跳到正文
WorldBrand.AI

NordVPN

争议事件

以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。

返回词条共 5 条

  1. 2023

    英国关于恶意软件声明的广告裁决

    英国广告标准局裁定一则暗示NordVPN可以关闭恶意软件的广告违规。监管机构发现，听众可能将该声明理解为承诺阻止所有恶意软件，而NordVPN未能证实这一点。

    来源

  2. 2019

    凭据填充暴露

    一份单独的报告称，约2,000个NordVPN用户名和密码通过凭据填充暴露。该事件与芬兰服务器泄露不同。

    来源

  3. 2019

    英国关于公共Wi-Fi声明的广告裁决

    英国广告标准局建议NordVPN不要重复将公共Wi-Fi描绘为等同于将个人信息交给附近的人的广告。监管机构表示，该广告夸大了风险，因为HTTPS已经提供了重要保护。

    来源

  4. 2019

    NordVPN披露一台服务器遭入侵

    问题披露

    NordVPN确认其一台服务器于2018年3月遭入侵，并表示此前数月已知晓此次攻击但未告知客户。一名安全研究人员报告称，包括一把已过期私钥在内的私人数据曾可被公开访问。NordVPN承认其服务器安全管理存在不足，并称正在采取或准备开展安全审计及漏洞赏金计划。

    品牌回应

    • 整改 — NordVPN

      We are taking all the necessary means to enhance our security. We have undergone an application security audit, are working on a second no-logs audit right now, and are preparing a bug bounty program.

    • 退款或补偿 — NordVPN

      NordVPN has indicated that refunds will be available for anyone who wishes to cancel their service in the wake of the breach.

    来源摘录

    • A security researcher posted a Twitter thread which revealed that private data from NordVPN were publicly accessible, including a copy of a since-expired private key which could have been used between the breach and expiry to decrypt private communications or perform man-in-the-middle attacks and which could still be used today to decrypt previously-captured historical traffic - but only, the company claims, on the one specifically-breached server.
    • Virtual private network (VPN) provider NordVPN has confirmed that one of its servers was breached back in March 2018, and that it had known of the attack since 'a few months ago' - but had not passed that information on top its customers.
    • We failed by contracting an unreliable server provider and should have done better to ensure the security of our customers,
    来源

  5. 2018

    芬兰服务器泄露和延迟披露

    签约数据中心的远程管理系统的漏洞使未经授权访问芬兰的NordVPN服务器成为可能。NordVPN表示该事件未暴露用户凭据、账单信息或其他个人资料数据，并发现没有证据表明发生了实际的中间人攻击。然而，批评者反对公司在得知泄露后未及时披露。

    来源