Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

[Urgent] Critical Vulnerabilities in PHP, Java, Node.js, and Certificate Authorities | A Beginner's Guide to Types of Cyber Attacks and Zero-Day/N-Day Attacks

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

Is Node.js download 'suspicious'!? I verified it using SHA-256 and digital signatures

On October 22, 2026, when I tried to update the Node.js I use in my development environment, a bit of a problem occurred.Even ...

Node.js creator ditches Deno to work on open source Cloudflare Workers

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...
The Hacker News

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter ...
cybersecuritynews

Hackers Turn Trusted Node.js Runtime Into Malware Launcher in Ransomware-Linked Attacks

Cybercriminals are increasingly hijacking Node.js, the widely used JavaScript runtime, to slip malicious code past security defenses, according to new findings from the Symantec Threat Hunter Team.