Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Help Net Security

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.
InfoQ

Microsoft Previews dotnetup: Toolchain Manager for .NET SDKs and Runtimes

Microsoft has released a public preview of dotnetup, a cross-platform toolchain manager that installs and updates .NET SDKs ...
HackerNoon

Why AI Coding Agents Struggle on Windows (And How to Fix Them)

Coding agents trip over PowerShell and hang on dev servers. Four fixes that hold on Windows: argument arrays, hooks, process ...

Settings to prevent Claude Code from deleting or overwriting files, and how to verify they are working

Have you ever been concerned that while asking Claude Code to perform tasks, it might delete or rewrite files you wanted to keep?This article explains how to add settings on your computer to stop such ...