Security researchers disabled a vulnerable Popcorn Time updater across millions of systems after identifying risks linked to unauthorized remote code execution.
A memory corruption flaw in Google Brotli decoder tracked as CVE 2026 111497 affects Node.js, Bun, Python packages and other software using Brotli compression.
CISA has added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of reverse shell deployment, cryptocurrency mining, and attacks targeting AI infrastructure.