News

Microsoft spots fake Entra pages being distributed in phishing emailsThe attacks targeted organizations in the West, mostly in critical infrastructureThe goal was to gather intelligence for the Russo-Ukrainian conflictRussian hacking campaigns, part of the country’s wider war effort against Ukraine, are getting more aggressive, security researchers from Microsoft have claimed, after they spotted a change in how a specific threat actor, called Void Blizzard, is running its operations.Void Blizzard, also known as Laundry Bear, would usually buy login credentials off the dark web and use them to gain access to their targets’ IT infrastructure. Once inside, the hackers would exfiltrate emails, sensitive files, and business data, and look for means to continue moving laterally throughout the organization.However, in recent times, the group has switched from buying login credentials into stealing them itself, and to do that it started spoofing Microsoft Entra login pages.NATO in the crosshairsMicrosoft Entra is a comprehensive identity and network access solution that many organizations use to secure access to their digital resources across both cloud and on-prem. Void Blizzard would create fake pages using typosquatted domains and then distribute them to the victims using spear phishing and similar methods.The victims are mostly small and medium-sized businesses (SMB) located in the West, as the campaign “disproportionately” targets organizations in Ukraine and NATO member states, Microsoft says, suggesting it is actually part of Russia’s war on Ukraine, and is designed to collect intelligence from critical sectors.That being said, the majority of the victims are in government, defense, transportation, media, NGO, and healthcare.In some instances, the hackers targeted education, telecommunications, and law enforcement agencies, as well, with more than 20 NGOs in Europe and North America targeted.“Void Blizzard primarily targets NATO member states and Ukraine. Many of the compromised organizations overlap with past—or, in some cases, concurrent—targeting by other well-known Russian state actors, including Forest Blizzard, Midnight Blizzard, and Secret Blizzard,” Microsoft concluded.“This intersection suggests shared espionage and intelligence collection interests assigned to the parent organizations of these threat actors.”You might also likeGlobal Russian hacking campaign steals data from government agenciesTake a look at our guide to the best authenticator appWe've rounded up the best password managers

ExpressVPN's mobile applications just recieved a major redesignThis major update comes only a few days after the provider released its new AircoveOS v5.3Both upgrades promise to deliver faster and smoother performancesExpressVPN now promises an even better experience for users after releasing some major updates on some of its applications.The first to undergo a revamp has been its router with a built-in VPN, Aircove. The AircoveOS v5.3 update unveiled on May 22, 2025, now brings a more intuitive design to better manage all its flagging features and settings.Only a few days later, ExpressVPN has now also launched a completely redesigned version of its mobile apps. The ethos is the same, though – make the VPN "faster, smarter, and more user-friendly across both platforms," explains the provider.ExpressVPN's new mobile appsDespite being one of the best VPN services thanks to its reliable performance and easy-to-use applications, the ExpressVPN team has decided to make the experience for mobile users even better.Both its iOS and Android VPN apps now offer a cleaner and faster design (see image below) to make the overall experience more intuitive.This includes a new built-in speed test tool that allows users to check how the VPN server they're connected to performs in real-time, and discover which may be the fastest choice. This could be advantageous for those who use ExpressVPN as a streaming or gaming VPN.The redesign also includes a new map view for the very first time, helping more visual users get a sense of where they're connected, especially when they need to change location often.A new server map view (on the right) and speed test (on the left) both aim to help users choose the best server for their needs. (Image credit: ExpressVPN)TechRadar needs you! We want to know what you think about the world of VPNs. Whether you're a novice or a VPN pro, we want to hear your thoughts. Don't worry, though, your responses are completely anonymous, and it takes less than five minutes to complete!To take part, click the link below: https://futurenet.questionpro.eu/tr-vpnWith this update, ExpressVPN's Smart Location – a feature which connects you to the best server location automatically – also promises to be even "smarter.""It uses speed, latency, and distance to suggest the best servers for you, plus you’ll see the top 3-5 fastest locations at the top of your list," the provider explains in a blog post.Lastly, iPhone VPN users now have the option to pick OpenVPN as their chosen protocol, in addition to the provider's very own Lightway and IKEv2."Lightway is still our go-to protocol for speed, reliability, and security, but we know one size doesn’t fit all. Adding OpenVPN to iOS gives you more flexibility and control," said the provider.The team started to roll out this update on May 27 and ensured it would become available for all users by May 30.ExpressVPN AircoveOS v5.3The revamp of both Aircove and Aircove Go has a simple goal – strengthening the core infrastructure to make the user experience more stable and easier."Whether you’re streaming, managing multiple devices, or setting up your router for the first time, you’ll spend less time troubleshooting and more time enjoying the internet safely," said the provider in its official announcement.To achieve this, the team implemented a series of technical fixes, including updating some key system components like the Linux kernel and Wi-Fi drivers, as well as improving internal hardware component management. You can find the full technical details here.What you can expect, though, is a faster experience when setting up your Device Group choices, thanks to less scrolling required and the ease of setting up the VPN location directly when creating a device group.Managing groups got easier, too, thanks to improved drag-and-drop capabilities and a new dropdown option. The provider explains that these changes would be especially advantageous on mobile and tablets.Helpful setup tips and smoother animations would also make it easier for new VPN router users to get started.Enhancements to Wi-Fi Link and parental controls are also among the new batches of releases coming for Aircove users, so stay tuned.You might also likeExpressVPN's latest upgrade to Lightway hopes to create "the VPN protocol of the future"The perception of lifetime VPN deals has changed, but are they really just "a true Ponzi scheme"?Is the internet ready for the "biggest security threat of all time"?

Elon Musk's xAI is paying the messaging platform Telegram a cool $300 million to introduce the chatbot Grok to its users. The terms of the deal are extremely favorable to Telegram, as the $300 million only covers a single year and xAI will evenly split any subscription sales to Grok Premium and Premium+ with the messaging platform. Telegram will be paid in both cash and equity.

Telegram and xAI have agreed to a 1-year partnership to distribute Grok to Telegram’s billion+ users and integrate it into its apps. Telegram will receive $300M in cash and equity from xAI, plus 50% of revenue from xAI subscriptions sold via Telegram. Together, we win! ❤️📈🏆 pic.twitter.com/JxTNQr4MTy— Pavel Durov (@durov) May 28, 2025

This will introduce Grok to gobs of new people, as Telegram boasts over one billion monthly users. X, on the other hand, handles half that amount. X leverages public posts from users to train Grok, though not in the EU, and it remains to be seen if the deal includes language to do the same thing with Telegram. The platform includes a feature called Channels that's sort of like a social media network, which could house data that's ripe for the picking.

Engadget reached out to Telegram to ask about Grok and training data and will update this post if we hear back. Both companies have remained mum on this question to other publications, like Reuters. It's worth noting that AI companies are running out of easily accessible data troves.This article originally appeared on Engadget at https://www.engadget.com/ai/elon-musks-xai-is-paying-telegram-300-million-to-adopt-grok-154232007.html?src=rss