ShareX, the free and open-source screen capture tool for Windows, announced that it now supports built-in screen recording on Windows 11...
Cryptee, the Estonian encrypted documents and photo service, is one of the few tools that tries to replace both Google Docs and Google Photos in a single account without asking you to run a server...
Tuta, the German encrypted email provider, has released a free integration with Nextcloud, the self-hosted cloud storage and collaboration platform. The company announced it on October 1 and promoted a video walkthrough on X...
Cisco Talos has published a detailed report on UAT-11587, a China-nexus threat cluster that has targeted government and policy organizations across Asia with a previously undocumented Windows backdoor called Antino...
GrapheneOS says ARIN approved its request for an IPv4 /22, giving the project its own IPv4 and IPv6 address space. Here's what it owns, where it's being deployed...
F-Droid began rolling out version 2.0 on September 24, the project's largest app update in a decade. It brings a redesigned Discover screen, smarter search and filtering, and a unified installer, but one privacy feature, panic app-wiping, didn't make the cut...
A Fedora Discourse thread proposing to retire LibreOffice as Fedora's default office suite in favor of Collabora Office has become one of the most active discussions on the forum this week. Some back the switch on interface grounds, others raise packaging and licensing concerns...
Signal is asking Android beta testers to try registering without a phone number for the first time, via a beta feedback thread posted by staff engineer Greyson Parrelli. The flow requires a small one-time in-app purchase, which Signal says is never directly tied to the resulting account...
Some Google search results now route through an encoded redirect instead of linking straight to the destination site, per a Malwarebytes report. That means hovering a link no longer shows where it actually leads — a habit security-conscious users rely on to catch scams before clicking...
Mullvad is retiring the public DoH servers it has run since 2022 and will instead financially back Quad9. Mullvad Browser users on default settings migrate automatically, but manual configurations and iOS/macOS profiles need to switch before November 2...
Kagi has revamped its Stocks widget with animated price charts, ETF support, and smarter triggering, and added a new toggle that automatically removes paywalled websites from search results...
uBlock Origin's small volunteer team says it will no longer chase Facebook's constantly-shifting ad-detection tricks, calling the site a "disgusting anti-user site." Here's what changed and what it means for your feed...
Open-source, end-to-end encrypted, no ads or scanning and now with a One-Click Migration tool that automatically imports your old Gmail or Outlook mailbox. Here's a full look at what Tuta does well, and where it still falls short...
A federal case in Atlanta is testing whether a phone's own privacy feature can be prosecuted as destruction of evidence, after Samuel Tunick's GrapheneOS phone wiped itself during a CBP border search. Here's what happened, what GrapheneOS says, and why the case matters beyond one traveler...
France became the first EU country to ban social media for under-15s. The ban itself is the easy part how platforms verify everyone's age is the part worth paying attention to...
Facebook Verified and Google's new selfie sign-in both launched within a day of each other, using video selfies to fight AI impersonation. Here's what each one actually collects, and why a face isn't something you can reset like a password...
Firefox 153 ships HDR video, built-in PDF merging, and QR code sharing, but the change that matters most is quieter: extensions now need explicit permission before they can touch files on your computer...
Proton's Lumo 2.0 adds advanced reasoning, image generation, deep web search, and long-term memory, all under zero-access encryption. Here's what's actually new, what it costs, and whether it's worth switching to...
DuckDuckGo has shipped a native YouTube Ad Blocking feature in its browser, killing pre-roll and mid-roll ads on desktop and mobile without a third-party extension. It's on by default for iOS, Windows, and Mac...
Bad Epoll (CVE-2026-46242) is a race-condition use-after-free in the Linux kernel's epoll subsystem that lets an unprivileged process become root, on desktops, servers, and Android. Anthropic's Mythos AI found a neighboring bug in the same code but missed this one...
EU ambassadors agreed to push forward a temporary extension allowing platforms like WhatsApp and Messenger to scan private messages, just three months after the European Parliament voted to reject the proposal entirely...
Chrome 150 removes the last internal flag that let users keep classic uBlock Origin and other Manifest V2 ad blockers running, with Chrome 151 set to close the remaining DevTools workaround shortly after...
Signal has condemned a UK government proposal that could require device-level content scanning and age verification across phones sold or used in the country, warning it creates surveillance infrastructure that threatens privacy and security...
A user attempting PlayStation Network age verification on a GrapheneOS device received an email from Yoti claiming the device had been flagged and reported to authorities. GrapheneOS calls it fearmongering from a rogue support agent...
Switzerland is advancing a sweeping surveillance law update that would require VPN providers, encrypted email services, and messaging apps to collect government IDs, log IP addresses for six months, and decrypt user data on demand. Proton calls it worse than the US...
DuckDuckGo says app installs and traffic increased after Google's expanded AI-powered Search features triggered backlash from users seeking simpler, more traditional search experiences without heavy AI integration...
