Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck16 hours ago

4 intel reports

Financially motivated actors are leveraging ARTEX, an open-source agentic AI pentesting tool, to automate breaches and data exfiltration from South Korean financial institutions.

Adversaries are using AI-assisted scripts and the snap7.dll library to target Internet-exposed Siemens S7 PLCs for reconnaissance and potential disruption across U.S. critical infrastructure.

Russian state-supported actors including LAUNDRY BEAR and TA458 are exploiting zero-day vulnerabilities in Zimbra, SOGo, and other webmail clients to exfiltrate sensitive email data from Western government and commercial targets.