Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.

  • SaharaMaleikuhm@feddit.org
    link
    fedilink
    English
    arrow-up
    13
    ·
    4 days ago

    Imagine working in IT security. How bad a time are you having right now? Are we expecting things to become better or worse the next few months?

    • Agent641@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      3 days ago

      When you’ve been at battle stations for 12 years it just feels like another week.

      Open a ticket and add it to the list.

    • billwashere@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      4 days ago

      I am… well sorta. My team has to deal with the cleanup and repercussions at least. Let’s just say this week was not fun. At all.

      In addition to the eMudhra certs and the php issue, there were also issues with python, Oracle, Java, and node.js. The certs and php were definitely the highest profile. They shut down incoming traffic to university web servers for the php one. The certs would have been more of a problem if we had extremely short expiration times

    • jaschen306@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      Am in IT. These last few days were pretty annoying. 3 mandatory meetings a day. Scrambling to find the right person for our 3rd party stacks.

      The fix was pretty easy once we had it. Just annoyed that this is going to only get worse.