NordVPN 评测

identifying a total of twenty-two. Six of the findings were categorized as security vulnerabilities, whilst the remaining sixteen were deemed general weaknesses with lower exploitation potential.

any typical platform user can exploit a bug in the notification system to raise their privileges to root. This was assigned a Critical severity rating

All the detected critical, high, and medium severity vulnerabilities were fixed by our restless developers and approved by the Cure53 authority

Cure53 conducted a penetration test and source code audit against the NordVPN servers, infrastructure, and NordVPN desktop applications for Windows, Linux, and macOS.

the Cure53 team is pleased to confirm that the NordVPN servers and infrastructure exhibit a relatively stable security foundation.

identified a total of thirty-one findings. Of the thirty-one security-related discoveries, twenty-two were classified as security vulnerabilities, and nine were categorized as general weaknesses

the lack of any Critical severity vulnerabilities can be seen as a positive indication, the Cure53 team was still able to identify several vulnerabilities that ranked as High.

The assessment began in June 2024 and lasted 55 working days.

One server was affected in March 2018 in Finland. The rest of our service was not affected.

We were notified about the breach on April 13, 2019. We shredded the server that same day.

The attacker gained access to the server — which had been active for about a month — by exploiting an insecure remote management system left by the data center provider; NordVPN said it was unaware that such a system existed.

NordVPN said it found out about the breach a “few months ago,” but the spokesperson said the breach was not disclosed until today because the company wanted to be “100% sure that each component within our infrastructure is secure.”

Servers belonging to the NordVPN and TorGuard VPN companies were hacked and attackers stole and leaked the private keys associated with certificates used to secure their web servers and VPN configuration files.

Over the weekend, security researcher tweeted that NordVPN, of which we are an affiliate, was compromised as the private keys for their web site certificate were publicly leaked on the Internet.

In late 2018, we ordered an industry-first independent assurance engagement to verify our no-logs claim – a cornerstone of our privacy mission.

The audit can only refer to our service and server configurations as of November 1st 2018.

NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service.

The vulnerability described in their report no longer exists on our systems.

Developed by NordVPN on the WireGuard framework, NordLynx offers a high-speed, secure VPN connection

the provided patch files for the Radius server and Wireguard kernel module were assessed for potential memory corruptions or authentication-related flaws. Positively, no associated issues were identified here.

NordVPN is based and operates under the jurisdiction of Panama, meanwhile Nord Security, parent company of NordVPN is based in Europe, in the Netherlands.

Defendant Nordvpn S.A. is a Panamanian corporation incorporated under the laws of Panama.8 Nordvpn S.A.’s principal place of business is in Amsterdam, the Netherlands.9 [8 and 9 are the complaint's footnote markers]

Surfshark is joining forces with Nord Security, which marks the finalization of a merger agreement.