Data Breach Today

JUNE 17, 2022

Contrast Security CPO Steve Wilson on Why Log4j Hack Is a Sign of Things to Come The discovery and subsequent exploitation of a critical zero-day vulnerability in Apache's Log4j open-source library has highlighted the importance of code security in today's threat landscape, according to Contrast Security Chief Product Officer Steve Wilson.

Libraries 235

Libraries Security 235

CILIP

JANUARY 16, 2024

CILIP welcomes publication of Sanderson Review of Public Libraries CILIP has welcomed the publication of the findings of Baroness Sanderson of Welton’s Independent Review of Public Libraries, announced today at an event at the House of Lords attended by our CEO, Nick Poole.

Libraries 85

Libraries Government Education Communications 85

Security Affairs

SEPTEMBER 27, 2023

Google assigned a maximum score to a critical security flaw, tracked as CVE-2023-5129, in the libwebp image library for rendering images in the WebP format. Google assigned a new CVE identifier for a critical vulnerability, tracked as CVE-2023-5129 (CVSS score 10,0), in the libwebp image library for rendering images in the WebP format.

Libraries 120

Libraries IT Security Information Security 120

Security Affairs

OCTOBER 10, 2023

A vulnerability in the libcue library impacting GNOME Linux systems can be exploited to achieve remote code execution (RCE) on affected hosts. A threat actor can trigger a vulnerability, tracked as CVE-2023-43641 (CVSS score: 8.8), in the libcue library impacting GNOME Linux systems to achieve remote code execution (RCE) on affected hosts.

Libraries 108

Libraries IT Security Access 108

Security Affairs

AUGUST 30, 2021

The Boston Public Library was victim of a cyberattack that crippled its computer network, the library revealed in a statement Friday. The Boston Public Library announced on Friday that it was hit by a cyberattack that compromised its computer network. The affected systems were taken offline to prevent the threat from spreading.

Libraries 119

Libraries Communications Cybersecurity IT 119

CILIP

JANUARY 22, 2024

The best of times, the worst of times for public libraries Isobel Hunter, CEO of Libraries Connected, discusses how the sector is demonstrating its best innovation while facing its worst financial crisis. ISOBEL Hunter became the first Chief Executive of Libraries Connected in 2018.

Libraries 81

Libraries Archiving Government IT 81

Security Affairs

APRIL 15, 2023

The Goldoson library was discovered by researchers from McAfee’s Mobile Research Team, it collects lists of applications installed on a device, and a history of Wi-Fi and Bluetooth devices information, including nearby GPS locations. The experts have found more than 60 applications in Google Play that were containing the malicious library.

Libraries 98

Libraries Data collection Education Security 98

CILIP

SEPTEMBER 12, 2023

Future Literacy and Libraries We are living and working in an age of uncertainty and change. Libraries are at the forefront of this change, and new funding models, policies, and services are required for the sector to adapt to these changes, that are already impacting on the daily lives of library and information users in countless ways.

Libraries 52

Libraries Risk IT 52

CILIP

FEBRUARY 20, 2024

Library buyers’ role in tech start-ups Frode Opdahl, CEO of Keenious explains the origins of an AI-driven start-up and how its success depends on library buyers keeping the sector attractive to start-ups that wish to innovate the research experience. We are not curators of the data set,” Frode says.

Libraries 52

Libraries Education Artificial Intelligence Sales 52

Data Breach Today

APRIL 5, 2024

A Fake Software Library Made Up by a ChatBot Was Downloaded More Than 35,000 Times Generative artificial intelligence is good at sounding authoritative - even when it's making stuff up. Especially when developers use AI tools that hallucinate entire software libraries.

Artificial Intelligence 314

Artificial Intelligence Libraries IT 314

CILIP

JANUARY 5, 2024

Libraries, critical thinking and the war on truth – what lies ahead in 2024 Nick Poole, Chief Executive, CILIP will leave CILIP at the end of March 2024. As a profession, our responsibility is not to ‘see both sides’ of the debate about volunteerism and cuts to library services. So where do we go from here?”

