feedback. What Surfshark is leaning on to stand out is the promise of a direct line to the people actually building the product.

What's new in the Beta Tester Program

Enrolled testers can try upcoming features and updates before anyone else, then flag any bugs or quirks they run into. The twist is the communication channel: participants are invited into a closed Discord hub built for direct, two-way conversation with Surfshark's developers.

The company says input from testers will directly influence feature improvements and even the development of new products.

"Our mission is to build the most beloved security product for everyone, but for that, we need input from our community," said Gabriele Sinkeviciute, Head of Product at Surfshark. "Oftentimes, we are buried so deep into our product that we don't see the small details or inconveniences."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why it matters

For Surfshark, the appeal is a tighter feedback loop that catches the small annoyances developers tend to miss. The company has been shipping quickly of late, recently rolling out real-time scam text protection, so a structured way to stress-test new tools makes sense.

It also puts Surfshark in good company. IPVanish launched a similar beta scheme in August, and Proton VPN has been running its Proton Protocols rewrite in beta across all major apps.

Just be aware of the trade-off. Early builds can be buggy; the program is a volunteer effort with no financial reward, and you can opt out whenever you like.

How to join

Any active Surfshark subscriber can take part, regardless of plan.

On Windows, open the app and head to Settings > App settings, scroll to Beta Testing, and click Join Beta. On Android, open the Surfshark page in the Google Play Store, scroll to the Join Beta section, and tap Join.

Once enrolled, you will be invited into the private Discord hub to connect with developers and fellow testers. You can read our full Surfshark review if you want to know how the service performs today.

• AdGuard's TrustTunnel is now available as a native macOS app
• The protocol camouflages VPN traffic as standard HTTPS web browsing
• A new feature allows users to resolve connection problems much faster

For those looking to secure their online privacy in regions with heavy digital censorship, choosing the best VPN is crucial. However, the most advanced anti-censorship tools often require technical know-how that can alienate everyday users. AdGuard is changing that dynamic for Apple users with a major update to its custom stealth VPN protocol.

AdGuard’s open-source VPN protocol, TrustTunnel, has officially launched a native macOS client. Previously restricted to those comfortable tinkering in the command line, the protocol is now easily accessible to anyone via the Mac App Store.

"Let’s be honest: not everyone gets excited about opening Terminal," the TrustTunnel development team admitted in the version 1.2 release notes on GitHub. "Until now, that’s exactly what macOS users had to do to use TrustTunnel. With version 1.2, those days are over."

The update means Mac users no longer need complex terminal commands or extra setups to run a self-hosted VPN server. By giving the protocol a simple, native graphical interface (GUI), AdGuard is bringing highly effective network-bypassing technology to the everyday consumer, effectively removing the usual steep learning curve.

Blending in with the crowd

TrustTunnel's primary selling point is its ability to bypass deep packet inspection (DPI). This is the aggressive monitoring method that restrictive networks, from strict university campus Wi-Fi to oppressive regime firewalls, use to identify and block traditional VPN traffic.

It achieves this stealth by routing connections through TLS with HTTP/2 or HTTP/3 protocols. To an outside observer or a network administrator monitoring the firewall, a TrustTunnel VPN connection simply looks like ordinary, harmless HTTPS web browsing. Because it seamlessly blends in with everyday internet traffic, it becomes incredibly difficult to detect, throttle, or block.

This advanced stealth functionality is now paired with the standard quality-of-life features that macOS users expect. The new client includes a handy menu bar status icon for checking connections at a glance, an automatic launch setting when macOS starts up, and an auto-connect feature that activates the moment the application opens.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Troubleshooting made easy

Alongside the shiny new interface, the 1.2 update brings practical under-the-hood improvements across all platforms. Chief among them is a new "Export logs" option conveniently located in the app's settings menu.

Previously, diagnosing a failed connection or a sudden drop in server performance meant manually digging through hidden files. Now, users can export diagnostic logs in just a few clicks, streamlining the process of sharing critical error information with AdGuard's support or development teams.

To further reduce confusion, the developers also renamed the "Query log" to "Connection log," clarifying exactly what data users are looking at when troubleshooting their self-hosted servers.

This Mac App Store release continues AdGuard's broader push to make its privacy tools more accessible across all operating systems. It follows similar consumer-friendly moves, such as bringing the AdGuard VPN to the Microsoft Store, launching a dedicated iPhone app, and offering a simplified desktop client for Apple users.

By bringing TrustTunnel out of the Terminal and into the Mac App Store, AdGuard ensures that advanced stealth VPN technology is no longer strictly reserved for power users.

• NordVPN blocked 94% of malicious URLs in latest AV-Comparatives test
• The provider's next-gen antivirus registered zero false positives
• NordVPN ranked third overall, behind Avast and Norton antivirus tools

If you're hunting for the best VPN to secure your digital life, a provider's ability to evolve beyond basic encryption is rapidly becoming a critical deciding factor. Case in point: NordVPN has just proven its security chops yet again, not just as a privacy tool, but as a formidable shield against targeted cyber threats.

According to the newly released AV-Comparatives' 2026 Q3 Anti-Phishing Comparative Test, NordVPN's next-gen antivirus achieved a highly impressive 94% phishing detection rate.

This isn't an isolated victory. The provider has a history of strong showings in independent evaluations. Back in June 2024, it became the first VPN provider to earn the AV-Comparatives anti-phishing protection badge, a strict certification that requires at least an 85% block rate with zero false alarms on legitimate banking and related sites.

'A second pair of eyes' against scammers

Conducted between August 12 and 22, the rigorous independent evaluation pitted the security tool against 250 active phishing URLs.

Crucially, AV-Comparatives also tested the software against 250 legitimate URLs to check for false alarms. NordVPN registered exactly zero false positives, accurately distinguishing between safe websites and malicious traps every single time.

A 94% phishing detection rate and no false positives ultimately ranked NordVPN third among all tested security products, only behind Avast One Free Antivirus and Norton Antivirus Plus.

So, what does this mean for the average user?

Phishing attacks, where cybercriminals use deceptive emails, texts, or fake websites to steal login credentials and financial data, are growing increasingly sophisticated. Having an automated safety net working in the background can save you from a momentary lapse in judgment.

Domininkas Virbickas, product director at NordVPN, describes the provider's next-gen antivirus as having "a second pair of eyes."

"Anybody might slip up eventually, and when you do click on something you shouldn't, that's where we step in. Results like this are what we work for, because our users deserve protection they can count on," Virbickas added.

This latest 94% success rate continues a trend of robust independent test results. Previously, NordVPN has secured a 96% phishing block rate and a 92% block rate in similar independent testing, while also consistently outpacing competitors in speed and malware protection.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Beyond basic VPN protection

Over the last few years, NordVPN has actively rebranded as an all-in-one app for next-generation protection, stepping far beyond the traditional bounds of IP masking.

Available on its Complete subscription tier, the next-gen antivirus — previously known as NordVPN Threat Protection Pro —runs seamlessly alongside its standard VPN tunnel to block trackers, intrusive ads, and malicious sites in real-time.

However, while software can block 94% of threats, human awareness remains your best defense against the remaining 6%. Cybersecurity experts continually advise practicing strong digital hygiene to avoid falling victim to online scams.

Always scrutinize URLs for suspicious prefixes or typos that indicate a spoofed domain, and verify that the site uses the secure HTTPS protocol rather than just HTTP.

Additionally, enabling two-factor authentication (2FA) ensures that even if a phishing site manages to steal your password, hackers still cannot access your accounts without the secondary code sent to your device.

Surfshark's latest deal shows why it's long been our best cheap VPN. Its One plan, the best-value option, is down to $67.23 for a two-year subscription, saving you nearly $10 upfront.

This is the lowest price we've seen since Surfshark adjusted its prices a couple of months ago and likely the best deal available until Black Friday.

