home.social

#polyfillio โ€” Public Fediverse posts

Live and recent posts from across the Fediverse tagged #polyfillio, aggregated by home.social.

  1. Tomodachi94 @[email protected] ยท

    What CVE should I use for the Polyfill[.]io supply chain attack? I see that CVE-2024-38526 exists, but it's specifically for pdoc. Is there a better one?

    :boost_love:

    #PolyfillIO #CVE #infosec

    #polyfillio #cve #infosec
  2. Tomodachi94 @[email protected] ยท

    What CVE should I use for the Polyfill[.]io supply chain attack? I see that CVE-2024-38526 exists, but it's specifically for pdoc. Is there a better one?

    :boost_love:

    #PolyfillIO #CVE #infosec

    #polyfillio #cve #infosec
  3. Tomodachi94 @[email protected] ยท

    What CVE should I use for the Polyfill[.]io supply chain attack? I see that CVE-2024-38526 exists, but it's specifically for pdoc. Is there a better one?

    :boost_love:

    #PolyfillIO #CVE #infosec

    #polyfillio #cve #infosec
  4. Tomodachi94 @[email protected] ยท

    What CVE should I use for the Polyfill[.]io supply chain attack? I see that CVE-2024-38526 exists, but it's specifically for pdoc. Is there a better one?

    :boost_love:

    #PolyfillIO #CVE #infosec

    #infosec #cve #polyfillio
  5. Tomodachi94 @[email protected] ยท

    What CVE should I use for the Polyfill[.]io supply chain attack? I see that CVE-2024-38526 exists, but it's specifically for pdoc. Is there a better one?

    :boost_love:

    #PolyfillIO #CVE #infosec

    #polyfillio #cve #infosec
  6. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    Y'all remember #PolyfillIO?

    I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

    But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

    Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

    #webDev #javaScript #web

    #polyfillio #webplatform #polyfill #npm #polyfills #browsers
  7. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    Y'all remember #PolyfillIO?

    I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

    But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

    Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

    #webDev #javaScript #web

    #javascript #polyfillio #webplatform #polyfill #npm #polyfills
  8. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    Y'all remember #PolyfillIO?

    I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

    But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

    Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

    #webDev #javaScript #web

    #polyfillio #webplatform #polyfill #npm #polyfills #browsers
  9. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    Y'all remember #PolyfillIO?

    I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

    But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

    Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

    #webDev #javaScript #web

    #javascript #web #webdev #browsers #polyfills #npm
  10. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    Y'all remember #PolyfillIO?

    I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

    But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

    Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

    #webDev #javaScript #web

    #javascript #polyfillio #webplatform #polyfill #npm #polyfills
  11. ๅฑ‚ๅ  - The Cascading @[email protected] ยท

    ๅ…ณไบŽ polyfill.io ใ€ bootcdn.net ๅŠ staticfile.org ็ญ‰็š„ๅŽ็ปญๆถˆๆฏ๏ผš

    - ๅ—ๅฝฑๅ“็š„ CDN ๅŒ…ๆ‹ฌ     bootcdn.net ใ€ bootcss.com ใ€ staticfile.net ใ€ staticfile.org ็ญ‰ [1]ใ€‚
    - uBlock ็š„ "Badware risks" ่ฟ‡ๆปคๅ™จๅทฒ็ป้˜ปๆ–ญไบ†ๅˆฐ่ฟ™ไบ›็ซ™็‚น็š„่ฎฟ้—ฎ๏ผ›Namecheap ๅ…ณๅœไบ†     polyfill.io ๅ’Œ polyfill.com ๅŸŸๅ [2]๏ผ›Google ไบฆๅผ€ๅง‹ๅœๆญขๆŠ•ๆ”พไฝฟ็”จ polyfill.io ็ฝ‘็ซ™็š„ๅนฟๅ‘Š [1]ใ€‚
    - Cloudflare ๆไพ›ไบ†่‡ชๅŠจๆ›ฟๆข่‡ณ่‡ชๆœ‰ Polyfill ็š„ๆœๅŠก๏ผŒ้ป˜่ฎคๅฏนๅ…่ดน่ฎกๅˆ’็š„็ซ™็‚นๅฏ็”จ๏ผ›ไป˜่ดน่ฎกๅˆ’็š„็ซ™็‚นๅฏไปฅๆ‰‹ๅทฅๅฏ็”จ [3]ใ€‚
    - ไธ€ไฝๅฎ‰ๅ…จ็ ”็ฉถ่€…ๅ‘็Žฐ๏ผŒGitHub ไธŠ็š„     data.polyfill.com ๅบ“ๅญ˜ๅ‚จไบ† Cloudflare API ๅฏ†้’ฅ๏ผŒๅนถ็”จๅฏ†้’ฅ่ฎฟ้—ฎ Cloudflare API ๅ‘็ŽฐๅŒไธ€ไธช่ดฆๆˆทๆŽงๅˆถ็€ไปฅไธŠ็š„่ฟ™ไบ›ๅŸŸๅ [2]ใ€‚

