Google News Articles
Recent news articles refferecing the vendors vulnerabilities.
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
Google fixes 216 Android flaws, including 23 Critical bugs and a remote code execution vulnerability requiring no user interaction.
15 hours ago
Help Net SecurityCVE-2026-111497Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up - Help Net Security
HTTP2Shell reveals the gap between AI bug discovery and fixes. Sweet Security Virtual Patching blocks attacks while patches arrive.
2 days ago
It Security NewsCVE-2026-111497Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up - IT Security News
2026-11-03 08:11 HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python...
2 days ago
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability - Help Net Security
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down
4 days ago
It Security NewsCVE-2026-111497IT Security News Roundup: 2026-10-29 Evening - IT Security News
IT Security News: Evening roundup, 2026-10-29 Summary The evening was dominated by large-scale compromises and fast-moving exploitation. Binance and Polymarket both suffered crypto-related attacks, a WordPress core remote-code-execution flaw was being probed within hours of its patch, and a UEFI…Rea...
6 days ago
Dev CommunityCVE-2026-111497Critical Brotli Decompression Vulnerability (CVE-2026-111497) Exploited: Urgent Patches Released for Node.js and .NET
Introduction: The Brotli Decompression Vulnerability—An Active Threat to Critical... Tagged with security, vulnerability, brotli, patching.
1 week ago
It Security NewsCVE-2026-111497IT Security News Roundup: 2026-10-28 Evening - IT Security News
IT Security News: Evening roundup, 2026-10-28 Summary The evening was dominated by supply chain and infrastructure exposure. AWS published guidance on the Brotli decoder flaw (CVE-2026-111497) that has rippled across runtimes, a critical EDK2 firmware bug put most servers at…Read more →
1 week ago
It Security NewsCVE-2026-111497CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE - IT Security News
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is also...
1 week ago
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell.
1 week ago
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
CISA adds exploited Adobe Commerce and Google Brotli flaws to its KEV catalog as attackers breach stores and target vulnerable decoders.
1 week ago
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged VMware impact.
1 week ago
It Security NewsCVE-2026-111497Brotli bug reaches far beyond Node.js (CVE-2026-111497) - IT Security News
2026-10-27 20:10 A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as...
1 week ago
Help Net SecurityCVE-2026-111497Brotli bug reaches far beyond Node.js (CVE-2026-111497) - Help Net Security
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
1 week ago
ItnewsCVE-2026-111497Fixes for Google Brotli flaw arrive for Microsoft .NET, PHP and Linux
Key points Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched it last week. Microsoft rates the bug 8.1 out of 10 in .NET and has...
1 week ago
It Security NewsCVE-2026-111497IT Security News Roundup: 2026-10-26 Evening - IT Security News
IT Security News: Evening roundup, 2026-10-26 Summary The evening was dominated by AI-related security stories and fresh exploitation of freshly disclosed software flaws. Attackers are weaponizing public PHP2Shell exploit code, a LiteLLM supply-chain compromise traced back to a single unrotated…Read...
1 week ago
WebpronewsCVE-2026-111497Why .NET Shops That Patched on Oct. 13 Need Microsoft's Brotli Update Too
Microsoft's Sunday out-of-band .NET release fixes the Brotli decoder bug CVE-2026-111497 and delivers complete fixes for two flaws the Oct. 13 update left unfinished.
1 week ago
It Security NewsCVE-2026-111497CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder - IT Security News
Overview On October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js. The vulnerability affects the Node.js...
1 week ago
Microsoft releases emergency .NET security fixes for Google Brotli bug
Redmond joins growing list of software maintainers scrambling to patch compression flaw
1 week ago
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
1 week ago
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
1 week ago
CybersecuritynewsCVE-2026-111497Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability
Cloudflare released emergency WAF rules for CVE-2026-111497, covering Brotli-encoded requests and the Next.js image optimization endpoint.
1 week ago
SwapupdateCVE-2026-111497Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software - SwapUpdate
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi
2 weeks ago
WebpronewsCVE-2026-111497A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time
Google's Brotli decoder bug, CVE-2026-111497, was found by OpenAI's Codex Security team and fixed in the source code in February, but no release shipped the fix until Wednesday. Node.js, Bun, Envoy, Istio and Python's Brotli packages now have patched versions.
2 weeks ago
The Hacker NewsCVE-2026-111497Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.
2 weeks ago
The Hacker NewsCVE-2026-85045Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
XBOW built an AI-assisted, three-bug Chrome exploit chain in six days that enabled Windows code execution; Google has fixed all three bugs.
3 weeks ago