by Beck Bailey | Oct 23, 2026 | RSS
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64,...
by Beck Bailey | Oct 23, 2026 | RSS
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought....
by Beck Bailey | Oct 22, 2026 | RSS
Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams. The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.
by Beck Bailey | Oct 22, 2026 | RSS
Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator,...
by Beck Bailey | Oct 22, 2026 | RSS
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates....
Recent Comments