Aikido Security

Stories

Brotli decoder flaw spreads beyond Node.js to Python and more

Published the Python exposure mapping on October 24

A memory bug in Google's Brotli decompressor lets a crafted compressed file overwrite memory in any program that unpacks it. The flaw, CVE-2026-111497, scores 9.2 out of 10, and researchers at Imperva ran attacker code on an unpatched Node.js build by feeding it Brotli data.

Updated Nov 1

Aikido Security wins FedRAMP Moderate Authorization in months through Knox partnership

New Capabilities

Achieved FedRAMP Moderate Authorization

U.S. federal agencies can now buy Aikido Security's software security platform. The company received FedRAMP Moderate Authorization on October 5, 2026, through Knox Systems, a managed federal cloud provider.

Updated Oct 23