[Urgent] Critical Vulnerabilities in PHP, Java, Node.js, and Certificate Authorities | A Beginner's Guide to Types of Cyber Attacks and Zero-Day/N-Day Attacks

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

Node.js creator ditches Deno to work on open source Cloudflare Workers

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...

Node.js 24 and 26 take about 100 seconds to recover memory after a load—Measuring V8's memory reducer with Docker memory limits

Issue #66564 in nodejs/node reports that in Node.js 24 and 26, memory does not return for about 100 seconds even in an idle ...
cybersecuritynews

Hackers Turn Trusted Node.js Runtime Into Malware Launcher in Ransomware-Linked Attacks

Cybercriminals are increasingly hijacking Node.js, the widely used JavaScript runtime, to slip malicious code past security defenses, according to new findings from the Symantec Threat Hunter Team.