#Node.js
6 stories taggedNode.js.
Criminals Are Actively Exploiting a Flaw in the Brotli Compression Tool Used by Millions of Websites
A memory-corruption bug in Google's Brotli compression library has been added to the US government's active-exploitation watchlist, and honeypot sensors have already logged real attack attempts in the wild.
Critical Brotli Flaw Lets Attackers Run Code on Node.js Servers
A buffer overflow in the Brotli decoder, bundled with Node.js, scores 9.2 on the severity scale. Researchers already have a working exploit.
Fake IT Support on Microsoft Teams Is Now a Full Corporate Break-In
Microsoft says attackers are cold-calling staff on Teams, talking them into a screen share, then walking straight through the network to domain controllers.
Hackers Are Hiding Malware Inside Node.js, and Windows Sees Nothing Wrong
Symantec says attackers have been abusing the legitimate Node.js runtime since February 2026 to slip past defences at governments, tech firms and hotel chains.
Hotel Front Desks Hit by Photo-ZIP Phishing Dropping Node.js Implant
Microsoft flags an unattributed campaign active since April 2026 against hospitality targets in Europe and Asia.
protobuf.js Ships Six Bugs That Turn Schemas Into RCE Triggers
A single malicious descriptor is enough. Node.js services parsing untrusted Protobuf are the obvious blast radius.