Security Affairs

MAY 19, 2022

Google addressed a high-severity flaw in its OAuth client library for Java that could allow attackers with a compromised token to deploy malicious payloads. The Google OAuth Client Library for Java is designed to work with any OAuth service on the web, not just with Google APIs. or higher), and Google App Engine. Pierluigi Paganini.

Libraries 142

Libraries Authentication Cybersecurity Security 142

Security Affairs

JANUARY 30, 2024

Qualys researchers discovered a root access flaw, tracked as CVE-2023-6246, in GNU Library C (glibc) affecting multiple Linux distributions. The Qualys Threat Research Unit discovered four security vulnerabilities in the GNU Library C (glibc) , including a heap-based buffer overflow tracked as CVE-2023-6246. in August 2022.

Libraries 141

Libraries Access Security IT 141

Schneier on Security

SEPTEMBER 27, 2023

Rather than Apple, Google, and Citizen Lab coordinating and accurately reporting the common origin of the vulnerability, they chose to use a separate CVE designation, the researchers said.

Libraries 128

Libraries Security IT 128

Data Breach Today

OCTOBER 25, 2024

Hackers Backdoor Software Libraries to Deliver Malware Security researchers found backdoored software packages in the NPM software library, apparent evidence of an ongoing campaign by North Korean hackers to social engineer coders into installing infostealers. Pyongyang hackers have a history of bizarre methods for stealing money.

Libraries 299

Libraries Security 299

Schneier on Security

MARCH 29, 2024

You might think that libraries are kind of boring, but this self-analysis of a 2023 ransomware and extortion attack against the British Library is anything but.

Libraries 124

Libraries Ransomware 124

Security Affairs

JANUARY 3, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chrome and Perl library flaws to its Known Exploited Vulnerabilities catalog. The root cause of the problem is a weakness in the Spreadsheet::ParseExcel third-party library. This library is used by the Amavis virus scanner that runs on Barracuda ESG appliances.

Libraries 139

Libraries IT Cybersecurity Risk 139

CILIP

JUNE 7, 2024

Trust Libraries: 10 Pledges for libraries to a new Government A General Election is just round the corner and its outcome will affect us all, with a new government and potentially hundreds of new MPs taking their seats in the House of Commons.

Libraries 92

Libraries Government Access IT 92

CILIP

FEBRUARY 1, 2024

New Future Libraries project to support resilience and strategic growth in Public Libraries Future Libraries is a two-part initiative from CILIP to challenge and engage librarians and library leaders to reimagine libraries in a world of evolving living and working patterns in the context of a rapidly changing world.

Libraries 96

Libraries IT 96

Security Affairs

OCTOBER 10, 2023

A vulnerability in the libcue library impacting GNOME Linux systems can be exploited to achieve remote code execution (RCE) on affected hosts. A threat actor can trigger a vulnerability, tracked as CVE-2023-43641 (CVSS score: 8.8), in the libcue library impacting GNOME Linux systems to achieve remote code execution (RCE) on affected hosts.

Libraries 132

Libraries Security IT Access 132

Security Affairs

SEPTEMBER 27, 2023

Google assigned a maximum score to a critical security flaw, tracked as CVE-2023-5129, in the libwebp image library for rendering images in the WebP format. Google assigned a new CVE identifier for a critical vulnerability, tracked as CVE-2023-5129 (CVSS score 10,0), in the libwebp image library for rendering images in the WebP format.

Libraries 139

Libraries IT Security Information Security 139

Data Breach Today

OCTOBER 9, 2023

Updates Expected Wednesday for Open-Source Command-Line Tool, Library Maintainers of the widely used open-source command-line tool cURL and libcurl library that supports key network protocols said two upcoming vulnerabilities are set to be disclosed this week.

Libraries 298

Libraries Security 298

Data Breach Today

JULY 24, 2024

Security researchers at Palo Alto Networks uncovered two arbitrary code flaws in open-source library LangChain. Open-Source Company Issues Patches After Being Alerted by Palo Alto A widely used generative artificial intelligence framework is vulnerable to a prompt injunction flaw that could enable sensitive data to leak.

Artificial Intelligence 304

Artificial Intelligence Libraries Security 304

Data Breach Today

JANUARY 18, 2024

Also: FBI Warning About Androxgh0st; eBay Pays a $3 Million Fine for Cyberstalking This week, Microsoft expanded plans to store EU citizens' data locally, shipping-themed phishing spam is a threat, the British Library overcame a ransomware setback, the FBI warned of Androxgh0st malware, Remcos RAT targeted South Korea, and eBay was fined $3 million (..)

Libraries 308

Libraries Phishing Ransomware 308

Data Breach Today

SEPTEMBER 2, 2021

and Below Are Affected by the Vulnerabilities Several companies that use the OpenSSL cryptography library toolkit are reportedly scrambling and releasing security advisories to their users following patching of two vulnerabilities that were first fixed and disclosed to users on Aug. OpenSSL v1.1.1k

Security 321

Security Libraries 321

Data Breach Today

NOVEMBER 28, 2024

Also: Python Library Update Steals Credentials; Drug Cartels Launder With Tether This week's cryptohack roundup includes a U.S.

