Node.js TLS and Brotli flaws: why patching is not enough
A runtime patch is a starting gun, not a finish lineWhen the Node.js project ships a security batch, the instinct is to open a terminal, bump the vers...
Browse public articles by editorial status or type. This classification complements topic categories.
A runtime patch is a starting gun, not a finish lineWhen the Node.js project ships a security batch, the instinct is to open a terminal, bump the vers...
A memory bug that turns compressed data into an attack surfaceThe Node.js project has shipped a security release addressing a high-severity defect in...
What it is and who is affectedCVE-2026-110936 is an uncontrolled search path element vulnerability (CWE-427) in Siemens Software Center. According to...
What it is and who is affectedPlex Media Server carries a server-side request forgery (SSRF) flaw tracked as CVE-2026-96652, classified under CWE-918....
Why e-invoicing is really an automation problemWhen Spanish SMEs start preparing for electronic invoicing, the conversation almost always begins with...
A privacy layer, not a vaultOpenAI has started rolling out locked chats in ChatGPT, a feature that keeps selected conversations out of the normal hist...
From binge-watching to repeat buyingStreaming platforms taught consumers to expect a personalised catalogue, a frictionless sign-up and a steady drip...
The click is still a human decisionEvery few months the ecommerce sector announces that machines are about to take over the buying journey. Assistants...
Why protecting each server separately no longer scalesMost small and mid-sized organisations in Catalonia run more than one server. A web front end in...
Why scattered defences stop working once you run more than one serverMost small and mid-sized organisations in Catalonia start with a single server an...