Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

Read the latest updates about Search results for cybersource toma amex on The Hacker News cybersecurity and information ...

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Sunday, October 25, 2026 Here are today's three topics for those managing web systems and API infrastructure for data ...

Explore the latest news, real-world incidents, expert analysis, and trends in data+stealer — only on The Hacker News, the leading cybersecurity and IT news platform.

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...