Engineering Manager

Surfshark claims a major first by bringing full post-quantum security to WireGuard. * Surfshark has integrated ML-DSA certificates into WireGuard to achieve full post-quantum security. * The upgrade focuses on server authentication to prevent future session takeovers. * The feature is currently live for users on iOS, macOS, and Windows. Quantum computers might still sound like science fiction, but cybersecurity experts are already preparing for the day these super-powered machines can effortlessly crack today's encryption. Now, Surfshark has taken a massive step toward quantum-proofing your daily browsing. The popular provider has announced the completion of its full post-quantum WireGuard implementation. By tackling the incredibly tricky challenge of server authentication, the company claims it has secured every pillar of a private connection against future quantum threats. While many tech giants and rival VPNs have begun integrating basic post-quantum key exchanges, fully securing the authentication process remains incredibly rare. Surfshark's latest update ensures bad actors armed with futuristic quantum tech can't impersonate VPN servers and hijack your connection. The 'forgotten' pillar of quantum security. Earlier this year, Surfshark rolled out post-quantum encryption and key exchanges (known as ML-KEM) to the WireGuard protocol. Other providers have made similar moves recently, with rivals like NordVPN extending post-quantum protection across its applications. However, Surfshark has now added the final critical component: certificates using ML-DSA (digital signature algorithm) for authentication. "A truly full post-quantum secure VPN rests on three pillars: encryption, key exchange, and authentication. While the industry has widely adopted quantum-safe encryption and key exchange (like ML-KEM), authentication remains the 'forgotten' step," explained Karolis Kaciulis, Leading System Engineer at Surfshark. "Many, including Big Tech, hesitate here because certificates for authentication are difficult to scale and currently lack a global public infrastructure for post-quantum certificates." Beating Big Tech to the punch. So, why does authentication matter for the average user? If an attacker uses a quantum computer to break a VPN's authentication layer, they can perform a session takeover, essentially pretending to be the secure server right as you connect, intercepting all your data. "However, ignoring this last step creates a vulnerability when quantum computers become accessible," Kaciulis said. "At Surfshark, we took the ML-DSA standards and integrated them with our certificates into a protocol to make the authorization fully quantum-resistant. By using the ML-DSA certificates, we have completed the final pillar, achieving the first full post-quantum WireGuard implementation." This technical milestone stems from the launch of Dausos, Surfshark's proprietary VPN protocol engineered with complete post-quantum security from the ground up, which paved the way for this WireGuard upgrade. Remarkably, Surfshark is deploying a level of security rarely seen in the consumer space. An evaluation by the company of 15 major tech platforms found that only two, AWS KMS and Google Cloud KMS, have actually deployed ML-DSA, and both are cloud key-management services, not consumer applications. While giants like Apple and Microsoft have access to ML-DSA, neither has enabled it by default in primary user-facing software like Safari or Edge. "It comes as no surprise that industry peers prioritize implementing ML-KEM key exchange before placing authentication on their engineering roadmaps," Kaciulis noted. "Although quantum computing poses no immediate threat today, delaying authentication security until these machines emerge leaves connections vulnerable. That is why Surfshark is taking proactive measures to deliver complete post-quantum defense ahead of potential quantum threats." If you're eager to test out these proactive protections, Surfshark's fully post-quantum WireGuard implementation is currently accessible to users on iOS, macOS, and Windows. The company plans to bring support to additional platforms in future releases.