    1.     sansec.io/~
    2.     bleepingcomputer.com/~
    3.     blog.cloudflare.com/~

    thread:     /4551

    [ๆ„Ÿ่ฐข ๅคœๅ‚้›… ๆไพ›ๆญคๆถˆๆฏใ€‚]

    #PolyfillIO #Security

    #security #polyfillio
  12. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

    #fleekfunctions #fleeknetwork #webdev #polyfillio #polyfill #supplychain
  13. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

    #fleekfunctions #fleeknetwork #webdev #polyfillio #polyfill #supplychain
  14. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

    #fleekfunctions #fleeknetwork #webdev #polyfillio #polyfill #supplychain
  15. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

    #javascript #fleek #blockchain #web3 #hacking #supplychain
  16. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

    #fleekfunctions #fleeknetwork #webdev #polyfillio #polyfill #supplychain
  17. iam-py-test :transgender_flag: :neocat_flag_lesbian: @[email protected] ยท

    On July 5th, PolyfillIO switched to polyfill[.]top
    This domain is currently unblocked by uBlock Origin and all major blocklists.
    Tweet: x[.]com/Polyfill_Global/status
    Thread with more information and also making fun of Windows users.

    #PolyfillIO #PolyfillIOAttack

    #polyfillio #polyfillioattack
  18. iam-py-test :transgender_flag: :neocat_flag_lesbian: @[email protected] ยท

    On July 5th, PolyfillIO switched to polyfill[.]top
    This domain is currently unblocked by uBlock Origin and all major blocklists.
    Tweet: x[.]com/Polyfill_Global/status
    Thread with more information and also making fun of Windows users.

    #PolyfillIO #PolyfillIOAttack

    #polyfillio #polyfillioattack
  19. iam-py-test :transgender_flag: :neocat_flag_lesbian: @[email protected] ยท

    On July 5th, PolyfillIO switched to polyfill[.]top
    This domain is currently unblocked by uBlock Origin and all major blocklists.
    Tweet: x[.]com/Polyfill_Global/status
    Thread with more information and also making fun of Windows users.

    #PolyfillIO #PolyfillIOAttack

    #polyfillioattack #polyfillio
  20. iam-py-test :transgender_flag: :neocat_flag_lesbian: @[email protected] ยท

    On July 5th, PolyfillIO switched to polyfill[.]top
    This domain is currently unblocked by uBlock Origin and all major blocklists.
    Tweet: x[.]com/Polyfill_Global/status
    Thread with more information and also making fun of Windows users.

