Node2Shell in Go: Brotli Flaw Expands to Traefik, Fiber, Iris In brief Node2Shell is not Node.js-only: Sweet Security found the same Brotli flaw class in Go, with a fix pushed Oct 23. What Traefik, Fiber and Iris users must check. The Go Brotli library is a direct or indirect dependency of major HTTP frameworks including … Read more
In brief One week after PHP2Shell, mass scanning runs at millions of attempts a day while vendors still ship fixes and unpatched sites stay exposed. Cloudflare chief executive Matthew Prince said attempts on Cloudflare’s network rose from thousands before disclosure to millions afterward, according to Reuters coverage. Most observed activity so far is scanning for … Read more
In brief CISA’s Oct. 26 deadline covers actively exploited flaws in Collabora Online and Arista VeloCloud. Who is affected, what to patch to, and how to check for compromise. CISA added CVE-2026-110447 and CVE-2026-114625 to its Known Exploited Vulnerabilities (KEV) catalog on October 23, 2026, citing exploitation in the wild. Federal civilian agencies must remediate … Read more