this post was submitted on 10 Jul 2023
174 points (97.8% liked)

Discussions related to Infosec.pub

1226 readers
1 users here now

founded 2 years ago
MODERATORS
jerry
174
PSA: Lemmy.world was compromised! (self.infosecpub)
submitted 2 years ago* (last edited 2 years ago) by henfredemars to c/infosecpub
18 comments fedilink hide all child comments
 

Discussion from here: https://lemmy.ml/post/1895271

Relevance: Infosec.pub may wish to consider defederation temporarily.

Temporary fix in place, but instances remain vulnerable. Post: https://lemmy.world/post/1290412

  • UPDATE 2:58 UTC the injected code was removed from the main page, but cleanup efforts are still underway.
  • UPDATE 3:11 UTC situation appears to be under control, but browse with caution.
  • UPDATE 3:35 UTC main page exploited again! Website is unsafe.
  • UPDATE 4:01 UTC reports coming in that other instances are getting owned. One report of comments trying to inject JavaScript into the page.
  • UPDATE 4:13 UTC XSS vulnerability in page sidebar is reported relationship to the event is unknown.
  • UPDATE 7:17 UTC Root cause was identified a while ago.
you are viewing a single comment's thread
view the rest of the comments