Crafted Brotli input yields code execution on a stock Node.js 24 build, Imperva shows
Imperva demonstrated crafted Brotli input causing code execution on a stock Node.js build via request and response paths, with fixes and limits explained.
CyberWorldOps
Latest news
More news
Page 2 / 91 · 821 articles
Capcom says intruders reached 11.7 million CAPCOM ID accounts
Capcom says intruders reached 11.7M CAPCOM ID accounts, exposing emails and login details. Most passwords and payment data were unaffected.
eMudhra Quits Global TLS Certificates After Weak Intermediate Keys Surface
eMudhra will leave the global TLS business after researchers found weak intermediate keys, prompting browser blocks and scrutiny of its ceremony flaw.
Arista Fixes VeloCloud Orchestrator Flaw Under Active Exploitation (CVE-2026-114625)
Arista issued fixes for CVE-2026-114625, an actively exploited VeloCloud Orchestrator SQL injection allowing authenticated privilege escalation.
Attacker Hijacks 333 Tor Exit Relays to Intercept SSH Logins and Attempt to Read Plaintext Email
Attacker hijacked 333 Tor exit relays to redirect SSH logins to 12 servers and block encrypted email ports to attempt plaintext collection.
PHP2Shell Flaws Face Broad Exploitation as PHP Developers Release Emergency Updates
Amazon reports broad exploitation of PHP2Shell flaws as PHP developers release security updates; NSA urges immediate patching of servers and databases.
Operation Serengeti III Disrupts 10,909 Malicious Networks Across 21 Countries
Operation Serengeti III disrupted 10,909 networks across 21 countries, with 1,462 arrests and over $105M recovered, INTERPOL reports.
Compromised LiteLLM 1.107.0 Release Deployed a Credential Stealer Through PyPI and Containers
Compromised LiteLLM v1.107.0 distributed credential-stealing code via PyPI and containers; researchers reported stolen AWS credentials were tested.
Railway Warns Customer Secrets May Be Exposed and Urges Credential Rotation
Railway warns an intruder may have accessed encrypted environment variables and urges customers to rotate secrets and review logs for unusual activity.