Provider facts. Community experiences.
VPN and privacy news.
Provider updates, privacy policy, published audits and the stories shaping the way we connect.
New reporting connects uCreator to an older Telegram backdoor. Tampered messaging apps can expose passwords and account access without breaking…
Source: Ovi — uCreator technical analysis, October 21, 2026 (opens in a new tab)
Google says summaries and inferences from Gmail and Photos connected to Search may personalize ads. Here is what the policy…
Source: Google Privacy Policy — effective October 16, 2026 (opens in a new tab)
New laboratory research describes Tailscale SSH privilege-escalation paths. Here is what is claimed, what Tailscale has said, and which access…
CISA adds CVE-2026-114625 to its exploited-vulnerability catalog. Check affected VeloCloud Orchestrator versions, fixes and evidence-preservation guidance.
Source: Arista Security Advisory 0199 — CVE-2026-114625 (October 22, 2026) (opens in a new tab)
The FCC’s first use of new component restrictions blocks a dashcam and video transmitter. What the decision does—and does not—tell…
Arista has patched an actively exploited VeloCloud Orchestrator flaw that lets read-only users become superusers. On-premises customers need branch-specific updates.
Source: Arista Security Advisory 0199: CVE-2026-114625 (October 22, 2026) (opens in a new tab)
Chrome now warns Enhanced Protection users about suspected ClickFix commands. Here is what Google checks, what leaves the device and…
Source: Google: Our latest defenses against evolving web scams (October 20, 2026) (opens in a new tab)
Palo Alto Networks warns that Qilin and INC operators are exploiting a patched GlobalProtect flaw to bypass MFA and reach…
Hidden WhatsApp support-chatbot instructions discouraged privacy-regulator referrals. What the evidence shows, WhatsApp’s response and users’ options.
Source: Redact: WhatsApp help pages carried hidden AI instructions (October 19, 2026) (opens in a new tab)
Maryland county officials confirm files were copied in an August intrusion. The personal-data impact remains under review; October letters concern…
Source: Anne Arundel County: official incident information (updated October 16) (opens in a new tab)
