CISA Reports Node2Shell Exploitation and Honeypot Activity

CISA confirmed exploitation of the Brotli vulnerability known as Node2Shell and added it to its Known Exploited Vulnerabilities catalog. Two honeypot operators logged attack attempts, including one using a broken exploit.

• CISA confirmed that hackers had begun exploiting a critical Brotli vulnerability known as Node2Shell.· 1 source
• The vulnerability was also referred to as Broccoli2Shell and HTTP2Shell.· 1 source
• CISA added the flaw to its KEV catalog, while two honeypot operators logged attempts, including one with a broken exploit.· 1 source