2014
Czech Internet users’ view on diacritics in domains remains unchanged. They still do not want it
81 % of corporate respondents and 68 % of ordinary Internet users were against the introduction of IDN (Internationalized Domain Names).
Prague, Novem…
How hackers are exploiting vulnerable DVRs to conduct illegal activities
Security experts discovered a new malware that targets DVR and other Internet of Things devices recruiting them for different illegal activities.
Hacking RFID payment smart cards with an Android App
TrendMicro explained the mechanisms behind the hacking of RFID payment smartcards, explained how to do it with an Android App.
ENISA Issues Guidelines on Cryptographic Solutions
The European Union Agency for Network and Information Security (ENISA) has released two reports that aim to inform and guide decision makers in the p…
Google's "Santa" Tracks Naughty and Nice Binaries on Mac OS X
Google's Macintosh Operations Team announced the availability of the source code for "Santa," a tool designed for whitelisting and blacklisting binar…
Regin – Highly advanced spying tool discovered by Symantec
Symantec has uncovered the backdoor Regin, a highly advanced spying tool used in cyber espionage campaigns against governments and infrastructure ope…
Understanding Disk Encryption on Android and iOS
Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data is stored on t…
New Citadel Trojan Targets Your Password Managers
Unless we are a human supercomputer, remembering password is not an easy task and that too, if you have a different password for every different site…
Backdoored CMS Plugins Used to Hijack Web Servers
Thousands of backdoored plugins and themes for popular content management systems (CMS) are being leveraged by a threat group to abuse Web servers on…
Siemens Fixes Critical Vulnerabilities in WinCC SCADA Products
Siemens has released software updates to address two critical vulnerabilities in its SIMATIC WinCC supervisory control and data acquisition (SCADA) s…
WordPress 4.0.1 Security Release
WordPress 4.0.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites im…
Firing Range - Open Source Web App Vulnerability Scanning Tool From Google
Google on Tuesday launched a Security testing tool "Firing Range", which aimed at improving the efficiency of automated Web application security scan…
Let’s Encrypt - A Certificate Authority to Provide Free SSL Certificates for Entire Web
The non-profit foundation EFF has partnered with big and reputed companies including Mozilla, Cisco, and Akamai to offer free HTTPS/SSL certificates …
Microsoft Releases Emergency Out-of-Band Patch for Kerberos Bug MS14-068
Microsoft today released an "out-of-band" security updates to fix a critical vulnerability in all supported versions of its Windows Server software t…
Detekt is the free tool to detect state spyware on phones and PCs
Amnesty International launches Detekt tool to scan for state surveillance spyware on phones and PCs, it was developed by security expert Claudio Guar…
A new critical flaw affects Android OS except Lollipop
The security researcher Jann Horn discovered a privilege escalation flaw that affects Android OS devices except the Lollipop version.
Thousands Fall with Each Hour for Free Audi R8 Facebook Scam
Over 200,000 Facebook users have fallen prey to a like-farming scam promising two free Audi R8 cars, and thousands join the victim list with each hou…
WhatsApp Rolls Out End-to-End Encryption for Millions of Users
WhatsApp has started to fully encrypt communications by default in what may be “the largest deployment of end-to-end encryption in history,” accordin…
Cybercriminals Use Macros to Deliver Rovnix Malware
The Rovnix Trojan has started leveraging macros embedded in innocent-looking Microsoft Word documents to infect computers, researchers at Trend Micro…
Drupal Fixes Session Hijacking, DoS Vulnerabilities
Drupal 6.34 and Drupal 7.34 were released on Wednesday to address multiple moderately critical vulnerabilities affecting prior versions.
A creepy website is streaming from 73,000 cameras; some in the bedroom
A strange looking website is letting anyone in the world stream from more than 73,000 IP cameras whose respective owners have not yet changed their d…
Windows Phone 8.1 Hacked
XDA-developers have discovered a new vulnerability in Microsoft’s OS Windows 8.1 that could easily be exploited by hackers to hack a Nokia Lumia phon…
EASE, the DHS concept of self-repairing networks
The Department of Homeland Security is working with industry to the EASE concept, a self-repairing systems able to avoid the interruption of the oper…
BitTorrent Sync’s Backdoor Accused of Leaking Hashes
Popular sharing app BitTorrent Sync has been allegedly found to contain a backdoor that was leaking hashes, according to an analysis by Hackito Ergo …
New Variant of Matsnu Trojan Uses Configurable DGA
The Domain Generation Algorithm (DGA) used by a new variant of the Matsnu Trojan (also known as Trustezeb) relies on an interesting technique to avoi…
Malware Distributed Via Steam Chat as .SCR File
Security experts are warning Steam users about a piece of malware that is being distributed by cybercriminals via the entertainment platform's chat f…
Campaign for domain registry data improvement is approaching the finish line
The participants will have the opportunity to use the Domain browser service, to hide their postal address from the public area of the domain registr…
OnionDuke APT Malware served through Tor Network
The malicious Russian Tor exit node, which was claimed to be patching binary files, is actually distributing a malware program to launch cyber-espion…
A fresh C93 phishing Scam targeting Microsoft’s Windows Outlook Users
Scammers have unleashed a C93 virus scare, targeted at Microsoft’s Windows outlook users in a wide phishing campaign aimed at stealing users’ login c…
Default ATM passcodes still exploited by crooks
Once again, ATMs have been "hacked" by individuals taking advantage of default, factory-set passcodes.
