A critical bug in the Brotli decompression code used by Node.js, .NET, Python tools and more is now being attacked.
Catch up with this week's Microsoft stories in our latest recap. Windows 11 received a new update with a bunch of new ...
On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...
"AWS will surely fix Node.js vulnerabilities for us."When using Lambda, it's easy to think that way.However, with this Brotli ...
Microsoft issues critical out-of-band .NET security patch after confirming impact of Google Brotli algorithm vulnerability, ...
Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...
Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.
Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET against it.