Oct 27, 2026 · 12 min
Microsoft patches critical Brotli flaw amid widening cyber threats
Microsoft Rushes out Fixes for .NET
Public exploits for a critical vulnerability in a widely used library raise the stakes beyond Microsoft’s own code, while several other attacks show how quickly threats are evolving.
- 1Microsoft issued out-of-band .NET updates for a critical Brotli-related flaw with public proof-of-concept exploits.
- 2The roundup links active PHP-to-shell exploitation with allegations involving a ransomware negotiator and an AI-assisted campaign in South Korea.
- 3Australia disrupted the Amadey botnet, affecting 180,000 computers, underscoring the scale of coordinated cyber operations.
Don't miss
Australia’s disruption of the Amadey botnet, which affected 180,000 computers, provides the episode’s most concrete measure of attack scale.
The brief
David Shipley opens with Microsoft’s emergency .NET updates for a critical Brotli-related vulnerability, a reminder that software dependencies can create urgent risk beyond a vendor’s own code.
The flaw has public proof-of-concept exploits and could enable privilege escalation or remote code execution, turning a library issue into a potentially serious compromise path.
The broader roundup follows active PHP-to-shell exploitation, allegations involving ransomware negotiator Edward Dubrovsky, and an AI-assisted breach campaign reported in South Korea.
Australia’s cyber operation against the Amadey botnet affected 180,000 computers, providing the episode’s clearest measure of how widely criminal infrastructure can spread.
Taken together, the stories show defenders facing simultaneous pressure from vulnerable dependencies, active exploitation, targeted campaigns, and large-scale botnet operations.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.