2014
Ondřej Filip is to lead the Domain Name System Operations, Analysis and Research Center
Ondřej Filip was elected the Board Chairman of the association for the third time. His term of office will be two years. The position of a Board memb…
Sharkfest 2013
The sharkfest challenge was organized by Wireshark University. There are seven challenges related to the trace files analysis. In each challenge, the…
WordPress is the Most Attacked CMS: Report
Data security firm Imperva released its fifth annual Web Application Attack report (WAAR) this week, a study designed track the latest trends and cyb…
Project SHINE Reveals Magnitude of Internet-connected Critical Control Systems
Project SHINE (so named after SHodan INtelligence Extraction) harvested data available about SCADA and industrial control system devices which appear…
Multiple Vulnerabilities Found in SAP Enterprise Software
Researchers have uncovered several security holes in enterprise software solutions developed by German business software giant SAP.
Aggressive Selfmite SMS worm variant goes global
The Selfmite Android SMS worm is back, and this new version is both more dangerous and more widespread that the initial one.
How Shellshock can be exploited over DHCP
Attacks exploiting the Shellshock vulnerability (actually, vulnerabilities) are popping up daily, but while Shellshock attacks on web apps have been …
Cyber Espionage Group Uses Bank Website to Redirect to Exploit Kit
A watering-hole attack has been discovered to be orchestrated by a cyber-espionage group that targets individuals connected to the military sector; v…
Authentication Flaw in PayPal mobile API Allows Access to Blocked Accounts
Payment services provider PayPal is vulnerable to an authentication restriction bypass vulnerability, which could allow an attacker to bypass a filte…
DREBIN Android app detects 94 percent of mobile malware
A team of German researchers developed an innovative Android app dubbed DREBIN capable of detecting 94 percent of mobile malware.
Emma Watson Leaked Facebook Video Reveals Trojans, Not Nude Pictures
A new scam takes advantage of Emma Watson’s growing popularity, using the actress as bait to spread malware on Facebook, according to the Bitdefender…
Phishing with data: URIs
A recent spate of phishing attacks has taken to using the data URI scheme for evil. Supported in most browsers, these special URIs allow the content …
Critical Vulnerability Found in Cuckoo Sandbox
The developers of the popular malware analysis framework Cuckoo Sandbox were forced to take quick action on Tuesday after being notified of the exist…
ATM hacking easily with RM100 chip and a free malware
Cybercrime expert explains anyone with technical knowledge, a malware and the help of an insider could easily hack an ATM machine.
Europol warning on the risks related to the Internet of Everything (IoE)
The European Police Office (Europol) confirmed that difficulties to face the menaces of cybercrimes to the Internet of Everything (IoE).
Windows 10 Preview Has A Keylogger to Watch Your Every Move
This week Microsoft announced the next version of its Operating system, dubbed WIndows 10, providing Windows 10 Technical Preview release under its "…
Zero-Day in Bugzilla Exposes Zero-Day Vulnerabilities to Hackers
A critical zero-day vulnerability discovered in Mozilla’s popular Bugzilla bug-tracking software used by hundreds of prominent software organizations…
CZ.NIC Laboratories open a branch in České Budějovice
In the South Bohemian branch, the staff of CZ.NIC Laboratories will focus mainly on research and development of secure methods of remote configuratio…
War shipping, hacking corporate WLan with a Raspberry Pi board
Security expert Larry Pesce has designed a war shipping board-sized package that could be used to hack wireless networks through the post.
Bash bug and risks posed by incomplete patches, discovered other two additional bugs
The security researcher Michal Zalewski revealed the details of other two additional bugs he discovered in the Bourne Again Shell after the Bash Bug …
HTTP Parameter Pollution
HTTP Parameter Pollution is one of those vulnerabilities that were around for a very long time, but has been identified only in the recent past. HTTP…
Google Patches Second "Same Origin Policy" Bypass Flaw in Android Browser
A Same Origin Policy (SOP) bypass vulnerability has been identified in the Android browser installed by default on versions of the operating system p…
Reddit Helps Botnet Recruit 17,000 Macs
Using a Mac and browsing Reddit are pretty safe activities, as far as online security goes, but "pretty safe" does not equal "riskless." A new bit of…
Serious Hypervisor Bug Fix Causes Unexpected Cloud Downtime
The Xen Project published a security advisory yesterday about a critical vulnerability in its virtual machine and hypervisor systems that could expos…
Authentication Bypass Vulnerability Affects 22 Schneider Electric Products
The U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) published an advisory this week to warn organizations of a directory tra…
DARPA ASOM technology identifies counterfeit microelectronics
DARPA announced the deployment of the ASOM technology which will be used to inspect critical equipment to detect counterfeit microelectronics.
