Brotli decoder flaw CVE-2026–111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.
Get the latest international news and world events from around the world.
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
BlackX bootkit exploits unrevoked Secure Boot binaries on Windows devices after attackers gain admin access to Central Asian diplomatic networks.
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
GitLab.com already runs the patched version, and GitLab Dedicated tenants on recent internal releases need no action, GitLab said. Because GitLab bundles its own copy of Ruby and patched it there, installing one of these fixed versions applies the fix.
GitLab also published detection rules that self-managed administrators can use to look for signs of exploitation attempts.
Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Ransomware affiliates used human-approved AI workflows to exploit edge systems, steal data, and target an estimated 62 organizations.
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
A campaign attributed to k0t exploits exposed network devices, establishes persistent access, and exfiltrates data using Rclone.
Nvidia will let eight DGX Spark computers pool 1TB of memory for local AI
Nvidia has announced support for connecting eight DGX Spark systems into a cluster with 1TB of combined unified memory. The larger configuration is intended to run AI models locally that would not fit on a smaller group of the desktop computers.
Research shows how the brain merges faces and voices to read emotions
Communicating effectively with others involves recognizing emotions from faces and voices. How does the brain process and integrate emotional information from visuals and sounds that others display? New in JNeurosci, Olivier Collignon, from the Catholic University of Louvain, Stefania Mattioni, currently at Ghent University, and colleagues mapped responses in people’s brains to faces and voices expressing different emotions.
When participants perceived faces or voices separately, the emotions that were expressed triggered a wide range of brain activity in areas that respond to faces and voices. Mattioni elaborates, “Importantly, these areas were not limited to their preferred sense: Several face-selective regions also carried information about emotions heard in voices, while voice-selective regions carried information about emotions seen in faces. In some regions, the brain even represented the same emotion similarly whether it was seen or heard.” When study participants observed faces and voices together, this combination reshaped how the brain processed and evaluated emotions compared to faces or voices alone.
According to the researchers, this work suggests that the brain systems that process faces and voices interact and, in some areas, represent emotions in a similar way. This observation may help people quickly build an understanding of how a person is feeling by looking at their facial expressions and hearing the tone of their voice. The findings from this study could inform future research on whether these mechanisms are impaired in individuals who struggle to integrate social cues.
Pedal to the metal: NASA’s Psyche heads toward asteroid belt
With a successful Mars gravity assist in its rearview mirror, NASA’s Psyche spacecraft has fired up its thrusters and is accelerating toward the metal-rich asteroid of the same name. During the first leg of its journey, following an October 2023 launch, the mission used its electric propulsion system intermittently to maneuver into the right position to harness Mars’ gravity for a propellant-saving speed boost and a slight trajectory change.
On Sept. 28, the spacecraft began to use its propulsion system nearly continuously, pausing just once each week to check in with mission controllers on Earth. This keeps the mission on track for its rendezvous with the asteroid Psyche in the main asteroid belt by the summer of 2029.
“It’s now ‘pedal to the metal’ to the asteroid Psyche,” said Don Han, the Psyche mission’s navigation lead at NASA’s Jet Propulsion Laboratory in Southern California, which is managed for the agency by Caltech. “We will be running our propulsion system at every available opportunity, pausing only for necessary engineering activities. The thrusters will be operating nearly 90% of the time from now until we reach the asteroid.”
Led Study Finds Amino Acid Extends Quantum Properties Above Room Temperature
The investigators’ use of an amino acid is a rare example of inorganic materials chemists using molecular chemistry to modulate electronic behavior of inorganic crystals. The findings may open up the design space for advanced materials to include other molecules of life.
The researchers’ next steps will seek to advance understanding of both the material and the method.
With further development, the tantalum disulfide-arginine combo could provide the basis for new technologies such as energy-efficient computer memory. That would be an entirely new type of storage based in quantum properties, instead of the electrons that are the basis for traditional electronics.
AI Is Changing Everything About Hacking. No One Knows What Happens Next
‘Black October:’ The PHP vulnerabilities and a series of other hacks and bugs have cybersecurity experts freaking out and unsure what happens next.