A critical vulnerability, CVE-2025-2704, in OpenVPN versions 2.6.1 to 2.6.13 can crash servers and disrupt communications. It affects configurations using the –tls-crypt-v2 option, requiring a valid client key or traffic injection for exploitation. OpenVPN 2.6.14 addresses the issue. Organizations are urged to upgrade or disable this option to enhance security and prevent denial of service attacks.

Valley Man Who Sold Spying Malware, Pleads To Conspiracy
A man from Van Nuys has confessed to conspiring to sell malware, known as Hive RAT, that allowed buyers to illegally access computers, stealing personal