'BadUSB' Code Published
Two researchers have released attack code for the 'BadUSB' issue first revealed at the Black Hat conference earlier this summer.
Flawed iOS 8’s Reset All Settings Option erases iCloud Docs
The new critical vulnerability discovered in iOS 8.0.1 seems to be deleting data stored in the cloud without the user’s permission.
DDoS against FIFA, Madden, Sims 4, Call of Duty and Destiny
The distributed denial-of-service (DDoS) attack seems to have temporarily taken down popular titles such as EA’s FIFA, Madden and Sims 4, as well as …
OpenVPN Vulnerable to ShellShock Attacks: Researcher
The open source virtual private network solution OpenVPN is reportedly affected by the notorious GNU Bash vulnerability dubbed ShellShock, a research…
Shellshock: A Collection of Exploits seen in the wild
Ever since the shellshock vulnerability has been announced, we have seen a large number of scans probing it. Here is a quick review of exploits that …
Privacy-focused Tails 1.1.2 Operating System Released
Tails, a Linux-based highly secure Operating System specially designed and optimized to preserve users' anonymity and privacy, has launched its new r…
ShellShock could be used to hack VoIP systems
Jaime Blasco at AlienVault Labs explained that ShellShock vulnerability could be exploited to hack Voice over IP systems worldwide.
Qmail is a vector for CVE-2014-6271 (shellshock)
Qmail can be used as an attack vector to exploit bash vulnerable to CVE-2014-6271 (aka shellshock). This can be used to execute arbitrary commands a…
Spike botnet runs DDoS attacks from IoT devices
New malware kit dubbed Spike was used by bad actors to run DDoS attacks through routers, smart thermostats, smart dryers and other devices to the Int…
Video: Watch The Shellshock Vulnerability Being Exploited in Action
The recently disclosed “Bash Bug” or “Shellshock” vulnerability that affects most versions of Linux, Unix, and Mac OS X operating systems is the late…
Serious vulnerability in bash
Serious vulnerability
CVE-2014-6271 was discovered in number of unix and linux distributions. Patches were released for Red Hat Enterprise Linux (ver…
jQuery Official Website Compromised To Serve Malware
The official website of the popular cross-platform JavaScript library jQuery (jquery.com) has been compromised and redirecting its visitors to a thir…
Kali Linux "NetHunter" - Turn Your Android Device into Hacking Weapons
The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of …
TripAdvisor's Viator Hit by Massive 1.4 Million Payment Card Data Breach
TripAdvisor has reportedly been hit by a massive data breach at its Online travel booking and review website Viator, that may have exposed payment ca…
Limitless Keylogger Optimized with AutoIT Infected thousands of Computers
A new surge of malware has been discovered which goes on to infect hundreds of thousands of computers worldwide and allegedly steals users’ social an…
VBA malware on the rise, a threat wrongly underestimated
Security experts at Sophos have detected a surge in cyber attacks based on VBA malware, such threats are still very insidious but often underestimate…
Russian BlackEnergy malware targeting European countries
Ongoing cyber espionage campaign based on BlackEnergy malware hit targets in Poland, Ukraine and Belgium.
iOS 7_1 exploit for CVE-2014-4377 critical flaw publicly available
Users which haven’t upgraded their systems to the Apple iOS 8 could be victims of a new iOS 7.1 exploit targeting the CVE-2014-4377 vulnerability.
Beware of Bogus FIFA 15 Crack & Keygen Scams; Bitdefender Warns
As always when a big release is expected, scammer are just around the corner, waiting for users to fall into their traps. Such is the case, of course…
Full disc encryption by default in new "Android L"
Google revealed an information that in a new "Android L" will be full-disc encryption enabled by default. Since 2011 it was optional. By doing that …
Details of hacking eBay account revealed
"The Hacker News" portal revealed details of hacking eBay account after it was patched. This serious vulnerability lies in paasword reset without any…
A replacement for TrueCrypt?
Since the termination of TrueCrypt development there was no open source and free of charge alternative. One of the possible replacement could be Ciph…
Malicious Google DoubleClick Advertisements Distributed Malware to Millions of Computers
Cyber criminals have exploited the power of two online advertising networks, Google's DoubleClick and popular Zedo advertising agency, to deliver mal…
Avira – Critical CSRF flaw Vulnerability puts millions users at risk
Egyptian bug hunter discovered that Avira Website is affected by CSRF flaw that allows attackers to hijack users’ accounts and access to their online…