Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.

  • SaharaMaleikuhm@feddit.org
    link
    fedilink
    English
    arrow-up
    9
    ·
    3 hours ago

    Imagine working in IT security. How bad a time are you having right now? Are we expecting things to become better or worse the next few months?

    • Agent641@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 hour ago

      When you’ve been at battle stations for 12 years it just feels like another week.

      Open a ticket and add it to the list.

    • billwashere@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 hours ago

      I am… well sorta. My team has to deal with the cleanup and repercussions at least. Let’s just say this week was not fun. At all.

      In addition to the eMudhra certs and the php issue, there were also issues with python, Oracle, Java, and node.js. The certs and php were definitely the highest profile. They shut down incoming traffic to university web servers for the php one. The certs would have been more of a problem if we had extremely short expiration times