The One plan offers several key features alongside the VPN including Antivirus, Dark Web Monitoring, and Scam Protection. At $2.49 per month, this Surfshark deal is actually $1 cheaper per month than NordVPN’s entry-level tier alone — saving you roughly $27 over the plan.

Tempted? You've only got 3 days left to claim; the offer ends on August 31, when the price will return to $2.79/month.

Surfshark remains among the best VPNs I've tested in 2026. It delivers over 1,000 Mbps download speeds over WireGuard, unblocks most top streaming services with ease, and offers plenty of extra features to protect your data online.

While the recent price hike was noticeable, it remains the best cheap VPN out there. What's more, despite its extensive feature list, the app is simple enough for beginners on any platform.

If you're after superior performance, be prepared for a higher price tag. NordVPN, our best VPN overall, starts at $94.23 for 27 months, $27 more than Surfshark. Meanwhile, Proton VPN is $83.76 for 24 months and ExpressVPN is $83.72 for 28 months, both over $16 more.

While higher-tier competitors offer minor improvements in raw speed, privacy, or unblocking capabilities, you'll rarely notice the difference during everyday browsing. So why pay the extra?

One of the worst parts about getting scammed is the shame, and that shame just plays into the hands of the crooks. If we don't spread the personal stories, then no one gets warned. So, good on Les Howard who told his story of getting QR code scammed to the BBC earlier this week.

Les, quite understandably, feel victim to what's widely known in the security industry as quishing (QR phishing). Les scanned a QR code that he thought was to pay for his parking, downloaded the app, put in his card details and then watched as chunks of cash were removed from his account day after day. Not great.

There are a number of different ways that QR scams work. Les Howard experienced the fake app routine, but it could just have easily been a link to a fake website, mocked up to look exactly like the real one. AI can work marvels these days when it comes to creating duplicate web pages.

You can just as easily get done by the QR scanner apps themselves, which will take a legitimate QR and send you anywhere it wants to, adding all sorts of other links or scraping the details that you send through.

Now, this doesn't mean that we shouldn't use QR codes. We just need to be a bit more careful about it. The two most important pieces of advice are to use the QR scanner that comes baked into your phone's camera app, if you have one, and, second, use a QR code checker app to make sure what you're scanning isn't a scam.

There are free online tools for the job, such as Is This QR Safe and DNS Checker but they also come bundled in with other tools such as antivirus and VPNs. Kaspersky antivirus has a QR code scammer. The VPN to choose to get one is IPVanish.

The IPVanish QR code checker – like all good QR code checkers – loads a live version of the destination page, rather than just relying on domain blacklists that may not be up to date.

It checks all the facets of the page for anything malicious, and follows any redirects that may be trying to throw it off the scent, until it's sure the QR code is safe. If all is well, it presents you with the page and allows you to continue. If not, you'll be told it's a scam code. Pretty simple stuff from the user end.

We rate IPVanish as solid, 4-star VPN. It's only short of the very best VPNs on features like server count and some streaming service unblocking that's not a priority for this use case.

In terms of QR code checking and other security features, it's right up there. So, if you're VPN-curious and definitely want in on a QR code checker, then give it a go.

If a QR code checker is all you want, though, then make sure to take some of those free options above for a spin, instead, before you settle on which one to use full time.

• Obscura VPN releases a native app for Windows 10 and Windows 11
• The simultaneous device limit has been upgraded from three to five
• New and existing users can grab a 25% discount using a special code

Finding the best Windows VPN is getting more exciting as emerging privacy provider Obscura VPN officially expands its reach to desktop PCs, rolling out a fully native app for Windows 10 and 11.

The move brings Obscura VPN's unique approach to digital privacy — which includes a two-party relay architecture and QUIC obfuscation — straight to the world's most popular desktop operating system. It marks a massive step forward for the service, making its modern privacy infrastructure accessible to a much wider demographic.

To sweeten the deal, Obscura is treating the launch as a milestone to reward its entire user base. The provider is bumping its simultaneous connection limit from three to five devices. This means you can now secure your smartphone, tablet, and desktop without having to manually log out of active sessions to free up slots.

Alongside the free device bump, Obscura is celebrating its desktop debut with a launch promotion. It is offering a 25% discount to users who apply the promo code WINDOWS26 at checkout.

For those outside the Microsoft ecosystem, the developer has confirmed that a native Linux application is also in the pipeline, complete with an active waitlist for early access.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Why the Windows launch matters

Launched only as a Mac VPN when it entered the market in February 2025, Obscura then expanded to mobile platforms — first on iOS, then landing on Google Play and Obtainum for Android users.

That left desktop fans eagerly waiting for a native solution. "Windows was our most requested platform," Carl Dong, founder of Obscura, told TechRadar.

"Today we’re delivering it, a fully native app included with every subscription, and we're raising everyone’s device limit from 3 to 5, free," he added.

The decision to support both Windows 10 and 11 is a deliberate nod to accessibility. According to Obscura, roughly a third of all Windows users remain on the older operating system, with the provider noting that "privacy tools shouldn’t require a new PC."

What makes Obscura VPN different?

If you are unfamiliar with the provider, Obscura VPN promises to set the standard for the next generation of VPNs. Instead of the traditional single-server approach used by most legacy services, Obscura routes your web traffic through a dual-relay system.

This means that your IP address is kept completely separate from the websites you visit. The first server knows who you are but not where you're going, while the second server knows where you're going but not who you are. As a result, not even Obscura can tie your internet traffic back to your personal identity.

The service also employs advanced QUIC obfuscation to mask your VPN traffic, making it incredibly difficult for network administrators or strict internet censors to detect and block your connection.

Proving that it stands by these robust privacy claims, Obscura VPN just aced its first independent audit, which confirmed that its underlying infrastructure is secure and that its strict zero-logs policy holds up to real-world scrutiny.

• Surfshark's web content blocker now runs on the Dausos protocol
• The integration lets you filter risky site categories when using Dausos
• The feature is rolling out first to macOS for Surfshark One and One+ users

Surfshark has brought its web content blocker to Dausos, the proprietary VPN protocol it built in-house, meaning users of one of the best VPN services can now filter unwanted websites without switching away from the company's fastest, most future-proof connection option.

Until now, running the blocker alongside an active VPN connection meant sticking to WireGuard, since that was the protocol it supported. Bringing the tool to Dausos closes that gap, so households no longer have to trade the protocol's advantages for a safer browsing experience.

Dausos uses a hybrid post-quantum secure key exchange and delivers up to 30% faster speeds than other industry-standard protocols. Pairing that with category-based filtering means you get speed, privacy, and content protection in a single connection rather than picking two of the three.

What's new, and why it helps

The web content blocker is a filtering tool designed to keep an entire household safer without watching what anyone does online.

Unlike traditional parental-control apps, it is built to control access rather than log every click, and Surfshark says it does not record individual browsing history. You can read more on how it differs from conventional parental controls in our earlier coverage.

In practice, you pick from a set of predefined categories such as adult websites, gambling, profanity, phishing, and malware, and any site that falls under them is blocked. According to Surfshark's Karolis Kaciulis, the aim is to protect people from threats "caused by curiosity or carelessness" and to cut their exposure to a growing wave of online scams.

The headline benefit of the Dausos integration is that you keep the protocol's performance. Surfshark says users can retain up to 30% higher speeds and ultra-low latency while filtering runs, all while staying fully post-quantum secure.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to turn it on

While connected through the Dausos protocol, open the Surfshark app settings and toggle on the web content blocker.

From there, you choose which categories to restrict, and two-factor authentication can lock the configuration so only an approved admin can change it.

The rollout is currently limited to Surfshark One and Surfshark One+ subscribers running the latest app version on macOS. If you're on the cheaper Starter plan or a different platform, you'll need to wait or upgrade.

A quick look at the Dausos protocol

Dausos, which means "paradise" in Lithuanian, is Surfshark's first homegrown protocol, and it takes a different approach to most rivals.

