TikTok’s privacy update mentions immigration status. Here’s why.

In 2026, could any five words be more chilling than “We’re changing our privacy terms?” The timing could not have been worse for TikTok US when it sent millions of US users a mandatory privacy pop-up on January 22. The message forced users to accept updated terms if they wanted to keep using the...

CERTFR-2026-ALE-001

creationtimestamp| type| source ---|---|--- 2026-01-30 11:02:01+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115983706971608725...

UBUNTU-CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

GHSA-M3H4-65J5-6J8C

creationtimestamp| type| source ---|---|--- 2026-01-29 20:49:13+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115980353620259404...

CVE-2026-1637

creationtimestamp| type| source ---|---|--- 2026-01-29 19:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115980086235727489 2026-01-30 02:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7ny4xlv2t...

CVE-2026-1060

The WP Adminify plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.7.7 via the /wp-json/adminify/v1/get-addons-list REST API endpoint. The endpoint is registered with permissioncallback set to returntrue, allowing unauthenticated attacke...

CVE-2026-1587

creationtimestamp| type| source ---|---|--- 2026-01-29 13:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdkv5wt47d2i...

CGA-RCF5-3QPM-CV2G

Bulletin has no description...

CGA-FCC7-53QC-H47R

Bulletin has no description...

CGA-X8FG-5Q2F-79V7

Bulletin has no description...

CGA-VJM9-PX57-R6M8

Bulletin has no description...

CGA-H4WC-QRJP-C5QP

Bulletin has no description...

CGA-G425-P243-8QQH

Bulletin has no description...

CGA-CCJM-MCJR-752H

Bulletin has no description...

CGA-58PJ-4F24-8974

Bulletin has no description...

CGA-68V4-VPWF-C7GV

Bulletin has no description...

CGA-2X3W-CG52-VPJR

Bulletin has no description...

CGA-38XQ-JHR9-7P8P

Bulletin has no description...

PT-2026-5258

Name of the Vulnerable Software and Affected Versions TeamViewer DEX former 1E DEX versions prior to 24.5 Description A command injection issue exists in TeamViewer DEX formerly 1E DEX related to the 1E-Nomad-RunPkgStatusRequest instruction. Insufficient input validation allows attackers with...

Linux Distros Unpatched Vulnerability : CVE-2026-24684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is...