Libraries 219

Libraries 219

Krebs on Security

MARCH 17, 2022

For example, the popular library ES5-ext hadn’t updated its code in nearly two years. If so, the code broadcasts a “Call for peace:” A message that appears for Russian users of the popular es5-ext code library on GitHub. The message has been Google-Translated from Russian to English. ”

Libraries 351

Libraries IT Security 351

Data Breach Today

MARCH 26, 2021

System Administrators Advised to Update to Latest Version That Addresses 2 Vulnerabilities Users of the OpenSSL crypto library should upgrade immediately to the latest version to eliminate serious flaws that attackers could exploit to shut down servers, some security experts warn.

Systems administration 312

Systems administration Libraries Security 312

Data Breach Today

JUNE 17, 2020

Treck Issues 'Ripple20' Fixes for 19 Flaws in Its Widely Used TCP/IP Library Time for another internet of things update nightmare: Researchers have found that a little-known but widely used TCP/IP software library built into millions of internet-connected devices has 19 flaws that need fixing.

Libraries 271

Libraries IT 271

Data Breach Today

FEBRUARY 2, 2024

Log4Shell burst into public awareness in late 2021 when security researchers identified a flaw in the ubiquitous Apache Log4J 2 Java library.

Libraries 269

Libraries Security 269

Data Breach Today

NOVEMBER 2, 2023

Also: Iranian State Hackers Stalk Middle Eastern Governments This week, Canada banned WeChat and Kaspersky apps, REvil members faced trial in a Russian military court, the British Library experienced an IT outage, Iranian state-backed hackers targeted Middle East governments and European officials extended the ban on Meta's behavioral advertising practices. (..)

Military 288

Military Libraries Government IT 288

Data Breach Today

DECEMBER 14, 2023

The Apache Foundation, which manages the Struts library, on Dec. Bug Enables Path Traversal Attack Hackers are using publicly disclosed proof-of-concept code to exploit a recently patched critical vulnerability found in the Apache Struts 2 Framework to achieve remote code execution. 7 urged developers to apply a patch.

Libraries 285

Libraries 285

CILIP

JUNE 17, 2024

Libraries and the fight against truth decay Truth decay is the diminishing role of facts and analysis in public life, it is a phenomenon that erodes civil discourse, causes political paralysis, and leads to general uncertainty around what is and is not. A healthy democracy is helped by an open exchange of views,” said Stijn.

Libraries 88

Libraries IT 88

Data Breach Today

APRIL 15, 2020

The software giant had previously warned users about two vulnerabilities in the Adobe Type Manager Library that were being exploited in the wild. Software Giant Had Previously Warned 2 Vulnerabilities Were Being Exploited Microsoft issued patches for three zero-day vulnerabilities as part of its most recent Patch Tuesday update.

Libraries 265

Libraries IT 265

CILIP

AUGUST 30, 2024

CILIP writes to Libraries Minister CILIP has written to Sir Chris Bryant, detailing how CILIP can support the new government’s key missions. Chief Executive Louis Coiffait-Gunn reached out to the MP after he was announced as heading up responsibility for public libraries.

Libraries 76

Libraries Government IT 76

CILIP

AUGUST 28, 2024

We write as the leaders of national charities representing school library staff; the School Library Association, the Chartered Institute for Library and Information Professionals (CILIP) including CILIP’s School Libraries Group (CILIP SLG), and the Association of Senior Children’s and Education Librarians (ASCEL).

Libraries 87

Libraries Education Access 87

CILIP

AUGUST 6, 2024

Approaching AI at the National Library of Scotland Image of the National Library of Scotland by Magnus Hagdorn, from Flickr Robert Cawston, Director of Digital and Service Transformation, introduces a new AI Statement for the National Library of Scotland.

Libraries 78

Libraries Artificial Intelligence Metadata Data collection 78

CILIP

JANUARY 5, 2024

Libraries, critical thinking and the war on truth – what lies ahead in 2024 Nick Poole, Chief Executive, CILIP will leave CILIP at the end of March 2024. As a profession, our responsibility is not to ‘see both sides’ of the debate about volunteerism and cuts to library services.

Libraries 98

Libraries Education Government Access 98

CILIP

AUGUST 5, 2024

CILIP statement on the fire damage at Spellow Hub Library in Liverpool Spellow Hub library is located in Liverpool, and was transformed into a 'library of the future' in 2023. Across the country, public libraries should be safe, welcoming and inclusive communities, open to all free of charge.

Libraries 78

Libraries Education Access IT 78

Security Affairs

NOVEMBER 18, 2024

The Library of Congress discloses the compromise of some of its IT systems, an alleged foreign threat actor hacked their emails. Only email communications between congressional offices and some library staff, including the Congressional Research Service, from January to September, were affected. ” reported the NBC News.

Libraries 73

Libraries Communications Access Government 73

Krebs on Security

DECEMBER 14, 2021

But this month’s Patch Tuesday is overshadowed by the “ Log4Shell ” 0-day exploit in a popular Java library that web server administrators are now racing to find and patch amid widespread exploitation of the flaw. Log4Shell is the name picked for a critical flaw disclosed Dec.

Libraries 314

Libraries Cybersecurity Data breaches Cloud 314