CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

CERT-In has issued a critical advisory for Google Chrome users. The agency says that the Chrome browser has some severe flaws ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

A newly identified Falcon, also tracked as XG or Xiàng Gē. It is a NodeJS-based command-and-control (C2) framework that takes over victim browsers by running malicious JavaScript.

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

The FaceStealer scheme used hijacked messaging accounts, fake video meetings and secretly recorded webcam footage to target ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.

Software engineer Oleksiy Krychevsky almost became a victim of a cyberattack during a seemingly ordinary live-coding ...