Skip complex C++ libraries. Discover how the DFRobot WIAnode streams real-time wireless IoT sensor data to TouchDesigner and ...

Go with the flow.

A VulnCheck canary has caught the first live exploitation of CVE-2026-58115, an unauthenticated Node-RED admin API flaw.

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...

Attackers exploit CVE-2026-58115 in Siemens SIMATIC IoT2050 devices to deploy Linux bot payloads and command execution backdoors.

IntroductionIn the previous article, I introduced how to call the official SwitchBot API from Node-RED installed on a ...

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.

IntroductionI have written three articles so far about making a smart home using SwitchBot relay switches, but this time I ...

On October 21, 2026, Node.js released fixes for 10 vulnerabilities across its three supported release lines: 22.x, 24.x, and 26.x. Four are rated High. The most severe, CVE-2026-111497, is an ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Lily Mara explains how to avoid high-risk ...

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review ...