Security
Node.js patches Brotli code execution and TLS validation flaws
The October security release covers 10 CVEs and updates certificate trust data following the eMudhra incident.
Topic
vulnerabilities
All stories tagged “vulnerabilities.”
10 stories
Security
PHP patches two critical PHP2Shell remote execution flaws
Four supported branches have fixes; PHP says configuration changes alone do not provide complete protection.
Security
Cisco Talos details patched flaws in Windows, macOS and apps
The October disclosures include bugs in Photoshop, Foxit Reader, Apple’s CoreWLAN and Windows drivers.
Security
Creative soundbar fixes address Bluetooth and firmware flaws
Singapore’s security agency lists updated firmware for three Sound Blaster Katana models.
Security
Veeam fixes a flaw that gives backup viewers server control
The critical vulnerability affects version 12 builds, while Veeam says version 13 is unaffected.
Security
New Spectre attack pulls a Linux root password hash in minutes
Branch Target Reuse abuses stale branch predictions left behind when JIT engines reuse memory. It works on Intel, AMD and Arm chips.
Security
AI agent hacked a Dutch vulnerability group through two unknown flaws
DIVD, whose volunteers warn others about security holes, says an autonomous agent broke in through its Zammad helpdesk and got full control in seconds.
Security
Cloudflare containers could read data left behind by other customers
Deleted disk space went back into a shared pool without being wiped. Cloudflare says nobody but the researcher who found it used the flaw.
Security
Kiteworks asks customers to shut down servers over a possible attack
The file-sharing company says federal authorities warned it that a threat actor may target some of its systems this weekend.
Security
Cisco patches second exploited flaw in a week, this one rated 10
The ISE bug gives attackers root without a password and is already under attack, while version 3.0 gets no fix.