Приветствую всех читателей! Эта статья — расширенная версия моего доклада «Безопасность ИИ в продакшене: на что смотреть, ...

CISA KEV added GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex flaws on Nov. 9. See affected versions, fixes and the Nov.

Generative AI has reshaped how software gets built. What began as line-by-line autocomplete now spans full application ...

Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.

Anthropic released FlashProve, an Apache 2.0 zkSNARK prototype that proves a reply came from a committed model without ...

Node-RED can even be used to control entire escape rooms. Using extensions such as Node-REDscape, a flow can send messages to ...

UTXO management with Bitcoin Core 32.1: audit, freeze and consolidate outputs, handle the PSBT v2 default, and test it all on ...

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...

Hackers are exploiting CVE-2026-58115, a critical-severity Node-RED vulnerability, to deploy various payloads.

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: ...

What you will learn from this article Who is affected by the vulnerability news released between October 13th and 25th A "do-nothing" verification script (Mac/Windows) that works via copy-paste, and ...

A vulnerability in Google's Brotli data-compression library could let hackers take control of vulnerable systems, crash applications or potentially access sensitive information. Because Brotli is ...