* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, October 10, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

    The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

    MSG Entertainment Takes Radio City Music Hall Into the Future With Introduction of Sphere Immersive Sound – Business Wire

    MSG Entertainment Transforms Radio City Music Hall with Cutting-Edge Sphere Immersive Sound Experience

    Israel’s Entertainment Industry Is Being Targeted by the Left in Hollywood and the Right at Home – The Wall Street Journal

    Inside the Fierce Clash Shaping Israel’s Entertainment Industry: Hollywood vs. Local Voices

    Offset Is Ready To Finalize Divorce With Cardi B for a Major Reason – Yahoo

    Offset Poised to Finalize Divorce from Cardi B for a Major Reason

    Beyond the Stage: 8 Performing Arts Centers Driving Entertainment and Education – Livability.com

    Beyond the Stage: 8 Performing Arts Centers Transforming Entertainment and Education

    Row K Entertainment Emerges as Major New Hollywood Buyer With Splashy TIFF Shopping Spree – TheWrap

    Row K Entertainment Emerges as Major New Hollywood Buyer With Splashy TIFF Shopping Spree – TheWrap

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    4J schools trying out new electronic hall pass technology – Lookout Eugene-Springfield

    4J Schools Unveils Cutting-Edge Electronic Hall Pass System to Transform Student Experience

    China outlines more controls on exports of rare earths and technology – fox40.com

    China Unveils Tougher Restrictions on Rare Earth and Technology Exports

    Wisconsin Dairy Leads the Way with Cutting-Edge Technology Systems

    ENERCON and Biome collaborate for wind turbine noise reduction technology – Yahoo Finance

    ENERCON and Biome Join Forces to Revolutionize Wind Turbine Noise Reduction

    US and investors gambling on unproven nuclear technology, warn experts – Financial Times

    US and investors gambling on unproven nuclear technology, warn experts – Financial Times

    Is Light-Speed Analog Computing the Future of Technology? – BIOENGINEER.ORG

    Could Light-Speed Analog Computing Transform the Future of Technology?

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

    The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

    MSG Entertainment Takes Radio City Music Hall Into the Future With Introduction of Sphere Immersive Sound – Business Wire

    MSG Entertainment Transforms Radio City Music Hall with Cutting-Edge Sphere Immersive Sound Experience

    Israel’s Entertainment Industry Is Being Targeted by the Left in Hollywood and the Right at Home – The Wall Street Journal

    Inside the Fierce Clash Shaping Israel’s Entertainment Industry: Hollywood vs. Local Voices

    Offset Is Ready To Finalize Divorce With Cardi B for a Major Reason – Yahoo

    Offset Poised to Finalize Divorce from Cardi B for a Major Reason

    Beyond the Stage: 8 Performing Arts Centers Driving Entertainment and Education – Livability.com

    Beyond the Stage: 8 Performing Arts Centers Transforming Entertainment and Education

    Row K Entertainment Emerges as Major New Hollywood Buyer With Splashy TIFF Shopping Spree – TheWrap

    Row K Entertainment Emerges as Major New Hollywood Buyer With Splashy TIFF Shopping Spree – TheWrap

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    4J schools trying out new electronic hall pass technology – Lookout Eugene-Springfield

    4J Schools Unveils Cutting-Edge Electronic Hall Pass System to Transform Student Experience

    China outlines more controls on exports of rare earths and technology – fox40.com

    China Unveils Tougher Restrictions on Rare Earth and Technology Exports

    Wisconsin Dairy Leads the Way with Cutting-Edge Technology Systems

    ENERCON and Biome collaborate for wind turbine noise reduction technology – Yahoo Finance

    ENERCON and Biome Join Forces to Revolutionize Wind Turbine Noise Reduction

    US and investors gambling on unproven nuclear technology, warn experts – Financial Times

    US and investors gambling on unproven nuclear technology, warn experts – Financial Times

    Is Light-Speed Analog Computing the Future of Technology? – BIOENGINEER.ORG

    Could Light-Speed Analog Computing Transform the Future of Technology?

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home General

384,000 sites pull code from sketchy code library recently bought by Chinese firm

July 4, 2024
in General
384,000 sites pull code from sketchy code library recently bought by Chinese firm
Share on FacebookShare on Twitter

The supply-chain threat that won’t die —

Many website admins, it seems, have yet to get memo to remove Polyfill[.]io links.

Dan Goodin
– Jul 3, 2024 7:36 pm UTC

384,000 sites pull code from sketchy code library recently bought by Chinese firm

Getty Images

More than 384,000 websites are linking to a site that was caught last week performing a supply-chain attack that redirected visitors to malicious sites, researchers said.

For years, the JavaScript code, hosted at polyfill[.]com, was a legitimate open source project that allowed older browsers to handle advanced functions that weren’t natively supported. By linking to cdn.polyfill[.]io, websites could ensure that devices using legacy browsers could render content in newer formats. The free service was popular among websites because all they had to do was embed the link in their sites. The code hosted on the polyfill site did the rest.

The power of supply-chain attacks

In February, China-based company Funnull acquired the domain and the GitHub account that hosted the JavaScript code. On June 25, researchers from security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

The revelation prompted industry-wide calls to take action. Two days after the Sansec report was published, domain registrar Namecheap suspended the domain, a move that effectively prevented the malicious code from running on visitor devices. Even then, content delivery networks such as Cloudflare began automatically replacing pollyfill links with domains leading to safe mirror sites. Google blocked ads for sites embedding the Polyfill[.]io domain. The website blocker uBlock Origin added the domain to its filter list. And Andrew Betts, the original creator of Polyfill.io, urged website owners to remove links to the library immediately.

