Posts Tagged ‘active exploitation’
Brotli RCE Vulnerability Node2Shell Added to CISA KEV
The Brotli RCE vulnerability CVE-2026-111497, known as Node2Shell, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on October 27. Brotli is compression code that sits inside runtimes, web servers and browsers, so the flaw lives in places nobody lists as a product. On October 26, researchers still disagreed on how reliably it gives code…
Read MoreFortiSIEM RCE Vulnerability Now Has a Public Exploit
A FortiSIEM RCE vulnerability, CVE-2026-106173, now has a public exploit, and as of October 26 the Canadian Cyber Centre says open-source reporting indicates it is being exploited in the wild. FortiSIEM is the system many teams use to spot attacks, so a compromised appliance costs defenders visibility and hands an attacker a foothold next to…
Read MoreTop 5 Cybersecurity News
This week’s Top 5 Cybersecurity News keeps returning to the same uncomfortable pattern: the systems under attack are not the ones organizations watch closely, they’re the ones organizations trust by default. Identity platforms, remote-support tools, developer infrastructure, and mobile devices all exist specifically so that legitimate work can move faster and with less friction. This…
Read More