2015
Memex – The new search tool to dig also in the "Deep Web"
DARPA has publicly presented for the first time a new set of search tools called Memex which will improve also researches into the “Deep Web”.
Researcher Publishes 10 Million Usernames and Passwords
In an effort to contribute to making authentication more secure, a researcher has decided to publish 10 million username/password combinations that h…
Seven Best WordPress Security Plugins
In this post, I will discuss various security plugins available for WordPress. These security plugins offer a wide range of features to make your Wor…
Facebook Tag Scam Spreads like Wildfire, New Tactics Emerge
Two weeks ago, we wrote about the re-emergence of tag scams on Facebook. What seemed to be a basic worm at that time turned into inspiration for mult…
Zero-Day Flaw in WordPress Plugin Used to Inject Malware into Sites
Cybercriminals have exploited a zero-day flaw in the popular FancyBox for WordPress plugin to inject malicious iframes into many websites. The vulner…
Adobe Flash Player Security Update Fixes 18 Vulnerabilities
Adobe has released Flash Player security updates that address a total of 18 vulnerabilities, most of which could be exploited for arbitrary code exec…
Flash Player faces its third zero-day flaw in a month, updates coming
Adobe Systems warned users that hackers are exploiting another unpatched vulnerability in Flash Player -- the third one in the past month -- to infec…
Serious security issues in iOS Outlook app Microsoft to access user emails and credentials
A researcher has discovered a series of security issues in the newborn iOS Outlook app that allows Microsoft to access user emails and credentials.
Domain report: in the year 2014 was registered 73,350 .CZ domains
Compared with the last year, the number of female holders slightly increased. The countries with the most .CZ domains registered abroad were the Slov…
CZ.NIC Association and the Czech Telecommunication Office concluded a memorandum of cooperation
The aim of the agreement is cooperation on Internet security, development of electronic communications networks and administration of the Internet, i…
WordPress Can Be Used to Leverage Critical Ghost Flaw in Linux
The vulnerability revealed by security researchers at Qualys, who dubbed it Ghost, this week could be taken advantage of through WordPress or other P…
A singular Facebook Trojan has already infected nearly 110,000 Facebook users
Security researcher is investigating in a new strain of Facebook Trojan that in just two days has already infected 1110,000 Facebook users.
D-Link routers vulnerable to DNS hijacking
At least one and likely more D-Link routers as well as those of other manufacturers using the same firmware are vulnerable to remote changing of DNS …
Since March will apply the new rules of registration and ADR
New version of rules of registration and ADR will be in effect as of 1 March 2015. This version is already available here.
Critical glibc update (CVE-2015-0235) in gethostbyname() calls
A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() gl…
Facebook Tag Scams are Back with Malicious Payload
Bad week-end for Facebook users: a malicious tagging campaign ended up infecting at least 5 thousand computer users with a backdoor. This three-day c…
PHP 5 Updates Fix Several Vulnerabilities
Several security vulnerabilities affecting PHP were addressed last week with the release of versions 5.6.5, 5.5.21 and 5.4.37.
Click-fraud malware drives millions of views to YouTube videos
Scammers are earning advertising revenue by spreading click-fraud malware Tubrosa, which sends compromised computers to their YouTube videos.
Three OS X Vulnerabilities Disclosed by Google
The details of three high-severity vulnerabilities affecting Apple’s OS X operating system have been disclosed over the past two days by Google.
If you use either of these WordPress themes update them now
Version 1.4.6 of the PageLines theme and version 1.4.4 of the Platform theme were released three days ago and contain fixes for very serious vulnerab…
GoDaddy Vulnerability Allows Domain Hijacking
An Internet domain registrar and web hosting company GoDaddy has patched a Cross-Site Request Forgery (CSRF or XSRF) vulnerability that allowed hacke…
Ubuntu patched several security vulnerabilities
Ubuntu has released several patches for security vulnerabilities in different versions of the OS, including some CSRF, DoS and remote code execution …
New Angler exploit kit includes a Flash zero-Day
The French security expert Kafeine has discovered an unpatched vulnerability (0day) in Flash Player is being exploited by Angler Exploit Kit.