Rather than pooling everyone's traffic through a single tunnel, it gives each user session its own dedicated, private data tunnel, which is where much of its speed advantage comes from.

On security, it uses a hybrid ML-KEM and X25519 key exchange plus an ML-DSA self-signed root certificate system to guard against future quantum threats, along with post-compromise security, port randomization, and AEGIS-256X2 encryption.

It has also been independently audited by Cure53, and a recent update improved its behaviour on the locked-down networks that often trip up VPNs on school and office firewalls.

• Proton VPN’s Stealth protocol has graduated to a stable release on Linux
• Users no longer need to switch to beta channels to use it
• This upgrade follows a string of major Linux-focused improvements

If you use one of the best VPN services on a Linux machine, bypassing restrictive firewalls and internet blockades just got significantly easier. After spending months in a rigorous testing phase, Proton VPN has officially moved its custom anti-censorship Stealth protocol into the stable Linux release.

Announced directly by the Proton Team on Reddit, the highly anticipated update means Linux users no longer have to opt into experimental testing channels just to disguise their VPN traffic. Instead, the feature is now rolling out to the main branch for everyday users to access out of the box.

This move marks a major milestone following the initial news of Proton VPN’s anti-censorship Stealth protocol finally landing on Linux in beta. Originally launched to help users in highly restrictive regions like Russia and Iran, Stealth works by obfuscating your connection. It wraps your VPN traffic in an extra layer of TLS encryption, making it look like completely standard, secure web browsing (HTTPS).

By hiding in plain sight, Stealth makes it incredibly difficult for network administrators, internet service providers (ISPs), and government censors to detect and block your VPN usage using deep packet inspection (DPI).

What you need to know about Stealth on Linux

Early feedback from the community has been largely positive, though a few users on specific distros, like Debian Sid, noted they temporarily had to revert to WireGuard to maintain a stable connection.

If you hit an issue, the developers request that you submit a bug report including your distro and version, app version, what you were doing, and what exactly went wrong.

While the obfuscation feature has officially graduated to the main stable release, the Proton Team was quick to note that users will still see a "beta" label next to the protocol inside the application itself.

"The beta label stays until we're confident it holds up across every distro, network condition, and edge case you throw at it, so keep the reports coming," the company explained to its Reddit community.

To try the feature, users simply need to update the Proton VPN Linux app to the latest version and navigate to the application settings to switch protocols. Because the update is actively rolling out across various mirrors, a handful of users on the Reddit thread reported a slight delay in receiving the newest patch (v4.17.2).

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

Proton VPN Linux's updates recap

This stable release is just the latest in a rapid-fire series of updates for the open-source operating system. Earlier this year, Proton VPN revealed a major Linux makeover for both GUI and CLI users, bringing the Linux client much closer to feature parity with its Windows and Mac counterparts.

The Swiss-based privacy company has also been busy making the app more accessible. Recently, Proton VPN on Linux got a huge accessibility boost with 20 new languages. For those who prefer streamlined software management, Proton VPN brought official one-click installs to the Linux Snap Store as well.

With Stealth now readily available in the main client, Linux users can finally enjoy the full everyday benefits of Proton VPN, quietly unveiling massive under-the-hood protocol upgrades.

Whether you're trying to bypass a strict university firewall or secure your communications in a country with heavy internet censorship, Stealth ensures your private connection remains protected.

• The BBC is moving to dismiss Donald Trump's $10 billion defamation lawsuit over a 2024 documentary
• Trump’s amended complaint relies on 34 unauthorized play-starts in Florida accessed via virtual private networks (VPNs)
• The BBC argues that penalizing broadcasters for viewers bypassing geo-blocks could have "massive implications"

Donald Trump’s $10 billion defamation lawsuit against the BBC may ultimately hinge on how a federal judge views the legal mechanics of virtual private networks (VPNs).

On Monday, the British broadcaster filed a motion in a Florida federal court to dismiss Trump’s amended complaint regarding a 2024 documentary about his reelection campaign. The core of the BBC’s defense tackles a major streaming loophole: the UK broadcaster never broadcast or licensed the program in the United States.

Trump's legal team is arguing that the Florida court has jurisdiction because the documentary was played 34 times in the state. However, those 34 alleged play-starts were initiated by just 10 users employing a VPN to bypass the BBC’s strict geo-blocking measures.

For tech experts and everyday consumers who use the best VPN to protect their privacy or access overseas content, this lawsuit threatens to open a Pandora's box.

If the court sides with Trump, it could mean that any foreign streaming service, news outlet, or online company could be dragged into foreign courts simply because a handful of users spoofed their IP address to circumvent regional blocks.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

The VPN jurisdiction battle

The dispute centers on a documentary that Trump alleges maliciously edited his January 6, 2021 speech to make it seem as though he was inciting violence, combining phrases spoken nearly 55 minutes apart.

While the BBC later apologized for the edit and pulled the documentary from its streaming platforms, it continues to aggressively fight the defamation claim and the massive $10 billion price tag.

In its motion to dismiss, the BBC took aim at the idea that unauthorized VPN streams represent the broadcaster conducting business in Florida.

The corporation argued that the 34 Florida streams represent just 0.006% of the 570,000 successful requests for the documentary, characterizing them as unconfirmed and completely unauthorized.

To enforce its UK-only streaming rule, the BBC uses third-party cybersecurity services like GeoGuard to perform technical checks and block viewers employing VPNs or proxy servers. The BBC also said it strictly prohibits circumvention in its Terms of Use.

"The unilateral activity of a third party . . . cannot satisfy the requirement of contact with the forum State," the BBC’s legal team noted in the court filing, quoting legal precedent. No court has ever established jurisdiction based on a user forcibly bypassing geographical restrictions with a VPN.

The broadcaster issued a stark warning to the federal judge, stating that validating this legal strategy would have "massive implications for foreign companies with online presences."

A threat to international streaming

If a user bypassing a digital fence is enough to establish legal jurisdiction, the wider impact on the tech and streaming industries could be devastating.

Foreign media companies might be forced to cut off international access entirely or invest heavily in draconian geo-blocking tech to avoid the risk of multi-billion-dollar lawsuits in jurisdictions where their content was never officially offered.

Despite the BBC's warnings about the dangerous legal precedent this could set, Trump's team is pushing forward with the lawsuit. The president is seeking $5 billion for defamation and another $5 billion under Florida’s Deceptive and Unfair Trade Practices Act — TheWrap reported.

The judge has yet to rule on the motion to dismiss. Unless the Florida court throws out the case based on the BBC's VPN arguments, the defamation suit is slated for a two-week trial in February 2027.

• Mullvad has debuted a new multi-hop design for its Android app
• The update makes the server globe interactive, sharpens location search
• It arrived as a beta test on Android on August 20, 2026

Mullvad is giving one of the headline privacy tools found on the best VPN apps a fresh coat of paint. In its newest Android beta, the provider has rolled out a redesigned multi-hop feature, aimed at making it easier to route your traffic through two servers instead of one.

The standout addition is a new "when needed" option. Rather than forcing you to flip multi-hop on by hand, the Android VPN app can now switch it on automatically when your current settings call for it, for example, when DAITA is enabled and your chosen server does not support it directly.

Keep in mind that this is a beta. The changes landed in the android/2026.9-beta1 release on August 20, 2026, which means they are being tested rather than pushed to everyone. We don't yet know the general release timeline.

Alongside the multi-hop work, Mullvad has also made its server globe interactive and improved how you search for locations, so there is plenty to poke at in this build.

What the new multi-hop design changes

Multi-hop is not new to Mullvad. It routes your connection through an entry server and a separate exit server, creating what the provider likes to call a "tunnel within a tunnel." The entry server sees your real IP but not where you are going, while the exit server sees your destination but not your IP, which makes your activity harder to trace.

The feature first reached Android in March 2025, following earlier arrivals on desktop and iOS. What is new here is the design and the automation. The "when needed" mode takes away some of the guesswork, and filters are now split into separate entry and exit filters that you can set independently.

