VPNLab

iOS 27.2 lets iPhone users prove they are adults with a selfie In iOS 27.2 Apple lets adults confirm their age with a four-angle face scan in Australia, Brazil, Singapore and the UK. How it works and what Apple keeps. #apple #ageverification #ios

Streamed, the live sports back end behind dozens of pirate sites, shuts down Streamed fed live sports to about 30 pirate sites with 463M visits in July, the MPA told the US government. Now it is gone, with no reason given. #streamed #piracy #sportsstreaming

US judge lets a porn studio unmask torrent users through Gmail and Yahoo FlavaWorks can subpoena Google, Yahoo and Microsoft for names, phones and last IPs of torrent tracker users. Why it skipped IPs and what a VPN can't hide. #usa #torrents #google

Flock CEO tells police chiefs the backlash against his cameras isn't real In leaked audio from a police chiefs' conference, Flock's Garrett Langley blames bots for the protests against license plate cameras. What he said. #flocksafety #usa #licenseplatereaders

Senators say the Trump administration is illegally hiding a FISA court ruling Wyden and Schiff give the DNI and attorney general until 6 November to explain why a March ruling on searches of Americans' messages is still secret. #usa #fisa #surveillance

Starlink starts cutting off South Africans on foreign roaming accounts Starlink now asks South Africans using dishes registered abroad for a passport and live photo via travel registration. What changed and why. #starlink #southafrica #spacex

Meta tells US trade officials its AI now removes pirated sports streams in real time In a filing to the USTR, Meta says an AI tool now predicts and pulls pirated live sports streams on Facebook. What it does and what changes for Live users. #meta #facebook #piracy

CoinDCX admits losing $16 million days after calling hack reports a false alarm India's CoinDCX lost 15.99M USDT from old deposit wallets on 21 October and denied it for three days. What happened and how to send deposits safely. #coindcx #india #cryptocurrency

An AGENTS.md file in Downloads can hijack Codex and Claude Code Forever Security found a planted AGENTS.md that made a coding agent install malware. Codex ran it in 90% of tests. What to check on your machine. #claudecode #codex #openai

France told mobile operators to be ready to block TikTok and Instagram A leaked letter shows France's PM asked Orange, SFR, Free and Bouygues to prepare a mobile DNS block of social networks for the 24 October protests. #france #tiktok #instagram

Brotli decoder flaw lets a malicious server take over Node.js and Python apps A Brotli decoder bug rated 9.2 lets crafted compressed data run code in Node.js, Bun and Python apps. Fixed versions and what to check. #brotli #nodejs #python

Proton hosts map of 300,000 Flock surveillance devices that Flock tried to take down Proton put Joshua Michael's map of 170,000 Flock cameras and 130,000 other devices on Swiss servers after Flock sent legal threats. #flocksafety #proton #usa

Quad9 will cut off users in France on November 24 after losing a piracy case to beIN A Paris court ordered Quad9 to block pirate tennis streams or pay 1,000 euros a day. The 9.9.9.9 resolver will stop serving France instead. #france #quad9 #dns

Freedom House: internet freedom fell for a 16th year as Iran joined the worst Freedom House says internet freedom fell in 16 of 38 countries. Iran's 88-day blackout, Russia's VPN curbs and age checks drove the decline. #iran #russia #internetfreedom

Tech coalition with Google and Cloudflare warns against making VPNs block pirate sites i2Coalition's VPNs at Risk report says piracy blocking orders for VPNs can hit corporate networks and push providers to cut off users preemptively. #vpn #piracy #siteblocking

Judge orders Meta to pay New Mexico $25 billion for misleading Facebook users on privacy A New Mexico judge set Meta's penalty at $25 billion plus 15% annual interest for deceiving Facebook users about data control. Meta will appeal. #meta #facebook #newmexico

EU opens DSA case against Booking.com over fake listings and phishing The European Commission is investigating Booking.com over fake listings, phishing with guest data and unlabelled paid listings. How to spot the scam. #bookingcom #eu #phishing

Azerbaijan seeks arrest of seven Turkish citizens over posts on hijab ban A Baku court issued arrest warrants in absentia for seven Turkish citizens, including Fatih Tezcan, over posts and speeches against the school hijab ban. #azerbaijan #turkey #freedomofspeech

Greek parliament committees approve social media ban for under-15s Two Greek parliamentary committees approved a social media ban for children under 15. From 2027 Kids Wallet will check age; plenary vote on 22 October. #greece #socialmedia #ageverification

Domain regulator ICANN tests fast police access to hidden domain owner data ICANN is testing a verified login with the FBI and Interpol so police can request hidden domain owner data from registrars in urgent cases. #icann #whois #fbi

Former French PM Attal wants power to block social media in riot areas Gabriel Attal wants a temporary, targeted block of social networks where riots break out. His 2024 TikTok block in New Caledonia was ruled illegal. #france #socialmedia #blocking

US threatens EU with retaliation if Brussels limits Starlink's spectrum The US ambassador warns of 'devastating' retaliation if the EU reserves most of the 2 GHz satellite-to-phone band for European operators from 2027. #starlink #eu #usa

NGINX fixes flaws that can let attackers run code on servers without logging in NGINX 1.30.6 and 1.31.7 fix five flaws, three rated 9.2 by F5. They only hit certain configurations. How to check your server. #nginx #vulnerability #cybersecurity

Telegram's letter in a US court shows what it hands to investigators A Telegram letter filed in a US court lists what it gave investigators: user ID, phone number, name and last login IP. It calls the handover voluntary. #telegram #usa #privacy

Amsterdam police seized an Italian activist provider's server at US request Police in Amsterdam took an Autistici/Inventati server and are copying its data for the US, which put the Italian collective on its terrorist sanctions list. #netherlands #usa #autisticiinventati

