2017
Mozilla issues a security update for Thunderbird
Current release of Mozilla Thunderbird 52.5.2 fixes a security vulnerability which can cause a buffer overflow on Windows machines. The vulnerability…
Microsoft Office Docs New Vessel for Loki Malware
Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evad…
Transport Layer Security (TLS) Vulnerability
The TLS vulnerability is also known as Return of Bleichenbacher's Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to …
Apple release security updates
Apple has released security updates to address vulnerabilities in operating systems iOS and tvOS and for the iCloud application running on Windows op…
Microsoft and Apple release security updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to tak…
The new project ISP DNS Stack increases the security of the Internet in the Czech Republic
The new service is intended for use primarily by major Internet service providers, which in turn offer it to large numbers of customers and heavily u…
Security updates from Google and Apple
Google issued new version of its Chrome browser 63.0.3239.84 in which it patches one critical vulnerability and a number of others. Apple announces u…
Security updates for Firefox and Struts 2
Apache Software Foundation and Mozilla issued a patch for their products fixing critical vulnerabilities. There are known issues in REST plug-in and …
Critical Apple login bug puts macOS High Sierra System at risk
A major bug in Apple’s macOS gives anyone with physical access to a computer running the latest version of the High Sierra 10.13.1 operating system a…
Exim Internet Mailer found vulnerable to RCE and DoS bugs
A security researcher has discovered and publicly disclosed two critical vulnerabilities in the popular Internet mail message transfer agent Exim, on…
Cyber Threat Intelligence conference in Prague
OASIS and FIRST will host a unique conference to help organizations identify and avoid some of the biggest pitfalls in threat intelligence. The confe…
Intel releases patch for firmware vulnerability
Intel has released security recommendation to address vulnerabilities in the firmware of the following Intel products: Management Engine (Intel® ME) …
Security updates for products from Adobe, Microsoft and Mozilla
Adobe, Microsoft and Mozilla issued security patches on their products. In all three cases there are vulnerabilities which could be exploited to take…
Microsoft issued security advisory regarding DDE
As email attachments are a primary method an attacker could use to spread malware, Microsoft issued a security advisory regarding potentially harmfu…
Joomla! Releases Security Update
Joomla! has released version 3.8.2 of its Content Management System (CMS) software to address multiple vulnerabilities. A remote attacker could explo…
Google Releases Security Update for Chrome
Google has released Chrome version 62.0.3202.89 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to…
OpenSSL patches two low and medium severity vulnerabilities
The medium severity vulnerability tracked as CVE-2017-3736 was addressed with the release of OpenSSL 1.1.0g and 1.0.2m. The OpenSSL development te…
WordPress, Apple and OpenOffice release multiple security updates
WordPress releases new version 4.8.3 which serves as security release for all previous versions and it's strongly recommended to update sites immedia…
New Member of the CZ.NIC Association
The company Mach3net s. r. o. is a new members of the CZ.NIC association (Chamber of ISP) as of 1 November 2017. The association has actually 115 mem…
Critical Patch For Oracle’s Identity Manager
Otacle has release patch for critical vulnerability found in Oracle Identity Manager. Vulnerability CVE-2017-10151 has a CVSS v3 base score of 10.0, …
Security Update for Google Chrome
Google has released Chrome version 62.0.3202.75 for Windows, Mac, and Linux. This version patches denial-of-service vulnerability.
Bad Rabbit ransomware
Mainly Russia and Ukraine were hit by a new ransomware called BadRabbit. Among the most damaged is Kiev underground and international airport in Odes…
Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months
Beware, If you are using S/MIME protocol over Microsoft Outlook to encrypt your email communication, you need to watch out. From at least last 6 mont…
KRACK - WPA2 breached
Today was made public new attack called KRACK able to breach WPA and WPA2 both Personal and Enterprise wireless networks. Update of all devices able …
The Turris Omnia Router obtained the Tinkerer's Award
The Turris Omnia router was awarded in the first annual Tinkerer’s Award competition, in two categories at once - the Best project and the Best prod…
Important vulnerability fixed in Apache Tomcat
Several security vulnerabilities have been patched in recent weeks in Apache Tomcat. The list of fixed flaws recently addressed also included code ex…
Three WordPress Plugin Zero-Days Exploited in the Wild
Hackers have exploited three zero-days to install backdoors on WordPress sites, according to a security alert published minutes ago by WordPress secu…
Board of Directors of the International Organization DNS-OARC is joined by Jaromír Talíř
The non-profit organization DNS-OARC brings together key companies in the field of research, development and implementation of Internet technologies.…
Security fixes for popular CMS Joomla, WordPress and e-commerce platform Magento
WordPress has release security update for all previous versions and encourages you to update your sites immediately.
