News
A maintained reference of critical vulnerabilities, security incidents, and industry shifts covered on this site. Organized by year. Each entry has the essential facts, current status, and what to do about it. 2026 CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass (February 2026) Severity: 9.8 Critical · Status: Patched in
News
Telegram, the popular messaging app known for its focus on privacy and security, which is highly questionable, has recently introduced a new feature that has left many users and security experts deeply concerned. The "Peer-to-Peer Login" (P2PL) system, as Telegram calls it, promises users a free
News
After years of offering email privacy and security through their web and mobile apps, Proton Mail has finally released official desktop clients for Windows, Mac, and Linux users, three months after debuting in beta. The company aims to provide a "distraction-free" email experience with the new native
News
Microsoft Outlook is one of the most widely used email clients in the world, both for personal and business use. However, recent changes to the Outlook software have privacy advocates and researchers concerned about how user data is being handled. Outlook Shares Login Credentials One of the most alarming discoveries
News
Originally published December 2023. Updated April 2026 with Roundcube 1.7 release status and current project health. Nextcloud took over Roundcube in November 2023 — and the obvious question for anyone running Roundcube on a self-hosted mail server is whether the project is still maintained, still improving, and still worth
News
Google recently announced plans to incorporate their own IP protection feature into Chrome by default in future releases. This IP protection will work by routing users' traffic through Google-run privacy proxies. On the surface, Google claims this is to protect users' privacy by hiding their IP addresses
News
Apple recently issued an emergency security update to patch a zero-click vulnerability in iPhones that was being actively exploited to install sophisticated Pegasus spyware. The Vulnerability Researchers at Citizen Lab discovered that threat actors were exploiting two zero-day vulnerabilities (tracked as CVE-2023-41064 and CVE-2023-41061)
News
Originally published August 2023. Updated April 2026 with growth figures, Leo AI, Goggles, and current standing as a Google alternative. Brave Search cut its last dependency on Bing for image and video results in August 2023 — and three years later, that single infrastructure decision has compounded into something worth paying