    #PolyfillIO #PolyfillIOAttack

    #polyfillio #polyfillioattack
  21. WetHat๐Ÿ’ฆ @[email protected] ยท

    384,000 sites pull code from sketchy code library recently bought by Chinese firm | @dangoodin

    A supply-chain attack on Polyfill.io, a #JavaScript library, redirected users to malicious sites. So far, bootcss.com is the only domain showing any signs of potential malice. The nature of the other associated endpoints remains unknown

    #CyberSecurity #SupplyChainAttack #WebDevelopment #WebProgramming #WebSecurity #Polyfill #PolyfillIO

    arstechnica.com/security/2024/

    #javascript #cybersecurity #supplychainattack #webdevelopment #webprogramming #websecurity
  22. WetHat๐Ÿ’ฆ @WetHat ยท

    384,000 sites pull code from sketchy code library recently bought by Chinese firm | @dangoodin

    A supply-chain attack on Polyfill.io, a library, redirected users to malicious sites. So far, bootcss.com is the only domain showing any signs of potential malice. The nature of the other associated endpoints remains unknown

    arstechnica.com/security/2024/

    #javascript #cybersecurity #supplychainattack #webdevelopment #webprogramming #websecurity
  23. WetHat๐Ÿ’ฆ @[email protected] ยท

    384,000 sites pull code from sketchy code library recently bought by Chinese firm | @dangoodin

    A supply-chain attack on Polyfill.io, a #JavaScript library, redirected users to malicious sites. So far, bootcss.com is the only domain showing any signs of potential malice. The nature of the other associated endpoints remains unknown

    #CyberSecurity #SupplyChainAttack #WebDevelopment #WebProgramming #WebSecurity #Polyfill #PolyfillIO

    arstechnica.com/security/2024/

    #javascript #cybersecurity #supplychainattack #webdevelopment #webprogramming #websecurity
  24. WetHat๐Ÿ’ฆ @[email protected] ยท

    384,000 sites pull code from sketchy code library recently bought by Chinese firm | @dangoodin

    A supply-chain attack on Polyfill.io, a #JavaScript library, redirected users to malicious sites. So far, bootcss.com is the only domain showing any signs of potential malice. The nature of the other associated endpoints remains unknown

    #CyberSecurity #SupplyChainAttack #WebDevelopment #WebProgramming #WebSecurity #Polyfill #PolyfillIO

    arstechnica.com/security/2024/

    #polyfillio #polyfill #websecurity #webprogramming #webdevelopment #supplychainattack
  25. WetHat๐Ÿ’ฆ @[email protected] ยท

    384,000 sites pull code from sketchy code library recently bought by Chinese firm | @dangoodin

    A supply-chain attack on Polyfill.io, a #JavaScript library, redirected users to malicious sites. So far, bootcss.com is the only domain showing any signs of potential malice. The nature of the other associated endpoints remains unknown

    #CyberSecurity #SupplyChainAttack #WebDevelopment #WebProgramming #WebSecurity #Polyfill #PolyfillIO

    arstechnica.com/security/2024/

    #javascript #cybersecurity #supplychainattack #webdevelopment #webprogramming #websecurity
  26. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

    arstechnica.com/security/2024/

    #polyfillio #supplyChain

    #china #funnull #javascript #security #polyfillio #supplychain
  27. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

    arstechnica.com/security/2024/

    #polyfillio #supplyChain

    #china #funnull #javascript #security #polyfillio #supplychain
  28. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

    arstechnica.com/security/2024/

    #polyfillio #supplyChain

    #china #funnull #javascript #security #polyfillio #supplychain
  29. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

    arstechnica.com/security/2024/

    #polyfillio #supplyChain

    #supplychain #polyfillio #security #javascript #funnull #china
  30. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

    arstechnica.com/security/2024/

    #polyfillio #supplyChain

    #china #funnull #javascript #security #polyfillio #supplychain
  31. Mike Williamson @[email protected] ยท

