2014
Selfmite, the rare Android worm which spreads itself by sending SMS
Experts at AdaptiveMobile discovered a rare Android SMS worm dubbed Selfmite which spreads itself by sending SMS including a malicious link to the co…
Stuxnet-like 'Havex' Malware Strikes European SCADA Systems
Security researchers have uncovered a new Stuxnet like malware, named as “Havex”, which was used in a number of previous cyber attacks against organi…
Critical flaw in TimThumb plugin menaces the WordPress world
A critical vulnerability in the WebShot feature implemented by TimThumb plugin expose WordPress instance to Remote Code Execution attacks.
PayPal Two-Factor Authentication Bypassed
Security researchers have found a way to bypass the two-factor authentication (2FA) mechanism used by PayPal to enhance the security of customers' ac…
Steam phishing attacks exploiting look-alike domain names
An ongoing series of phishing attacks against the Steam gaming community is making effective use of look-alike domains to trick users into surrenderi…
Microsoft Interflow announced today at 26th FIRST conference
Microsoft Interflow is a security and threat information exchange platform for professionals working in cybersecurity and allows collaboration for a …
Open Wireless Router Let You Share Your Internet with the World
A new movement dubbed as “Open Wireless Movement” is encouraging the users to open-up their private network or at least a small portion of the availa…
Open-Source Tool Aimed At Propelling Honeypots Into the Mainstream
Free software automates the setup, management of honeypots for enterprises.
Impact of Windows XP End of life on Critical Infrastructure
Which is the impact of the Windows XP End of Life on the critical infrastructure? Which are the risks and the mitigation strategies that could be ado…
Beware! Sad video of woman dying during a fight is really a Facebook scam
Scammers are once again attempting to make an easy buck by tricking Facebook users into sharing gruesome videos that link to money-making surveys.
Researchers Out Spy Tools That Let Governments Hack Your Smartphone
Researchers from Kaspersky Lab and Citizen Lab have uncovered new details on advanced surveillance tools offered by the Italian company HackingTeam, …
Which draft of the Bill on cyber security was approved?
On the portal Lupa reporter Jíři Peterka published the article on the Bill on cyber security. The article touch the subject of history of the draft a…
Google Unveils BoringSSL, Another Flavor of OpenSSL
Now, the biggest Internet giant Google is launching a new fork of OpenSSL, which they dubbed as BoringSSL, developed by its own independent work with…
30,000 Servers May Be Exposed To Hackers
A vulnerability in the Baseboard Management Controller (BMC) of Supermicro motherboards leaves 30,000 unpatched servers and their passwords available…
LinkedIn users are at risk of Man-in-the-Middle Attack
Although is LinkedIn using HTTPS connection for user's login page, they are not using technology called HTTP Strict Transport Security (HSTS) that pr…
It’s Not Funny: Facebook Users Tricked into Bitcoin Mining
Hundreds of Facebook users got infected with a new Trojan secretly using their systems to mine for Bitcoins. The virus spreads through private Facebo…
Criminals launch mass phishing attacks against online dating sites
Criminals are running massive dedicated phishing campaigns against online dating sites, marking an interesting – but not unusual – shift in focus fro…
The draft of Bill on cyber security was approved
In third reading was yesterday (18.06) approved the draft of the Bill on cyber security. In the next step bill have to pass through Senate and be sig…
New phishing of Česká sporiteľna
Simple looking mail contains a link to phishing of Internet banking's page of Česka sporitelna. Link in e-mail is redirecting users to URL http://fv-…
Google Play Store Update Allows Apps to Silently Gain Control of Your Device
Google just made a huge change to the way application permissions work on Android devices which has left a potential door open to malicious app devel…
Svpeng Android ransomware is impossible to repel after the infection
Experts at Kaspersky Lab are following the evolution of Svpeng Android malware, born as banking trojan and evolved in ransomware which hit US custome…
Cybercriminals Targeting Cloud-Based PoS Systems via Browser Attacks
Attackers are targeting vulnerabilities in major Web browsers to compromise cloud-based point-of-sale (PoS) systems. The malware, called POSCLOUD by …
CZ.NIC has launched an application which facilitates testing routers for vulnerability for "rom-0"
An online application that allows you to check your router’s (the one you use to connect to the Internet) vulnerability quickly and easily was launch…
Randomizing MAC adresses in Apple iOS 8
Apple has introduced randomization of MAC adresseswhile scaning for WiFi networks. This feature should enhance users privacy since MAC adresses are u…
Adobe and Microsoft issued patches
Adobe and Microsoft isssued patches to fix critical vulenrabilities in their software. Adobe issued patches especially for Flash Player and AIR, Mic…
Microsoft issues the patch for the debated IE critical vulnerabilities
Microsoft has announced the official patch for the critical vulnerability discovered recently in the Internet Explorer.
