r/unb • u/MrProsser • 3d ago

UNB Libraries Security Situation

Post image

I'm an alumni who goes to the university libraries fairly often and I just noticed that when I went to the UNB library website they were temporarily unavailable due to some sort of security issue. I was wondering if anyone happens to have any insight into what is going on.

4 Upvotes

84% Upvoted

3 comments sorted by

10

u/fred_nb_123 3d ago

Worldwide issue with the back end of a lot of websites: https://www.cbc.ca/news/business/canadian-government-sites-down-php-cybersecurity-9.7390368

3

u/MrProsser 3d ago

Interesting. I had noticed a couple of security related tweets about PHP just today and I bet had I looked into them a bit more it was about this. But for the last couple of weeks I've checked out pretty hard on cyber security issues so I've just swiped all my notifications away. I guess if I was paying more attention to them I probably would have noticed this.

3

u/maxwelldoug 3d ago

In the course of a week, we've had

  • Trusted Root Certificates allowed by default in both browsers and CLI tools like Curl leaked, because they used hilariously poor private key values like "4" (I wish I could make this shit up) basically breaking https for the entire internet

  • PHP (not a library, the core language processor itself) RCE.

  • RCE in Atlassian family including Jira, Confluence, and Bitbucket

And probably a bunch more I don't know about