Also Joomla has released new ver…
Samba Releases Security Updates
The Samba Team has released security updates to address several vulnerabilities in Samba. An attacker could exploit any of these vulnerabilities to o…
CCleaner tool was compromised
Piriform issued a security notification about its product CCleaner. They recently determined that their 32-bit version of the v5.33.6162 of CCleaner …
Malware in PyPi.org libraries
SK-CSIRT team iniciated removal of some harmless malware libraries from Python language official repository PyPi. They pointed to the threat for admi…
New security patches from Microsoft and VMware
New security patches were issued by Microsoft and VMware this week. Some ot the vulnerabilities fixed by Microsoft are possible to expoit for remote …
BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking
Security researchers have just discovered total 8 zero-day vulnerabilities in Bluetooth protocol that impact more than 5.3 Billion devices—from Andro…
Adobe Patches Two Critical RCE Vulnerabilities in Flash Player
As part of its monthly security updates, Adobe has released patches for eight security vulnerabilities in its three products, including two vulnerabi…
Security vulnerability fixes for Chrome and Struts 2
Google has released Chrome version 61.0.3163.79 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could e…
Czech TV Will Broadcast 16 New Episodes Of Teach Your Aunt About The Internet
Czech TV will broadcast it every Monday at 3:35 PM on the D channel.
Yesterday, Czech TV broadcast on the D channel the first episode of the second se…
New Members of the CZ.NIC Association
The companies ECOMOLE LTD. and Panificium s. r. o. are a new members of the CZ.NIC Association as of 1 September 2017. Both companies become a member…
Drupal patches critical access bypass flaw in engine core
Drupal has issued a security update which fixes a number of critical flaws in the website management platform's core engine. According to Drupal's se…
Adobe, Microsoft and Mozilla released security vulnerabilities fixes
Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Acrobat, Reader, Digital Editions or Experience Manager. Exploi…
Adobe Patches 69 Flaws in Reader, Acrobat
Security updates released by Adobe for its Flash Player, Reader, Acrobat, Digital Editions and Experience Manager products address more than 80 vulne…
Hackers Hijacked Chrome Extension for Web Developers With Over 1 Million Users
Chris Pederick, the creator of Web Developer Chrome extension that offers various web development tools to its users, alerted late Wednesday that som…
Oracle's July 2017 Critical Patch to address a total of 308 flaws
Oracle issued its quarterly update, the July 2017 Critical Patch Update (CPU), that addresses 308 security vulnerabilities, 30 of them are rated as c…
Notifications about the impending domain expiration are now available via SMS
Every year, the number of registered domains increases and the CZ.NIC customer service staff daily deals with up to 800 domains that are approaching …
Adobe and Microsoft push critical security fixes
Microsoft has released updates today for the Windows 10 operating system, as well as for other of the company's products, updates that fix 55 securit…
Money demanding malware for Android
Thousands of Android users may be at risk to a newly discovered form of SpyDealer malware which attempts to extort victims by threatening to leak a t…
Ladislav Lhotka is to replace Bedřich Košata as head of CZ.NIC Labs
Ladislav Lhotka is an important Internet researcher, author of a number of Internet Standards (RFCs), who up to this point supervised CZ.NIC Labs pro…
Zero-day flaw in Skype
A critical flaw in Microsoft’s Skype web messaging and call service allows attackers to crash systems and execute code.This week, Vulnerability Lab s…
New mutation of ransomware Petya on rise
According to multiple sources, a new variant of Petya ransomware, also known as Petwrap, is spreading rapidly with the help of same Windows SMBv1 vul…