That pairs neatly with DAITA, Mullvad's defense against AI-guided traffic analysis, which sometimes needs to hop through a compatible server to do its job. Letting the app handle that routing on its own is a sensible bit of polish.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

An interactive globe and smarter search

Mullvad's latest beta also makes the connection globe something you can actually play with, adding pan, pinch-to-zoom, and fling gestures so you can spin around to see where VPN servers sit and trace your connection path.

Location search gets a lift too. Results are now ranked by relevance and include fuzzy matches, so a slightly misspelled city should still surface the right server, and your search term is highlighted as you type.

Mullvad has been busy lately, from a speed-focused desktop build to more frequent Mullvad Browser updates for testers. This Android beta fits that pattern of steady, privacy-first refinement, and our Mullvad review digs into why it remains a favorite.

For now, though, the new multi-hop design is something to look forward to when it graduates from beta.

• Proton VPN is bringing native localization support to its Linux app
• The app will automatically detect your operating system's language
• This update follows a string of recent major Linux upgrades

Finding a top-tier security provider that actually prioritizes Linux users has historically been a challenge. Fortunately, one of our favorite services just announced another massive quality-of-life improvement for the open-source operating system as Proton VPN adds 20 more languages.

Proton VPN, which currently sits very high on our list of the best VPN providers on the market, is officially adding localization support to its Linux application. According to an announcement posted by the official Proton Team on Reddit, the update is slated to arrive in the next release, expected around mid-August.

This means you will finally be able to navigate the app's interface, settings, and server lists in your native tongue. Even better, you won't have to fiddle with menus to get it working, as the software will automatically detect your language based on your current OS locale.

It is a welcome addition that makes the powerful privacy tool significantly more accessible for users around the globe who prefer Linux but may not speak English natively.

Breaking down the new languages

At launch, Proton VPN will support 20 languages right out of the box.

The initial lineup covers a massive chunk of the global population, including: German, French, Spanish, Spanish (Latin America), Italian, Dutch, Polish, Portuguese (Brazil), Russian, Korean, Japanese, Turkish, Catalan, Czech, Romanian, Chinese (Simplified), Chinese (Traditional), Belarusian, Greek, and Slovenian.

While that is already an impressive roster, the provider confirmed in its Reddit post that its localization team will "keep adding more over time."

Because this is a brand-new implementation, the team is actively asking the community for feedback. If you install the upcoming release and notice any visual bugs, you are encouraged to flag them.

The Proton Team specifically requested that users report issues if they encounter "a translation that doesn't fit, text that runs past its container, or a language that isn't detected correctly" via the in-app reporting tool.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

A string of recent Linux upgrades

This upcoming localization update is just the latest in a long string of improvements for Linux users. Over the past year, Proton has worked aggressively to bring its Linux offering up to parity with its Windows and Mac counterparts.

Recently, the Swiss provider expanded its Linux capabilities with a new split tunneling feature, allowing users to easily choose which apps use the encrypted tunnel and which bypass it. We also saw the official Proton VPN app land on even more Linux devices when it brought official one-click installs to the Linux Snap Store, making the installation process much smoother.

Under the hood, the company quietly unveiled a massive upgrade by rolling out its new Rust-powered Proton Protocols. On top of that, it finally brought its proprietary anti-censorship Stealth protocol to Linux, ensuring users in highly restrictive regimes can continue to bypass internet blocks.

Combined with a major GUI and CLI makeover and a prior app update that promised better stability, Proton VPN is rapidly cementing itself as the go-to privacy tool for the Linux community.

• IPVanish is inviting users to join its new beta program
• Testers can help refine new features before they reach everyone
• Opting in takes just a few taps on Android, Windows, or macOS apps

If you like being first in line for new tech, IPVanish has something for you.

The provider is inviting users to beta test its VPN apps, giving them early access to pre-release updates and features that are still being built.

Instead of waiting for a polished release, you can opt into test builds, try the newest tools, and tell IPVanish what works and what doesn't. The company says testers will be among the first to explore what's next, and that their feedback will play a key role in how features evolve.

It's a familiar move, and one that plenty of the best VPN services use to catch bugs and gather real-world feedback. IPVanish is pitching it at loyal users, privacy advocates, and tech enthusiasts who like getting hands-on, so long as they aren't fazed by the occasional bug.

What's currently in the IPVanish beta

IPVanish's beta program is an early-access scheme, and what's on offer depends on your platform.

As of August 2026, IPVanish lists a different mix across Windows and Mac (with no beta updates currently available for Android).

The headline is IPVanish Antivirus, the feature formerly known as Threat Protection Pro, available to beta users on the Advanced plan. It's a web and device protection upgrade that guards against phishing attempts, deceptive websites, intrusive ads, and online trackers, and it keeps working even when the VPN isn't connected.

The beta program is part of a busy stretch for the provider, which has recently made OpenVPN almost three times faster on Windows, rolled out WireGuard and OpenVPN on Apple TV, and expanded its server network to 150 locations worldwide.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance. Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

How to join

Any IPVanish user with an Android, Windows, or macOS device can opt in directly from their device in a few taps.

On Android, open the Google Play Store, search for IPVanish, then tap "Join" under the "Join the beta" section and confirm. You'll be prompted to update the app when a beta build is available.

On macOS, click the IPVanish icon in the menu bar, open the app, then go to "Info" in the left menu, select the "Update" tab, and check "Enable notifications for beta releases". IPVanish then checks for new builds each time you quit and restart it.

On Windows, log in, head to "Info" in the left navigation menu, click the "Update" tab, and enable the Beta option. As on Mac, the app checks for updates on each restart and offers to install them.

The Premier League is back and, watch out, because it might be sooner than you think.

The 2026/27 EPL season kicks off with Matchday 1 this Friday, August 21, with EFL Championship victors Coventry City facing EPL champions Arsenal at the Gunners' London home.

That means the FPL GW1 deadline time is Friday, August 21, 2026, at 6.30pm BST (1.30pm ET). Don't miss it!

And if you don't want to miss the games themselves, then we've got the kick off times and streaming options for all of the EPL fixtures for Matchday 1 just below.

If you're away from your regular stream and stuck in a blackout area, then don't forget that you can use a VPN to watch the match as usual.

Right now, one of the cheapest and most effective VPNs available is IPVanish and it's currently $2.19 per month.

In the States, four of the weekend's matches are available to stream on Peacock TV. It's $12.99 per month and there are no free trials. Only two of those games are airing on cable on NBC and NBCSN.

The other six games are all on cable for those who have USA Network. Cord cutters can watch those using Hulu + Live TV, YouTube TV, DirecTV Stream and Sling TV.

Of those, Hulu + Live TV and YouTube TV have free trials for new customers, while DirecTV Stream and Sling TV offer discounts for the first month.

To watch your US EPL streams while you're traveling abroad, you'll need to use a VPN.

The EPL's blackout rules in the UK mean that none of the 3pm Saturday fixtures are televised. Instead, there are usually just four televised fixtures each weekend.

You can watch the fixtures with subscriptions to Sky TV or TNT Sports. The matches on Sky are also available to stream with one-off day passes on NOW. TNT games are also on HBO Max.

You can read the full details on how to watch the Premier League all season here.

• Proton VPN usage has spiked in Brazil as Discord gets restricted
• The block specifically targets Discord's video and 'Go Live' features
• Brazil's data protection authority issued the block to protect minors

Users in Brazil are flocking to the best VPN services in droves following a sudden regulatory block on some of Discord's most popular communication features.

According to data shared on X by Proton VPN General Manager, David Peterson, the company's free VPN app has experienced an 800% surge in sign-ups originating from the country. The surge began almost immediately after Discord was forced to suspend its video and "Go Live" streaming functionalities for Brazilian users.

The sudden spike in demand echoes similar patterns we have seen globally when popular apps face restrictions. In recent months, we saw Proton VPN usage spike in Oman amid a suspected TikTok block, as well as Proton VPN usage spikes in Turkey following new regulatory proposals.