Google Fixes 62 Security Bugs With Release of Chrome 40
Google announced on Wednesday the release of Chrome 40 for Windows, Mac OS and Linux. The latest update for the popular Web browser (40.0.2214.91) in…
Instagram Patches flaw that Makes Private Photos Visible
Your Instagram is not as Private as You Think. Millions of private Instagram photos may have been exposed publicly on the web until the company patch…
Peerio - End-to-End Encrypted Secure Messenger and File Sharing App
On one end, where governments of countries like Russia is criticizing end-to-end encryption and considering to ban the encrypted communication apps l…
KL-Remote toolkit allows criminals to easily hack online banking accounts
Researchers at IBM Trusteer discovered a new toolkit dubbed KL-Remote that allows criminals to run Remote Overlay Attacks without specific skills.
Apache Fixes DoS Flaw in Qpid Messaging System
A vulnerability in Apache Qpid, the open source messaging system that implements the Advanced Message Queuing Protocol (AMQP), can be exploited by an…
Mozilla Fixes 9 Vulnerabilities in Firefox 35
Mozilla released Firefox 35 on Tuesday. In addition to new features, changes and fixes, the latest version of the popular Web browser addresses sever…
Skeleton Key Malware modifies the Active Directory authentication process
Dell SecureWorks detected the Skeleton Key malware, which modifies authentication process on Active Directory (AD) systems protected by only password…
GE Multilink Switches affected by critical vulnerabilities
GE MultiLink managed switches are affected by two vulnerabilities which could be exploited to gain unauthorized access and run DoS attacks on the dev…
Linux DDoS Trojan embeds RootKit component
Security experts at Avast have analyzed a new strain of DDoS trojan targeting Linux operating system dubbed XOR.DDoS which embeds a RootKit component…
ASUS Routers Plagued by Command Execution Vulnerability
Many ASUS wireless routers are affected by a vulnerability that can be exploited by an attacker with access to the target’s local area network (LAN) …
Android Manifest File Attacks Can Make Devices Inoperable
Researchers at Trend Micro have identified a vulnerability related to the Android manifest file that can be exploited to cause devices to crash.
OpenSSL Fixes Eight Security Vulnerabilities
The OpenSSL Project has released several new versions of the software that fix eight security vulnerabilities, including several certificate issues a…
SocialPath Malware Backs Up Your Data… to a C&C Server
Security experts have discovered new data-stealing malware disguised as a legitimate-looking back-up application on Google Play.
The Save Me app clai…
Website Backdoors Leverage the Pastebin Service
We continue our series of posts about hacker attacks that exploit a vulnerability in older versions of the popular RevSlider plugin. In this post we’…
Openwall 3.1 Released With Fixes for Shellshock, POODLE Attack
The maintainers of the Openwall security enhanced Linux distribution have released a new stable version, which includes fixes for a number of serious…
New App Can Detect if Someone Is Spying on You
A new app called SnoopSnitch can detect International Mobile Subscriber Identity (IMSI) catchers by keeping a tab if someone is spying on you.
Thunderstrike hack – Infecting Apple Mac with EFI Bootkit
A security researcher has presented a technique dubbed Thunderstrike hack to infect Apple’s Mac PCs with EFI Bootkit through the Thunderbolt port.
Apple Plugs iCloud Security Issue
Apple has reportedly patched a security hole exploited by a tool designed to hack accounts on Apple iCloud.
Hackers target Facebook users exploiting Same Origin Policy vulnerability
A serious security vulnerability affects the default web browser of the Android OS lower than 4.4, according the data provided by Google official das…
Beware of Booking.com Hotel Confirmation Emails Delivering Malware
Email notifications, supposedly from Booking.com, urging the recipients to open an attached link are a malicious malware, according to a report websi…
Before you enable those macros…
The Microsoft Malware Protection Center (MMPC) has recently seen an increasing number of threats using macros to spread their malicious code. This te…
WPScanner: Automated Security Testing Tool for WordPress
Most of the big companies hire security analysts who keep on finding vulnerabilities and patch them before hackers get in. But what about users who h…
Act on cybersecurity comes into effect
Act on cybersecurity comes into effect on January 1st 2015. National CERT that is operated by CZ.NIC association is according to the law receiving re…