2015
Apple Patches Vulnerabilities in OS X, iOS, Safari
Updates released by Apple on Wednesday address numerous vulnerabilities in Mac OS X, iOS, Safari and other products developed by the company.
A severe arbitrary code execution in BitTorrent Sync affects various products
A security expert has discovered a severe vulnerability in BitTorrent Sync that can be exploited by a remote attacker to execute arbitrary code on a …
Flaw in WP-Super-Cache plugin threatens million of WordPress websites
Million of WordPress websites are vulnerable to cyber attacks due to a critical vulnerability affecting the WP-Super-Cache plugin.
How to Protect your Personal Data from Facebook Applications your Friends Use
Many Facebook users have an aversion to third party Facebook applications and rightly so. The platform is riddled with apps that are used to spread s…
Wireshark TCP Flags dissector
Lua dissectors are a great way to enhance Wireshark, so I wrote a dissector that adds Snort-style TCP flags. When you install the dissector, it adds …
TrueCrypt doesn’t include a backdoor according to a security audit
The security audit of the popular encryption software TrueCrypt reveals the absence of the backdoor and other significant flaws exploitable by the NS…
VMware Updates Products to Address Java Vulnerabilities
VMware has released updates and patches for several of its products in order to resolve vulnerabilities affecting the Java SE Runtime Environment (JR…
Google Lets SMTP Certificate Expire
Whoops! It appears as though Google on Saturday let a digital certificate expire that was used to secure its smtp.google.com domain, the domain used …
Compromised WordPress Sites Lead to Drive-By Attack on Pirate Bay Clone
Several websites running WordPress have been injected with malicious code redirecting visitors to a fake Pirate Bay website that exposes to drive-by …
Mozilla Patches Critical Vulnerabilities With Release of Firefox 37
Firefox 37, the latest version of Mozilla’s web browser, includes fixes for over a dozen security issues, including several vulnerabilities that have…
CSIRT.CZ's services
The website was enlarged on the section "Services". In this section you can find all the information on services we provide. All the services are pro…
Puush accidentally infects Windows users with password-stealing malware
Puush describes itself as a “quick and simple way to share screenshots”. Unfortunately, it also seems to be a quick and simple way to infect your …
CSIRT.CZ leads international project
Our teams became a coordinator of the project Cyber Security in Danube Region. The goal of the project is to exchange know-how of the involved securi…
Security team of the CZ.NIC Association will lead an international project
To strengthen trust and cooperation between national security teams and share their know-how and tools — these are the main objectives of the project…
Support Dell System Detect tool put PCs at risk
The exploitation of the Dell System Detect tool would allow threat actors to remotely install malware on users’ your Dell computers
Thousands of compromised WordPress websites redirect to exploit kits
For the past weeks a spike has been seen in the amount of WordPress websites embedding iframes to exploit kits; more than just Fiesta has been seen. …
Internet elite meets again in Prague after four years
Worldwide leaders of the ICT field will meet in Prague this July. The international summit of Internet community specialists united under the IETF (I…
Adobe CVE-2011-2461 Remains Exploitable Four Years After Patch
A four year old Adobe Flash patch did not properly resolve a vulnerable Flex application, and attackers can exploit the bug, which is said to affect …
Cisco Discovers New "PoSeidon" Point of Sale Malware
Cisco on Friday shared details on what the company says is new breed of Point-of-Sale (PoS) malware that is more sophisticated and much better design…
'Google Analytics by Yoast' WordPress Plugin Patches Critical Vulnerability
Yoast has released a new version of its popular Google Analytics plugin for WordPress to address a persistent cross-site scripting (XSS) vulnerabilit…
Mobile apps still vulnerable to FREAK attacks
Despite principal vendors have released updates to fix the FREAK vulnerability many mobile apps for Android and Apple iOS are still vulnerable.
Beware of Skimming Devices Installed on the ATM Vestibule Doors
Despite anti-skimmer ATM Lobby access control system available in the market, we have seen a number of incidents in recent years where criminals used…
Facebook Vulnerability Leaks Users' Private Photos
If you have enabled automatic Facebook Photo Sync feature on your iPhone, iPad or Android devices, then Beware! Hackers can steal your personal photo…
Drupal Security Update Fixes Password Reset Flaw
New versions have been announced for Drupal 6 and 7, which include only security-related changes, one of them allowing a potential attacker to reset …
OpenSSL announced fix for mystery high critical vulnerability
New versions of OpenSSL will be released on Thursday to patch critical security vulnerabilities, one of which is considered very dangerous.
