A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.

Performances in N.Y.C. Advertisement Supported by Though the show will close in New York next month, a North American tour will continue, and productions in Australia, Germany and South Korea are ...

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Roula Khalaf, Editor of the FT, selects her favourite stories in this weekly newsletter. When Villca Fernández arrived at Venezuela’s notorious El Helicoide prison in 2016, the staff made no effort to ...

I thought long and hard about a clever, lighthearted way to introduce this morning’s message. I thought about praying for a really hot day and then turning off the air-conditioner, just to put you in ...

Find a scholar by policy area: ...