#brotli
LightNews LightNews
doriantaylor.com
new things? or just brotli
November 2, 2026 at 3:19 AM
tech-trending.bsky.social
Patch now: PHP2Shell, Brotli, and eMudhra guidance for customers
https://www.microsoft.com/en-us/msrc/blog/2026/10/patch-now-php2shell-brotli-emudhra-guidance-for-customers
Patch now: PHP2Shell, Brotli, and eMudhra guidance for customers
www.microsoft.com
October 31, 2026 at 3:33 AM
threatintel.microsoft.com
Patch now: PHP2Shell, Brotli, and eMudhra guidance for customers msft.it/63328aFLOu
msrc.microsoft.com Microsoft Security Response Center @msrc.microsoft.com · 3d
PHP2Shell, a Brotli decoder vulnerability, and the eMudhra certificate authority key issue each require attention. Microsoft is updating the services it operates and releasing fixes for affected products.
October 30, 2026 at 10:56 PM
eulinuxevolutionde.eurosky.social
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....

#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
Die US-Cybersicherheitsbehörde CISA warnt vor der aktiv ausgenutzten Sicherheitslücke HTTP2Shell in der Kompressionsbibliothek Brotli. Auch Sicherheitsforscher haben erste Angriffsversuche registriert...
winfuture.de
October 29, 2026 at 12:28 PM
hrbrmstr.mastodon.social.ap.brid.gy
The potential brotli carnage has expanded in scope https://fieldeffect.com/blog/update-brotli-flaw-exposure-expands
Update: Brotli flaw exposure expands
New research shows the Brotli flaw CVE-2026-111497 reaches beyond web traffic. See newly affected products, file-processing risks, and mitigation steps.
fieldeffect.com
October 31, 2026 at 10:14 AM
distraction.engineer
Brotli does sound pretty tasty 🥦
October 28, 2026 at 4:37 PM
getpacketai.bsky.social
Critical Brotli decoder vulnerability hits Node.js, Python, Bun, and .NET—a memory-corruption flaw affecting decompression across the stack. Patch your Brotli implementations…

https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

#cybersecurity #infosec
October 31, 2026 at 1:30 PM
goat.navy
Not brotli
ubuntu.com/security/CVE...
CVE-2026-98432 | Ubuntu
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
ubuntu.com
November 2, 2026 at 3:20 AM
grapheneos.org
We're using the Ina library from the Accrescent project to generate and use deltas. We're also using Dropbox's brotli-decompressor library to replace gzip compression using Android's DEFLATE implementation. Both are pure Rust libraries fully avoiding unsafe code other than the exported C FFI API.
October 31, 2026 at 9:15 PM
grapheneos.org
The latest version extends the cryptographic hashes to covering the compressed APKs and deltas to verify those prior to decompression. This means a compromised update server can't use the new Rust Brotli decompression library and Rust delta library as additional attack surface to exploit the client.
October 31, 2026 at 9:21 PM
r-netsec.bsky.social
WordPress pingback and Brotli RCE
WordPress pingback and Brotli RCE
fortbridge.co.uk
November 2, 2026 at 9:39 AM
hapsis.bsky.social
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

www.helpnetsecurity.com/2026/11/01/w...

#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability - Help Net Security
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down
www.helpnetsecurity.com
November 1, 2026 at 10:55 AM
furry.law
After the PHP, Node.js, PXE Driver, TCL, and Brotli Decoder vulnerabilities, the eMuhdra CA weakness, the Polymarket and Binance hacks, and having European freezers turned up to 50C...
I guess Cybersecurity Awareness Month was a success? Is everyone aware now?
November 2, 2026 at 5:53 PM
blowdart.me
lol, brotli rce in responses
October 28, 2026 at 1:16 PM
grapheneos.org
The latest arm64 Vanadium browser APK is 325MB. It was previously downloaded as a 131MB gzip file created with zopfli. It's now downloaded as a 17MB update for users who were on one of the most recent 2 Vanadium releases. It's down to 95MB via Brotli for users on older versions without deltas.
October 31, 2026 at 9:23 PM
r-dotnet.at.shendrick.net
Brotli CVE-2026-111497 now patched in .NET, VS and PowerShell. How are you finding where Brotli decoding actually happens in your apps? https://www.reddit.com/r/dotnet/comments/1xfwvb3/brotli_cve2026111497_now_patched_in_net_vs_and/

