We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: Holiday.com, ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

Latest News: Cybersecurity

A startling revelation from cybersecurity firm Outpost24 has exposed a concerning trend among IT administrators: a widespread reliance on default passwords, with 'admin' being the most popular choice. Over 40,000 admin portal accounts were found to be using this rudimentary password, casting doubts

Zane Kennedy First published on October 26, 2023

In a startling revelation, Q3 2023 has witnessed a record-breaking surge in phishing and malware attacks. According to a report by threat detection and response startup Vade Secure SASU, phishing attacks have skyrocketed by 173% compared to the previous quarter, marking a total of 493.2 million

Husain Parvez First published on October 22, 2023

A cyberattack campaign has targeted prominent figures involved in the Women Political Leaders (WPL) Summit in Brussels, along with European Union military personnel. The attack, identified by Trend Micro, uses an updated version of the RomCom Remote Access Trojan (RAT) known as PEAPOD. The

Keira Waddell First published on October 20, 2023

A sophisticated malware camouflaged as a legitimate caching plugin has been discovered compromising WordPress sites. Researchers from Wordfence uncovered this malware, which allows attackers to gain control of affected websites. The initial discovery occurred during a routine site cleanup by

Zane Kennedy First published on October 17, 2023

Major internet giants, including Google, Amazon, and Cloudflare, have recently fallen victim to the largest distributed denial-of-service (DDoS) attacks ever recorded. These unprecedented attacks have sent shockwaves throughout the tech industry, raising concerns about the vulnerability of the

Husain Parvez First published on October 15, 2023

More than 17,000 WordPress websites have fallen victim to the Balada Injector malware. The latest campaign, which occurred in September, specifically targeted popular premium themes, namely tagDiv Newspaper and tagDiv Newsmag. The attacks primarily centered on a vulnerability within the tagDiv

Keira Waddell First published on October 13, 2023

A malicious campaign targeting open-source platforms has been discovered, with hundreds of info-stealing Python packages found hiding within these repositories. These packages have been downloaded approximately 75,000 times and pose a significant threat to users. According to a report by

Husain Parvez First published on October 11, 2023

In a landmark collaborative effort, the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint Cybersecurity Advisory (CSA) that uncovers the ten most frequently encountered cybersecurity misconfigurations in large organizations'

Zane Kennedy First published on October 10, 2023

Recent investigations by cybersecurity experts have unveiled ShadowSyndicate, a clandestine cybercrime group that has been operational since July 16, 2022. Notably, this group is linked to deploying as many as seven distinct ransomware families over the past year. Formerly known as Infra Storm, the

Zane Kennedy First published on October 08, 2023

The Federal Bureau of Investigation (FBI) has warned of a sinister scam dubbed "Phantom Hacker", which has caused alarming financial damages, particularly among the senior community. This elaborate fraud scheme has evolved from typical tech support scams, integrating an intricate web of deceit

Zane Kennedy First published on October 06, 2023