Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
cyberpress

Cloudflare Releases Emergency WAF Rules for Critical Node.js Brotli Vulnerability

Cloudflare announced an emergency update to its Cloudflare Managed Ruleset, adding two web application firewall rules for the ...
The Hacker News

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed ...
Help Net Security

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
cyberpress

Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...
The Windows Club

File Explorer crashing, freezing or has stopped working in Windows 11

If your Windows File Explorer crashes or freezes, or you see an error message Windows Explorer has stopped working and is restarting, on your Windows 11/10 computer ...