BRAN: helping patients ask the right questions | Right Decisions

Right Decisions
Realistic Medicine - National toolkit for professionals
Back
Quick access to patient care resources
BRAN: helping patients ask the right questions

Announcements and latest updates

Polyfill.io vulnerability

28 june 2024

Our eHealth team advised us yesterday of an international vulnerability relating to polyfill.io . This domain has become compromised and is spreading malware through a widespread supply chain attack, estimated to affect over 110,000 websites including major websites such as the BBC. The Polyfill site offered widely used bits of code for older browsers that allowed the use of modern Javascript features. Such code makes the work for web developers easier and allows compatibility with a broader range of browsers.

Websites that have used the Javascript code from Polyfill have been urged to remove such code immediately. The change occurred after a suspected Chinese firm purchased the domain in early 2024.

Tactuum have identified and are now testing a fix to remove all Polyfill code from the RDS site.. They will be deploying the fix on Monday 1 July along with other planned fixes and amendments. I will notify you of the timing of the deployment as soon as possible.

In the meantime, please ensure that you have up-to-date anti-virus software installed on your machines and personal devices.

We encourage patients to ask questions, for example:

B - What are the Benefits of this test or procedure?
R – What are the Risks of this test or procedure?
A – Are there any Alternatives?
N – What if I do Nothing?

BRAN also applies to clinicians! We should also ask ourselves:

B - Will this patient really Benefit from this test / procedure / hospitalisation?
R - Am I exposing this patient to Risks?
A - What Alternative options have we discussed?
N - if I were this patient, would I consider doing Nothing at this stage?

Visit the NHS Inform: It's Ok to Ask website for more information.

Source: NHS Inform and Choosing Wisely UK

Access: free online resources

This is linked to the pillar for shared decision making.

Last reviewed: 31/03/2023

Next review date: 31/03/2024

Reviewer name(s): Ali Raza, Malcolm Watson.