On October 21, 2026, Node.js released a coordinated security update that patched ten vulnerabilities across its three supported versions: v26.12.1, v24.22.1, and v22.23.4. Among these vulnerabilities, four were rated High, including a significant Brotli decompression flaw (CVE-2026-111497) that could allow remote code execution, particularly affecting applications that utilize fetch() or Express 5. This update marks a significant change as it is the last release under Node's previous versioning model, transitioning to a new annual release cycle starting with Node 27 in 2027. Users running older, unsupported versions such as Node 20 and Node 25 are urged to upgrade to the latest versions as no security fixes will be provided for those
Matomo 5.14.2 Released: Vulnerable PHP Check and Certificate Hardening
Matomo has released version 5.14.2 in response to two critical PHP vulnerabilities known as "php2shell," which are actively being exploited. The update addresses two issues: a warning mechanism for vulnerable PHP versions within the Matomo UI and an update to the certificate dependency for security. However, the release emphasizes that simply updating Matomo will not fix the vulnerabilities, as the underlying PHP installation must also be patched for true protection. Self-hosted users are urged to check their PHP versions and apply the necessary updates, as the security of their Matomo installations relies on the PHP runtime it operates on
Display Driver Uninstaller (DDU) 18.1.6.2 released
Display Driver Uninstaller (DDU) is a free graphics driver removal tool designed to eliminate all remnants of graphics drivers from AMD, Nvidia, and Intel. It’s particularly useful for those who face challenges when uninstalling drivers, as leftover files can lead to system issues during upgrades or brand switches. DDU effectively cleans up these remnants, ensuring a smooth installation of new drivers.
SteelSeries GG 122.0.0 released
SteelSeries has released version 122.0.0 of SteelSeries GG, a versatile software designed to optimize the performance of SteelSeries peripherals such as headsets, mice, keyboards, and controllers. With a focus on user-friendliness, SteelSeries GG streamlines device management by running a single background process on your computer, keeping it unobtrusive while enhancing your gaming experience.
Drawpile 2.3.1 released
Drawpile 2.3.1 has been released, enhancing the already unique sketching-oriented drawing program that allows users to collaborate in real-time. This innovative software features a shared canvas, enabling multiple users to draw together, whether using the built-in server or a dedicated server.
Find.Same.Images.OK 6.16 released
Find.Same.Images.OK version 6.16 has been released, specifically designed to identify duplicate images, including those that may be rotated, mirrored, or negative. Unlike standard image finders, it utilizes advanced technology to generate graphic signatures, allowing for pixel-level comparison. This utility not only locates duplicates but also provides image previews, enabling users to visually confirm the results of their scans.
Python Releases Emergency Update to Block Broken eMudhra Certificate Authority
Python has released emergency updates (3.15.1, 3.14.9, and 3.13.17) to address vulnerabilities associated with the eMudhra certificate authority, which had compromised private keys that allowed attackers to forge HTTPS identities. The updates include a new version of pip (26.2.2) and certifi (2026.10.19), removing trust in the compromised CA, and users are urged to upgrade their installations to ensure security. The issue arose from eMudhra's weak key generation, where all eight intermediate CA keys were guessable due to inadequate private key sizes. This incident highlights the importance of cryptographic hygiene and the need for users to keep their software updated to maintain security
PHP 8.6.0 RC4 Ships Hours After Team Emergency-Patches Critical RCE Flaw
PHP 8.6.0 RC4 has been released, containing a frozen feature set since September and approximately 50 bug fixes since the previous release candidate, RC3. This release coincided with the PHP team's emergency patch for two critical remote code execution (RCE) vulnerabilities, known as "php2shell," which affect all versions from 5.4 to 8.5.11. Major new features in RC4 include partial function application, a new `clamp()` function, and enhancements to error handling and native APIs. The community is urged to update to the latest patched versions or test RC4 before the general availability release scheduled for November 19, 2026, while remaining vigilant against the identified security flaws
Webroot System Analyzer (Secure Anywhere) 9.0.46.75 released
Webroot has released version 9.0.46.75 of its System Analyzer, a tool designed to provide comprehensive insights into a computer's hardware, operating system, and installed applications. While it offers a quick assessment and detailed reporting, it functions more as a general system checker rather than a traditional system information tool. Users can receive a score based on various metrics, but most advanced users may already be familiar with the insights provided.
