A critical bug in the Brotli decompression code used by Node.js, .NET, Python tools and more is now being attacked.

IntroductionThis summary covers PRs merged between October 26 and 27, 2026, across six repositories, including Fluent UI, ...

IntroductionI am a system engineer in my 50s, responsible for the maintenance and in-house development of hospital systems at ...

Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...

Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully ...

Microsoft has released a series of emergency updates for .NET to address a serious buffer overflow vulnerability in the Brotli decoder. The fixes address the ...

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.

Microsoft releases urgent .NET security updates for Brotli and Linux flaws, fixes earlier patch issues, and urges developers ...

Microsoft released out-of-band security updates on October 25, 2026, to fix a Brotli decompression vulnerability that could ...

About four weeks before .NET 11.0 is scheduled to ship, Microsoft has released a second release candidate that still includes breaking changes.

Windows 11 KB5127648 and KB5127694 updates reportedly trigger Xbox Live sign-in error 0x87DD0005, blocking access to Microsoft games.