Security Affairs

APRIL 22, 2019

The popular jQuery JavaScript library is affected by a rare prototype pollution vulnerability that could allow attackers to modify a JavaScript object’s prototype. The impact of the issue could be severe considering that the jQuery JavaScript library is currently used on 74 percent of websites online, most sites still use the 1.x

Libraries 111

Libraries Security IT 111

Security Affairs

JULY 9, 2019

Liran Tal, a developer advocate at open-source security platform Snyk, discovered a high-severity prototype pollution security flaw that affects all versions of lodash. Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. Pierluigi Paganini.

Libraries 97

Libraries Security IT Information Security 97

CILIP

JUNE 13, 2023

Connecting town and gown through the library How to help a community explore its slave-trading history: Lesley English, Head of Library Engagement at Lancaster University Library, explains how the library plays a key role in building bridges between town and gown. We connect, we innovate, we include.”

Libraries 52

Libraries Access Agriculture Education 52

Security Affairs

APRIL 2, 2019

A change made months ago in an open-source JavaScript library introduced a cross-site scripting (XSS) vulnerability in Google Search. The Japanese security researcher Masato Kinugawa discovered an XSS vulnerability in Google Search that was introduced with a change made months ago in an open-source JavaScript library.

Libraries 110

Libraries Phishing Security IT 110

Security Affairs

NOVEMBER 6, 2018

Apache Struts Users have to update the Commons FileUpload library in Struts 2 that is affected by two vulnerabilities. Apache Struts developers have addressed two vulnerabilities in the Commons FileUpload library in Struts 2, the flaws can be exploited for remote code execution and denial-of-service (DoS) attacks. in June 2017.

Libraries 111

Libraries Access Security IT 111

Security Affairs

JANUARY 29, 2020

Security researchers have spotted a vulnerability, tracked as CVE-2020-7247, that affects a core email-related library used by many BSD and Linux distributions. Security experts from Qualys have discovered a flaw, tracked as CVE-2020-7247, in OpenSMTPD. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .

Libraries 107

Libraries Security IT Information Security 107

Security Affairs

NOVEMBER 6, 2019

Google experts found a flaw, tracked as CVE-2019-18408, in the compression library libarchive could lead to arbitrary code execution. Google experts found a vulnerability, tracked as CVE-2019-18408, in the compression library libarchive could be exploited to execute arbitrary code. . Pierluigi Paganini.

Libraries 75

Libraries Archiving Security Information Security 75

Security Affairs

JUNE 12, 2019

Tavis Ormandy, a white hat hacker Google Project Zero announced to have found a zero-day flaw in the SymCrypt cryptographic library of Microsoft’s operating system. Microsoft Security Response Center (MSRC) told the Google expert that the company will not able to provide a security patch before next month.

Libraries 104

Libraries Encryption Security IT 104

Security Affairs

JANUARY 26, 2020

The best news of the week with Security Affairs. Malware attack took down 600 computers at Volusia County Public Library. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Security Affairs newsletter Round 248 appeared first on Security Affairs. Pierluigi Paganini.

Security 110

Security Data breaches Military IoT 110

Security Affairs

AUGUST 30, 2020

The npm security team removed a malicious JavaScript library from the npm repository that was designed to steal sensitive files from the victims. The fallguys library claimed to provide an interface to the “ Fall Guys: Ultimate Knockout ” game API. ” reads the npm’s advisory. . Pierluigi Paganini.

Libraries 143

Libraries Access Security IT 143

Security Affairs

OCTOBER 21, 2020

Google has released Chrome version 86.0.4240.111 that includes security fixes for several issues, including a patch for an actively exploited zero-day vulnerability tracked as CVE-2020-15999. Google Project Zero is recommending other app development teams who use the same FreeType library to update their software as well.

Libraries 131

Libraries Security Information Security IT 131

Security Affairs

OCTOBER 18, 2020

Microsoft released two out-of-band security updates to address remote code execution (RCE) bugs in the Microsoft Windows Codecs Library and Visual Studio Code. The CVE-2020-17022 is a remote code execution vulnerability that exists in the way that Microsoft Windows Codecs Library handles objects in memory. Pierluigi Paganini.

