The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Anthropic’s AI Hid a Secret Message in the Stars. OpenAI’s Bot Found It.

The fact that AI can embed hidden messages in its outputs isn’t a major surprise. But this discovery is noteworthy because Fable was instructed to conceal a message without bein ...
BIOENGINEER

AI paints fake forests to sharpen real forest image classification

A conditional generative adversarial network tuned by an Adaptive Jaya Algorithm generated synthetic forest images that, ...

Vulnerabilities on the scale of PHP are 'still coming'—why are so many being found all of a sudden?

On October 23, 2026, the Nihon Keizai Shimbun published a headline stating, "Vulnerabilities on the scale of PHP 'still ...
GitHub

All pull requests

The Python programming language. Contribute to python/cpython development by creating an account on GitHub.

PHP並みの脆弱性は「まだ出てくる」──なぜ今、急にこれほど見つかるのか

2026年10月23日、日本経済新聞に「PHP並みの脆弱性『まだ出てくる』 米クラウドフレアCEOが予告」という見出しが出ました。 発言したのは、Cloudflare（クラウドフレア）という会社の ...
BLOGSPAN.NET

Brotli-Lücke betrifft mehr als Node.js: Auch Python, Bun und Envoy brauchen Updates

Brotli-Lücke CVE-2026-111497: Auch Python, Bun und Envoy brauchen Updates, nicht nur Node.js. Wer wirklich gefährdet ist und was jetzt hilft.
合同会社ロケットボーイズ

「HTTP2Shell」CVE-2026-111497、Node.js・Python・Bun・Envoyに影響 Brotliの重大脆弱性と修正版を確認

Brotliの重大脆弱性CVE-2026-111497（HTTP2Shell／Node2Shell）がNode.js、Python、Bun、Envoy、Istioに波及。CVSS、PoC公開状況、修正版、PHP2Shellとの違いを確認し、企業の資産・バージョン把握とアップデート計画を解説 ...