• Brotli bug reaches far beyond Node.js (CVE-2026-111497)
• Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
• Hackers Infect 953 Online Stores With Scanner-Evading Code
• OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
• Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
• Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
• Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
• CISA lays out plan to push cyber adversaries out of US critical infrastructure
• Copenhagen University Breach Compromises Data on Half a Million People
• First ISC2 AI Security Certification Expected for Early 2027
• Watchdog Urges Police and Fire Service to Improve Cybersecurity
• CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
• Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
• Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
• Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
• Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
• PHP Publishes Mitigation Advice for New RCE Flaw
• Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
• Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise

A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js publicly disclosed it on October 21, 2026. “An attacker who can supply Brotli data that an application decompresses with node:zlib can corrupt process memory, which can lead to a crash, disclosure of process …