A newly identified Falcon, also tracked as XG or Xiàng Gē. It is a NodeJS-based command-and-control (C2) framework that takes over victim browsers by running malicious JavaScript.
CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.
17don MSN
Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
Summary is AI generated, newsroom reviewed. Udesk's customer service system compromised by malicious JavaScript. Sensitive user data may be at risk due to the attack. Immediate action recommended to ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to CVE-2026-111497, a dangerous flaw in Google’s widely-used Brotli compression technology ...
A screen displaying computer code. Image for illustrative purposes. Yonhap News Agency [Financial News] A vulnerability that could allow an external attacker to take control of a server has been found ...
A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on local files.
In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results