81 percent of Tor clients can be identified with traffic analysis attack
The research revealed that more than 81 percent of Tor clients can be de-anonymized by exploiting a new traffic analysis attack based on Netflow tech…
Internet Voting Security Risks Highlighted by New Wireless Router Attack
Researchers have published a paper detailing a new attack method that can be leveraged to silently modify the digital ballots used in the Internet vo…
BASHLITE Malware Uses ShellShock to Hijack Devices Running BusyBox
A new version of the BASHLITE malware is designed to scan compromised networks for devices that use BusyBox and attempts to access them by using pred…
Today, mojeID service has welcomed its 400,000th user
The service has been in operation since the autumn of 2010; the last 100 thousand accounts were registered since the end of this January.
The mojeID s…
Unused IP Addresses Are Hijacked by Spammers Through Technical Loophole
A weakness in the way some countries manage the IP address ranges assigned to Internet Service Providers (ISPs) and hosting providers has been abused…
Snapchat Warns Users of Malicious Third-Party Apps
Snapchat will ask customers to stop using unauthorized third-party apps built on Snapchat services as they may compromise their accounts, the company…
Adobe Fixes 18 Critical Flaws in Flash Player
Adobe has released its latest Flash Player revision to fix 18 critical vulnerabilities, according to Security Bulletin APSB14-24.
MS14-066 – A critical bug potentially affects all Windows versions. Patch it!
MS14-066 – A critical vulnerability affects all versions of Microsoft Windows systems, its exploitation could have catastrophic consequences. Another…
How to Use the Internet series to introduce new episodes
The main public broadcaster will bring the first new episode to viewers already at the end of this week — Czech Television will broadcast topics devo…
How to Test the Security of IoT Smart Devices
Fortunately, our security peers at the Open Web Application Security Project (OWASP) have noticed the problem too. Since their “OWASP Top Ten” list h…
Masque Attack – every iOS app could be compromised
Researchers at FireEye identified a new attack dubbed the Masque, which allows attackers to replace a genuine app with a malicious one.
Crypto 101 - free book resource
The Crypto 101 course allows you to learn by doing and includes "everything you need to understand complete systems such as SSL/TLS: block ciphers, s…
Manual phishing attacks are the simplest and most effective hacking technique
A study published by Google demonstrates that manual phishing attacks are the simplest and most effective method for hacking mail accounts.
Vulnerabilities Found in Pidgin Chat Client
The latest version of the popular instant messaging application Pidgin (2.10.10) addresses multiple vulnerabilities, including three reported by Cisc…
Darkhotel Attackers Target Business Travelers via Hotel Networks
A group of attackers have targeted business travelers in the Asia-Pacific region with a sophisticated cyber-espionage campaign, Kaspersky Lab said to…
Operation Huyao, the scary evolution of phishing attacks
Security experts at TrendMicro have discovered a new Phishing technique dubbed Operation Huyao that it very hard to detect by site owners and end-use…
Facebook scams – Top 5 categories identified by a 2-year study
A two-year study conducted by researchers at Bitdefender analyzed more than 850000 Facebook scams identifying the most popular frauds.
Cisco Fixes Vulnerabilities in Small Business Routers
In an advisory published on Wednesday, Cisco revealed that four of its small business RV series routers are affected by multiple vulnerabilities that…
Global Law Enforcement Strikes Deep Into 'Dark Web'
THE HAGUE - A global crackdown has shut down dozens of online "dark markets" selling illegal goods and services and masking their identities using th…
Google Releases 'nogotofail' Network Traffic Security Testing Tool
Google introduced a new security tool to help developers detect bugs and security glitches in the network traffic security that may leave passwords a…