CISA warns of active exploitation of critical Node2Shell vulnerability

The US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Tuesday that malicious actors are now actively exploiting a critical security vulnerability. The flaw, which is being referred to under the identifiers Node2Shell, Broccoli2Shell, and HTTP2Shell, is reportedly associated with the Brotli data compression algorithm.

As of this reporting, CISA has formally acknowledged the active exploitation of the vulnerability, signaling a significant security concern for systems utilizing the affected technology. Given the limited nature of the initial report, further technical details regarding the attack vector, specific affected environments, and recommended mitigation steps remain the subject of ongoing analysis by security researchers and government agencies.

Organizations and administrators are advised to monitor official channels for additional guidance as more information regarding this incident becomes available.

Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/