cognitive cybersecurity intelligence

News and Analysis

Search

384,000 sites pull code from sketchy code library recently bought by Chinese firm

Over 384,000 websites, including mainstream companies like Hulu and Mercedes-Benz, still link to a site that has been performing a supply-chain attack, say researchers. The site, cdn.polyfill[.]io, was a legitimate project that allowed old browsers to run advanced functions, but after being bought by China-based Funnull, it was seen redirecting visitors to malicious sites. Since domain registrar Namecheap suspended the site, the attacks have halted. However, Funnull continues to own over 1.6 million sites, each with the potential to resume these types of attacks.

Source: arstechnica.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts

Cyber Security by Tata Elxsi

Hey friends! It’s a beautiful day in the San Francisco Bay Area, isn’t it? Let’s chat about a topic that’s becoming more and more important

Protecting People, Not Just Data

This piece reflects on the human impact of cybercrime following a ransomware attack on pathology lab Synnovis, which resulted in the indefinite postponement of a