News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2013

Hacker Proofing Apache & PHP Configuration

Apache has been truly one of the dominant web servers of the World Wide Web. Now first we will learn about the techniques to how harden our Apache co…

Security Flaw in Philips Lighting System Lets Hackers Keep You in the Dark

A misfortunate implementation of the security token in the Hue intelligent lighting system from Phillips could allow an attacker to control the light…

Unpatch Wednesday: Microsoft Pulls Flawed Exchange Server Patch

Just 24 hours after shipping a critical Exchange Server 2013 patch to cover several remote code execution vulnerabilities, Microsoft has yanked the u…

Microsoft Patch Tuesday to Fix Three Critical Remote Code Execution vulnerabilities

Today the Microsoft Security team will issue eight security updates in total. Three are designated as critical and rest five as Important updates, th…

Simple Hack Threatens Outdated Joomla Sites

If you run a site powered by the Joomla content management system and haven’t yet applied a critical update for this software released less than two …

DNS Impairment Redirects Tthousands of Websites To Malware Sides

On 5 August tree Dutch webhosting companies suffered cyber attacks. Their name servers were altered by attackers that appear to have accessed an acco…

New Banking Trojan Targets Linux Users

Researchers from RSA have uncovered a new banking Trojan designed to steal information from machines running the Linux operating system. Dubbed “Hand…

Firefox Zero-day Exploited Against Tor Anonymity

Security researchers found a malicious script that takes advantage of a Firefox Zero-day to identify some users of the Tor anonymity network.

Hackers Can Steal Windows Phone Passwords Using Wi-Fi Vulnerability

Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. Cryptographic weak…

CZ.NIC launches new projects

Both projects are based on real requirements and fill the need for services that were previously missing.

Prague, 3 August 2013 – The CZ.NIC Associati…

BREACH Decodes HTTPS Encrypted Data in 30 Seconds

A new hacking technique dubbed BREACH can extract login tokens, session ID numbers and other sensitive information from SSL/TLS encrypted web traffic…

Credit Card Redirection, the Evolution of Phishing

Cyber criminals are varying their attack method compromising legitimate shopping websites instead to deceive them with spoofed emails that lead to sp…

The Ultimate Guide to Secure Your Social Media Account

How would you feel about a complete stranger knowing intimate details about your life? How about your bank details? Well, the intimate details that y…

Keep Your Laptop Safe While Surfing through Wi-Fi Hotspots (Infographic)

The relaxing atmosphere of surfing at the beach, however, makes it easy to forget about the sharks. Connecting to an unsecured network poses serious …

Fake Angelina Jolie CNN Story Contains Malware

The spam comes in the form of an email supposedly from CNN. The subject line is "CNN: Forbes: Angelina Jolie tops list of highest-paid actresses" and…

Black Hat Researchers Remotely Hack Into SCADA Systems on Oil Rigs

SCADA systems used on oil rigs and other areas of the oil industry are using outdated networking protocols that can easily be compromised, SCADA expe…

A new design for the main CZ.NIC websites

After nearly six years, CZ.NIC has updated the design of the Association’s main websites. Receiving a new graphic design are www.nic.cz, the CZ.NIC L…

Microsoft expands bug info-sharing program to larger crowd

Microsoft has announced an expansion of a program that shares information with selected security firms. The time to threat data before the company pa…

Hacking the car was made possible

The fact that it is possible to hack the car was confirmed by two security researches on Toyota Prius. Prius is believed to be one of the most high-t…

Royal Baby Scams Could Lead to Royal Headaches

Whenever there's a big news story, scammers and cyberthieves are quick to take advantage of Internet users' curiosity in order to plant malware on th…

First Malicious Apps Targeting Android 'Master Key Vulnerability' Found in the Wild

Symantec discovered two mobile apps that were infected by an attacker, which are legitimate applications used to help find and make doctor appointmen…

Hundreds of millions at risk from SIM card vulnerability

Berlin-based Security Research Labs found the way how to make SIM cards vulnerable to cyber attacks without leaving any evidence and noticing the use…

Belarus Internet infested with spammers

Eastern European countries filled the top three slots of a list of nations that have IP addresses known to be sources of spam. List is dominated by B…

The Dangers of Unsecured USB Drives

Policies are useful, but without enforcement, they are not a successful means of preventing malware invasions and the theft of business information.

Android Backup Option Sends WiFi Passwords in Plaintext to Google

A staffer with the Elecontric Frontier Foundation is warning that Google Android's "Back up my data" feature sends WiFi passwords and other private i…

MasterKey Hack Applications Spotted in the Play Store

A number of applications that harmlessly use the MasterKey vulnerability have been spotted on Google Play.

