Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

The Hacker News - Oct 22, 2026

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on the affected system. Each supported line has one fixed version:

Read full article

More News

Jackdaw decision 'taken outwith Scotland about Scotland's energy'

Oct 22, 2026

Jackdaw decision 'taken outwith Scotland about Scotland's energy'

Scottish Green Mark Ruskell, the SNP’s Keith Brown and Scottish Labour’s Jenny Young weigh up the Jackdaw decision.

Travel Tech Capital Summit to bring investors and senior travel executives together in London

Oct 22, 2026

Travel Tech Capital Summit to bring investors and senior travel executives together in London

Cambon Partners, an independent M&A boutique specialising in growth companies, together with Ennea Partners, Oppenheimer and Videc, will host the inaugural Travel Tech Capital Summit: Where Travel Tech Meets Finance on 2 November 2026, ahead of WTM London, exploring where capital is flowing across travel and how technology is reshaping the sector’s investment opportunities. Taking place at Six Park Place, St James’s, London, home of the Royal Over-Seas League, the invitation-only event will bring together over 80 investors and senior travel executives for an afternoon of discussion and networking.

Redmi K100 launch date, camera and battery confirmed: What to expect from Xiaomi’s new smartphone

Oct 22, 2026

Redmi K100 launch date, camera and battery confirmed: What to expect from Xiaomi’s new smartphone

Redmi has confirmed the K100 will launch in China on October 28, 2026, with a Snapdragon 8 Elite chip, 6.83-inch 165 Hz AMOLED display, 10,000 mAh battery and 50 MP main camera. Pre-orders are open. Here’s what is known about the specs, design, Pro model differences and price.

UK working to identify exposure after global cyber-security warning

Oct 22, 2026

UK working to identify exposure after global cyber-security warning

Governments and companies are scrambling to protect their websites, as Amazon says it experienced attacks before the warning was made public.

Just You hails success of new online community platform

Oct 22, 2026

Just You hails success of new online community platform

Specialist solo escorted tour operator Just You has revealed that its online travel community platform, Kindred, has attracted almost 7,000 members since launching earlier this year. The platform, which connects solo travellers before, during and after their holidays, sees an average of 500 posts every week, with 800 members accessing it weekly.

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

Oct 22, 2026

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it received, enough to run a default server

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Oct 22, 2026

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patches. "The exploit attempt originated from an IP address associated with a commercial anonymization network," CJ Moses,

What is PHP and why did it spark a global cyber-security scramble?

Oct 22, 2026

What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

China moves to set global standards for brain-computer interface technology

Oct 22, 2026

China moves to set global standards for brain-computer interface technology

China has taken a major step in spearheading the standardisation of brain-computer interface (BCI) technologies, as it now chairs the secretariat of a subcommittee jointly overseen by two key international organisations and lists the technology applications as a national development priority. The China-led subcommittee, known as ISO/IEC JTC 1/SC 43, was set to formulate global standards regarding the communication and interaction between brains and computers that are applicable across...

Flexible grid connections can cut AI data centre power wait to 2-4 years from 5-10 years: BCG

Oct 22, 2026

Flexible grid connections can cut AI data centre power wait to 2-4 years from 5-10 years: BCG

Data centres supporting artificial intelligence (AI) could reduce their electricity connection waiting time from 5-10 years or more to 2-4 years by accepting flexible grid connections and using their own power generation and storage systems, according to a report by Boston Consulting Group (BCG).

NI risks missing 2030 energy goals, says Stormont committee

Oct 22, 2026

NI risks missing 2030 energy goals, says Stormont committee

A committee hears that Northern Ireland could lose out on economic opportunities if action is not accelerated.

Indias AI financing demand to shift towards data centres, but GPU, regulatory risks persist: Report

Oct 22, 2026

Indias AI financing demand to shift towards data centres, but GPU, regulatory risks persist: Report

India’s AI market is expected to see a shift in demand towards debt financing for data centres and computing infrastructure. At the same time, the sector faces several risks, including the rapid obsoleteness of graphics processing units (GPUs), uncertain revenue models and evolving governance regulations, as per a report by Union Bank of India.

Recommended

About Us
Logo

In-Depth Science delivers comprehensive and compelling news and analysis on everything science and technology, seven days a week in a reader-friendly format.

Contact us: sales[at]indepthscience.com

Copyright © 2015 - 2026 In-Depth Science. All Rights Reserved.