Security
Two critical PHP flaws let an unauthenticated request run code on a PHP server before your application's login page loads. Patched releases are out, and anything you run on PHP, from billing front ends to phpMyAdmin, needs them now.
Security
Eight eMudhra intermediate CA keys were small enough to guess. Browsers blocked them within hours and Chrome drops the root on 27 October. Curl, old Go builds and stale trust stores are where the risk now sits.
Security
A header-compression flaw lets one connection exhaust an HTTP/3 server's memory. Hysteria2, Xray and sing-box all inherit it through quic-go, and many builds that look patched are not.
Investigations
Kush Pandya found 274 Chrome extensions wearing other people's VPN brands. They set a SOCKS5 hop on port 1082 for a shop called Myxa.
Investigations
A repackaged Telegram APK on APKPure contained a collector that exfiltrated messages, media and contacts to a server previously running a simple Collector Dashboard.
Investigations
Your WireGuard public key can tie your sessions together across Mullvad servers. That's exactly the sort of subtle linkage that privacy-conscious users assume does not exist.
zero-day
A single week saw Linux, Windows, macOS, Next.js, and the global software supply chain battered by critical exploits and mass advisories. Is this the long-feared AI-driven collapse of digital infrastructure, or just the new normal? A technical, evidence-driven investigation.
supply-chain
ℹ️This is a developing situation I have relied on JDownloader for years. It is the sort of unglamorous tool you install once and forget about until you need to pull a 40 GB archive at 3 a.m. So when the official site went dark on 7 May and
Linux
A subtle 2017 optimisation in the Linux kernel's crypto layer has just been turned into a reliable, 732-byte path from any user account to root. Here's what it means for your servers and what to do right now.
Security alerts, VPN deals and privacy news that actually matter. No spam. Unsubscribe in one click.
A stolen Roblox auto-farm script led to Context.ai credentials, then Vercel Google Workspace takeover via OAuth token abuse in March 2026.
Securitum signed off on DuckDuckGo's no-logs policy last month. The audit is better than most and thinner than some, and understanding why is the difference between useful privacy scepticism and reading marketing copy.
Apple volunteered to be the internet's bouncer. The UK didn't even ask. Now the same infrastructure is heading to the US, France, and Australia. And VPNs are next on the list.
While a few years ago, Net Neutrality was only a niche subject talked about in the Bay Area, in recent years the debate has been spreading coast-to-coast, well beyond the usual boundaries of social circles. With online streaming and the cable-cutting movement gaining momentum, the Internet is
You probably have already been in a situation where you needed to jot down notes: from a short post-it scribbled in a jiffy, to a blog post or essay draft, or even a brilliant idea for your next novel. But even though Moleskine notebooks still enjoy some popularity, most
Dropbox users on GNU/Linux distributions were first surprised when an eerie notification popped up on their screen. A thread was opened on Dropbox forums [https://www.dropboxforum.com/t5/Syncing-and-uploads/Dropbox-client-warns-me-that-it-ll-stop-syncing-in-Nov-why/td-p/290058] , reporting: >
DtDNS was originally founded to provide services to the users left stranded by the original dyndns service's disappearance, ml.org. But the company announced its coming shut down on August 1, 2018, after over 18 years of service. Among the reasons invoked, the difficulty to maintain a free
When OVH announced its own cloud storage product in September 2011, it was positioned as the cheapest cloud ever: more affordable than Dropbox yet out of the US territory as it was hosted in France, a country with one of the most restrictive privacy laws. The promise hubiC was billed
Get $583 worth of awesome security and privacy apps for the price you want!
PornHub's expansion into the VPN market should come as no surprise. The adult entertainment company chose to focus on the mobile segment, by announcing a free and unlimited VPN app for Android and iOS. With the help of cheesy ads [https://youtu.be/IGzWZ6T9fqo] and this free plan,
When you want a step up from shared hosting or wish for more freedom to install your own software (such as a VPN), a VPS can be a solution. But how do you know if your provider respects your privacy? Enter HarborVPS: the Canadian-owned Swiss VPS company. Why Switzerland?
For a limited time, you can get a lifetime CyberGhost Premium account for USD 84.99 [https://stacksocial.com/sales/cyberghost-vpn-lifetime-subscription?aid=a-rm9ng2tx] . Moreover, get an additional 15% off with the couponCYBERGHOST15 CyberGhost was at first a Romanian VPN but it was acquired by the company