Libraries 98

Libraries Education Government Access 98

CILIP

MARCH 20, 2024

Call for case studies: Libraries - Building the future economy Building the future economy We are working with an external agency to strengthen our advocacy activity during 2024, to engage with decision makers at the highest level.

Libraries 52

Libraries 52

Security Affairs

MAY 26, 2020

70 percent of mobile and desktop applications that today we use are affected at least by one security flaw that is present in open-source libraries. Experts pointed out that every library could be affected by one o more issues which will be inherited from all the applications that use them. ” reads the report.

Libraries 135

Libraries Security Access IT 135

Data Breach Today

JUNE 12, 2019

Flaw Could Cause Denial-of-Service Event in Windows Fleet, Researcher Claims A Google security researcher has disclosed what he calls an unpatched bug in the main cryptographic library used in newer versions of the Windows operating system that he claims could affect an entire fleet of Windows-based devices.

Libraries 184

Libraries Security 184

CILIP

APRIL 17, 2023

Future Libraries - invitation to tender CILIP is looking to commission a collaborative research and development project focused on re-imagining England’s public library sector for the future and funded by Arts Council England. The core of this project is to undertake a collaborative research and development project to build the new.

Libraries 52

Libraries Risk IT 52

Security Affairs

DECEMBER 1, 2021

Mozilla fixed a critical memory corruption issue affecting its cross-platform Network Security Services (NSS) set of cryptography libraries. Mozilla has addressed a heap-based buffer overflow vulnerability (CVE-2021-43527) in its cross-platform Network Security Services (NSS) set of cryptography libraries. ” wrote Ormandy.

Libraries 125

Libraries Security CMS Communications 125

Enterprise Software Blog

MAY 19, 2023

Many applications bump into a stack of similar challenges, like providing an intuitive and consistent user interface (UI), handling or rendering large data sets, allowing seamless data integration, and communicating with other systems using APIs. But with so many out there, how can you know which is the best Angular component library?

Libraries 52

Libraries Access IT Authentication 52

Security Affairs

FEBRUARY 1, 2021

Google discovered a flaw in GNU Privacy Guard (GnuPG)’s Libgcrypt encryption library that could be exploited to get remote code execution. Just decrypting some data can overflow a heap buffer with attacker controlled data, no verification or signature is validated before the vulnerability occurs.”

Libraries 136

Libraries Encryption Privacy IT 136

Security Affairs

JUNE 16, 2022

Researchers disclosed a remote code execution vulnerability, tracked as CVE-2022-25845, in the popular Fastjson library. Cybersecurity researchers from JFrog disclosed details of a now patched high-severity security vulnerability in the popular Fastjson library that could be potentially exploited to achieve remote code execution.

Libraries 83

Libraries Cybersecurity Security IT 83

Security Affairs

NOVEMBER 3, 2020

The npm security team has removed a malicious JavaScript library named “ twilio-npm ” from its repository because contained malicious code. The tainted JavaScript library was spotted by the researcher Ax Sharma from security firm Sonatype. SecurityAffairs – hacking, npm library). tcp.ngrok[.]io:11425

Libraries 115

Libraries Security IT Information Security 115

CILIP

JUNE 13, 2023

Connecting town and gown through the library How to help a community explore its slave-trading history: Lesley English, Head of Library Engagement at Lancaster University Library, explains how the library plays a key role in building bridges between town and gown. We connect, we innovate, we include.”

Libraries 52

Libraries Access Agriculture Education 52

CILIP

MARCH 28, 2023

Action, Inspiration and Insight at Inaugural Green Libraries Conference Last week CILIP’s first Green Libraries Conference took place and showcased over a year of sustainable and attainable green projects and initiatives, at the Wellcome Collection in London.