Blank And Secure 8.55 released
The latest release of Blank And Secure, version 8.55, is a portable application designed for the permanent and secure deletion of data. This tool is essential for users who wish to ensure that their deleted files cannot be recovered. Blank And Secure achieves this by overwriting the target data with zeros before deletion, making recovery virtually impossible. Users should exercise caution and only utilize this tool when they are certain they want to permanently erase their data.
Snort 3.12.4.0 released
Snort 3.12.4.0 has been released, marking an important update for this Open Source network intrusion detection and prevention system (IDS/IPS). Unlike traditional firewalls, which act as barriers to filter network traffic based on preset rules, Snort provides a deeper analysis of network traffic. It is designed to detect potential threats, such as malware and suspicious behavior, by comparing incoming data against a set of predefined rules. If configured as an IPS, Snort can take proactive measures, like dropping malicious packets, but its primary function is to identify threats and generate detailed logs for further analysis.
Zen Browser 1.23.4b Ships With eMudhra Certificate Fix and Firefox 158.0.1
Zen Browser 1.23.4b has been released, featuring a critical security fix for the eMudhra certificate compromise, which is embedded directly into the browser to protect users offline and under restrictive network policies. This update also includes a new "Focus" mode for its per-site customization feature, a performance improvement for Windows users, and several smaller bug fixes. Built on Firefox 158.0.1, Zen Browser aims to create a calmer internet experience and has gained popularity as an alternative to other browsers. Users are encouraged to update to this release to ensure they are protected against the recent security vulnerabilities
Supermium 150.0.7871.255 R2.01 released
Supermium version 150.0.7871.255 R2.01 has been released, providing a secure browsing experience for users with older devices that are no longer compatible with the latest Windows versions. This browser is designed with a zero-dependency portable version, making it easy to run on various systems without installation hassles.
ProgDVB 7.73.3 released
ProgDVB has announced the release of version 7.73.3, a comprehensive multimedia application designed for streaming digital television and listening to a wide variety of radio channels. This software allows users to access their favorite programming from anywhere, ensuring they never miss out on important episodes or live events. The platform supports streaming over local networks or the internet and offers the flexibility to view content on multiple screens, including televisions.
TinyWall 3.6.1 released
TinyWall has released version 3.6.1, enhancing its role as a free tool designed to strengthen and manage the advanced firewall integrated into Windows 7 and later versions.
Read Aloud: A Text-to-Speech Voice Reader for Chrome, Firefox, and Edge 2.26.0 released
The Read Aloud extension, version 2.26.0, for Chrome, Firefox, and Edge, offers a convenient text-to-speech feature that allows users to listen to entire web pages with just a single click. This extension supports over 40 languages, making it accessible to a diverse audience. Users can enhance their listening experience by connecting their Amazon Web Services (AWS) or Google Cloud Platform (GCP) accounts to access advanced voice options like Amazon Polly and Google Wavenet.
CCleaner Standard 7.13.1573.0 released
CCleaner Standard 7.13.1573.0 has been released, continuing its legacy as a user-friendly and reliable drive cleaner. This software is designed to tackle digital clutter that hampers computer performance, providing essential features such as a registry cleaner, startup manager, and more. Since its launch in 2004, CCleaner has become the preferred choice for millions looking to optimize their PCs, Macs, or web browsing experiences.
Xelitan PDF Reader 2.2 released
Xelitan PDF Reader has released version 2.2, enhancing its reputation as a highly efficient and user-friendly tool for managing PDF files. This update emphasizes speed and ease of use, allowing users to navigate and read PDF documents effortlessly. The software is packed with a variety of features that cater to diverse tasks, such as exporting embedded images, extracting and removing pages from PDFs, and converting files into PNG, JPEG, TXT, or HTML formats.
Cisdem PDF Converter OCR 4.0.0 released
Cisdem has released version 4.0.0 of its PDF Converter OCR software, designed to facilitate the conversion of both native and scanned PDF documents into searchable formats. The software supports a wide array of output file types, including Word, Excel, PowerPoint, Text, RTF, CSV, HTML, and various image formats.
Cryptomator 1.19.4 released
Cryptomator version 1.19.4 has been released, enhancing its capabilities as an Open Source file encryption tool designed for both cloud and local storage. This software ensures the security of your files by employing secure AES encryption, making it suitable for services like Google Drive and Dropbox, as well as custom file locations.