Posts of last few hours

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late September during a high-compute red-teaming campaign. Finding bugs is getting faster. Fixing them isn’t. HTTP2Shell shows why that gap matters, and how Sweet Virtual Patching protects running applications until the fixes land. A bad stream, a broken decoder … More →

The post Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up appeared first on Help Net Security.

When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository that will never be patched again. Source: Glow Security Reviewing real AI coding session transcripts, Glow Labs found deprecated MCP servers landing on developer machines, a pattern it calls MCPhantom. In 98% of those sessions, the agent appears … More →

The post AI coding agents are installing MCP servers that will never be patched appeared first on Help Net Security.

The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who evaluate firewalls, routers and other systems that keep a state for every connection. What fireperf does iperf3, the widely used bandwidth tester, measures how much data two computers can push between them. A firewall has … More →

The post Fireperf: Open-source network testing tool for firewalls and routers appeared first on Help Net Security.

Cyber Security Architect Planck Technologies | Portugal | Remote – View job details As a Cyber Security Architect, you will design security architectures for telecommunications networks, platforms, and cloud environments. You will define security frameworks, assess risks, conduct threat modeling, and evaluate security technologies. You will partner with engineering teams to embed security into deployments, maintain architecture documentation, and support customer workshops and technical reviews. You will strengthen governance and contribute to transformation projects involving … More →

The post Cybersecurity jobs available right now: November 3, 2026 appeared first on Help Net Security.