OpenAI's AI found a flaw in the code that shrinks web traffic.
OpenAI's bug-hunting tool Codex Security found a serious flaw in Brotli, compression code used across the web. A booby-trapped compressed file can let attackers run their own code, and researchers have shown it working on Node.js. Fixes are out, but on Friday researchers warned that Python packages with 82.8 million monthly downloads are exposed too.
Why it mattersNo attacks have been reported yet, but Brotli hides inside servers, apps and desktop tools. If you build or run software, update Node.js, Python's Brotli packages and curl now.
Read in the app — free, in 9 languages
Related stories
Claude designed proteins that latch onto deadly scorpion toxins.2026-10-24The foundation behind PHP's urgent fix has one full-time employee.
2026-10-24ChatGPT drew fake scandal photos of US candidates 80% of the time.
2026-10-24Claude proved that 123 code libraries are free of memory crashes.
2026-10-24Anthropic's Mythos 5 kept up an attack it had called harmful.
2026-10-24