Technologies

Researchers Discover 18 Popular VPNs Are Connected: Why This Matters

All are owned by 3 separate groups but CNET’s recommended VPNs are not on the list

Virtual private networks are popular ways to keep your online activity private and hide your physical location from your internet service provider and apps. But it’s obviously important to choose a safe and secure VPN.

Three university researchers have discovered that 18 of the most widely used VPNs have shared infrastructures with serious security flaws that could expose customers’ browsing activity and leave their systems vulnerable to corrupted data. These VPNs are among the top 100 most popular on the Google Play Store, comprising more than 700 million downloads.

Read more: Best VPN Service for 2025: Our Top Picks in a Tight Race

The peer-reviewed study by the Privacy Enhancing Technologies Symposium found that these VPNs, despite calling themselves independent businesses, are actually grouped into three separate families of companies.

None of CNET’s recommended VPNs — ExpressVPN, NordVPN, Surfshark, Proton VPN and Mullvad — are on the list. (If you currently don’t have a VPN, here’s why you might want to start using one.)

According to the findings, these are the three groups that contain the 18 VPNs:

Family A: Turbo VPN, Turbo VPN Lite, VPN Monster, VPN Proxy Master, VPN Proxy Master Lite, Robot VPN, Snap VPN and SuperNet VPN
Family B: Global VPN, Inf VPN, Melon VPN, Super Z VPN, Touch VPN, VPN ProMaster, XY VPN and 3X VPN
Family C: X-VPN and Fast Potato VPN

Researchers determined that the VPNs in Family A are shared between three providers linked to Qihoo 360, a firm identified by the US Department of Defense as a Chinese military company. The VPNs in Family B use the same IP addresses from the same hosting company.

Know your VPN’s parent company

It’s a cautionary tale about why it’s important to know who’s behind the VPN you’re using, says CNET senior writer Attila Tomaschek.

«It’s also crucial to know what kinds of data the VPN provider is sharing with its parent company and affiliated entities,» Tomaschek said. «Some of these companies may even be compelled to log customer activity and share it with authorities, depending on the jurisdiction in which they operate.»

Despite the warnings, Tomaschek says it’s not so easy to figure out who controls your VPN. But he says there are measures that customers can take.

«Users can do a few things to help ensure the VPN they’re using is reputable,» Tomaschek says. «Check the privacy policy — specifically for terms like ‘logging,’ ‘data sharing’ or ‘data collection.’ A Google search of the provider can help determine whether the VPN has been involved in questionable activity. Read detailed, unbiased reviews from reputable sources. Be especially wary of signing on with a free VPN, even if it’s listed as a top choice in your app store.»

The PETS researchers examined the most downloaded VPNs on Android, looking for overlaps among business paperwork, web presence and codebase. After identifying code similarities, they were able to group the 18 VPNs into three groups. The study was initially spurred by VPN Pro’s own findings, «Who owns your VPN? 105 VPNs run by just 24 companies.»

CNET’s Tomaschek has advice for anyone who has been using one of these 18 VPNs.

«I’d recommend deleting it from your device immediately,» he said. «If you suspect that any sensitive personal data may have been compromised, it’s a good idea to keep an eye on your credit report and look into services like dark web monitoring or identity theft protection.»

Technologies

If You Were ‘Tricked’ Into an Amazon Prime Subscription, You Should Have Been Paid by Today

Amazon is paying $1.5 billion to people who mistakenly subscribed to Prime, and the first round of payments are due today.

Amazon Prime provides a lot of valuable benefits to its members, but the company’s registration practices for its premium subscription from 2019 to 2025 led to many customers accidentally subscribing to a service they didn’t want.

Amazon is now paying the price for that deception — the US Federal Trade Commission levied a massive $2.5 billion settlement on the company for its subscription tactics.

The majority of the settlement — $1.5 billion — has been earmarked to refund eligible subscribers, with the rest serving as a civil penalty. Amazon is also now legally required to provide a clear, obvious option to decline Prime, making it as easy to leave the service as it is to join.

Amazon isn’t admitting to shady behavior. «Amazon and our executives have always followed the law, and this settlement allows us to move forward and focus on innovating for customers,» Mark Blafkin, Amazon senior manager, said in a statement. «We work incredibly hard to make it clear and simple for customers to both sign up or cancel their Prime membership, and to offer substantial value for our many millions of loyal Prime members around the world.»

The online retail giant started sending out payments to eligible people in November and was supposed to conclude its initial automatic payments today, Dec. 24. Read on to learn more about Amazon’s settlement and what to do if you think you’re eligible for compensation but didn’t receive a payment.

Why did the FTC fine Amazon?