Surfshark now lets you block specific websites - but you'll need a Windows PC. Published 6 hours ago The new allowed websites list feature lets you punch a hole in a blocked category without switching off the whole filter * Surfshark has added an allowed websites list to its web content blocker * The feature is currently limited to Windows only * Web content blocker is a Surfshark One and One+ exclusive feature Surfshark has rolled out a useful upgrade to one of its household safety tools. The web content blocker can now keep an entire category of sites blocked while still letting through the specific pages you actually need, thanks to a new allowed websites list. The catch is that this new list is only available on Windows for now. Anyone hoping to use the allow list on their phone or Mac will have to wait for the rollout to widen. Surfshark's web Content blocker first arrived on Android and iOS back in October 2025 and has since expanded to desktop, so it's fitting that a PC-first feature is the next piece of the puzzle. In a way, it's only a small change, but it addresses one of the most common annoyances with category-based filtering. Until now, blocking a category was an all-or-nothing affair, and if a legitimate site got swept up in a broad filter, your only option was to disable the whole thing. This is exactly the kind of quality-of-life refinement that helps keep Surfshark near the top of our best VPN rankings, where it currently sits as our pick for the best cheap VPN. Surfshark - the best cheap VPN Surfshark is a fast, easy-to-use VPN that seriously beats the competition when it comes to subscription pricing. Its two-year Starter plan works out at $2.49 a month (plus tax), but we think Surfshark One is the best value plan as it adds a web content blocker, antivirus, data breach monitor, and alternative ID tool starting from the equivalent of $2.79 a month. A quick refresher: what is web content blocker? Web content blocker is Surfshark's category-based filtering feature, available to subscribers on its Surfshark One and One+ plans. The tool automatically blocks access to whole categories of websites you would rather keep off your devices, and you don't need to keep the VPN turned on for it to work. The feature currently lets you filter seven categories of content, including those related to pornography, gambling, weapons, drugs, and malware. Crucially, Surfshark built the feature to safeguard people without surveilling them. As Justas Pukys, a Senior Product Manager at Surfshark, has explained, the blocker "helps users protect their family members from seeing malicious content or websites" without monitoring the sites they visit. That means no screen time limits, no app blocking, and no activity logs, which is consistent with the company's independently audited no-logs stance. Leave No Trace investigates the companies and governments putting our digital freedom at risk - and the people fighting back. How to use the allowed websites list. If you are running Surfshark's web content blocker on Windows, adding a trusted site to your allow list is straightforward: * Open your Surfshark app. * Click the Settings cogwheel icon in the left navigation menu. * Navigate to Web content blocker. * Scroll down and click on Allowed websites. * Press Add. * Enter the specific website URLs you want to allow. Any site you add stays reachable while the rest of its category remains filtered, and you can toggle the web content blocker on or off whenever you like. Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button! Contributing Writer Monica is a tech journalist with over a decade of experience. She writes about the latest developments in computing, which means anything from computer chips made out of paper to cutting-edge desktop processors. GPUs are her main area of interest, and nothing thrills her quite like that time every couple of years when new graphics cards hit the market. She built her first PC nearly 20 years ago, and dozens of builds later, she's always planning out her next build (or helping her friends with theirs). During her career, Monica has written for many tech-centric outlets, including Digital Trends, SlashGear, WePC, and Tom's Hardware.

Surfshark VPN says hackers breached internal testing, proxy servers. HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of its clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Surfshark VPN says hackers breached internal testing, proxy servers was reported by one of those streams. HackNotice may also have the breach date, hack date, the hacker responsible, the hacked industry, the hacked location, and any other parts of the hack, breach, or leak that HackNotice can report on for the consumers of its product. If you are a user of Surfshark VPN says hackers breached internal testing, proxy servers their products, services, websites, or applications and you were a client of HackNotice, monitoring for Surfshark VPN says hackers breached internal testing, proxy servers you may have been alerted to this report about Surfshark VPN says hackers breached internal testing, proxy servers. HackNotice is a service that provides data, information, and monitoring that helps its clients recover from and remediate data breaches, hacks, and leaks of their personal information. HackNotice provides a service that helps its clients know what to do about a hack, breach, or leak of their information. If Surfshark VPN says hackers breached internal testing, proxy servers had a breach of consumer data or a data leak, then there may be additional actions that its clients should read to protect their digital identity. Data breaches, hacks, and leaks often guide to and reason identity theft, account take overs, ransomware, spyware, extortion, and malware. account takeovers are often caused by credential reuse, password reuse, easily guessed passwords, and are facilitated by the sharing of billions of credentials and other customer info through data leaks, as the direct result of data breaches and hacks. HackNotice monitors trends in publically available data that indicates tens of thousands of data breaches each year, along with billions of records from data leaks each year. On behalf of its clients, HackNotice works to monitor for hacks that conduct to lower client security and digital identities that have been exposed and should live considered vulnerable to attack. HackNotice works with clients to identify the extent that digital identities get been exposed and provides remediation suggestions for how to handle each type of exposure. HackNotice monitors the hacker community, which is a network of individuals that apportion data breaches, hacks, leaks, malware, spyware, ransomware, and many other tools that are often used for financial fraud, account take overs, and further breaches and hacks. HackNotice monitors the hacker community specifically for breaches, hacks, and data leaks that offend consumers. HackNotice applies industry specific knowledge and advanced security practices to monitor for trends that point breaches, hacks, and exposed digital identities. HackNotice also enables clients to share plug notices with their friend, family, and collogues to help increase cognizance around alleged hacks, breaches, or data leaks. HackNotice works to provide clients with sharable reports to help increase the security of its clients personal network. The certificate of the multitude that its clients interact with directly impacts the rase of security of its clients. Increased exposure to accounts that get been taken over by hackers leads to further account have overs through phishing, malware, and other attach techniques. If you found this hack notice to live helpful, then you may be interested in reading some additional hack notices such as: hose that don't experience they have been hacked. The whimsy that you can protect your perimeter is fallinents such as theft or loss of digital media such as computer tapes, hard drives, or laptop computersloss of the data itself. Those working inside an organization are a major cause of data