Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

The feed highlights multiple critical cybersecurity developments, including actively exploited vulnerabilities in enterprise management platforms, remote-code-execution flaws in Brotli, PHP, Ruby, Pillow, and Linux KSMBD, supply-chain compromises involving LiteLLM, exposed credentials and secrets, UEFI bootkits, ransomware activity, and attacks against network edge devices. Several issues are under active exploitation or have publicly demonstrated exploitability, creating urgent patching, credential-rotation, and supply-chain review requirements.