article thumbnail

Google OAuth client library flaw allowed to deploy of malicious payloads

Security Affairs

Google addressed a high-severity flaw in its OAuth client library for Java that could allow attackers with a compromised token to deploy malicious payloads. The Google OAuth Client Library for Java is designed to work with any OAuth service on the web, not just with Google APIs. or higher), and Google App Engine. Pierluigi Paganini.

Libraries 118
article thumbnail

Apache Log4j 2.17.1 fixes new remote code execution flaw (CVE-2021-44832)

Security Affairs

version to address recently discovered arbitrary code execution flaw tracked as CVE-2021-44832. version to address a recently discovered arbitrary code execution flaw, tracked as CVE-2021-44832, affecting Log4j 2.17.0. CVE-2021-44832 is the fifth vulnerability discovered in the popular library in the last weeks.

Libraries 125
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Learning from our Past: Celebrating Black History Month with Lancaster University Library

CILIP

Learning from our Past: Celebrating Black History Month with Lancaster University Library Slavery Banner in Lancaster Universit Library (to Sunita Abraham) Lancaster University Library takes the lead in decolonisation to reach staff and students of the university, with a diverse range of engaging, and enriching activites, initiatives, and projects.

article thumbnail

Microsoft February 2021 Patch Tuesday fixes 56 bugs, including an actively exploited Windows zero-day

Security Affairs

Microsoft February 2021 Patch Tuesday addresses 56 vulnerabilities, including a flaw that is known to be actively exploited in the wild. The CVE-2021-1732 zero-day is an elevation of privilege issues that resides in the Windows Win32k component. ” reads a blog post published by Microsoft.

IoT 98
article thumbnail

2021 cyber security review of the year

IT Governance

For many, 2021 was a year to forget. You can read more about that attack, along with the year’s other biggest stories, in our 2021 cyber security review of the year. 2021 got off to an inauspicious start when cyber security researchers reported a huge leak of Brazilian residents’ data. First came the Colonial Pipeline hack.

Security 115
article thumbnail

List of data breaches and cyber attacks in November 2021 – 223.6 million records breached

IT Governance

With one month left in 2021, the annual total running total of compromised records is to just shy of 5 billion. The post List of data breaches and cyber attacks in November 2021 – 223.6 million records breached appeared first on IT Governance UK Blog.

article thumbnail

List of data breaches and cyber attacks in August 2021 – 61 million records breached

IT Governance

The post List of data breaches and cyber attacks in August 2021 – 61 million records breached appeared first on IT Governance UK Blog. Travel and medical insurance provider guard.me million) Indra hacking group blamed for attack on Iranian railway system (unknown) Willdan Group, Inc.