Serious vulnerabilities in the Linux kernel, upgrade it now!
A new series of vulnerabilities in Linux Kernel allows an attacker to lead DoS and privilege escalation attack, Debian urges upgrades for Linux users…
Scammers Abuse Twitter Features, Trick Thousands with ‘Follower’ Scheme
A series of enhanced follower scams has tricked thousands of Twitter users after a group abused the platform’s authentication system, TweetDeck and T…
RIG Exploit Kit Used to Deliver "Cryptowall" Ransomware
The RIG Exploit Kit, which first emerged on cybercrime forums in April, is successfully leveraging malicious advertising techniques (malvertising) to…
Simplocker, the first Android File-Encrypting Ransomware
Security experts at ESET discovered and analyzed the first Android File-Encrypting ransomware dubbed Simplocker with C&C hosted on TOR.
Cupid - new type of attack with Heartbleed vector
A new type of attack called Cupid works on Heartbleed method of attack. The Cupid is exploitable on TLS connections over EAP (Extensible Authenticati…
New flaw in SSL
Security team which found the Heartbleed flaw has discovered a vulnerability in the open-source GnuTLS library. Although the system is not as widely …
Fraudsters Physically Deploy Malicious Software to Hack ATMs
Criminals will not let any way to cheat an ATM machine out of its cash, as it’s one of the easiest way for them to get the hands on cash. ATM skim…
AV alone is not enough to protect PC from zero-day malware
A recent research conducted by experts at Lastline Labs have demonstrated that AV alone is not enough to protect computers from zero-day malware.
15 million WordPress instances run flawed SEO plugin. Fix it!
Security researchers at Sucuri firm have discovered multiple serious vulnerabilities in the popular ‘All In One SEO Pack’ plugin for WordPress.
New Member of the CZ.NIC Association
The company Seonet Multimedia s. r. o. is a new member of the CZ.NIC Association as of 1 June 2014. Seonet Multimedia s. r. o. become a member of the…
Sinkholes: Legal and Technical Issues in the Fight against Botnets
The DNS sinkhole is a technique adopted by principal security firms to analyze malicious traffic related to a botnet, spyware and any other kind of m…
Aussie Apple Users Hit by Ransomware
An unknown number of Apple customers located in Australia had their accounts locked and were asked to pay $100 to access their own data. Apple dev…
‘Can I Post These Pictures on Facebook?’ Polite IM Trojan Asks
Over 1,300 systems got infected with the latest Instant Messaging Trojan, which uses polite social engineering and biblical verses to hide encrypted …
Fake "Heartbleed bug removal tool"
On the lack of technical skills is build a new spammers' campaign that is encouraging users to change their password once again because of Heartbleed…
Support for TrueCrypt is over?
Website truecrypt.org is redirected to http://truecrypt.sourceforge.net/ where is published an information that using truecrypt is not secure anymore…
Users on AVAST forum will be asked to change the password
The AVAST forum was hacked over this past weekend and users' nicknames, user names, e-mail addresses and hashed (one-way encrypted) were compromised.…
Wordpress issue exposes users to hijacking
Due to encrypted cookies it is possible to hijack the user session. Vulnerability is caused because Wordpress servers does not protect a key browser …
Vulnerability in IE8 unpatched
After 180 days windows when vulnerability in IE8 wasn't patched a Zero-Day Iniciative published details on it. To exploit it the user interaction is…
Fenix is the new name of the Secure VLAN
The NIX.CZ Association revealed the new name, logo and the graphic design of the project previously known to the community under the name Secure VLAN…
New Point-of-Sale Malware Compromises 1,500 Devices Worldwide
In past few months, the malware developers are more focusing on proliferating and upgrading malicious malwares to target Point-of-Sale (POS) machines…
Sophisticated Google Drive Phishing Scam is becoming popular
Security experts at Symantec have discovered a new phishing scheme based on Google Drive that is being used by hackers to steal Google Account creden…
Bank Cards Vulnerable to Undetectable “Pre-Play” Attacks
Popular Chip and PIN bank cards are vulnerable to “pre-play” attacks, a type of card cloning fraud which can’t be detected by regular banking procedu…
Apple Patches 22 Vulnerabilities With Release of Safari 7.0.4
Apple has released Safari 7.0.4 and Safari 6.1.4 to address a total of 22 vulnerabilities affecting WebKit, the open source rendering engine that pow…