As of Tuesday, exactly one week after malicious behavior came to light, 384,773 sites continued to link to the site, according to researchers from security firm Censys. Some of the sites were associated with mainstream companies including Hulu, Mercedes-Benz, and Warner Bros. and the federal government. The findings underscore the power of supply-chain attacks, which can spread malware to thousands or millions of people simply by infecting a common source they all rely on.

“Since the domain was suspended, the supply-chain attack has been halted,” Aidan Holland, a member of the Censys Research Team, wrote in an email. “However, if the domain was to be un-suspended or transferred, it could resume its malicious behavior. My hope is that NameCheap properly locked down the domain and would prevent this from occurring.”

What’s more, the Internet scan performed by Censys found more than 1.6 million sites linking to one or more domains that were registered by the same entity that owns polyfill[.]io. At least one of the sites, bootcss[.]com, was observed in June 2023 performing malicious actions similar to those of polyfill. That domain, and three others—bootcdn[.]net, staticfile[.]net, and staticfile[.]org—were also found to have leaked a user’s authentication key for accessing a programming interface provided by Cloudflare.

Censys researchers wrote:

So far, this domain (bootcss.com) is the only one showing any signs of potential malice. The nature of the other associated endpoints remains unknown, and we avoid speculation. However, it wouldn’t be entirely unreasonable to consider the possibility that the same malicious actor responsible for the polyfill.io attack might exploit these other domains for similar activities in the future.

Of the 384,773 sites still linking to polyfill[.]com, 237,700, or almost 62 percent, were located inside Germany-based web host Hetzner.

Censys found that various mainstream sites—both in the public and private sectors—were among those linking to polyfill. They included:

Warner Bros. (www.warnerbros.com)
Hulu (www.hulu.com)
Mercedes-Benz (shop.mercedes-benz.com)
Pearson (digital-library-qa.pearson.com, digital-library-stg.pearson.com)
ns-static-assets.s3.amazonaws.com

The amazonaws.com address was the most common domain associated with sites still linking to the polyfill site, an indication of widespread usage among users of Amazon’s S3 static website hosting.

Censys also found 182 domains ending in .gov, meaning they are affiliated with a government entity. One such domain—feedthefuture[.]gov—is affiliated with the US federal government. A breakdown of the top 50 affected sites is here.

Attempts to reach Funnull representatives for comment weren’t successful.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : Ars Technica – https://arstechnica.com/?p=2035216

Previous Post

High-altitude cave used by Tibetan Buddhists yields a Denisovan fossil

Next Post

Norfund looking to invest close to $500m in SE Asia from climate fund

Salesians in Kenya Set to Roll Out Comprehensive Integral Ecology Plan to End “piecemeal” Approach – aciafrica.org

Salesians in Kenya Launch Bold New Plan to End Fragmented Approach to Integral Ecology

October 10, 2025
From refugee to Nobel: Yaghi hails science’s ‘equalising force’ – The Hindu

From refugee to Nobel: Yaghi hails science’s ‘equalising force’ – The Hindu

October 10, 2025
The “Silent Killer” Doesn’t Have to Be Silent: How Laboratory Science Is Changing the Story – Dark Daily

The “Silent Killer” Speaks Up: How Laboratory Science Is Transforming the Narrative

October 10, 2025
Mbappe credits Madrid lifestyle for helping him reset mentally and physically – Reuters

Mbappe credits Madrid lifestyle for helping him reset mentally and physically – Reuters

October 10, 2025
4J schools trying out new electronic hall pass technology – Lookout Eugene-Springfield

4J Schools Unveils Cutting-Edge Electronic Hall Pass System to Transform Student Experience

October 10, 2025
Six Pack of college football picks, predictions: Alabama vs. Missouri, Oregon vs. Indiana in spotlight – CBS Sports

Six Can’t-Miss College Football Showdowns: Alabama vs. Missouri and Oregon vs. Indiana Steal the Spotlight

October 10, 2025

High Five: The rest of the world’s top upcoming qualifiers – The New York Times

October 10, 2025
Donald Trump’s fortress economy is starting to hurt America – The Economist

How Donald Trump’s Fortress Economy Is Starting to Hurt America

October 10, 2025
The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

The Best “Friends” Halloween Episodes That Blend Spooky And Silly In The Perfect Way – Yahoo

October 10, 2025
Board of Health Meeting – City of Somerville (.gov)

Inside the Latest Somerville Board of Health Meeting: Key Updates and Decisions

October 10, 2025

Categories

Archives

October 2025
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728293031  
« Sep    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (861)
  • Economy (881)
  • Entertainment (21,754)
  • General (17,517)
  • Health (9,923)
  • Lifestyle (894)
  • News (22,149)
  • People (882)
  • Politics (891)
  • Science (16,092)
  • Sports (21,382)
  • Technology (15,862)
  • World (864)

Recent News

Salesians in Kenya Set to Roll Out Comprehensive Integral Ecology Plan to End “piecemeal” Approach – aciafrica.org

Salesians in Kenya Launch Bold New Plan to End Fragmented Approach to Integral Ecology

October 10, 2025
From refugee to Nobel: Yaghi hails science’s ‘equalising force’ – The Hindu

From refugee to Nobel: Yaghi hails science’s ‘equalising force’ – The Hindu

October 10, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version