Because Proton VPN offers a robust free tier with unlimited data, it is frequently the first port of call for users looking for an immediate workaround to sudden geo-blocks.

TechRadar has reached out to Proton VPN for official updates on the exact sign-up figures. A company spokesperson confirms that the peak in sign-ups (an 800% increase above the baseline) was reached during the initial hourly demand.

Not your usual censorship

While VPNs are frequently utilized to bypass authoritarian internet blackouts, the situation currently unfolding in Brazil is notably different. The restrictions placed on Discord are not an attempt to silence political dissent or restrict general public communication.

Instead, they are targeted regulatory measures aimed at protecting children and adolescents online. As the BBC reported, Brazil's data protection authority (ANDP) mandated the suspension of Discord's live-streaming and video tools after a teen girl was allegedly encouraged to take her own life in a broadcast on the platform.

The platform remains fully functional for standard text messaging and voice calls.

Despite the highly nuanced and protective nature of the block, the user reaction has been entirely predictable. Gamers, remote workers, and online communities who rely heavily on Discord's screen-sharing and "Go Live" features to interact have immediately sought out technical workarounds.

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

By connecting to a VPN server outside of Brazil, a user can successfully mask their true IP address. This tricks the application into believing the user is located in a different country, effectively bypassing the local geo-restriction and restoring Discord's video tools to full functionality.

This incident is part of a broader, ongoing trend of netizens turning to privacy tools the moment their digital habits are interrupted. As we have previously reported, in 2025 alone ProtonVPN downloads spiked in 62 countries.

Whether it is a blanket social media ban or a highly specific feature suspension like Brazil's Discord block, it is clear that users are increasingly unwilling to accept limits on their online platforms. The incident serves as a reminder of how quickly modern internet users will adopt privacy software to maintain their normal digital routines.

• Crystal Palace has named NordVPN as its Official VPN Partner
• The partnership will feature digital activations to educate fans
• It marks NordVPN's second major Premier League sponsorship in a week

The cybersecurity world's ongoing push into top-flight English football shows no signs of slowing down. Just days after securing a spot at Villa Park, NordVPN has announced it is teaming up with Crystal Palace Football Club as its new Official VPN Partner.

The latest deal marks a growing trend of tech giants partnering with major sports clubs to bring digital privacy tools into the mainstream. For Crystal Palace, the focus is squarely on helping supporters navigate the hidden dangers of the web, particularly when logging onto unsecured public Wi-Fi networks on matchdays.

By linking up with one of the top providers on the market — currently topping our guide to the best VPN software — the club aims to educate fans on how to proactively defend against phishing, scams, malware, and online trackers.

As part of the announcement, the two brands confirmed they will collaborate on a series of digital activations. These campaigns will offer Eagles fans practical guidance on securing their personal devices and encrypting their internet connections, whether they are cheering from Selhurst Park, relaxing at home, or travelling abroad.

Educating fans on the digital pitch

A virtual private network (VPN) encrypts your internet traffic, hiding your IP address and shielding your data from prying eyes. This is especially crucial in crowded environments like football stadiums, where thousands of supporters often connect to the same vulnerable public Wi-Fi networks to check live scores, place bets, or message friends.

According to the club, equipping fans with the right tools to stay safe online has become an urgent priority.

"The way supporters engage with the club and with one another is increasingly digital, making online privacy and security more important than ever," said Paul O'Brien, Chief Commercial Officer at Crystal Palace. "Through this partnership, we hope to provide our supporters with useful and accessible information that helps them better understand online risks and take straightforward steps to protect themselves and their personal information."

The move represents a rapid expansion for NordVPN within the Premier League. The provider recently made headlines by securing a partnership with Aston Villa to similarly protect matchday browsing.

Bob Brinklow, NordVPN Country Manager for the UK, echoed the importance of integrating digital education into these sporting deals.

"Crystal Palace's close relationship with its supporters makes the club an excellent partner for us," Brinklow explained. "Together, we aim to help fans better understand online security through digital activations and partnership initiatives, while supporting the club and its ambitions for success on the pitch."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

A growing playbook for tech partnerships

The broader cybersecurity industry is increasingly targeting sports fans. With major football stadiums serving as hubs for thousands of connected devices, educating users about digital safety is a logical and highly visible strategy.

Fans eager to secure their digital footprint can take advantage of the new partnership immediately, with Crystal Palace noting that supporters can claim four months free on a two-year NordVPN plan.

As football becomes more digitally connected than ever, it seems inevitable that more top-flight clubs will soon draft cybersecurity heavyweights into their starting lineups.

• UK Prime Minister was targeted by a scammer posing as a top US aide
• Personal devices bypass "national security perimeters," warns Surfshark
• GenAI tools allow low-level criminals to clone high-profile identities

The recent revelation that UK Prime Minister Andy Burnham was targeted by an impersonator pretending to be top Donald Trump aide Susie Wiles has sent shockwaves through the cybersecurity community.

While the immediate political fallout dominates headlines, security experts are sounding the alarm over a far more terrifying technical reality — elite government defenses are essentially useless if the human holding the device can be tricked.

For everyday users, the incident serves as a stark reminder that even the most powerful figures are vulnerable to the same social engineering tactics deployed against the general public. Securing your digital life with the best VPN and robust security software is crucial, but as AI impersonation scams are skyrocketing, the ultimate vulnerability remains the personal smartphone itself.

Miguel Fornes, Information Security Manager at Surfshark, argues that personal devices have become a permanent, wide-open door into the world's most protected rooms. Speaking on why Burnham was such an easy target for this impersonation scam, Fornes painted a grim picture of modern cybersecurity perimeters.

“It proves that billion-dollar national security perimeters are completely useless when every high-value target carries an unmonitored attack vector in their pocket 24 hours a day,” Fornes told TechRadar.

Hacking the human, not the firewall

The Burnham incident highlights a fundamental shift in how cybercriminals operate. Rather than attempting to break through the front door of government agencies, bad actors are simply slipping through the side window of personal communication apps.

"The attackers behind high-profile spoofing campaigns, like the recent impersonation of top Trump aide Susie Wiles to contact high-level officials like Andy Burnham, didn't waste time attempting to breach the world-class cryptographic shields of GCHQ or MI5," Fornes explained. "They simply exploited the chaotic, unmonitored environment of personal smartphones and private messaging apps."

The shift in threat models is precisely why cybersecurity providers are pivoting.

For example, Surfshark recently shifted focus to fighting scams and introduced real-time scam text protection. This evolution in consumer security mirrors the reality of enterprise and government vulnerabilities, reinforcing why scam protection now matters more than traditional antivirus.

The message is clear. As Fornes said: "Cybercriminals aren't wasting time trying to break enterprise-grade encryption; they are simply hacking the human holding the screen."

NEW: Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back.

📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

The terrifying asymmetry of GenAI

The barrier to entry for executing intelligence-agency-level operations has collapsed, largely thanks to advancements in generative AI. With a reported $3.7B lost to deepfakes and social engineering, the landscape has fundamentally changed.

As Fornes explained, readily available GenAI has democratized state-level cyber warfare. "A random individual with a poor internet connection and a mediocre computer can now perfectly clone the voice, cadence, and mind of the world's most powerful political operatives," he told TechRadar.

This technological democratization creates a terrifying asymmetry where the barrier to entry for globally destabilizing social engineering is essentially gone, allowing low-level criminals to execute intelligence-agency-level operations.

"We should consider ourselves lucky that this time they were, again, common cyberscammers asking for money," Fornes concluded.

• Proton VPN recorded a spike in sign-ups from Oman starting on Thursday
• While some users report regaining access, VPN sign-ups remain high
• Oman did not release any official statement about the restrictions

Internet users in Oman are turning to virtual private networks in droves following widespread reports that TikTok has been suddenly restricted.

