News & Protection
VPN and privacy news from the LiMP VPN team: data breaches, phone and account security, online scams, and practical advice on protecting your data in 2026.
MikroTik Patches Critical RouterOS Flaw as Active Attacks Surge
Latvia's CERT.LV confirms active MikroTik RouterOS exploitation: attackers plant a hidden “ops” admin account on compromised routers. Patches are out — update immediately.
F6 Warns: Fraudsters Now Hijack Legitimate Russian Sites
Russia's new domain registrant ID rules pushed fraudsters to switch tactics — now they hijack legitimate .ru websites instead of registering anonymous fake ones…
Read more
Pegasus Zero-Click Hits Serbian Students via iMessage
Citizen Lab confirmed Pegasus infected 14 Serbian activists via a zero-click iMessage exploit — no tap, no click, silent device takeover.…
Read more
Drama RAT: Android Trojan Disguises Itself as VPN App
Drama RAT Android trojan hides inside fake VPN and banking apps, then steals passwords and SMS codes via Accessibility abuse. Positive Technologies analysis, Se…
Read more
Microsoft Prompty CVE-2026-73299: One File Gives Full RCE
Positive Technologies found a CVSS 10.0 RCE flaw in Microsoft Prompty: one malicious .prompty file gives an attacker full code execution on a developer's machin…
Read more
5 Million WordPress Sites at Risk: SQL Injection in Backup Plugin
CVE-2026-19949 (CVSS 8.8) in All-in-One WP Migration lets unauthenticated attackers steal user databases and gain full site control — 3.25 million sites remain …
Read more
Telegram Desktop 7.1 Bug Wiped 800 GB of User Files
A spell-check library bug in Telegram Desktop 7.1 for Windows silently deleted all files in C:\custom — one user lost ~800 GB of data. Patched in v7.1.2.…
Read more
14,500 Dahua Cameras Hacked Across Russia and Ukraine
In a 35-day operation a single actor compromised 14,530 Dahua IP cameras across Russia and Ukraine using 2021 CVEs still unpatched in 2026, silently exfiltratin…
Read more
Mercor Breach: 4 TB of AI Contractor Data Hits the Dark Web
Hackers put 4 TB of Mercor data up for sale — passport scans, SSNs and video interviews of AI contractors working for OpenAI, Google and Meta.…
Read more
Telegram Accounts Hijacked: AI Clones Your Voice to Scam Contacts
Criminals steal your Telegram account via a fake mini-app, then use AI to clone your voice and send deceptive audio messages to your contacts.…
Read more
A Webpage Cracked iPhone's Kernel: Passwords and Crypto at Risk
Malicious WordPress themes triggered a Safari kernel exploit on iPhone XS–16: one page visit on iOS 18.4–18.6.x exposed Keychain, Wi-Fi passwords, and crypto wa…
Read more