Why VPNs in Russia now go down by whole hosting subnets Russia now blocks whole address ranges at hosting firms, not single VPN servers. How it works, the wave since September and who else gets cut off. #russia #vpn #roskomnadzor

Germany plans to keep children under 13 off social media Germany's cabinet backed key points for banning social media for under-13s. It is not law yet, and age checks via the d-you wallet are voluntary. #germany #socialmediaban #children

google.ru and youtube.ru were switched off in the .RU registry for hours Google's Russian domains lost their delegation in the .RU registry and vanished worldwide for hours. What is known and why a VPN did not help. #russia #google #youtube

Google now guesses Malaysian users' age from their search history Google estimates users' age from account signals such as searches. Under-18s get restrictions; wrongly flagged adults must upload an ID or a selfie. #malaysia #google #ageverification

Iran sentences a 23-year-old student to death over a social media post A court sentenced accounting student Najmeh Amini to death for "insulting the Prophet" in a post. The verdict can be appealed. Rights groups are alarmed. #iran #freedomofspeech #deathpenalty

The password 123456 opened access to Denmark's population register Accounts at the firm whose access exposed 8.8 million people in Denmark's CPR register used 123456. An invoice, not security, revealed the breach. #denmark #cpr #passwords

SpaceX restricted Starlink for moving Ukrainian military terminals without warning Overnight, Starshield terminals moving above about 160 km/h started losing their link. Ukrainian units say missions were disrupted. SpaceX is silent. #ukraine #starlink #spacex

Hacker puts 10 million records from French contractor Solutions30 up for sale A 34 GB database attributed to Solutions30 is for sale. A checked sample holds real customer records. The main risk: scammers posing as technicians. #france #solutions30 #databreach

South Korea blocks the websites of 27 crypto exchanges, including KuCoin and MEXC Regulators are blocking the sites of 27 unregistered exchanges after their apps were removed in 2025. Users may struggle to withdraw funds. #southkorea #kucoin #mexc

Australia: hacker sells patient documents from the country's largest cancer care group Icon Oncology Group confirmed a breach at a supplier. A hacker called 2019 sells over 31,000 documents with diagnoses, addresses and Medicare details. #australia #icongroup #databreach

Hackers heated up fridges in French supermarkets, spoiling millions of euros of food Attackers hijacked Danfoss refrigeration controllers overnight: 150-200 Intermarché and up to 100 U stores lost fresh food. Paris prosecutors investigate. #france #danfoss #intermarché

Hack of a La Poste mail service in France exposes addresses of 22 million people An attacker reached Maileva, La Poste's mailing service: names and addresses of 22 million letter recipients, plus business IBANs. What scams to expect. #france #laposte #maileva

Japan declares a cyber emergency and tells banks to stop trusting ID photos 20+ Japanese firms hit in weeks. After Times Car leaked 1.6 million ID images, the regulator wants banks to read ID chips instead of photos. What helps. #japan #timescar #identityverification

Ledger finds a hidden implant in a wallet sold by its reseller after a $93 million theft About $93 million vanished from Ledger wallets sold by CryptoBilis in Southeast Asia. Ledger found an unauthorized implant in one device. What buyers should do. #ledger #malaysia #cryptocurrency

Belarusians' complaints to state agencies leak into a Telegram lookup bot Names, phones and full texts of appeals sent via Obrashcheniya.bel turned up in the Sherlock bot. The ministry closed the portal and is silent on the leak. #belarus #telegram #dataleak

Turkey closes social media to under-15s from November 1, with age checks via e-Devlet Platforms must check age with an e-Devlet token that shows only whether a user is over 15 or 18. Teens get private accounts and no ads. #turkey #socialmediaban #ageverification

Public exploit gives root on Linux machines running AnyDesk 8.0.2 A working exploit runs code as root through AnyDesk 8.0.2 on port 7070 without a password. The June fix had no CVE. How to check and update. #anydesk #linux #vulnerability

Delhi police detain journalists and seize their phones at protest against election chief Police detained about 500 people and several reporters at a protest against India's election chief, took phones and cut mobile internet across 4 km. #india #internetshutdown #pressfreedom

Tor Project pauses joint promotion with Mullvad over a co-founder's political donation Tor keeps working on Mullvad Browser but drops co-branding after co-founder Daniel Berntsson gave 5 million kronor to a populist party. #mullvad #tor #torproject

Poland's Sejm again passes a law letting the regulator block websites without a court 242 MPs backed the bill Nawrocki vetoed in January. The telecoms regulator UKE could order blocks; courts step in only on appeal. Next: the Senate. #poland #siteblocking #censorship

Turkey detains two journalists over an X post about the fund scandal Sözcü's Mustafa Balcı and Bizim TV's Şaban Sevinç face Turkey's disinformation law over a photo posted on X. Prosecutors want them jailed. #turkey #journalists #pressfreedom

Tim Cook praises EU law that would bring age checks to app stores In Strasbourg, Apple's chairman praised the EU KIDS Act, which also covers app stores. In the US, Apple fought app store age verification. #eu #apple #timcook

Japan's skyticket says 14.6 million customer records may have leaked Names, addresses, birth dates and 4.13 million password hashes from the Japanese airfare site may be exposed. What customers should do now. #japan #skyticket #databreach

Paris court won't fine Cloudflare for keeping 1.1.1.1 out of piracy blocking Canal+ wanted €50,000 a day per pirate F1 and MotoGP site. The court said blocking via Cloudflare's CDN was enough. Quad9 faces a similar case next. #france #cloudflare #quad9

India tells social media to put government complaints first amid protests MeitY told social media to fast-track complaints from authorised agencies and label misleading posts, amid Delhi protests. Key terms stay undefined. #india #meity #socialmedia