Tag: Node.js
Cybersecurity Threat Advisory: Critical Brotli RCE flaw
Cybersecurity Threat Advisory: Critical Brotli RCE flaw
A critical buffer-overflow vulnerability, tracked as CVE-2026-111497 and referred to as “Node2Shell,” affects Google Brotli and numerous applications and platforms that rely on Brotli decompression. Attackers are actively exploiting the vulnerability, which may allow remote execution of arbitrary code on...
Cybersecurity Threat Advisory: RoadK1ll Node.js WebSocket implant
Cybersecurity Threat Advisory: RoadK1ll Node.js WebSocket implant
Recent reporting has identified a Node.js–based post-exploitation implant known as RoadK1ll, observed in real-world intrusions as a lateral movement and network pivoting tool. Read this Cybersecurity Threat Advisory to protect you and your clients’ environments. What is the threat? RoadK1ll...
