CISA warns of hackers now exploiting critical Node2Shell flaw

The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that threat actors have begun exploiting Node2Shell, a critical vulnerability affecting Brotli compression technology. The flaw has multiple variant names including Broccoli2Shell and HTTP2Shell, indicating its widespread recognition across security communities as an active threat requiring immediate patching and defensive measures.

Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.