    If you're using #polyfillio code on your site โ€“ like 100,000+ are โ€“ remove it immediately

    theregister.com/2024/06/25/pol

    #polyfillio
  32. Mike Williamson @[email protected] ยท

    If you're using #polyfillio code on your site โ€“ like 100,000+ are โ€“ remove it immediately

    theregister.com/2024/06/25/pol

    #polyfillio
  33. Mike Williamson @[email protected] ยท

    If you're using #polyfillio code on your site โ€“ like 100,000+ are โ€“ remove it immediately

    theregister.com/2024/06/25/pol

    #polyfillio
  34. Mike Williamson @[email protected] ยท

    If you're using #polyfillio code on your site โ€“ like 100,000+ are โ€“ remove it immediately

    theregister.com/2024/06/25/pol

    #polyfillio
  35. Mike Williamson @[email protected] ยท

    If you're using #polyfillio code on your site โ€“ like 100,000+ are โ€“ remove it immediately

    theregister.com/2024/06/25/pol

    #polyfillio
  36. Marcel SIneM(S)US @[email protected] ยท

    #JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode รผber CDN ein | Developer heise.de/news/Jetzt-handeln-Sc #polyfillio

    #javascript #polyfillio
  37. Marcel SIneM(S)US @[email protected] ยท

    #JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode รผber CDN ein | Developer heise.de/news/Jetzt-handeln-Sc #polyfillio

    #javascript #polyfillio
  38. Marcel SIneM(S)US @[email protected] ยท

    #JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode รผber CDN ein | Developer heise.de/news/Jetzt-handeln-Sc #polyfillio

    #javascript #polyfillio
  39. Marcel SIneM(S)US @[email protected] ยท

    #JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode รผber CDN ein | Developer heise.de/news/Jetzt-handeln-Sc #polyfillio

    #polyfillio #javascript
  40. Marcel SIneM(S)US @[email protected] ยท

    #JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode รผber CDN ein | Developer heise.de/news/Jetzt-handeln-Sc #polyfillio

    #javascript #polyfillio
  41. SnoopGod Linux @[email protected] ยท

    Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
    #CDN #CLOUDFLARE #POLYFILLIO #SUPPLYCHAINATTACK bleepingcomputer.com/news/secu

    #cdn #cloudflare #polyfillio #supplychainattack
  42. SnoopGod Linux @[email protected] ยท

    Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
    #CDN #CLOUDFLARE #POLYFILLIO #SUPPLYCHAINATTACK bleepingcomputer.com/news/secu

    #cdn #cloudflare #polyfillio #supplychainattack
  43. SnoopGod Linux @[email protected] ยท

    Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
    #CDN #CLOUDFLARE #POLYFILLIO #SUPPLYCHAINATTACK bleepingcomputer.com/news/secu

    #cdn #cloudflare #polyfillio #supplychainattack
  44. SnoopGod Linux @[email protected] ยท

    Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
    #CDN #CLOUDFLARE #POLYFILLIO #SUPPLYCHAINATTACK bleepingcomputer.com/news/secu

    #supplychainattack #polyfillio #cloudflare #cdn
  45. SnoopGod Linux @[email protected] ยท

    Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
    #CDN #CLOUDFLARE #POLYFILLIO #SUPPLYCHAINATTACK bleepingcomputer.com/news/secu

    #cdn #cloudflare #polyfillio #supplychainattack
  46. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator

    > Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.

    LOL, FAIL!

    bleepingcomputer.com/news/secu

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticFile #security

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticfile
  47. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator

    > Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.

    LOL, FAIL!

    bleepingcomputer.com/news/secu

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticFile #security

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticfile
  48. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator

    > Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.

    LOL, FAIL!

    bleepingcomputer.com/news/secu

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticFile #security

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticfile
  49. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator

    > Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.

    LOL, FAIL!

    bleepingcomputer.com/news/secu

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticFile #security

    #security #staticfile #bootcss #bootcdn #cloudflare #polyfillio
  50. ๐Ÿชฌ๐Ÿ„๐ŸŒˆ๐ŸŽฎ๐Ÿ’ป๐Ÿšฒ๐Ÿฅ“๐ŸŽƒ๐Ÿ’€๐Ÿด๐Ÿ›ปโ™“๐Ÿงฟ @[email protected] ยท

    > The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator

    > Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.

    LOL, FAIL!

    bleepingcomputer.com/news/secu

    #polyfill #polyfillio #cloudflare #bootcdn #bootcss #staticFile #security

    #polyfillio #cloudflare #bootcdn #bootcss #staticfile #security