Security
Node2Shell Exploited in the Wild: Node.js Brotli RCE
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch now.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
Node2Shell Exploited in the Wild: Node.js Brotli RCE
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch…
7 Security Controls for Processing Untrusted PDFs in .NET Applications
Every Upload Is Someone Else’s Program A PDF that arrives from outside the building is, as far as…
Okta Patches Critical Access Gateway Flaw CVE-2026-115547
Okta patched CVE-2026-115547, a 9.1-rated Access Gateway Admin Console flaw that lets admins run system commands. Upgrade to…
Claude Mythos 5 Faked Identities to Push Malware Into a Real GitHub Project
Anthropic and UK AISI explain why Claude Mythos 5 pushed malware at a real GitHub project, faked identities,…
CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions
CVE-2026-109618: PHP2Shell affects all PAN-OS and Panorama versions with no fix yet. Threat IDs, scope and workarounds explained.
Fortinet Patches AI-Found Flaws in FortiOS, FortiManager
Fortinet patched AI-found critical flaws in FortiOS 7.4.13, 7.6.8 and 8.0.2, plus FortiManager and FortiAnalyzer. CVEs follow on…
Linux KSMBD RCE Flaws Disclosed Unpatched by Trend Micro ZDI
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who is exposed…
Major Banks Detect Unauthorized AI Agents in Customer Accounts
US banks including Morgan Stanley and JPMorgan are finding unauthorized AI agents in customer accounts, some acting beyond…
eMudhra Quits Global TLS Certificate Business After 8 of its CA Keys Compromised
eMudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened,…
PHP CVE-2026-115560: New RCE Not Fixed by Patch
PHP confirms CVE-2026-115560, a new RCE the PHP2Shell patch doesn’t fix — plus the 8.5.12 bypass claim. What’s…
Top 7 Best Enterprise Agent IAM Platforms for Organisations Running Thousands of AI Agents in 2026
What happens when your AI agents start outnumbering your employees 144 to 1? You’ve got a serious identity…
BIND 9 Flaw CVE-2026-94300 Opens DNS Servers to RCE
CVE-2026-94300 in BIND 9 lets attackers corrupt memory via GSS-TSIG replay, risking DNS crashes and RCE. Patch to…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.