The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Decrypt

How I Vibe Coded My Smart TV—And Claude Killed It

Vibe coding your TV is impressive. Doing it without knowing exactly what you're touching is how you lose a rooted LG set and ...
Cyber Security News

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.
ainvest

The 2.94-trillion-token drain was ~$1.3 million. The freeze is the real story

Qubic halted its blockchain on October 18 to prevent stolen 2.94 trillion QU ($1.3M) from being moved after a wallet seed ...
The Hacker News

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...