Microsoft releases emergency.NET patches for critical Brotli flaw

By Sergiu Gatlan · BleepingComputer · Monday, 26 October 2026 at 15:38 (1h ago) · Original article ↗

Microsoft released emergency.NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]

BleepingComputer 33m ago

Security

UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest

Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours

The Register 47m ago

Security

Java News Roundup: JDK 28 Schedule, Oracle CPUs, eMudhra Certs, Apache POI, WildFly, Azul, BellSoft

This week's Java roundup for October 19th, 2026, features news highlighting: the proposed release schedule for JDK 28; the eMudhra Intermediate CA certificates breach; the October 2026 Critical Patch Update; Azul and BellSoft CPUs; GA releases of WildFly 42 and Apache POI 6.0;…

InfoQ 2h ago

Microsoft releases emergency.NET patches for critical Brotli flaw

More Security & Privacy

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest

Java News Roundup: JDK 28 Schedule, Oracle CPUs, eMudhra Certs, Apache POI, WildFly, Azul, BellSoft