News · via oss-security
Re: Brotli CVE-2026-111497
Posted by Alan Coopersmith on Oct 25 Sorry, copy & paste error - the second URL should have been: https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b
Coverage tagged "Google".
News · via Hudson Rock
Infostealers Weekly Report: 2026-10-19 – 2026-10-26
InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As cyberattacks continue to grow in…
News · via Microsoft Security Response Center
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.
News · via JFrog Security Research
Brotli2Shell: Beyond Node(2Shell) and HTTP(2Shell)
CVE-2026-111497 demonstrates how a single memory-corruption bug in a widely reused native decoder can affect applications far beyond the runtime where it was first discovered. CVE-2026-111497 was…
News · via The Hacker News
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on…
News · via The Hacker News
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to…
News · via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8117.2 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?
News · via CyberScoop
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Two senators say that revelations about online targeted advertising being used as a vector for spyware infections underscore the need for better security practices in the industry. Some members of…
News · via Check Point Research
Infostealer riding the AI Train
Key Points Aokigahara, a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian. The malware includes traditional data theft…
News · via Chrome Releases
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 158 (158.0.8117.0) for Android. It's now available on Google Play.
News · via NCSC-NL
NCSC-2026-0453 [1.00] [M/H] Kwetsbaarheid in Google Brotli-decoder
Google heeft een kwetsbaarheid verholpen in de Brotli-decompressiebibliotheek. Deze bibliotheek wordt onder meer gebruikt in Node.js. Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheid op…
News · via Chrome Releases
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 156 (156.0.8078.54) for iOS; it'll become available on App Store in the next few hours. This release includes stability and performance improvements.
News · via Chrome Releases
Chrome for Android Update
Hello Everyone! We've just released Chrome 157 (157.0.8103.14) for Android to a small percentage of users. It'll become available on Google Play over the next few days.
News · via Help Net Security
Google opens its cloud to rival OpenAI, promises business data won’t train models
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google…
News · via Chrome Releases
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16852.10.0 (Browser version 157.0.8103.11) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug…
News · via Chrome Releases
Chrome Beta for Desktop Update
The Beta channel has been updated to 157.0.8103.15 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?
News · via Chrome Releases
Early Stable Update for Desktop
The Stable channel has been updated to 157.0.8103.15/.16 for Windows , Mac will be coming shortly as part of our early stable release to a small percentage of users. A full list of changes in this…
News · via CyberScoop
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A new bipartisan House bill would charge the federal government with developing formal guidance for defending AI models against distillation attacks. The AI Cyber Defense Act, shared exclusively with…
News · via Zscaler ThreatLabz
SEO Poisoning Campaign Delivers New Armorsteal Malware
IntroductionIn September 2026, Zscaler Threat Hunting identified an SEO poisoning campaign that used fake websites impersonating the Chocolatey package manager and the Microsoft Activation Scripts…
News · via Chrome Releases
Chrome Beta for Android Update
Hi everyone! We've just released Chrome Beta 157 (157.0.8103.14) for Android. It's now available on Google Play.