A harmful CDN has been captured shipping javascript exploits on over 100,000 web sites. This is absolutely among the craziest attacks I’ve ever before seen.

Issue: https://github.com/polyfillpolyfill/polyfill-service/issues/2873
Writeup: https://lyra.horse/blog/2024/05/exploiting-v8-at-openecsc/

COURSES Learn to code in C at https://lowlevel.academy
NEWSLETTER Sign up for our newsletter at https://mailchi.mp/lowlevel/the-low-down

EXCELLENT BOOKS FOR THE LOWEST LEVEL.
Blue Fox: Arm Assembly Internals and Reverse Engineering: https://amzn.to/4394t87.
Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation: https://amzn.to/3C1z4sk.
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software: https://amzn.to/3C1daFy.
The Ghidra Book: The Definitive Guide: https://amzn.to/3WC2Vkg.

SOCIALS.
Low Level Merch!: https://lowlevel.store/.
Follow me on Twitter: https://twitter.com/LowLevelTweets.
Follow me on Twitch: https://twitch.tv/lowlevellearning.
Join me on Discord!: https://discord.gg/gZhRXDdBYY.

The post malicious javascript injected into 100,000 websites first appeared on Work From Home Channel TV.