Attackers are increasingly exploiting Node.js, a widely trusted, open-source JavaScript runtime, to deliver sophisticated malware, steal sensitive data, and compromise entire systems. Recent campaigns ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Recently, there have been fewer topics about Even G2. Meanwhile, a "critical PHP vulnerability" has become a hot topic!

According to the security industry, the Node.js project announced through an official security advisory on October 21 that a ...

Microsoft is calling attention to an ongoing malvertising campaign that makes use of Node.js to deliver malicious payloads capable of information theft and data exfiltration. The activity, first ...

Security concerns are rising after vulnerabilities were disclosed in PHP, the open-source JavaScript runtime Node.js and the ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

Microsoft Defender Experts identified a coordinated developer-targeting campaign delivered through malicious repositories disguised as legitimate Next.js projects and technical assessment materials.