article thumbnail

CILIP welcomes publication of Sanderson Review of Public Libraries

CILIP

CILIP welcomes publication of Sanderson Review of Public Libraries CILIP has welcomed the publication of the findings of Baroness Sanderson of Welton’s Independent Review of Public Libraries, announced today at an event at the House of Lords attended by our CEO, Nick Poole.

article thumbnail

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

eSecurity Planet

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. and software libraries to attack the supply chain. 30% data breaches and +23% ransomware for the first two months of 2024. globally, +19.8% US for data breaches for 2023. +30%

67
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Weekly Vulnerability Recap – January 2, 2024 – Barracuda ESG, Apache OfBiz Vulnerabilities Persist

eSecurity Planet

On December 24, when Barracuda released the security notice, there was no remediation or patch available for CVE-2023-7101 , the Spreadsheet::ParseExcel vulnerability, within the open-source library. The technique that threat actors can use is Dynamic Link Library (DLL) search order hijacking. 1020000 1.26.10-gke.1235000 1235000 1.27.7-gke.1293000

article thumbnail

VulnRecap 1/8/24 – Ivanti EPM & Attacks on Old Apache Vulnerabilities

eSecurity Planet

January 3, 2024 52% of Exposed SSH Servers Vulnerable to Terrapin Attack Type of attack: Secure Shell (SSH) vulnerability enables prefix truncation attacks. and older of the Perl Spreadsheet::ParseExcel library ( CVE-2023-7101 ) contain a RCE vulnerability exploited by Chinese hackers, as noted on December 24th. Versions 0.65

article thumbnail

Vulnerability Recap 4/1/24: Cisco, Fortinet & Windows Server Updates

eSecurity Planet

March 22, 2024 Emergency Out-of-Band Windows Server Security Updates Type of vulnerability (or attack): Memory leak. or above March 25, 2024 Hackers Pollute Python Package Index Open-Source Libraries Type of vulnerability (or attack): Malicious library code. The fix: Update affected versions ASAP: FortiClient EMS 7.2:

Libraries 109
article thumbnail

DinodasRAT Linux variant targets users worldwide

Security Affairs

In March 2024, Trend Micro researchers uncovered a sophisticated campaign conducted by a threat actor tracked as Earth Krahang while investigating the activity of China-linked APT Earth Lusca. Both Linux and Windows versions of DinodasRAT communicates with the C2 over TCP or UDP. The C2 domain is hard-coded into the binary.

Libraries 139
article thumbnail

The Week in Cyber Security and Data Privacy: 12 – 18 February 2024

IT Governance

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Recent victims of Rhysida include the British Library and Sony’s Insomniac Games. Key dates 31 March 2024 – PCI DSS v4.0 It is available on the KISA website.