Polyfill.io supply chain attack: Detection Protection

A polyfill is a piece of code used to provide modern functionality on older browsers that do not natively support it. The Polyfill.io attack refers to a security vulnerability found in the Polyfill.io service, a popular tool that provides polyfills for web developers to ensure compatibility of their code across different browsers. In this particular attack, a vulnerability was discovered that allowed an attacker to inject malicious code into the polyfills served by Polyfill.io. This injection could potentially execute harmful scripts in the browsers of users visiting websites that utilized Polyfill.io, leading to a range of security issues such as data theft, session hijacking, or other forms of exploitation.

Recommended Protection Measures

To protect your environment from this attack, it is recommended that users:

• Block DNS Resolution: Ensure end-point devices block DNS resolution to Polyfill.io.
• Implement Firewall Policies: Implement firewall policies to block traffic to IP addresses associated with Polyfill.io.
• Regular Malware Scans: Run timely malware and anti-virus scans on all devices.
• Enforce Content Security Policies: Implement a strong Content Security Policy (CSP) on websites to prevent the execution of unauthorized scripts.
• Regular Security Audits: Ensure that the service providing the polyfills is secure with regular security audits and updates.
• Use Cyber Threat Protection: Use a Cyber Threat Protection system like Uila uObserve, which can identify assets at risk from this threat.

Benefits of Using Uila uObserve’s Cyber Threat Protection

With Uila’s uObserve Cyber Threat Protection, users can identify thousands of cyber threats including this Polyfill.io issue, ransomware, malware, exploit kits, port scans, Command & Control (C&C), OS fingerprinting, buffer overflows, SMB probes, obfuscation, and more that are part of the cyber kill chain. See image below on Uila identifying corporate devices at risk from the threat.

Not only can the user’s security team that is using Uila uObserve get automatic alerts on this vulnerability and automatically protect itself, but the Uila cyber expert team also performs periodic and on-demand cyber threat assessments for all of its users. This helps in identifying emerging and critical threats in a timely manner, thereby minimizing any impact on revenue and reputation.

Free Cyber Threat Assessment

Users who are interested in identifying the Polyfill.io threat in their environment, can contact Uila to perform a free cyber threat assessment for their Data Center or Cloud environment. Visit Uila's Free Trial to get started.