2016
iOS malware successfully infects non-jailbroken devices, researchers found
Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infec…
95% of HTTPS servers vulnerable to trivial MITM attacks
Only 1 in 20 HTTPS servers correctly implements HTTP Strict Transport Security, a widely-supported security feature that prevents visitors making une…
CZ.NIC Association Works with Czech TV on a New Program Teach Your Aunt about the Internet
The educational program Teach Your Aunt about the Internet, the first episode of which will be broadcast today, is a fun way to teach children aged 9…
Two vulnerabilities were reported in Bind9 Debian package
Vulnerabilities that can cause on Bind Server DoS were found in number of distributions:Wheezy, Jessie, Stretch and Sid. Updated packages are availab…
Cisco reports four vulnerabilities in their products
All in cathegory "High".
See following docs:
Cisco Cable Modem with Digital Voice Model DPC2203 allows unauthorized execution of arbitrary code us…
Adobe, Microsoft Push Critical Updates
Microsoft today pushed out 13 security updates to fix at least 39 separate vulnerabilities in its various Windows operating systems and software.
Google Patches Three High Risk Flaws in Chrome 49
Google on Tuesday released a security update for Chrome 49 to resolve three vulnerabilities assessed with a High risk score.
Subgraph OS — Secure Linux Operating System for Non-Technical Users
Subgraph OS is a feather weighted Linux flavor that aims to combat hacking attacks easier, even on fairly low-powered computers and laptops. Subgr…
How To Test SSLv2 DROWN Attack Vulnerability
Server The Geekstuff has published article describing how to test DROWN Attack vulnerability using short python script.
Cisco Patches Critical, High Severity Flaws in NX-OS
Cisco informed customers on Wednesday that it has released software updates for several of its products to address critical and high severity vulnera…
Apple Reissues Security Update After Blocking Ethernet on Mac OS X
Apple over the weekend reissued a security update for OS X El Capitan systems after the initial update blocked Apple’s own Ethernet drivers.
DROWN vulnerability in cryptographic protocols
New vulnerability related to SSL and TLS was released. Vulnerable are web servers, SMTP servers, IMAP and POP servers, and any other services that su…
Over 60 Vulnerabilities Patched in Apple TV
Apple has patched more than 60 vulnerabilities with the release of Apple TV 7.2.1, including flaws that can lead to arbitrary code execution, applica…
Cisco fixes Command Injection vulnerability in CISCO ACE 4710 products
Cisco has released security updates for the products CISCO ACE 4710 appliance to fix a high severity command injection vulnerability.
CZ.NIC Association invites you to the Cyber Security conference in the Danube Region
On March 15, a conference on cyber security — Cyber Security in the Danube region — will be held in Prague, as a part of the international project CS…
Dozens of american banks to replace ATMs with new ones
Dozen of banks throughout the U.S. are updating or installing new ATMs that feature a system that lets customers order the amount of cash they wish t…
Warning - Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System
Are you also the one who downloaded Linux Mint on February 20th? You may have been Infected!
Linux Foundation Launches 'Zephyr', a tiny OS for Internet of Things
The Linux Foundation has broken all the barriers of compatibility issues by releasing a Real-Time Operating System (RTOS) for Internet of Things devi…
Malicious spam campaign capitalizes the global interest in the Zika virus
The cybercrime ecosystem is getting ready to exploit the media attention on the Zika virus infections for illegal activities. Be careful!
Gozi Banking Trojan Targets Windows 10's Edge Browser
A new Gozi Trojan build has been observed in the wild, modified to inject malicious code into Windows 10’s Edge browser, IBM X-Force researchers warn…
"Locky" Ransomware Encrypts Unmapped Network Shares
Security researchers have discovered a new piece of ransomware called Locky, which uses AES encryption algorithm to encrypt both local files and file…
Attackers Use Fake Patch to Hack Magento Sites
Cybercriminals are exploiting an old vulnerability in the Magento ecommerce platform to compromise online shops and steal sensitive information, usin…
Remote Code Execution Flaw Patched in glibc Library
Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc.
