WHY CODE SECURITY MATTERS - EVEN IN HARDENED ENVIRONMENTS

Summary from the TLDR Web Dev newsletter

There is an Arbitrary File Write vulnerability in Node.js that can be exploited to gain remote code execution access, even on a read-only filesystem, by using pipe file descriptors in the /proc filesystem. This post explains how attackers can bypass hardened infrastructure measures by using controlled data structures to manipulate event handlers. It also goes over how to protect against this.