Security
A backdoored OVHcloud CLI, a Brotli bug in Node.js, a BIND flaw that mostly affects Kerberos setups and a CVSS 10 in GitLab, and what each means for a small server.
Privacy
A leaked flyer claims Cellebrite can unlock iPhone 11 to 16 from eight metres away. It is not a mass remote exploit, and it isn't confirmed. If your phone could be taken from you, it still changes what you should do.
Security
Two critical PHP flaws let an unauthenticated request run code on a PHP server before your application's login page loads. Patched releases are out, and anything you run on PHP, from billing front ends to phpMyAdmin, needs them now.
Security
Eight eMudhra intermediate CA keys were small enough to guess. Browsers blocked them within hours and Chrome drops the root on 27 October. Curl, old Go builds and stale trust stores are where the risk now sits.
Security
A header-compression flaw lets one connection exhaust an HTTP/3 server's memory. Hysteria2, Xray and sing-box all inherit it through quic-go, and many builds that look patched are not.
Investigations
Kush Pandya found 274 Chrome extensions wearing other people's VPN brands. They set a SOCKS5 hop on port 1082 for a shop called Myxa.
Investigations
A repackaged Telegram APK on APKPure contained a collector that exfiltrated messages, media and contacts to a server previously running a simple Collector Dashboard.
Investigations
Your WireGuard public key can tie your sessions together across Mullvad servers. That's exactly the sort of subtle linkage that privacy-conscious users assume does not exist.
zero-day
A single week saw Linux, Windows, macOS, Next.js, and the global software supply chain battered by critical exploits and mass advisories. Is this the long-feared AI-driven collapse of digital infrastructure, or just the new normal? A technical, evidence-driven investigation.
Security alerts, VPN deals and privacy news that actually matter. No spam. Unsubscribe in one click.
ℹ️This is a developing situation I have relied on JDownloader for years. It is the sort of unglamorous tool you install once and forget about until you need to pull a 40 GB archive at 3 a.m. So when the official site went dark on 7 May and
A subtle 2017 optimisation in the Linux kernel's crypto layer has just been turned into a reliable, 732-byte path from any user account to root. Here's what it means for your servers and what to do right now.
A stolen Roblox auto-farm script led to Context.ai credentials, then Vercel Google Workspace takeover via OAuth token abuse in March 2026.
Securitum signed off on DuckDuckGo's no-logs policy last month. The audit is better than most and thinner than some, and understanding why is the difference between useful privacy scepticism and reading marketing copy.
Apple volunteered to be the internet's bouncer. The UK didn't even ask. Now the same infrastructure is heading to the US, France, and Australia. And VPNs are next on the list.
While a few years ago, Net Neutrality was only a niche subject talked about in the Bay Area, in recent years the debate has been spreading coast-to-coast, well beyond the usual boundaries of social circles. With online streaming and the cable-cutting movement gaining momentum, the Internet is
You probably have already been in a situation where you needed to jot down notes: from a short post-it scribbled in a jiffy, to a blog post or essay draft, or even a brilliant idea for your next novel. But even though Moleskine notebooks still enjoy some popularity, most
Dropbox users on GNU/Linux distributions were first surprised when an eerie notification popped up on their screen. A thread was opened on Dropbox forums [https://www.dropboxforum.com/t5/Syncing-and-uploads/Dropbox-client-warns-me-that-it-ll-stop-syncing-in-Nov-why/td-p/290058] , reporting: >
DtDNS was originally founded to provide services to the users left stranded by the original dyndns service's disappearance, ml.org. But the company announced its coming shut down on August 1, 2018, after over 18 years of service. Among the reasons invoked, the difficulty to maintain a free
When OVH announced its own cloud storage product in September 2011, it was positioned as the cheapest cloud ever: more affordable than Dropbox yet out of the US territory as it was hosted in France, a country with one of the most restrictive privacy laws. The promise hubiC was billed
Get $583 worth of awesome security and privacy apps for the price you want!
PornHub's expansion into the VPN market should come as no surprise. The adult entertainment company chose to focus on the mobile segment, by announcing a free and unlimited VPN app for Android and iOS. With the help of cheesy ads [https://youtu.be/IGzWZ6T9fqo] and this free plan,
