Infection Prevention and Control

Announcements and latest updates

Polyfill.io vulnerability

28 june 2024

Our eHealth team advised us yesterday of an international vulnerability relating to polyfill.io . This domain has become compromised and is spreading malware through a widespread supply chain attack, estimated to affect over 110,000 websites including major websites such as the BBC. The Polyfill site offered widely used bits of code for older browsers that allowed the use of modern Javascript features. Such code makes the work for web developers easier and allows compatibility with a broader range of browsers.

Websites that have used the Javascript code from Polyfill have been urged to remove such code immediately. The change occurred after a suspected Chinese firm purchased the domain in early 2024.

Tactuum have identified and are now testing a fix to remove all Polyfill code from the RDS site.. They will be deploying the fix on Monday 1 July along with other planned fixes and amendments. I will notify you of the timing of the deployment as soon as possible.

In the meantime, please ensure that you have up-to-date anti-virus software installed on your machines and personal devices.

Warning sign

Check TRAK for this symbol which indicates alert organisms like MRSA and other resistant organisms have been previously isolate from samples from the patient.

Then check the Infection Prevention and Control intranet pages these provide standard infection control guidance as well as organism specific guidance in the policies and guidance section.

Need to talk to someone?

If you are still unsure after reading the relevant sections of the intranet contact:

In hours: 08:30-16:00 Mon-Friday, ext: 63373