The FTC filed suit against Amazon, accusing the company of using «dark patterns» to nudge people into Prime subscriptions and then making it too hard to cancel. The FTC maintained Amazon was in violation of Section 5 of the FTC Act and the Restore Online Shoppers’ Confidence Act.

«Specifically, Amazon used manipulative, coercive or deceptive user-interface designs known as ‘dark patterns’ to trick consumers into enrolling in automatically renewing Prime subscriptions,» the FTC complaint stated.

Who’s eligible for Amazon’s payout?

Amazon’s legal settlement is limited to customers who enrolled in Amazon Prime between June 23, 2019, and June 23, 2025. It’s also restricted to customers who subscribed to Prime using a «challenged enrollment flow» or who enrolled in Prime through any method but were unsuccessful in canceling their memberships.

The FTC called out specific enrollment pages, including Prime Video enrollment, the Universal Prime Decision page, the Shipping Option Select page and the Single Page Checkout. To qualify for a payout, claimants must also not have used more than 10 Amazon Prime benefits in any 12-month period.

Customers who signed up via those challenged processes and did not use more than three Prime benefits within one year will be paid automatically by Amazon within 90 days. Other eligible Amazon customers will need to file a claim, and Amazon is required to send notices to those people within 30 days of making its automatic payments.

If you are eligible for the automatic payment, you should have received an email from Amazon by today explaining how to claim the money. You can be paid via PayPal or Venmo. If you prefer a paper check, don’t accept the digital payment. The FTC says Amazon will mail you a check that you must cash within 60 days.

How big will the Amazon payments be?

Payouts to eligible Amazon claimants will be limited to a maximum of $51. That amount could be reduced depending on the number of Amazon Prime benefits you used while subscribed to the service. Those benefits include free two-day shipping, watching shows or movies on Prime Video or Whole Foods grocery discounts.

Customers who qualify for the payments should have received them from Nov. 12 to Dec. 24, 2025.If you are eligible for compensation from Amazon but didn’t receive a payout, you’ll need to file a claim after Amazon starts the claim process. The FTC says it will update its Amazon settlement site once that process has begun.

Customers who did not use a challenged sign-up process but instead were unable to cancel their Prime memberships will also need to file claims for payment.

Technologies

Today’s NYT Connections: Sports Edition Hints and Answers for Dec. 25, #458

Here are hints and the answers for the NYT Connections: Sports Edition puzzle for Dec. 25, No. 458.

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.

Today’s Connections: Sports Edition has a real mix of categories, including one that’s all about a certain famous athlete. If you’re struggling with today’s puzzle but still want to solve it, read on for hints and the answers.

Connections: Sports Edition is published by The Athletic, the subscription-based sports journalism site owned by The Times. It doesn’t appear in the NYT Games app, but it does in The Athletic’s app. Or you can play it for free online.

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: Swing away!

Green group hint: What’s that on your bat?

Blue group hint: Catch the football.

Purple group hint: Lake Placid or Lillehammer.

Answers for today’s Connections: Sports Edition groups

Yellow group: Baseball bat materials.

Green group: Associated with George Brett.

Blue group: NFL rookie WRs.

Purple group: Olympic ____.

Read more: Wordle Cheat Sheet: Here Are the Most Popular Letters Used in English Words

What are today’s Connections: Sports Edition answers?

The yellow words in today’s Connections

The theme is baseball bat materials. The four answers are aluminum, ash, birch and maple.

The green words in today’s Connections

The theme is associated with George Brett. The four answers are 5, pine tar, Royals and third base.

The blue words in today’s Connections

The theme is NFL rookie WRs. The four answers are Burden, Egbuka, Golden and McMillan.

The purple words in today’s Connections

The theme is Olympic ____. The four answers are Games, rings, torch and village.

Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.

Technologies

Christmas Eve Gaming Crushed as Steam Goes Offline

Services related to the popular game hub seem to slowly be returning as of Wednesday afternoon.

Your Christmas Eve gaming session might not go as planned. Online gaming hub Steam went down on Wednesday. As of about 1:30 pm PT, the Steam store page was once again accessible, so services seemed to be coming back online.

The Steam outage appeared to begin mid-afternoon ET, according to Downdetector, which monitors site outages. (Disclosure: Downdetector is owned by the same parent company as CNET, Ziff Davis.)

A representative for Steam did not immediately respond to a request for comment.

As of Wednesday noon PT, Steam’s official X and Bluesky accounts hadn’t posted anything about the outage.

Gamers certainly noticed. «Steam down, Steam down!!!» wrote one Bluesky user.

Others commented on the bad timing just as gamers were enjoying time off or receiving gaming gifts. «‘You got a gift on Steam!’ oh cool ‘Steam is down’ oh cool,» wrote another Bluesky user.