Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Read the latest updates about Search results for MacroxssZ on The Hacker News cybersecurity and information technology ...

Just as domestic services were shutting down one after another due to a critical PHP vulnerability, Node.js also released a ...

Explore the latest news, real-world incidents, expert analysis, and trends in Thunderstrike+attack — only on The Hacker News, ...

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

The HTTP2Shell Brotli flaw also impacts .NET, FFmpeg, ClickHouse, and Apache Arrow, so updating Node.js alone may leave other vulnerable applications exposed.

The memory-corruption vulnerability can expose sensitive data and, according to Node.js, potentially enable remote code ...

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...