Resource Library
Sectigo in the News
Once benign Polyfill.io code now exposes 100k+ websites to attack
Over 100,000 websites using the Polyfill JS open-source code are vulnerable to attacks redirecting users to malicious sites after the code's host, cdn.polyfill.io, was acquired by Chinese company Funnull. This incident, revealed by Sansec researchers, highlights the risks of relying on third-party open-source maintainers and the need for robust security measures and continuous monitoring to protect against sophisticated malware targeting various industries.