Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean-Linked Polyfill Supply Chain Attack Affects 100,000 Websites A significant supply chain attack has been linked to North Korean actors, impacting approximately 100,000 websites. Initially attributed to China, the incident was re-evaluated following the discovery of an infostealer infection. The attack exploited vulnerabilities in polyfill libraries, allowing attackers to inject malicious code into affected sites. The scope of the impact is extensive, with numerous organizations and users potentially exposed to data theft and further exploitation. The attack vector utilized compromised libraries that are widely used in web development. Security teams are currently assessing the damage and implementing measures to mitigate further risks. Ongoing investigations are focusing on the specific tools and methods employed by the attackers. As of now, remediation efforts are underway, but the full extent of the breach is still being determined. 1 sources 76