Libraries 137

Libraries Manufacturing Security IT 137

Security Affairs

FEBRUARY 2, 2020

The best news of the week with Security Affairs. CVE-2020-7247 RCE flaw in OpenSMTPD library affects many BSD and Linux distros. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Security Affairs newsletter Round 249 appeared first on Security Affairs. Magento 2.3.4

Security 89

Security Military Ransomware Libraries 89

Security Affairs

DECEMBER 8, 2019

The best news of the week with Security Affairs. Two malicious Python libraries were stealing SSH and GPG keys. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Security Affairs newsletter Round 243 appeared first on Security Affairs. Pierluigi Paganini.

Security 79

Security Authentication Ransomware Libraries 79

Security Affairs

SEPTEMBER 7, 2020

A recently discovered cybercrime gang, tracked as Epic Manchego , is using a new technique to create weaponized Excel files that are able to bypass security checks. The phishing messages carry weaponized Excel documents that are able to bypass security checks and that had low detection rates. EPPlus is such a tool.”

Libraries 136

Libraries Phishing Passwords Security 136

Security Affairs

MARCH 27, 2020

A few days ago, Microsoft warned of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. The vulnerabilities affects the way Windows Adobe Type Manager Library handles a specially-crafted multi-master font – Adobe Type 1 PostScript format. See the link for more details.

Libraries 142

Libraries Risk Security IT 142

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 134

Libraries Risk Authentication Security 134

Security Affairs

FEBRUARY 19, 2019

It’s official, Offensive Security announced the release of Kali Linux 2019.1, On Monday, Offensive Security announced the availability of Kali Linux 2019.1, that was released in January and that includes new database and automation APIs, evasion modules and libraries, language support, improved performance.

Security 110

Security Libraries IT 110

Security Affairs

MARCH 20, 2020

Drupal developers released security updates for versions 8.8.x x that fix two XSS vulnerabilities affecting the CKEditor library. The Drupal development team has released security updates for versions 8.8.x x that address two XSS vulnerabilities that affect the CKEditor library. or 8.7.12 , include CKEditor version 4.14

Libraries 138

Libraries Risk Access Security 138

Security Affairs

MAY 7, 2020

Samsung addressed this month a critical 0-click vulnerability that was discovered by security researchers from Google. Samsung released this week a security patch that addresses a critical vulnerability, tracked as CVE-2020-8899, impacting all smartphones sold since 2014. system libraries.” or libhwui.so

IT 141

IT Libraries Security Access 141

Security Affairs

JULY 13, 2019

The best news of the week with Security Affairs. Backdoor mechanism found in Ruby strong_password library. UK ICO fines British Airways £183 Million under GDPR over 2018 security breach. Prototype Pollution flaw discovered in all versions of Lodash Library. Microsoft released Patch Tuesday security updates for July 2019.

Security 75

Security Libraries Data breaches Ransomware 75

Security Affairs

MAY 31, 2020

Every week the best security articles from Security Affairs free for you in your email box. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Security Affairs newsletter Round 266 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived!

Security 82

Security Data breaches Ransomware Sales 82

CILIP

AUGUST 12, 2020

Do libraries have a role at the cutting edge of tech ethics? Set up by tech entrepreneur Martha Lane Fox in 2015, Doteveryone has lobbied government for more regulation of big tech and lobbied big tech companies to act more responsibly towards their users. DO librarians have a role at the cutting edge of tech regulation?

Libraries 52

Libraries Government IT Risk 52

Security Affairs

SEPTEMBER 8, 2020

Microsoft September 2020 Patch Tuesday security updates address 129 vulnerabilities, including twenty critical remote code execution issues. ” CVE-2020-1129 – Microsoft Windows Codecs Library Remote Code Execution Vulnerability , which can be exploited to perform code execution if an affected system views a specially crafted image.

Libraries 114

Libraries Security Information Security IT 114

Security Affairs

OCTOBER 17, 2020

All secrets and keys stored on that computer should be rotated immediately from a different computer,” the npm security team said. Experts warn that systems running applications that imported one of these packages should be potentially compromised because the three JavaScript libraries opened web shells on the computers running them.

