2015
Kali Linux 2.0 Released — Download Most Powerful Penetration Testing Platform
Offensive Security, the creators of Swiss army knife for Security researchers, Penetration testers and Hackers have finally released the much awaited…
0-Day Deserialization flaw impacts more than 55 percent Android users
Security Experts at IBM have discovered a new critical vulnerability affecting Android OS and impacting more than 55 percent users.
Microsoft, Adobe Patch Dozens of Security Vulnerabilities
Microsoft and Adobe released on Tuesday security updates to patch a large number of vulnerabilities in their products.
OpenSSH 7.0 Fixes Authentication Vulnerability, Other Security Bugs
The developers of OpenSSH announced on Tuesday the availability of version 7.0. The latest release includes new features, security and bug fixes, and…
New Firefox Zero-Day Vulnerability Nabs Local Files and Leaves No Traces
A new Firefox exploit has been reported as already being used in the wild via aware-serving websites, enabling attackers to collect sensitive local f…
Default WSUS Configuration Puts Organizations at Risk: Researchers
LAS VEGAS - BLACK HAT USA 2015 - Organizations that fail to configure Windows Server Update Services (WSUS) to use SSL are exposed to cyberattacks, r…
ICANN.org Passwords Reset Following Service Provider Breach
The Internet Corporation for Assigned Names and Numbers (ICANN) has issued another security warning after login credentials for the ICANN.org website…
Fake Windows10 upgrade contains ransomware CTB-Locker
Cybercriminals are leveraging the launch of Microsoft’s Windows 10 operating system to trick users into installing a ransomware CTB-Locker on their s…
CZ.NIC association became a member of the international organization FIRST
CSIRT.CZ became the first Czech security team operating in FIRST, and therefore the only representative of the Czech Republic in this major security …
Phishing website hosted on Google Drive
Researchers from Elastica Cloud Threat Labs discovered new phishing pages hosted on Google Drive which aims to obtain login credentials to Google acc…
Vulnerable Stagefright in Android
Vulnerability in Stagefright media player affects milions of Android devices. For exploting the vulnerability needs an attacker only phone number whe…
CSIRT tools
We have published on CZ.NIC's blog short article about the tools and applications that are used by our collegues from CSIRT teams in Slovakia, Serbia…
Milano and Detekt
Free of charge tool 'Milano' was created as an effect of Hacking team's breach. This tool should detect malware and zero-days that the team was using…
Released patch for Windows zero-day
Microsoft relased a patch for Windows zero-day that was uncovered by researchers after the breach on Italian company Hacking Team. Vulnerability was …
The IETF 93 conference hosted by CZ.NIC has just started in Prague
The IETF is currently one of the main pillars of the present Internet – it provides a platform for voluntary cooperation of experts in the collective…
Epic Games forum hacked – change your online passwords, an beware of phishing
They’re the developers of popular games such as Infinity Blade, Gears of War, Unreal Tournament… and – if you’re as old as me – you might even rememb…
Oracle Patches Java Zero-Day, 192 Other Security Bugs
Oracle on Tuesday released its July 2015 Critical Patch Update (CPU). The updates address a whopping 193 security issues across multiple product fami…
Microsoft Patches Hacking Team Zero-Days, Other Vulnerabilities
Microsoft has released a total of 14 bulletins as part of the company’s July 2015 security updates. The updates address vulnerabilities in Windows, O…
Java Zero-day vulnerability exploited in the Wild
Really a bad weekend for Internet users. Three previously unknown critical zero-day vulnerabilities were revealed in Adobe’s Flash Player over the we…
VMware Patches Privilege Escalation Bug in Workstation, Player, Horizon View
VMware has released software updates for several of its products to address a vulnerability that can be exploited to elevate privileges and execute a…
Malicious Gaming App Infects More than 1 Million Android Users
Threat researchers from security firm ESET have discovered a malicious Facebook-Credentials-Stealing Trojan masquerading as an Android game that has …
OpenSSL fixes Alternative chains certificate forgery flaw
OpenSSL Foundation fixed a critical issue that impacts any application that uses the popular crypto library in the authentication processes.
Sophos discovered new tricks to poison Google Search engine
Hackers are using a new search engine poisoning method to circumvent Google’s page ranking-algorithms, the technique relies on PDF documents.