Libraries 52

Libraries Education Government IT 52

Security Affairs

DECEMBER 10, 2021

Experts publicly disclose Proof-of-concept exploits for a critical zero-day vulnerability in the Apache Log4j Java-based logging library. Experts publicly disclose Proof-of-concept exploits for a critical remote code execution zero-day vulnerability, tracked a CVE-2021-44228 (aka Log4Shell ), in the Apache Log4j Java-based logging library.

Libraries 144

Libraries IT Cloud Data breaches 144

CILIP

JULY 4, 2023

Larger organisations, where data already plays a significant role in their work and service provision, have been using AI to enhance decision-making around staff allocation, as well as enhanced search and access. AI creates a complex set of issues for information and library professionals to come to terms with.

Libraries 52

Libraries Archiving Access Compliance 52

Adam Shostack

JUNE 22, 2020

I’m excited to see that they’re Re-introducing the Cyentia Research Library , with cool (new?) There are over 1,000 corporate research reports with data that companies paid to collect, massage, and release in a way they felt would be helpful to the rest of the world. features like an RSS feed.

Libraries 80

Libraries Ransomware Access IT 80

Security Affairs

OCTOBER 19, 2022

Researcher discovered a remote code execution vulnerability in the open-source Apache Commons Text library. GitHub’s threat analyst Alvaro Munoz discovered a remote code execution vulnerability, tracked as CVE-2022-42889, in the open-source Apache Commons Text library. ” reads the post published by Munoz.

Libraries 98

Libraries IT Security Information Security 98

Data Breach Today

OCTOBER 9, 2023

Updates Expected Wednesday for Open-Source Command-Line Tool, Library Maintainers of the widely used open-source command-line tool cURL and libcurl library that supports key network protocols said two upcoming vulnerabilities are set to be disclosed this week.

Libraries 289

Libraries Security 289

Security Affairs

NOVEMBER 5, 2021

Two popular npm libraries, coa and rc. The security team of the npm JavaScript package warns that two popular npm libraries, coa and rc. Two npm libraries that have a total of 23 million weekly downloads, a data that is worrisome. The post npm libraries coa and rc. while compromised rc versions are 1.2.9,

Libraries 107

Libraries Passwords Access Security 107

CILIP

MAY 15, 2023

Public libraries are vital national network - CILIP Cymru Wales makes representation to Welsh Senedd “Libraries serve a manifold role. Along with Nicola Pitman, Chair of the Society of Chief Librarians, Amy argued that the new Welsh Library Public Standards (WPLS) framework will need to measure quality not just quantity of service.

Libraries 52

Libraries Government 52

Security Affairs

JANUARY 4, 2020

Maintainers of the OpenCV library addressed two buffer overflow flaws that could lead to arbitrary code execution. Maintainers of the OpenCV library addressed two high-severity buffer overflow vulnerabilities that could be exploited by an attacker to execute arbitrary code. Both vulnerabilities were reported to the vendor in July 2019.

Libraries 74

Libraries Data structuring Security IT 74

eSecurity Planet

SEPTEMBER 22, 2022

Trellix security researchers have revealed a major vulnerability in the Python tarfile library that could be exploited in software supply chain attacks. The post Unpatched Python Library Affects More Than 300,000 Open Source Projects appeared first on eSecurityPlanet. Read next: Best Third-Party Risk Management (TPRM) Tools.

Libraries 86

Libraries Archiving Risk Security 86

CILIP

MARCH 28, 2021

Here he speaks to Information Professional Editor Rob Green about how librarians and library services are now a central part of that function, and how the library service is supporting the wider needs of the Department. s library services more directly within the DWP?s Trevor recently incorporated the department?s Trevor says.

Libraries 52

Libraries Access Government Analytics 52

IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Library branches remain open, Wi-Fi is still available and materials can still be borrowed. However, public computers and printing services are unavailable.

Data Privacy 97

Data Privacy Privacy Libraries Security 97