Brotli解壓縮漏洞CVE-2026-111497的影響範圍已擴及Node.js、.NET、PHP及多個Linux發行版，但各平臺修補進度不一。研究人員也證實，該漏洞也可透過圖片解碼等非HTTP資料處理功能觸發 擔心錯過重要的資安新聞嗎？資安日報與資安週報即日起推出免費電子報訂閱，每天每週直送資安要聞，提供專業、易懂、便於轉述的最佳中文資安情報，助你掌握全球與臺灣最新資安脈動。

AI can make it easier to update legacy apps to Rust for stronger security, but a language switch does not solve system design ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Many Linux veterans still vouch for Vim for editing documents and writing code. As a Linux user myself, I can see why. When ...

Jac combines Python and TypeScript runtimes and toolchains, while Jaseci provides a runtime for building with AI agents. Its creator says the language could reduce the complexity agents face when ...

Most programming languages were written for human programmers, but that's about to change. University of Michigan professor ...

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

Hello everyone! This is Hatchobori-chan.From yesterday to today, various vulnerability reports have been flying in.GitLab, ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.