Node.js Brotli and TLS Flaws: What to Patch
Node.js fixed ten flaws on 21 October, including a Brotli bug reachable through fetch() and Express 5. Who's exposed, what to update, and the eMudhra CA block.
Lucas · · 11 min readAuthor
Lucas
Lucas focuses on organisational security and building software that doesn't fall over - secure development, cloud, and the operational side of keeping a company safe. He's the one asking what breaks in production, not just in theory, then writing it up so teams can act on it.
More from Lucas
Lucas · · 11 min readPHP2Shell: Who's Exposed and What to Patch
PHP2Shell is under attack: two critical PHP flaws let attackers run code on web servers without a login. Who's exposed, how to patch, and what to check for.
Lucas · · 21 min readFake CAPTCHA Scams: How to Spot Them
Fake Cloudflare and reCAPTCHA checks trick you into pasting malware into your own PC. How the scam works, how to spot it, and what to do if you ran the command.
Lucas · · 14 min readDevice Trust: Why MFA Alone Isn't Enough
Stolen sessions walk past MFA, so device trust became the answer. But device registration is self-service and compliance is self-reported. Here is what holds.
Lucas · · 12 min readScam Phone Numbers in Google AI Overviews
Google and ChatGPT are surfacing scam customer service numbers as fact. Here's how the fraud works, the real cases behind it, and how to check before you call.
Lucas · · 9 min readWhat Are Cybersecurity Services?
A plain-language guide to what cybersecurity services include, why small businesses get targeted, and how to spot a good provider from an expensive one.
Lucas · · 8 min readWhat Is Smishing? How to Stop Scam Texts
Smart people click smishing links too. Why SMS scams work on the informed - and the iPhone and Android settings that protect you when you don't notice.
Lucas · · 8 min readPassword Best Practices: Passkeys & MFA
Protect your accounts with strong passwords, passkeys and MFA - a plain-language guide to phishing-resistant authentication for people and for teams.
Lucas · · 7 min readHow to Secure Your Android Phone
Secure your Android phone in 2026 using only built-in settings and your Google account - no extra apps. Covers screen lock, permissions, 2FA and anti-theft.
Lucas · · 7 min readGet new posts in your feed reader
One feed with every new article and the weekly roundup. Nothing to sign up for, nothing collected.
https://bluwarden.com/feed.xmlOpenNew to feeds? Paste the address into a reader such as NetNewsWire, Feedly or Thunderbird and new posts turn up on their own.