- Brotli decoder bug CVE-2026-111497 now reaches HTTP stacks beyond Node.js, with a 9.2 score
SECURITY
The fix went into Brotli's source in February, but no release carried it until now, and patches for Node.js, Python and Envoy are arriving. - 894 Indian government domains still serve certificates eMudhra revoked on October 19
SECURITY
Since our October 23 report on eMudhra leaving the TLS business, a detailed audit shows the revocations are not reaching many official sites, and… - Android quietly attaches your SIM number to every Google account, and you have to turn it off
SECURITY
Verification has been on by default since September 2025, so every account on the phone, including new ones, now inherits the SIM's number.
Edition of Sun 25 Oct 2026 · 13 stories · read the full paper ↗

