Node2Shell reaches .NET: Microsoft's emergency Brotli patches
Notas do episódio
Evening edition, Monday 26 October 2026
Microsoft has shipped emergency .NET updates for CVE-2026-111497, the Brotli flaw behind Node2Shell. No exploitation in the wild is reported yet, but proof-of-concept code is public. The catch is the runtimes bundled inside your apps and containers.
Sources
- BleepingComputer: Microsoft releases emergency .NET patches for critical Brotli flaw
- Microsoft .NET blog: October 2026 out-of-band security updates
- Imperva: Node2Shell, from Brotli data to remote code execution
- The Record: Quest Diagnostics warns patient data may have been stolen
- BleepingComputer: Quest Diagnostics confirms data breach exposed patient records
- The Record: Ukraine warns hackers are exploiting Chinese-made Dahua cameras