The Hacker News

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
orcarouter.ai

Getting Kimi K3.1 Pro into Kimi Code CLI: Install, Login, and the Windows Trap

The shortest path to Kimi K3.1 Pro in a terminal: one install script, one /login, and the Git Bash requirement that breaks ...
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...