According to the latest data from Proton, sign-ups for the company's free VPN service spiked starting August 13, 2026, with a peak of 600% above the baseline recorded on Friday. This sudden surge aligns directly with a flood of complaints on Reddit and other social media platforms from Omani residents who found themselves unable to access the video-sharing app.

While the Omani government has yet to announce an official block, the sudden disappearance of TikTok has left many seeking ways to stay connected. To bypass these suspected national firewalls, thousands have turned to Proton VPN in a bid of avoiding the ban by rerouting internet traffic through servers in other countries.

Although the initial rush has slightly cooled off, the demand for privacy tools remains heavily elevated. Recent data shared with TechRadar shows that sign-ups are currently sitting consistently just above 200%.

"Some people have reported that they were able to regain access to TikTok, but our data is showing a sustained higher demand — indicating that at least some level of disruption may still remain," a Proton VPN spokesperson told TechRadar.

Why is TikTok blocked in Oman?

Oman has a history of restricting access to certain platforms, though it rarely admits to deliberate censorship. When TikTok experienced similar nationwide connection failures in April 2025, the Omani Telecom Regulatory Authority (TRA) blamed technical glitches.

As noted in a recent blog post by Proton VPN, the government failed to explain to reporters why these "technical reasons" affected only TikTok and no other internet services.

Whatever the reason behind the block, David Peterson, General Manager at Proton VPN, strongly condemned the move.

"The restrictions on TikTok, and similar apps, represent an attack on the rights of Oman's citizens," Peterson told TechRadar, explaining that citizens widely use the platform also for political discussion and e-commerce opportunities.

How a VPN helps bypass restrictions

In regions where digital rights are frequently challenged, circumvention tools become essential lifelines for maintaining free expression.

That's beacuse when an internet service provider (ISP) blocks a website or app at the behest of a government, it typically does so by restricting access to the platform's specific IP addresses.

By using a VPN service, your web traffic is encrypted and tunneled to a server located outside of your physical country.

So, if an Omani resident connects to a VPN server in a country where TikTok remains available, their local ISP can no longer see what apps they are using or which websites they are visiting.

Proton VPN is particularly popular in these sudden crises because of its robust free VPN tier. Unlike many free alternatives that severely throttle speeds or sell user data to advertisers, Proton VPN Free offers uncapped data and a strict no-logs policy.

In 2025 alone, Proton VPN downloads spiked in 62 countries as a way to bypass restrictions. Just recently, we saw Proton VPN usage spike in Turkey following new regulatory proposals, too.

• The European Telecommunications Standards Institute (ETSI) has released security requirements for VPNs under the Cyber Resilience Act
• NordVPN and Surfshark are among the industry players collaborating to help shape these security baselines
• The new rules ensure that all VPNs sold in Europe adhere to auditable standards for encryption, authentication, and vulnerability management

The European Union is fundamentally changing how privacy tools are regulated, introducing an official security standard for VPN services on the market. Crafted under the sweeping Cyber Resilience Act (CRA), the new framework sets strict, auditable cybersecurity requirements for any virtual private network sold in Europe.

Until now, users looking to protect their digital footprint have largely had to rely on a provider's own marketing claims or third-party audits to verify encryption strength or no-logs VPN policies. Now, the European Telecommunications Standards Institute (ETSI) has stepped in to establish a unified legal baseline known as EN 304 620.

This comprehensive standard was not drafted in a vacuum. Major industry players, like Palo Alto Networks, Cisco, Airbus, and Google, alongside industry heavyweights NordVPN and Surfshark, have actively contributed to shaping these security parameters to ensure they are both operationally feasible and technically robust.

For everyday users, this legislation is a massive win. It ensures that any VPN software you download complies with mandatory European benchmarks for data confidentiality, authentication, and secure key management.

Miguel Fornes compares this shift to the arrival of seat belts and airbags in cars. "Before crash tests and seatbelt laws, drivers simply had to hope their car was safe. Once official safety standards existed, every car had to meet them. Surfshark is helping do the same thing for VPNs."

Setting a new benchmark for VPN security

Draft standard EN 304 620 specifically targets VPN clients, servers, and gateways. It dictates exactly how these products must encapsulate and encrypt your traffic to protect data integrity as it travels across untrusted networks.

Whether a provider uses industry-standard AES-256 encryption, cutting-edge WireGuard protocols, or RAM-only VPN servers, they will need to demonstrate deterministic and testable security controls.

The standard is a vital pillar of the broader Cyber Resilience Act, which by the end of 2027, will fully require manufacturers of digital products to meet essential cybersecurity requirements.

New rules also mandate rapid incident reporting for actively exploited vulnerabilities, keeping providers strictly accountable if their infrastructure is ever compromised.

For anyone wondering, "Are VPNs safe?" this EU-wide standardization effectively guarantees a much higher baseline of protection, forcing potentially shady free VPN apps to either step up their security engineering or face removal from the European market entirely.

Not just VPNs: A wider net for software security

VPNs aren't the only software getting a major regulatory upgrade. Alongside the VPN guidelines, ETSI recently launched the approval process for 17 European standards supporting the CRA.

The expanded list covers everyday digital essentials, including password managers, antivirus software, smart home assistants, connected toys, and wearables.

As these proposals move through public enquiry and final approvals, the end result is clear: European consumers are about to benefit from a much safer, more resilient digital ecosystem by default.

VPN Super Unlimited has amassed various forms of attention. Be it the experienced lineup of executives, the boom of popularity in Australia, or the reasonable price tag, there are several understandable reasons why.

That said, there's clear room for improvement. We've put it through our rigorous processes involving proprietary testing and everyday use and it raises some concerns.

Barebones feature sets, missing security functionalities, and limited privacy policies raise the biggest alarm bells. That said, what it does have, seems to work very well for such a cheap provider. Read on to see just why it might be the VPN for you, or why you should steer clear for now.

Pricing and plans

Unlike a growing cohort of VPNs that have introduced multiple subscription tiers with varying feature levels, VPN Super Unlimited keeps things simple.

There’s just one subscription tier available, meaning your only decision involves choosing between billing durations: a one-month plan ($8.79), a six-month plan ($5.59/month billed as $33.55), and a one-year plan ($4.79/month billed as $57.50).

Depending on which plan you select, you’ll receive a complimentary eSIM offering progressively larger data allowances: 1GB for monthly subscribers, 3GB for six-month, or 5GB for annual subscribers.

VPN Super Unlimited’s one-month plan substantially undercuts most competitors. For comparison, NordVPN charges $14.99 and Surfshark $16.45 for the same duration – a difference approaching double the cost.

However, the annual pricing strategy reveals a more complicated picture. The yearly rate of approximately $57.50 puts it directly alongside these established providers despite offering considerably less functionality overall, making the price harder to justify.

The six-month option stands out as genuinely uncommon among major VPN providers. Most push binary choices – premium monthly rates or annual discounts only. This middle-ground flexibility bridges the gap between short-term commitment and a meaningful discount.

A free tier exists but carries significant limitations requiring careful consideration. You don’t need to sign up to connect to its servers. However, the service runs on ads.

During testing, my desktop experience (macOS) remained ad-free, but iOS suffered from aggressively intrusive full-screen video pop-ups nearly every time I opened the app or connected to a server. Static banner clutter occasionally appeared beneath the connection interface.

VPN Super requests consent to share personal data with over 300 third-party vendors. Collectible information includes current IP addresses, device identifiers, and browsing history unless specifically toggled off during initial setup – which I strongly recommend you do.

This VPN allows up to 10 devices under its premium subscription, but the restriction is based on registered devices, not simultaneous connections. Once your slot count fills, you’re blocked from adding more until you visit the website to manually remove existing entries – a clunky workaround most competitors have moved beyond.

Most concerning is the platform lock-in baked into the purchase model. Subscriptions bought through Google Play only activate Premium access on Android devices linked to that same Google account. This means buying through an app store effectively traps you in that ecosystem, preventing you from freely mixing devices.

