News
RSS FeedAnnouncements, technical notes, and occasional commentary from our team.
Node2Shell: Brotli Decoder Flaw in Node.js
One day after the PHP2Shell emergency, Node.js patched a high-severity flaw in its bundled Brotli decoder that Imperva demonstrated as remote code execution against the official Node.js image.
PHP2Shell: Two Critical RCE Flaws in PHP
Two vulnerabilities in the PHP engine itself allow unauthenticated remote code execution on nearly any PHP website, no application flaw required.
Continuous Adversarial Security
The annual penetration test has a quiet problem: it's a snapshot of an environment that never stops moving. By the time the report is bound and delivered, a …
Cordyceps Flaw Leads to Supply Chain Attack
It's been almost a week since this dropped, but it's too good an example to skip: another reminder that the automation we trust to build and ship our …
node-ipc Backdoor Targets Developer and Cloud Credentials
Three versions of the widely used npm package node-ipc were confirmed malicious this week by researchers at Socket and StepSecurity.
RubyGems Registry Attack: 500+ Malicious Packages Pulled
RubyGems temporarily suspended new account registrations on May 12 after a coordinated spam-publishing campaign pushed over 500 malicious packages through newly registered accounts.
AI Deletes PocketOS Database
Cursor, running Anthropic's Claude Opus 4.6, autonomously decided to resolve a credential mismatch by deleting PocketOS's production database and all volume-level backups via a single Railway API call.
PAN-OS Vulnerability Exploited in the Wild
The flaw allows an unauthenticated remote attacker to trigger an out-of-bounds write via specially crafted network packets, leading to arbitrary code execution with root privileges on the affected …
Copy Fail Linux Kernel Vulnerability
Cybersecurity researchers at Xint.io and Theori have disclosed a high-severity Linux local privilege escalation (LPE) vulnerability.
NIST NVD Changes
NIST has announced an update to how the National Vulnerability Database (NVD) handles CVE enrichment. The driver is scale: vulnerability submissions grew by 263% between 2020 and 2025, …