#http2shell Etiketinde En Popüler Paylaşımlar
⚠️🚨 THIS IS NOT A DRILL 🚨⚠️
Google has officially declared a bug in Brotli, its tool that shrinks web traffic, CRITICAL: 9.2 out of 10. Last night "Node2Shell" evolved into HTTP2SHELL.
A formal CVE record has been issued citing CVE-2026-111497 -- a hole in versions 1.0.3 to 1.2.0 that can hit any app unpacking data from strangers, and could let them take it over.
What this means:
▪️ This is not a Node.js problem anymore. This is an HTTP PROBLEM.
▪️ Every unpatched app across Node.js, Python, Bun, and Envoy that unpacks Brotli now has a hole attackers need no login to use
▪️ Istio. curl. Python's requests and httpx. All at risk under one CVE.
▪️ EVERY project that bundles Brotli must ship its own fix, and not all are out yet
This changes everything.
A normal bug can be fixed in one place.
A 9.2 bug inside a shared tool cannot.
We just entered the most dangerous phase of this crisis. If you're not paying attention - start now.
Save this. Share this. This is the moment it escalated beyond return.
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
HTTP2Shell isn't an HTTP/2 bug. It's Google's Brotli decoder (CVE-2026-111497).
Check: node -v → 22.23.4 / 24.22.1 / 26.12.1+
pip show brotli → 1.2.1+
Then restart.
Can do it in 2 min? Offer it as a Task on https://t.co/guVwwqysQX
#HTTP2Shell
【緊急注意喚起】ChatGPTもSlackもiPhoneも危険！？重大脆弱性HTTP2Shell、危険度9.2。
影響製品・修正版・今すぐやるべき対策を徹底解説。さらにClaude CodeやCodexで自分のPCを点検する依頼文2本も公開。公式更新を確認してほしい！
#HTTP2Shell #セキュリティ #脆弱性 https://t.co/3VUf70DDtq
【危険度9.2】HTTP2Shell、自分のPCが対象なのか分からない人へ。
Claude CodeやCodexで更新対象を調べる方法も含め、影響製品・修正版・対策を1枚にまとめた。AI任せにせず公式確認も忘れずに！
「HTTP2Shell」と聞いてHTTP/2を止めかけた部下を止めました🐾
正体はBrotli展開処理の欠陥（CVE-2026-111497）です。
・Node.jsは22.23.4/24.22.1/26.12.1へ
・PythonのBrotliは1.2.1へ
・コンテナは再ビルドも
週明けに社内を棚卸しします🔐
※10/25時点で悪用報告なし
#HTTP2Shell #セキュリティ
【危険度9.2】HTTP2Shell、自分のPCが対象なのか分からない人へ。
Claude CodeやCodexで更新対象を調べる方法も含め、影響製品・修正版・対策を1枚にまとめた。AI任せにせず公式確認も忘れずに！
"The cyber attack seems like a very possible scenario because it's a way for the banks to absolve themselves of any role in a a financial crisis."
"It's an easy way to consolidate banks so only systemically important ones survive 'the hack.'"
We have released tools to help mitigate, detect, and audit systems for #PHP2Shell, #Node2Shell, #HTTP2Shell, and 30+ other CVEs from the past month. Free to copy, remix, share👇https://t.co/BxvzedERFA
Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
#Brotli #HTTP2Shell Googleの解凍エンジンの問題。サーバーへの影響度は限定的、ユーザーで広い問題になりそうなのは、ニュースサイトの悪意のある広告系かな。大抵の場合は問題発生時・後のフィッシングに注意すればいい。具体的にはメールなどのリンクをクリックしない。という話になるかな
Everyone is scrambling over #HTTP2Shell (CVE-2026-111497), a critical 9.2 RCE/memory corruption bug in Google’s C-based Brotli library.
People often ask why I enforce a strict "100% Pure Rust, zero -sys crates" policy across my projects. When I built oxiarc-brotli inside oxiarc, it was specifically because I noticed brotli-sys (C bindings) sneaking into Rust dependency trees everywhere—and I wanted it gone.
Rust’s memory safety stops at the FFI boundary. Purging C dependencies isn't just architectural purism; it's structural immunity against days like today.
【要更新】
HTTP2Shell（Brotli脆弱性・CVE-2026-111497）
Node.js・Bun・Envoy・Istioなど対象ソフトは最新版へ！ #HTTP2Shell #セキュリティ
▼詳しくはこちら
https://t.co/uF4akvQwNb
これさ。みつかってないだけで他にもあるでしょ。
とりあえずVPNとか切ったほうがいいね。まじで。
個人情報はまだしも、インフラ・金融・防衛関係、無理じゃね？スーパーインテリジェンス（神）にたのんで、防御してもらうしかなくね？
#HTTP2Shell
え？え？え？まじで？
太田光代さん正解だった・・・どうしよう・・・
とりあえず、重要データはネットから遮断しよう・・・
#HTTP2Shell
【緊急注意喚起】ChatGPTもSlackもiPhoneも危険！？重大脆弱性HTTP2Shell、危険度9.2。
影響製品・修正版・今すぐやるべき対策を徹底解説。さらにClaude CodeやCodexで自分のPCを点検する依頼文2本も公開。公式更新を確認してほしい！
#HTTP2Shell #セキュリティ #脆弱性 https://t.co/3VUf70DDtq
Many hours later, in the Black October as I was fixing the AI found #PHP2Shell #Node2Shell #HTTP2Shell, I was to remember that distant afternoon when I discovered Shogun 2: fall of the samurai, when the charging samurais facing the machine guns first time in the history.
Sotwe'de En Son Görülen Etiketler
បុរសនិងនារី
minichat(*********)****filter:videos
Son görüldüğü yer Argentina
muslimgirls
Son görüldüğü yer Turkey
minichatt()()()()()()() filter:videos
Son görüldüğü yer Germany
giyinmeli
Son görüldüğü yer Turkey
snapchat()+snapchat()**+++filter:native_video
Son görüldüğü yer Belgium
mgai()******************************************************
Son görüldüğü yer Turkey
mms
hijabi #aiporn
Son görüldüğü yer Turkey
รับงานหทัยราษฎร์
Son görüldüğü yer Thailand
Senin İçin Trendler
En Popüler Kullanıcılar
Elon Musk 
@elonmusk
241.5M takipçi
Barack Obama
@barackobama
118.8M takipçi
Cristiano Ronaldo
@cristiano
114.5M takipçi
Donald J. Trump
@realdonaldtrump
111.8M takipçi
Narendra Modi
@narendramodi
107.1M takipçi
Rihanna
@rihanna
98.7M takipçi
NASA
@nasa
92.3M takipçi
Justin Bieber
@justinbieber
91.8M takipçi
KATY PERRY
@katyperry
90M takipçi
Taylor Swift
@taylorswift13
84M takipçi
Lady Gaga
@ladygaga
75.5M takipçi
Virat Kohli
@imvkohli
73.5M takipçi
Kim Kardashian
@kimkardashian
70.9M takipçi
YouTube
@youtube
68.8M takipçi
Neymar Jr
@neymarjr
66.5M takipçi
Bill Gates
@billgates
65.3M takipçi
Selena Gomez
@selenagomez
63.1M takipçi
The Ellen Show
@theellenshow
62.2M takipçi
CNN
@cnn
61.7M takipçi
X
@x
60.7M takipçi