The website advertises a standard 30-day money-back guarantee, which is standard nowadays, though CyberGhost distinguishes itself with 45 days of coverage. Somewhat concerning is VPN Super Unlimited’s abbreviated Terms of Service document, which does not refer to refund procedures or billing processes – a notable omission for purchase protection.

Anonymous payment methods also fail to materialize. Unlike NordVPN, Proton VPN, or Mullvad, which accept cryptocurrency or cash transactions, VPN Super Unlimited limits purchases to credit card, PayPal, and Google Pay.

Features: What can VPN Super Unlimited do?

Available on Google Play since 2020 and iOS since 2022, Super Unlimited brings significant industry credibility with over 100 million Android downloads. It enjoys strong ratings on both Google and the Apple App Store – though these likely come predominantly from free users rather than subscribers.

The executive roster includes a former Rakuten CTO as CEO, an ex-Dropbox CFO as chairman, and an Electronic Arts co-founder on the board – a lineup reflecting deep experience scaling tech products at major firms.

Yet this high-level experience makes certain shortcomings all the more puzzling. Consider the planned support for V2Ray, an open-source VPN protocol for bypassing censorship.

Announced in July 2025, a year later only a support page remains to show for it – there’s no sign of integration within any of the apps. Curiously, however, it continues to appear advertised on the website’s feature page.

Some combination of WireGuard, OpenVPN, and IKEv2 is offered in the apps. For optimal speeds, WireGuard is the best choice.

What’s notably absent, however, is a native kill switch in the Windows and Mac apps. This is a significant oversight, given that a kill switch is a key security feature that cuts internet traffic if the VPN connection drops – protecting your IP address from exposure.

Most major paid VPNs now include this functionality across all major platforms. By comparison, VPN Super Unlimited’s mobile apps do offer “Always-on VPN” options.

Additional feature gaps exist across VPN Super Unlimited’s apps. Split tunneling is a welcome addition on Android, letting you choose which apps bypass the VPN connection. But this functionality is unavailable on iOS, Windows, or Mac.

Aside from a recent eSIM addition, VPN Super Unlimited remains light on features. There are no ad or tracker blockers or Double VPN servers, never mind antivirus software or a password manager, found in some of the best VPN services today.

Server Network and Locations

VPN Super Unlimited is inconsistent in reporting its server network size. The homepage claims 210+ cities across 55+ countries, yet the dedicated server list page states just 100+ locations.

Our testing counted 97 actual locations – the latter figure being far more accurate. While networks can fluctuate at short notice, claiming twice the number is misleading.

Even so, 97 locations remain respectable, rivaling smaller providers like Mullvad. Overall coverage spans 61 countries, putting it on par with PrivateVPN and VyprVPN. If you primarily need servers in the US (33 locations) or Europe (34 locations), VPN Super Unlimited offers plenty of choices. South America is fairly well represented as well, with five locations.

Asia includes servers across 17 locations. Though these cover most major countries, selection lags behind some similarly-sized competitors.

Coverage becomes sparser elsewhere. Africa receives just two locations - a notable limitation. Similarly, Australia gets only one (Sydney), which is surprising when many paid VPNs offer at least three Australian locations.

This makes VPN Super Unlimited’s rise in popularity in Australia following the country’s new age verification measures all the more puzzling, although not too surprising given its free tier.

As for VPN Super Unlimited’s free plan, it provides access to 18 countries, including nearly two dozen US cities, far exceeding offerings from most competing free VPNs.

Tests confirm servers are hosted in or near their claimed locations, which is reassuring. More unexpectedly, the Russian server appears to be hosted in Moscow itself. This is increasingly uncommon in today’s regulatory environment, given Russia’s strict data retention requirements and tightened VPN regulations.

Privacy & Security

VPN Super Unlimited provides scant information about its security features - it doesn’t even specify the encryption employed. Given that WireGuard, OpenVPN, and IKEv2 protocols are offered, the service likely uses ChaCha20 and 256-bit AES encryption, which represent industry-standard security.

More concerning is a significant security flaw discovered during Windows app testing. When our researcher simulated a connection drop, the app did reconnect automatically - but not before exposing users to a brief window for potential IP leaks, with no alert indicating the drop had occurred.

A VPN’s value ultimately hinges on its no-logs policy. VPN Super Unlimited states it doesn’t “inspect or record the contents of what you are browsing, viewing, or doing,” noting that since it collects no information related to your browsing activities, it has nothing of significance to provide even if compelled.

The concern, however, is that unlike most major VPN providers such as ExpressVPN, VPN Super Unlimited has undergone no independent audits to substantiate these claims. That said, there are no publicly reported data breaches or major security incidents associated with it.

The service does automatically collect certain information during use: your IP address (VPN Super Unlimited says this is not stored long-term) and approximate location, app usage patterns, and anonymized usage data.

For free-tier users, additional considerations apply – the version includes ads, and unless opted out, advertisers may collect your device/mobile advertising identifiers alongside your IP address.

As for the privacy policy itself, it’s lengthy and not particularly accessible. However, it is thorough, including coverage of regional rights – a rare plus compared to some competitors’ offerings. Overall, there are no major red flags to be found.

Speed & performance

VPN Super Unlimited proved challenging to test under ideal conditions: the app refused to log in on our data center cloud PC, preventing standard server-location speed testing. We pivoted to 5G home broadband Windows laptop testing instead.

Despite these constraints, the results were encouraging. Against a baseline connection of 135 Mbps, VPN Super Unlimited delivered 118.5 Mbps via UK-to-UK connections and 120 Mbps over UK-US routes - retaining approximately 87.8% of original speeds.

This performance exceeded FastestVPN and held its ground impressively against Mullvad, one of the fastest VPNs in our benchmark tests. Long-distance routes told a different story. Speeds became noticeably less consistent across greater geographic distances, suggesting network capacity strain during peak usage times.

For casual streaming or light browsing, performance remains adequate, though bandwidth-intensive tasks or cross-continent connections may encounter more variance depending on where you connect.

Streaming unblocking

VPNs often struggle with streaming unblocking, yet VPN Super Unlimited excelled here despite lacking dedicated streaming servers. It seamlessly accessed multiple major platforms right out of the gate.

Tested libraries included various Netflix, Disney+, and DAZN regional catalogs, alongside Prime Video and YouTube. Country-specific services also proved reliable – BBC iPlayer, ITVX, and 9Now all streamed without issue.

Nearly everything worked on the first attempt. The UK’s Channel 4 required switching servers once before connecting successfully.

However, two Australian broadcasters posed persistent problems: 7 Plus returned a MEDIA_ERR_ENCRYPTED error we couldn’t bypass, while Channel 10 threw a login error. Both streams functioned properly on competing VPNs during our tests, pointing toward a limitation on VPN Super Unlimited’s end.

A few notable failures round out the picture: Prime Video and YouTube (US), YouTube and Channel 5 (UK), plus TVNZ+ remained inaccessible. Performance isn’t flawless - but very few VPNs achieve perfection when tackling geo-blocking restrictions head-on.

P2P and Torrenting

As for torrenting, we successfully downloaded a test torrent via VPN Super’s Edinburgh location – it worked without issue. This is promising, given that the provider’s support pages do not refer to P2P, while the website ambiguously mentions access to “P2P networks.”

However, significant caveats remain. Beyond the lack of clear information, there are no dedicated P2P servers optimized for file sharing. More critically, VPN Super Unlimited doesn’t offer port forwarding – an important consideration for serious torrent users.

Without port forwarding, your client can’t accept incoming connections from other peers, which typically slows download speeds and hampers efficient seeding. For casual downloading only, this limitation matters less; for regular heavy-duty torrenting, it’s a notable drawback.

Usability & Accessibility

VPN Super Unlimited is available for Windows, Android, macOS, and iOS - downloadable directly from app stores and straightforward to install within minutes. Just be careful: several similarly named VPN apps exist on both platforms.