Design Flaw Exposes ASUS Routers to Remote Attacks
A security researcher discovered that some SOHO routers from ASUS can be accessed from the Internet even if the WAN access feature is disabled. The v…
Here's How to Decrypt Hydracrypt & Umbrecrypt Ransomware Files
Over the last few years, we have seen several types of Ransomware malware that demand a whopping amount of money from users for the retrieval of thei…
Critical Cisco ASA IKEv1/v2 Vulnerability. Active Scanning Detected
Cisco released an advisory revealing a critical vulnerability in Cisco's ASA software. Devices are vulnerable if they are configured to terminate IKE…
The CZ.NIC Association presented Domain Report for 2015
The CZ.NIC Association published a statistical overview of the .CZ domain for last year. The Domain Report 2015 provides interesting information not …
Remtasu is disguising itself as a tool to appropriate Facebook accounts
Up until last year, it was common to encounter campaigns associated with known entities such as DIAN, Avianca and Falabella in e-mail attachments wit…
Microsoft Patches Critical Flaws in Windows, Browsers
Microsoft’s February 2016 Patch Tuesday updates include a total of 13 bulletins designed to address dozens of vulnerabilities in the company’s produc…
Adobe Patches Flaws in Flash, Photoshop, Connect
Adobe has released security updates and hotfixes to address vulnerabilities in Flash Player, Photoshop, Bridge, Connect, and Experience Manager.
Critical Flaws Found in NETGEAR Network Management System
Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corpora…
Google patched Nexus devices, including a critical Wi-Fi flaw
Google announced to have patched a number of critical vulnerabilities affecting the Nexus devices that lead to the complete hack of the device.
Emergency. Hundreds of compromised WordPress sites serve TeslaCrypt ransomware
Operators running websites based on the WordPress must be aware of a spike in the number of compromised platforms used to deliver the TeslaCrypt rans…
Fake Flash Update Serves OS X Scareware
Experts have spotted an OS X scareware campaign that leverages fake Adobe Flash Player installers to trick users into downloading shady software onto…
Microsoft EMET Adds Windows 10 Compatibility
Microsoft on Tuesday announced that the latest version of its Enhanced Mitigation Experience Toolkit (EMET) includes Windows 10 compatibility, and br…
XSS vulnerability in Roundcube 1.0.5 - 1.1.1
Webmail client Roundcube (versions 1.0.5 - 1.1.1 ) contains
XSS vulnerability, allowing the attacker arbitrary code injection. Recommended fis is up…
CZ.NIC Publications releases a comic book inspired by the popular How to Use the Internet series
The authors of more than a hundred page publication are the writers of the popular TV series led by Jiří Vaněk. The pictures in the book are authored…
New Member of the CZ.NIC Association
The company ÚVT Internet, s. r. o. is a new member of the CZ.NIC Association as of 1 February 2016. ÚVT Internet, s. r. o. become a member of the Cha…
LG Patches Severe Smartphone Hijack Vulnerability
LG today released a security update for some of its latest smartphones to resolve a severe vulnerability found in the Smart Notice application.
Samsung Patches Critical Vulnerabilities in Android Devices
Samsung has released a maintenance update for its major Android flagship Galaxy models to resolve 16 vulnerabilities in these devices.
OpenSSL to Patch High Severity Vulnerability
The OpenSSL Project announced today that upcoming releases of the cryptographic software library will address two security flaws.
Critical Magento Flaws Expose Sites to Takeover
The developers of the popular e-commerce platform Magento released a security update last week to patch more than 20 vulnerabilities, including ones …
Backdoor Found in Several Fortinet Products
FortiOS is not the only Fortinet product affected by the backdoor whose existence was brought to light earlier this month, a review conducted by the …
CZ.NIC Association is hosting an International Conference of security teams
The purpose of this regular event for security team members is to share their experience with security incidents that have had a serious impact on in…
Critical iOS Flaw allowed Hackers to Steal Cookies from Devices
Apple has patched a critical vulnerability in its iOS operating system that allowed criminal hackers to impersonate end users' identities by granting…
Be careful Facebook users, you are under attack!
Facebook users are receiving malicious email delivering malware masquerading as audio message, a similar campaign also targeted WhatsApp users.
TeslaCrypt Flaw Allows Free File Decryption
TeslaCrypt, a ransomware family that emerged roughly a year ago, includes a design flaw that has already allowed security researchers build a free fi…
Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable
A new critical zero-day vulnerability has been discovered in the Linux kernel that could allow attackers to gain root level privileges by running a m…
Zdeněk Brůna became a new Technical Director of CZ.NIC
Work in CZ.NIC is not new for Zdeněk Brůna, who has been an active member of the Collegium of the Association since 2008, where he represented domain…