South Korea’s app-store order, Node.js patch deadline, New York chatbot law

US cybersecurity agency sets November 10 deadline to fix exploited Node.js flaw

The US cybersecurity agency has listed the Node.js Brotli flaw as exploited and set a November 10 federal remediation deadline. Applications are exposed when they decode attacker-controlled Brotli data; operators can address the flaw by upgrading to a fixed, supported Node.js release.

Belgium’s tax agency shuts online portal after cyberattack

Belgium’s tax agency has temporarily shut its online tax portal and several other services after a cyberattack. It says it has no indication of stolen data and will publish revised filing deadlines as soon as possible.

US cyber agency lists PolyShell after Sansec finds hundreds of store breaches

The US cyber agency has listed PolyShell as actively exploited. Sansec says attackers placed malicious loaders in hundreds of stores; those loaders can fetch further attacker-controlled software, making the response more than a preventive update, with federal civilian executive agencies required to fix the flaw by November 10.

Updated

Australia’s lower house passes online safety bill with chatbot protections

Australia’s lower house passed the Digital Duty of Care bill on 28 October. Accepted amendments would prohibit chatbot conduct that simulates emotional intimacy and fosters children’s dependence instead of human relationships, and require accessible, prominent algorithm opt-outs. The bill moves to Senate scrutiny, with an inquiry due to report in late November.

Lumen researchers identify Volt Typhoon’s zero-day attacks

Lumen’s Black Lotus Labs says its investigation confirmed Volt Typhoon’s zero-day attacks through Silent Train. It also identifies hundreds of victims and at least 27 classes of compromised devices, showing how the network concealed attacks on management systems. Cisco and Arista provide fixes and checks for affected operators.

PHP2Shell attacks breach 25 servers, cybersecurity firm Dream says

Dream says a tailored PHP2Shell exploit, combined with a Linux flaw, gave an attacker full administrative control of 25 servers in four countries. The company says 22 firewalls still contain remote-access scripts, leaving access the attacker could use again.