2013
Common Virtualization Vulnerabilities and How to Mitigate Risks
Virtualization has eased many aspects of IT management but has also complicated the task of cyber security.The nature of virtualization introduces a …
Researcher unearths two new Java zero-day bugs
A Polish security firm known for rooting out Java vulnerabilities has reported two new bugs in the browser plug-in to Oracle. Vulnerabilities affect …
Banking apps not safe from OS vulnerabilities
Mobile banking apps rely on tools such as HTTPS and sandboxing to keep safe, but operating system vulnerabilities may render such measures useless an…
New Patches from Adobe and Microsoft
Adobe and Microsoft each have issued security updates to fix multiple critical vulnerabilities in their products. Adobe released updates for Flash Pl…
Facebook malware
How does it works, how to protect yourself against it and what to do if you get infected?
9 Tips to Stay Safe on Public Wi-Fi
The number of free public Wi-Fi hotspots is growing, but not every hotspot can provide the protection of a private home network. Your notebook, table…
New Ransomware Encrypts Victim Data
An unusual new strain of ransomware makes good on its threat, doing what the majority of other varieties only claim to do. The Trojan actually encryp…
How to fix the UPnP security holes
First, and foremost, you need to make sure you've blocked UPnP at your Internet gateway. Specifically, you need your firewall to block any system fro…
Security flaws in Universal Plug and Play expose million devices
Over 80 million unique IPs were identified that responded to UPnP discovery requests from the internet. The risk is an attacker could “execute arbitr…
Password Cracker Targets Siemens S7 PLCs
Siemens S7 programmable logic controllers, the same PLC family exploited by the Stuxnet malware, are in the crosshairs of a password-cracking tool th…
Eight Simple Tips for Securing Your Computer
Do you have anti-virus software on your computer? If you do, congratulations. You have taken the first step toward real computer security. However, m…
Security Flaws Leave Networked Printers Open To Attack
Printers that use popular print server software sold by Hewlett-Packard are vulnerable to attacks that can bypass built-in biometric defenses, recove…
Microsoft Releases Fix for Critical IE Vulnerability
Microsoft has released a fix for a critical remote code execution flaw in Internet Explorer that is being actively exploited. The fix, MS13-008, did …
10 Facts: Secure Java For Business Use
Is Java safe to use? That's the refrain heard after every round of new zero-day vulnerabilities that get spotted in Java, followed days or weeks late…
Linksys Routers Vulnerable to Remote Ownage
Successful exploitation of a Cisco Linksys WRT54GL model gives the attacker root access on the locally installed Linux-based firmware. The vulnerabil…
Facebook Graph Search is an dangerous tool for phishing attacks
Graph Search makes it easier for cyber criminals to gather relevant details that can be used to target phishing attacks more effectively.
Stylometric analysis to track anonymous users in the underground
According an interesting study presented at last edition of Chaos Communication Congress in Germany, up to 80 percent of certain anonymous undergroun…
Critical Java Exploit Spreads like Wildfire; No Fix Available
Until we come up with a fix for that, it would be a great idea to flush Java off your computer or, at least, to turn off the Java plugin for the brow…
The .CZ Domain Celebrates Its 20th Birthday
On Sunday, 13 January 2013, it will be exactly 20 years since the family of top-level national domains was extended by the .CZ suffix.
Prague, 10 Janu…
New Android Malware Steals Personal Data
Symantec has identified new malware targeting Google Android devices that collects personal data. The malware, detected as Android.Exprespam, is s…
Yahoo Mail XSS Vulnerability Could Affect Millions of Accounts
Security researcher Shahin Ramezany developed an XSS proof-of-concept exploit that he claims puts some 400 million Yahoo Mail users at risk of having…
Reflected XSS vulnerability affects Millions of sites hosted in HostMonster
Ramneek Sidhu has discovered Reflected XSS Vulnerability in one of the biggest webhosting site "HostMonster" (hostmonster.com). Just like in the prev…
Ondřej Filip manages an international centre for Internet domains
The non-profit organisation DNS-OARC, where Ondřej Filip has held the position of director, associates the key players in the field of the research, …
Microsoft issues tool to repair Internet Explorer Zero-Day Security Vulnerability
The tool is meant to address a vulnerability discovered in the wild roughly a week ago. According to Microsoft, the issue affects IE versions 6, 7 an…