Sixteen years in the dark, countless eyes searching, but the monster was there all along…

#Halloween #DevStroies

In the ancient halls of FFmpeg, a vulnerability lay sleeping. For sixteen years it lingered, hidden in the H.264 codec, while fuzzers and mortal reviewers searched the shadows in vain.

#Halloween #DevStroies

Once upon a midnight dreary, while the npm kingdom slumbered, a familiar horror stirred in the dark. Shai-Hulud, the hideous worm, had returned. This time, it brought a new nightmare: CHAINDROP.
#Halloween #DevStroies #npm #cybersecurity

Head the warning: revoke compromised tokens, rotate exposed secrets, and enable two-factor authentication! For in the haunted halls of the software supply chain, not every package comes in peace…

Real story > www.elastic.co/security-lab...

#Halloween #DevStroies #npm #cybersecurity

🎃 Some bugs don’t show up until the lights go out. This Halloween, we’re sharing a few spooky dev stories all week👻

🕸️ The full story is in the thread....

#Halloween #DevStroies #programminghumor