Qualys Releases SSL Labs APIs for Automated Website Testing
Cloud security and compliance solutions provider Qualys today announced the availability of free assessment APIs and a new tool that enable SSL Labs …
Microsoft tries to fix again LNK flaw exploited by Stuxnet
A security bulletin recently released by Microsoft addresses the LNK flaw that was exploited by Stuxnet and that we have wrongly considered patched s…
Adobe Fixes Critical Flash Player Vulnerabilities
Adobe has released security updates to patch nearly a dozen serious vulnerabilities affecting the Windows, Mac and Linux versions of Flash Player.
'WordPress SEO by Yoast' Plugin Vulnerability Affects Millions
A critical vulnerability has been discovered in the most popular plugin of the WordPress content management platform (CMS) that puts tens of Millions…
Apple and Microsoft released updates to fix the FREAK flaw
Microsoft and Apple released security updates to fix the FREAK vulnerability recently discovered and affecting their products.
Buggy Panda Update Causes Problems for Home, Enterprise Users
A problematic signature file pushed out by Panda Security on Wednesday caused some legitimate files to be detected as malicious and moved to quaranti…
CZ.NIC will contribute to the changes of global Internet security
International organization ICANN, responsible for the Internet management, has appointed a team that will prepare a plan for the alteration of the ro…
'Activate WhatsApp calling feature' Invite Scam Targeting Users with Malware
If you receive an invitation message from any of your friend saying, "Hey, I’m inviting you to try WhatsApp Free Voice Calling feature, click here to…
Cryptowall Makes a Comeback Via Malicious Help Files (CHM)
A new spam wave has hit hundreds of mailboxes with malicious .chm attachments to spread the infamous Cryptowall ransomware, malware researchers from …
XML Files Used to Distribute Dridex Banking Trojan
Cybercrooks have been leveraging malicious macros hidden inside XML files to distribute the Dridex financial malware, researchers have warned.
D-Link Pushes Firmware Updates for Vulnerable Routers
D-Link has begun to push out firmware updates for some of its home routers, to address three separate vulnerabilities that could allow remote code in…
Microsoft confirms Windows vulnerable to FREAK attack
The serious HTTPS FREAK exploit was thought to only affect Android, iOS, and MacOS, but Microsoft has confirmed that it also affects all supported ve…
phpMoAdmin MongoDB GUI affected by a Zero-Day Remote Code Execution flaw
Security experts are alerting on the availability in the underground black market of a zero day exploit for a vulnerability in the phpMoAdmin MongoDB…
Google Fixes 51 Vulnerabilities With Release of Chrome 41
Chrome 41 is available for download. The latest version of Google’s Web browser brings new apps and extension APIs, stability and performance improve…
‘FREAK’ - New SSL/TLS Vulnerability Explained
Another new widespread and disastrous SSL/TLS vulnerability has been uncovered that for over a decade leftMillions of users of Apple and Android devi…
Blu-ray exploits could allow computer malware infection
Stephen Tomkinson, a security researcher for NCC, presented his research at the Securi-Tay conference at Abertay Univeristy in Scotland on Friday. At…
Seagate NAS affected by a Remote Code Execution zero-day vulnerability
A security expert discovered a Remote Code Execution zero-day vulnerability in Seagate Network Attached Storage (NAS) systems.
Network Vision Fixes Code Injection Vulnerability in IntraVUE Software
Organizations that use the IntraVUE network visualization software from Network Vision are advised to update their installations as soon as possible …
Steam Community phishing attacks continue unabated
Phishers are still using look-alike domain names to steal Steam credentials from unsuspecting victims, which suggests that this approach is proving r…
New Member of the CZ.NIC Association
The company Prague Business Office s. r. o is a new member of the CZ.NIC Association as of 1 March 2015. Prague Business Office s. r. o become a memb…
1Tbps over 5G mobile connection could be used for (D)DoS
Record breaking data speed of 1Tbps over 5G mobile network was reached at the university 5G Innovation Centre in Great Britain. This speed is far fas…
Vulnerable plugin in Wordpress
In Wordpress plugin Slimstat in versions prior to 3.9.6. was detected a vulnerability. A "secret" key which is used to sign data send to and from the…
Two-thirds of Internet exchange points are using the Czech software BIRD
64 percent of Internet exchange points (IXP) worldwide used the Czech software BIRD in 2014. This has been published in the report of the EURO-IX org…
New Samba vulnerability
There is new vulnerability in Samba, that can be exploited by malicious Samba client by sending specially crafted packets to the Samba server. Codes …
Super-fish is bigger than we thought
Malware Super-fish that was found to be pre-installed on Lenovo laptops is more widespread that we though. The same HTTS-breaking technology that gav…