‘We see more developers building and pushing way more projects’: GitHub COO Kyle Daigle

GitHub COO Kyle Daigle tells The Indian Express that AI coding tools are enabling more people to build software, while ...
Cyber Security News

Node2Shell Vulnerability Actively Exploited in the Wild, CISA Warns

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...
SecurityWeek

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged ...
Security Boulevard

CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Help Net Security

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

Google's Brotli Bug Could Let Hackers Hijack Apps, Crash Servers and Expose Data Across the Web

A critical vulnerability in Google's Brotli compression library could enable crashes, data exposure or system compromise.
CSO Online

Node2Shell puts Microsoft and Node.js on Brotli patch duty

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
cyberkendra.com

Node2Shell Exploited in the Wild: Node.js Brotli RCE

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...