Check Point Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۴۷

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability. The vulnerability is associated with Brotli decompression, so defenders need to find vulnerable implementations across applications and infrastructure, confirm whether untrusted compressed data can reach them, and patch the affected component. AT A GLANCE · CVE: CVE-…

Vulnerabilities & Zero-Day AI Security

Read the full article at Check Point Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۳۰

Vulnerability exploitation rising as the root cause of many breaches

More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means for breaking into corporate systems. Incident response firm LevelBlue’s Q3 findings show that vulnerability exploitation accounted for 14% of initial access cases, up from 4% in Q2. The finding represents more of a comeback than a fresh surge because in Q1 LevelBlue already recorded vulnerabilities as the root caus…

Vulnerabilities & Zero-Day Phishing Data Breach

منبع

SecurityWeek پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۱۷

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service. Attackers can exploit it remotely, without authenticating, to force the device […] The post Attackers Exploit Second Cisco Fir…

Vulnerabilities & Zero-Day

منبع

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۳۰

Securing MCP servers before the AI rollout outpaces security

Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved it, and now you’re finding out about it. It’s a typical story I hear all the time, and I’ve lived it myself. You’ve heard everything about models and LLMs, but now you see this new term all over the place: Model Context Protocol (MCP) servers —and the realization that you now need to make sure they are implemente…

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

منبع

دیجیاتو پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۱۳

از ثبت داده تا اقدام هوشمند؛ نسل نوین ERP در عصر هوش مصنوعی

گزارش دیجیاتو از سمینار «سفر به سازمان‌های هوشمند؛ از Co-Pilot تا Agentic ERP» را در ادامه ببینید. The post از ثبت داده تا اقدام هوشمند؛ نسل نوین ERP در عصر هوش مصنوعی appeared first on دیجیاتو.

AI Security AI & Machine Learning

منبع