一个被称为“HTTP2Shell”的严重Brotli压缩漏洞可能导致内存损坏和远程代码执行攻击。 该漏洞影响广泛使用的软件，包括Node.js、Python软件包以及.NET应用程序。

2026年10月28日，界面新闻独家披露：一场没有键盘敲击声、却比代码更滚烫的‘机器人革命’，正在深圳湾畔悄然完成首次压力测试——星尘智能（Astribot）举办的首届星尘OS机器人黑客松，用36小时、17支天马行空的开发团队、16款成功跑在真机上的App，硬生生把‘机器人能干啥’这个哲学命题，变成了‘我家扫地机器人刚给我写了幅行书’的日常现实。 这不是科幻预告片，这是2026年中国具身智能生态破 ...

已被 Cloudflare 收购的 VoidZero 发布了 Vite+ 1.0。这是其统一 JavaScript 工具链的首个稳定版本，距离 InfoQ 在 8 月报道的 Beta 版本发布约三个月。VoidZero 表示，这款采用 MIT ...

曾主导美国司法部反垄断诉讼的Jonathan Kanter与Doha Mekki创办AI法律平台FluxCap，获600万美元种子轮融资，平台已用于索赔超10亿美元的活跃诉讼，聚焦高风险复杂诉讼。

GitHub's Octoverse 2026 report shows developer activity more than tripled in two years, with AI coding agents now starting ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

New York, NY, October 27th, 2026, CyberNewswire The root-cause fix will take weeks; protection can’t wait Sweet Security ...

Chainguard's Patrick Smyth told AI Engineer exploits now beat patches by 70 days, citing Mandiant and frontier agents. The ...

CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

Recently, while following security news, I came across a rather chilling story. It concerns a memory corruption vulnerability ...

A high-severity flaw could expose AI training data, model artifacts, and cloud credentials when a crafted model configuration ...