Libraries 145

Libraries Security Access IT 145

eSecurity Planet

MAY 19, 2022

As organizations embrace hybrid IT environments, SD-WAN and the tools combine to form a Secure Access Service Edge (SASE) offering that gives organizations the latest capabilities for optimizing WANs and securing hybrid enterprise workloads. Networking specialists like Cisco and HPE’s Aruba are moving deeper into security.

Security 120

Security Cloud Encryption Access 120

The Last Watchdog

MARCH 21, 2019

I had a lively discussion recently with a couple of experts from WhiteHat Security. I spoke with WhiteHat Security researchers Bryan Becker and Mark Rogan at RSA 2019. “If This jQuery vulnerability has been known to the black hat community since about 2015. Baking-in security. It’s referred to as SecOps or DevSecOps.

Digital transformation 170

Digital transformation Libraries Security Cloud 170

Security Affairs

APRIL 18, 2024

The attackers employed the lure of a free IP scanning tool to infect the systems with the Anunak backdoor and gain an initial foothold using living-off-the-land binaries, scripts, and libraries (lolbas).

Phishing 131

Phishing Manufacturing Libraries IT 131

Security Affairs

APRIL 6, 2020

Cloud security firm Aqua Security uncovered a hacking campaign carried out during the past months, hackers are scanning the Internet for Docker servers running API ports exposed without a password. ” reads the post published by Aqua Security. gopsutil – a process utility library, used for system and processes monitoring.

Mining 135

Mining Libraries Cloud Communications 135

Security Affairs

APRIL 14, 2020

Microsoft Patch Tuesday security updates for April 2020 address 113 flaws, including three Windows issues that have been exploited in attacks in the wild. Microsoft Patch Tuesday security updates for April 2020 address 113 flaws, including two remote code execution flaws in Windows that are actively exploited. Pierluigi Paganini.

Libraries 132

Libraries Authentication Security Risk 132

Security Affairs

APRIL 28, 2019

The best news of the week with Security Affairs. jQuery JavaScript library flaw opens the doors for attacks on hundreds of millions of websites. Bodybuilding.com forces password reset after a security breach. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Kindle Edition. Paper Copy.

Security 87

Security IoT Ransomware Libraries 87

Security Affairs

MARCH 3, 2019

Npcap is the Nmap Project’s packet sniffing (and sending) library for Windows. It is based on the WinPcap / Libpcap libraries, but with improved speed, portability, security. “ Npcap is the exciting and feature-packed update to the venerable WinPcap packet capture library. frame capture.”

Libraries 111

Libraries Security IT 111

Security Affairs

APRIL 29, 2020

The discovery urges Apple into implementing additional security measures to protect these components, following the approach already adopted by Google to protect multimedia processing libraries. Multimedia processing libraries are used by the modern mobile OS to automatically manage multimedia files (i.e. Pierluigi Paganini.

Libraries 144

Libraries Paper Security Cybersecurity 144

Security Affairs

AUGUST 26, 2019

The UK National Cyber Security Centre (NCSC) urges developers to drop Python 2 due to imminent End-of-Life to avoid attacks on a large scale. The UK National Cyber Security Centre (NCSC) is recommending developers to drop Python 2.x x due to the imminent End-of-Life. “Python 2.7 will not be maintained past 2020.

Security 111

Security Risk Ransomware Libraries 111

Security Affairs

AUGUST 25, 2019

The best news of the week with Security Affairs. A backdoor mechanism found in tens of Ruby libraries. Hackers are scanning the web for vulnerable Fortinet, Pulse Secure Products installs. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. A new round of the weekly newsletter arrived!

Security 77

Security Mining Data breaches Libraries 77

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. ” reads the security advisory. Experts pointed out that GitHub and OpenSSH implementations of the libssh library are not affected by the flaw. Pierluigi Paganini.

Libraries 111

Libraries Authentication Passwords Security 111

Security Affairs

NOVEMBER 11, 2018

The best news of the week with Security Affairs. Apple T2 security chip in new MacBooks disconnects Microphone when lid is closed. Apache Struts users have to update FileUpload library to fix years-old flaws. HSBC Bank USA notified customers of a security breach. Security Affairs – Newsletter ). 20% discount.

Security 94

Security IoT Insurance Libraries 94