Google to Fix Address Spoofing Bug in Chrome
After nearly a month of debate, Google Chrome developers have decided that a potential security flaw that can be exploited to spoof the URL displayed…
Zero-Day Flash Player Exploit Disclosed in 'Hacking Team' Data Dump
The Recent Cyber Attack that exposed 400GB of corporate data belonging to surveillance software firm Hacking Team has revealed that the spyware compa…
A number of vulnerabilities affect IP Enabled AirLive Cameras
A number of AirLive Cameras are affected by command injection vulnerabilities that could allow attackers to decode user credentials and control the d…
OpenSSL to Patch Undisclosed High Severity Vulnerability this Thursday
Attention Please! System Administrator and anyone relying on OpenSSL should be prepared to switch to a new version of the open-source crypto library …
Malicious Version of BatteryBot Pro App Found on Google Play
Security researchers have come across a fake version of the popular BatteryBot Pro application for Android devices. The rogue app is designed to cond…
Mozilla Patches Critical Vulnerabilities With Release of Firefox 39
Firefox 39 was released on Thursday, and the latest version of Mozilla’s web browser addresses two-dozen vulnerabilities, including several issues th…
Flaw in 802.11n Standard Exposes Wireless Networks to Attacks: Researchers
A vulnerability in the 802.11n wireless networking standard can be exploited by a remote attacker to target wireless networks, researchers have warne…
New Member of the CZ.NIC Association
The company AdminIT s. r. o. is a new member of the CZ.NIC Association as of 1 July 2015. AdminIT s. r. o. become a member of the Chamber of domain n…
Crooks Use Hacked Routers to Aid Cyberheists
Researchers at the Fujitsu Security Operations Center spotted a strain of Dyre being served exploiting hundreds of compromised home routers.
Hackers Exploit Zero-Day Magento Vulnerability to Steal Your Credit Cards
Hackers are increasingly exploiting an unknown flaw to siphon payment card information from e-commerce websites that use Magento, the most popular e-…
Cisco Issues Patches for Multiple Default SSH Keys Vulnerabilities
Cisco has released patches for SSH keys vulnerabilities affecting several of its virtual appliances.
The vulnerabilities were discovered during inter…
How we let a router get “cracked”
In the previous two blog posts about project Turris, we described how a telnet “minipot” helped us to uncover a possible botnet consisting mainly of …
Emergency Patch for Adobe Flash Zero-Day
Adobe Systems Inc. today released an emergency update to fix a dangerous security hole in its widely-installed Flash Player browser plugin. The compa…
Serious Zero-Day Security Flaw in iOS and OS X Could Lead to Password Theft
Researchers from Indiana University, Peking University, and Georgia Institute of Technology, joined forces to uncover the serious security issue, whi…
Drupal Core - Critical - Multiple Vulnerabilities
Drupal has released updates to address multiple vulnerabilities. Exploitation of one of these vulnerabilities could allow a remote attacker to gain a…
Last Pass Hacked, Users Urged to Change Master Passwords
Lass Pass suffered a network intrusion on Friday and is advising users to change their master password to avoid being hacked.
Samsung Galaxy phones at risk from massive security flaw
Security researchers have gone public with details of a security flaw that, they say, could impact over 600 million Samsung mobile devices worldwide …
Jablotron and CZ.NIC joined forces to prepare own system for smart and safe household management
The basis for the joint activities of the companies will be the Turris router. It is a part of the Turris security project, which has been helping it…
Massive Malvertising Campaign Hits Users with Angler Exploit Kit
Researchers with Raytheon|Websense have identified a massive malvertising campaign that has hit Web users in Europe and the U.S.
The attack is focuse…
Microsoft Releases Critical Security Updates for Internet Explorer, Windows
Microsoft released eight security bulletins today as part of this month's Patch Tuesday, including two critical updates for Windows and Internet Expl…
Serious Vulnerabilities Patched in CUPS Printing Service
CUPS has been updated to address a couple of security bugs that can be exploited by a malicious actor to elevate privileges and execute arbitrary cod…
Facebook – now with added PGP encrypted notification emails to boost your security
In a blog post, Facebook’s security team has explained that from now on, when the social networking site sends you sensitive emails such as password …
Alleged Author of Locker Ransomware Publishes Decryption Keys
An individual claiming to be the developer of the crypto ransomware known as Locker has published the private keys needed to recover the files taken …
And last, but not least: D-link strikes again.
There were 50+ new security flaws found in firmware of D-link NASes and NVRs. As usually, only option for „lucky“ owners of these devices is waiting…
Vulnerability found in OpenSSL
There are dozens of vulnerable Linux and Unix distros. Fortunately updated packages are publicly available.
Want to stalk your facebook friends ?
Good news: it is possible (using linked howto)
Bad new: They can stalk you as well. (Only if you are happy user of Facebook messenger, of course).