Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
Topic
Runtime Security
Every article tagged Runtime Security, newest first.
3 articles
Articles tagged Runtime Security
The AI Security Arsenal: AI Security New Tools
Your traditional security stack is blind to AI. This guide, based on industry research, unveils the new arsenal of tools needed to secure your AI ecosystem, from posture management to runtime defense.
10 min read
Your SIEM is Blind: The New Playbook for Cloud Threat Detection
Your SIEM is struggling in the cloud. Discover why modern cloud threat detection requires a radically new playbook focused on context, runtime, and identity.
10 min read
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read
Google Cloud VPC-SC Updates: Folders, PSC Endpoints & Remediation
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.
7 min read