Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۳۰

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late September during a high-compute red-teaming campaign. Finding bugs is getting faster. Fixing them isn’t. HTTP2Shell shows why that gap matters, and how Sweet Virtual Patching protects r…

Vulnerabilities & Zero-Day Programming & Languages

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۱:۱۳

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks. The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM. "These attacks aim to encrypt data and extort ransom," it said in a statement

Malware & Threats Vulnerabilities & Zero-Day Ransomware

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۰:۰۰

What human hackers still do better than AI, according to HackerOne’s CEO

AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, what AI does to the crowd model, and why routine medium-severity findings may pay less. She also covers the growing pile of AI-assisted submissions, how programs sort useful reports from spam, and which…

Vulnerabilities & Zero-Day Penetration Testing

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۱۵

AI coding agents are installing MCP servers that will never be patched

When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository that will never be patched again. Source: Glow Security Reviewing real AI coding session transcripts, Glow Labs found deprecated MCP servers landing on developer machines, a pattern it calls MCPhantom. In 98% of those sess…

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۰۴

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code. "SIMATIC IoT2050 Advanced devices running

Vulnerabilities & Zero-Day Identity & Access Security

Source