It doesn’t help either that VPN Super Unlimited operates under two different developer entities on Android and iOS. It’s listed in the Google Play and Apple App Store as “VPN - Super Unlimited Proxy. It’s just that for Android, you’ll want to make sure it’s from VPN Super Inc, whereas on iOS, the company behind it is Mobile Jump Pte Ltd.

However, significant gaps exist elsewhere. There’s no native Linux app, no support for Amazon Fire TV or Apple TV, and no browser extensions. Router compatibility is also absent - a notable omission that may prove limiting for whole-home network protection.

Make no mistake: VPN Super Unlimited’s apps are super simple – and super limited. The conventional interface centers on a convenient quick-connect button and an expandable location menu. Users can scroll through available servers, though there’s neither a search function nor the ability to favorite frequently used locations.

A “Recents” tab helps locate previously-connected servers. You can also see each server location’s latency and sort servers by speed – useful for when you need optimal speed for streaming or torrenting.

Feature parity, unfortunately, varies considerably across platforms. Both Android and iOS support OpenVPN and IKEv2 protocols, though only the Android app offers split tunneling. Windows supports WireGuard and OpenVPN, while Mac is limited to OpenVPN alone - neither includes split tunneling either.

The settings menus are similarly sparse. iOS and Mac offer just “Always-on VPN”; Android adds split tunneling; and Windows provides five options (most of which offer only marginal utility).

Whereas the Windows app can automatically connect on launch, the Mac, Android, and iOS apps have no such option.

A further tablet consideration: apps lock to portrait mode without rotating to landscape. This wastes larger screen real estate on larger displays.

Website accessibility scored 71% via AccessibilityChecker - excellent relative to most VPN competitors tested. Some structural issues remain, however, which could hinder screen reader comprehension across sections.

More disappointing was Windows app keyboard navigation: technically functional, yet lacking visible focus indicators, which significantly reduces usability for keyboard-only users.

In-app help varies by platform. Mobile and macOS versions include built-ins covering connection troubleshooting, billing, and FAQs - with screenshots included for key steps.

Windows lacks this integration; instead, a link redirects to the external support site. While helpful, these web-based guides are less detailed and text-only.

Customer support exists but operates slowly via email only, sometimes taking several days to get a response. Live chat isn’t offered, which is a limitation compared to industry standards.

Verdict

VPN Super Unlimited suits mobile-first users prioritizing streaming on a budget. The annual plan ($57.50) is competitive, with solid speed plus reliable unblocking of Netflix, BBC iPlayer, and Disney+.

However, desktop users should avoid it. Having no kill switch on Windows and Mac creates genuine IP leak risks if connections drop. Multi-platform households face similar hurdles with missing Linux, Fire TV, and Apple TV apps and an absence of router support or browser extensions, limiting flexibility. Split tunneling is Android-only while V2Ray remains unimplemented a year post-announcement.

For true cross-platform support, consider Private Internet Access instead. It delivers broader device coverage - including Linux and Fire TV apps - maintains audited no-logs privacy verified by third parties, and ensures consistent security features like kill switches across all platforms. These differences matter when you need reliability beyond budget-conscious streaming.

The new Pixel 11 series may be introducing several software improvements to Google's flagship phones, but there's little to be said about online security.

Pixel VPN by Google has been around for years but no major changes have been released recently. So which tool should you pick instead?

The best VPNs are often expensive and have lots of features you might not use. IPVanish, by contrast, is among the cheapest VPNs available, and offers exactly what you need to protect your data online.

It's only $2.19 per month over two years, paid as $52.56 upfront. For that price, you get unlimited simultaneous connections, solid WireGuard connection speeds, and even 3GB of eSIM data to help you travel securely over the summer months.

Having tested IPVanish several times recently, it remains among my favorite Android VPNs to use and recommend to beginners.

The app looks like it could be something out of a Bond movie with its green and black military-like design. You're greeted with a large connect button, easy access to other tools, and VPN settings that are clearly laid out for beginners

If you're after supreme speeds, there may be better options. It achieved 740 Mbps over WireGuard in our May 2026 testing cycle, which is fast enough but slower than the very fastest VPNs.

As a streaming VPN, IPVanish performed solidly. However, we did encounter some issues with Prime Video, US YouTube and Disney+ Canada. That said, it performed far better than many others.

For the absolute best experience right now, your best alternatives are NordVPN, Proton VPN, or Surfshark, though be prepared to pay considerably more for these right now.

• Proton VPN's new Rust-based Proton Protocols is in beta on all major apps
• It replaces WireGuard-go for better stability, speed, post-quantum readiness
• It includes an Advanced Kill Switch and Linux Stealth support

Following up on recent teasers, Proton VPN has officially rolled out a massive under-the-hood update across its consumer apps. Powered by a new custom-built architecture dubbed Proton Protocols (known internally as ProTUN), the update is now live in beta across Windows, iOS, iPadOS, Android, and Linux GUI.

This overhaul aims to improve connection stability and censorship resistance. It's a significant upgrade that further solidifies the provider's spot as one of the best VPN services on the market for privacy purists.

Alongside the stealthy new engine, the beta launch brings a host of highly requested functional tweaks. These include persistent ad-blocker statistics across app sessions, a new interactive globe map for visual server selection, and the highly anticipated Advanced Kill Switch.

The team at Proton VPN notes that the shift to this new protocol resolves multiple quality-of-life issues, paving the way for faster, more reliable connections and noticeably more responsive apps across all supported ecosystems.

What is the Advanced Kill Switch?

A standard VPN kill switch is a failsafe that cuts your internet connection if your VPN server unexpectedly drops, preventing your real IP address from leaking. Made possible by the new architecture, the Advanced Kill Switch takes this a step further by operating as a strict, permanent firewall.

As Proton explains, the Advanced Kill Switch functions like a regular failsafe if your connection drops, but it additionally blocks all internet access entirely unless you are actively connected to the VPN. This strict block remains active even if you restart your device.

Platform compatibility for the new feature is currently slightly fragmented. As of the current beta, the Advanced Kill Switch is strictly supported on Windows, iOS, and Linux GUI. It is not available for macOS, Linux CLI, Android TV, or Apple TV.

Android users have a slightly different setup. Google's operating system features built-in "Always-on VPN" and "Block connections without a VPN" toggles. Because of these native OS settings, Android operates very similarly to the Advanced Kill Switch out of the box, even if it isn't utilizing the exact same backend code.

Crucially, Proton has also fixed a long-standing annoyance with regular kill switches. You can now reliably connect to local LAN devices, like network printers, and use Apple CarPlay even with the standard or Advanced Kill Switch enabled.

A Rust-based core to beat censorship

The shift to Proton Protocols is a fundamental rewrite of how the apps operate. Historically, Proton used the standard wireguard-go implementation. While secure, that code didn't integrate seamlessly with the native languages used to build the provider's mobile apps, like Kotlin for Android and Swift for iOS.

To fix this, Proton has built a new framework in Rust. At its core is libpvpnclient, a platform-independent WireGuard implementation that makes it easier to deploy updates and debug issues consistently across desktop and mobile.

This unified approach gives Proton much more flexibility to dodge roadblocks set up by authoritarian regimes. The update has immediately brought the provider's anti-censorship Stealth protocol to the Linux GUI app.

The shift to ProTun also lays the critical groundwork for a future networking layer called muon, which will eventually hide VPN API connections from internet service providers to defeat SNI snooping, and sets the stage for post-quantum cryptography.

Antonio Cesarano, Product Lead at Proton VPN, explains that libpvpnclient and muon together form a new platform that gives engineers far more flexibility.

"This allows us to experiment safely with improvements in connection stability, battery usage, and resilience, and prepares the groundwork for future technologies, like stronger anti-censorship techniques and post-quantum cryptography," said Cesarano.

Users who want to test the new architecture can opt into the beta program via the settings menu in their respective apps.