The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
ainvest

Node2Shell: Who Pays When a Free Compression Library Breaks

Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...
MarkTechPost

Meet Anthropic’s sandbox-runtime: OS-Level Sandboxing for AI Agents, No Containers

Anthropic sandbox-runtime gives AI agents OS-level sandboxes without containers; Anthropic reports 84% fewer Claude Code ...
ainvest

Principal Value ETF Posts $430M Profit, But Revenue Data Is Missing

Principal Value ETF (PY) reported $430M net income and $1.87 EPS in Q2 2026, but lacks revenue/gross profit data.