ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...

Attackers abuse Microsoft Teams external chats and fake IT support identities to gain remote access, deploy malware, and steal data.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...