IPv6 Security Overview: a Small View of the Future

In this paper we will analyze the features of the new suite of internet protocols, its advantages and disadvantages, as well as the possible implicat…

Fake Online 'Ransomware' Targets Porn Viewers, Hijacks Browsers

Technically, this scam is fairly straightforward. It "locks" computer screens by sending users to a website designed to look like an official FBI web…

Mac Malware Tricks Users with Reversed Text

Mac users should think twice before downloading PDFs of uncertain origin: A new bit of spyware — under the guise "RecentNews.ppa.pdf" — is actually a…

LinkedIn Clickjacking Vulnerability Tricks Users to Spam Links

A Clickjacking vulnerability existed on LinkedIn that allowed an attacker to trick users for sharing and posting links on behalf of victim.

Registry for .NL (SIDN) and for .BE (DNS.be) Were Compromised

Yesterday, Tuesday 9 July, it came to light that a number of SIDN websites had been infected by malware or had been otherwise compromised. In another…

Internet Explorer Vulnerability Exposed by Google Researcher Used In Targeted Attacks

Google and Microsoft are at each other's throats again. In a recent statement, Microsoft says hackers have been actively exploiting a vulnerability t…

'Priyanka' Worm Plays Havoc with WhatsApp Contacts

"Priyanka" is a fairly common Indian name, but if you fall victim to a new Android infection, it could become disturbingly prevalent in your contacts…

HP Issues Fix for Backdoor Vulnerability in StoreOnce Systems

HP's security response team has released a fix to address the backdoor vulnerability in its StoreOnce backup systems disclosed late last month by an …

New Breed of Software Detects Malware from a Distance

The biggest security threat banks faces — malware that pervades their online and mobile banking users' devices — is being met by an increasingly soph…

Google Android Master Key Vulnerability Exploit Code Circulates

Proof-of-concept code for exploiting a Google Android master key vulnerability that can be used to Trojanize legitimate apps is making the round on t…

Cecilia Malmström Welcomes New EU Rules to fight cyber-crime

The Directive on attacks against information systems builds on rules that have been in force since 2005 (Council Framework Decision 2005/222/JHA). Wh…

Microsoft to Patch Seven Flaws in July's Patch Tuesday

The patch that will get the most news attention is likely to be CVE-2013-3660, which is a memory management problem in win32k.sys – the Windows Kerne…

Rampant Apache Website Attack Hits Visitors with Highly Malicious Software

Darkleech is back. Or maybe it never left. Either way, it's a growing problem. A campaign that forces sites running the Apache Web server to install …

Apple Issues Emergency Security Patch for Macs

If you're a Mac user and watch video files on your computer, consider downloading Apple's Security Update 2013-003 sooner rather than later. A vulner…

Massive Android Flaw Allows Hackers To ‘Take Over’ and ‘Control’ 99 % of Android Devices

Mobile security company Bluebox said today that it recently discovered a vulnerability in Android that makes any Android device released in the last …

Demystifying HTML 5 Attacks

To address the growing needs of developers to build high quality sites, HTML5 has relaxed some of the restrictions which were placed earlier by the S…

Ubisoft Breached, Sensitive Account Data Leaked

Game publisher Ubisoft was breached and unauthorized parties accessed customers’ usernames, e-mail addresses and hashed passwords. Ubisoft urges all …

Skype for Android May Bypass Smartphone Lockscreens

Phone thieves might be able to bypass lockscreens on Android devices, thanks to a flaw in Skype for Android.

Android Hack-Tool Discovered By F-Secure

The recently discovered Android malware - dubbed USB Cleaver, is able to compromise the victim’s mobile and also infects his PC stealing sensitive in…

Bait and CAPTCHA: How Malware Can Change Your Computer Screen

Italian security researcher Rosario Valotta has discovered — or rather, rediscovered — a trick that would let cybercriminals alter aspects of your co…

Behind Top Ten Rules for Network Administrators

Last article from series about internet security is dedicated to some situations which you can face as administrator of medium-sized network. CSIRT.C…

Facebook Hacked With an SMS

The hacker “fin1te” revealed that Facebook account was hackable within a minute simply with an SMS.

Malware Mostly Comes from Legitimate Websites

A new report from Google suggests that malware infections from malevolent "attack sites," which intentionally distribute harmful software, are relati…

Surveillance Cams Get Party Hats for Orwell's Birthday

Famed author George Orwell was born on June 25, 1903, and two Dutch artists decided that the best way to celebrate his birthday was with party hats —…