ХАхахаах тая е като @EBelobradova Едната краде ток, другата краде коли ахахахаахахахах
Dem candidate gets elected to the House in surprise win - and has a court appearance for car theft next week trib.al/QHqSQ1r
1
2
66
Киро ела майка ти те търси да те бие
economic.bg/bg/a/view/oditit…
6
143
НСО да се учи как се прави. Със засилка бро!
xitter.cf/LibOrNormal/status/211…
1
2
79
Ебаси месеца за CyberSec, пълна разруха и забава... 🤣
xitter.cf/EdwardTWinz/status/211…
⚠️🚨 THIS IS NOT A DRILL 🚨⚠️
Google has officially declared a bug in Brotli, its tool that shrinks web traffic, CRITICAL: 9.2 out of 10. Last night "Node2Shell" evolved into HTTP2SHELL.
A formal CVE record has been issued citing CVE-2026-111497 -- a hole in versions 1.0.3 to 1.2.0 that can hit any app unpacking data from strangers, and could let them take it over.
What this means:
▪️ This is not a Node.js problem anymore. This is an HTTP PROBLEM.
▪️ Every unpatched app across Node.js, Python, Bun, and Envoy that unpacks Brotli now has a hole attackers need no login to use
▪️ Istio. curl. Python's requests and httpx. All at risk under one CVE.
▪️ EVERY project that bundles Brotli must ship its own fix, and not all are out yet
This changes everything.
A normal bug can be fixed in one place.
A 9.2 bug inside a shared tool cannot.
We just entered the most dangerous phase of this crisis. If you're not paying attention - start now.
Save this. Share this. This is the moment it escalated beyond return.
1
1
254