#dotnet
October 29, 2026 at 8:45 PM
wordfenceofficial.bsky.social
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites

www.wordfence.com/blog/2026/11...
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unof...
www.wordfence.com
November 2, 2026 at 6:19 PM
5. CVE-2026-111497 · 7 people 🔥
🟥 Critical 9.2 · Google Brotli

Out-of-Bounds Write in Google Brotli Decoder
November 1, 2026 at 7:15 PM
campuscodi.risky.biz
Brotli bug is now exploited in the wild after a PoC was released on Monday

www.cisa.gov/news-events/...

ellio.tech/en/blog/node...

previdian.com/CVE-2026-111...

x.com/fede_k/statu...

x.com/csirt_it/sta...
October 29, 2026 at 1:25 PM
duonggiakhanh.com
🚨 Node2Shell (CVE-2026-111497) is now on CISA's KEV list: the Brotli decoder bug is being actively exploited. If your Node.js app decodes Brotli from untrusted input, update to 22.23.4 / 24.22.1 / 26.12.1 now. Bun and Python brotli need updates too. #cybersecurity #appsec
https://www.sophos.com/en-us/blog/node2shell-cve-2026-111497-in-active-exploitation
www.sophos.com
October 29, 2026 at 1:00 PM
deskmodder.de
Total Commander 11.58.1 mit Sicherheitsupdate (Brotli CVE-2026-111497) und mehr
Total Commander 11.58.1 mit Sicherheitsupdate (Brotli CVE-2026-111497) und mehr
www.deskmodder.de
October 29, 2026 at 11:47 AM
securityonline.bsky.social
Brotli vulnerability CVE-2026-111497 affected products list: fixes for Node.js, .NET, Envoy, PAN-OS and distros, plus VMware and others still unpatched.

#Brotli #CVE2026111497 #NodeJS #DotNET #VMware #PatchNow #CISAKEV #Vulnerability
Brotli Vulnerability Affected Products: Vendor Patch Status List
TL;DR CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, versions 1.0.3 through 1.2.0. Because Brotli is bundled into runtimes, proxies, appliances and file tools, this Brotli vulnerability reaches far beyond one library. This page tracks the affected products, which have fixes and which are still waiting. Why It Matters CISA added the Brotli vulnerability to its Known Exploited Vulnerabilities catalog on October 27, 2026.
securityonline.info
November 2, 2026 at 1:35 AM
infosec.skyfleet.blue
CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
oss-sec: CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
Posted by Timothy Legge on Oct 31 ======================================================================== CVE-2026-115946 CPAN Security Group ======================================================================== CVE ID: CVE-2026-115946 Distribution: XS-libbrotli Versions: before 1.2.1.0 MetaCPAN: https://metacpan.org/dist/XS-libbrotli XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library...
seclists.org
November 1, 2026 at 2:12 AM
seanchiggins.com
Microsoft releases emergency .NET patches for critical Brotli flaw buff.ly/fZbCzyH
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
ift.tt
October 30, 2026 at 8:44 PM
grapheneos.org
GrapheneOS App Store version 37 released:

github.com/GrapheneOS/A...

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

discuss.grapheneos.org/d/43210-grap...

#GrapheneOS #privacy #security #android
Release 37 · GrapheneOS/AppStore
Notable changes in version 37: add support for delta updates based on Ina from Accrescent to reduce the download size of app updates (Rust library with Kotlin wrapper) switch from gzip to Brotli c...
github.com
October 31, 2026 at 7:14 AM