China-linked hackers use fake Chrome certificate warnings on trusted websites to install backdoors and remotely access Windows systems.
Node.js 26.13.1, 24.22.3 and 22.23.5 fix seven High-rated HTTP/2 and TLS flaws that unauthenticated clients can trigger.