Security researchers warn that the BTMOB Android RAT and Grandoreiro banking trojan are evolving into highly organized malware ecosystems targeting Android devices, banking users, and digital wallet applications through phishing and remote-control attacks...
Security researchers from Mysk claim WhatsApp stores local chat databases unencrypted inside Apple App Group containers on iOS and macOS, sparking debate over local device privacy protections despite WhatsApp's end-to-end encryption...
Discord says every voice and video call is now protected with end-to-end encryption by default across desktop, mobile, consoles, browsers, and Go Live streams using its open-source DAVE protocol...
Mullvad confirmed it is testing mitigations after researchers discovered potentially identifying behavior involving WireGuard exit IP assignment and VPN server correlation patterns...
Researchers discovered a serious Android 16 vulnerability allowing normal apps to bypass VPN protections and expose a user’s real IP address, even with Always-On VPN and “Block connections without VPN” enabled...
Google’s newer anti-bot verification systems increasingly rely on Play Services and hardware attestation, raising concerns that de-Googled Android users could face growing web compatibility issues...
A security researcher found that Microsoft Edge decrypts and keeps all saved passwords in memory at startup, potentially exposing credentials in compromised or shared systems...
AV2 is the upcoming video codec from the Alliance for Open Media, promising up to 40% better compression than AV1 while reducing bandwidth usage for streaming, 4K, and future video formats...
Chromium developers are debating a new Prompt API that could let websites access built-in AI models directly from the browser, raising questions about privacy, interoperability, and future web standards...
A new report reveals dozens of browser extensions used by millions are collecting and selling browsing data, cookies, and user activity, often legally through privacy policies most users never read...
The European Commission has proposed new Digital Markets Act measures that could require Google to share anonymized search data with rival search engines and AI-powered search tools, aiming to boost competition in the search market...
A compromised version of the Bitwarden CLI briefly appeared on npm, flagged as malware designed to steal developer secrets. The package was quickly removed, but the incident highlights growing supply chain risks targeting developer tools...
Germany’s security agencies have issued an urgent warning about phishing campaigns targeting Signal and other messaging apps to hijack accounts...
A new lawsuit and expert criticism are raising questions about WhatsApp’s encryption...
Security researchers have uncovered a new malware toolkit that secretly redirects users to malicious websites...
Microsoft has released an out-of-band Windows 11 update to fix system freezes, cloud app issues, and instability caused by the latest January security patch...
Google is rolling out stricter Android security controls, warning that around 750 million users on outdated devices may ...
A massive exposed database containing millions of stolen credentials includes around 48 million Gmail accounts, raising concerns over reused passwords and large-scale account takeover risks...
Microsoft’s latest Windows 11 security update is causing widespread system failures, including black screens, app crashes, and GPU issues, forcing ...
Security researchers have uncovered a new Android malware that uses AI to detect and automatically click online ads in a hidden browser, silently abusing infected devices for large-scale ad fraud...
A new security alert warns that attackers are increasingly targeting credentials for major tech accounts like Microsoft, Apple, Google and Amazon ...
Threat actors are using LinkedIn private messages to deliver malicious archives that deploy remote access trojans via DLL sideloading, targeting professionals and executives ...
DuckDuckGo has opened a public vote asking users where they stand on AI, highlighting concerns around choice, control, and whether AI features should be optional by default ...
Security researchers uncovered the WhisperPair attack, a flaw in Google’s Fast Pair protocol that allows attackers to hijack Bluetooth headphones ...
Security researchers discovered free file converter apps that appear legitimate but secretly install malware, including remote access trojans, giving attackers control over infected systems…
Security researchers have uncovered five malicious Chrome extensions that disguise themselves as legitimate workplace tools while stealing session tokens and enabling full account ...
Google is rolling out a major Gmail change that allows users to switch their primary email address for the first time, raising new security and privacy considerations for older, widely exposed accounts…
A new Chrome update introduces a toggle that deletes Google’s on-device AI model data, giving users more control over local AI features like scam detection…
Microsoft has acknowledged problems with the Windows 11 January 2026 update, including Remote Desktop and shutdown bugs, and has begun rolling out fixes…
NordVPN has expanded its virtual server network to 79 locations, helping users bypass censorship and geo-restrictions more securely worldwide…
Google is preparing a change to how Android users install apps outside the Play Store, introducing new warnings and verification steps that could affect millions of devices worldwide…
OpenAI announced plans to test advertising in ChatGPT’s Free and Go tiers, stating that ads will not influence AI answers or use conversation data for targeting…
Forbes warns that a recent surge in Instagram password reset emails has created fertile ground for phishing and follow-up attacks…
Forbes reports major attack activity and urgent security warnings for Facebook’s massive user base…
Forbes warns Google’s new AI upgrade may analyze all your photos, raising serious privacy ...
Forbes reveals three of the most common passwords that are shockingly easy for hackers to crack…