News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2013

Keep Your Laptop Safe While Surfing through Wi-Fi Hotspots (Infographic)

The relaxing atmosphere of surfing at the beach, however, makes it easy to forget about the sharks. Connecting to an unsecured network poses serious …

Fake Angelina Jolie CNN Story Contains Malware

The spam comes in the form of an email supposedly from CNN. The subject line is "CNN: Forbes: Angelina Jolie tops list of highest-paid actresses" and…

Black Hat Researchers Remotely Hack Into SCADA Systems on Oil Rigs

SCADA systems used on oil rigs and other areas of the oil industry are using outdated networking protocols that can easily be compromised, SCADA expe…

A new design for the main CZ.NIC websites

After nearly six years, CZ.NIC has updated the design of the Association’s main websites. Receiving a new graphic design are www.nic.cz, the CZ.NIC L…

Microsoft expands bug info-sharing program to larger crowd

Microsoft has announced an expansion of a program that shares information with selected security firms. The time to threat data before the company pa…

Hacking the car was made possible

The fact that it is possible to hack the car was confirmed by two security researches on Toyota Prius. Prius is believed to be one of the most high-t…

Royal Baby Scams Could Lead to Royal Headaches

Whenever there's a big news story, scammers and cyberthieves are quick to take advantage of Internet users' curiosity in order to plant malware on th…

First Malicious Apps Targeting Android 'Master Key Vulnerability' Found in the Wild

Symantec discovered two mobile apps that were infected by an attacker, which are legitimate applications used to help find and make doctor appointmen…

Hundreds of millions at risk from SIM card vulnerability

Berlin-based Security Research Labs found the way how to make SIM cards vulnerable to cyber attacks without leaving any evidence and noticing the use…

Belarus Internet infested with spammers

Eastern European countries filled the top three slots of a list of nations that have IP addresses known to be sources of spam. List is dominated by B…

The Dangers of Unsecured USB Drives

Policies are useful, but without enforcement, they are not a successful means of preventing malware invasions and the theft of business information.

Android Backup Option Sends WiFi Passwords in Plaintext to Google

A staffer with the Elecontric Frontier Foundation is warning that Google Android's "Back up my data" feature sends WiFi passwords and other private i…

MasterKey Hack Applications Spotted in the Play Store

A number of applications that harmlessly use the MasterKey vulnerability have been spotted on Google Play.

IPv6 Security Overview: a Small View of the Future

In this paper we will analyze the features of the new suite of internet protocols, its advantages and disadvantages, as well as the possible implicat…

Fake Online 'Ransomware' Targets Porn Viewers, Hijacks Browsers

Technically, this scam is fairly straightforward. It "locks" computer screens by sending users to a website designed to look like an official FBI web…

Mac Malware Tricks Users with Reversed Text

Mac users should think twice before downloading PDFs of uncertain origin: A new bit of spyware — under the guise "RecentNews.ppa.pdf" — is actually a…

LinkedIn Clickjacking Vulnerability Tricks Users to Spam Links

A Clickjacking vulnerability existed on LinkedIn that allowed an attacker to trick users for sharing and posting links on behalf of victim.

Registry for .NL (SIDN) and for .BE (DNS.be) Were Compromised

Yesterday, Tuesday 9 July, it came to light that a number of SIDN websites had been infected by malware or had been otherwise compromised. In another…

Internet Explorer Vulnerability Exposed by Google Researcher Used In Targeted Attacks

Google and Microsoft are at each other's throats again. In a recent statement, Microsoft says hackers have been actively exploiting a vulnerability t…

'Priyanka' Worm Plays Havoc with WhatsApp Contacts

"Priyanka" is a fairly common Indian name, but if you fall victim to a new Android infection, it could become disturbingly prevalent in your contacts…

HP Issues Fix for Backdoor Vulnerability in StoreOnce Systems

HP's security response team has released a fix to address the backdoor vulnerability in its StoreOnce backup systems disclosed late last month by an …

New Breed of Software Detects Malware from a Distance

The biggest security threat banks faces — malware that pervades their online and mobile banking users' devices — is being met by an increasingly soph…

Google Android Master Key Vulnerability Exploit Code Circulates

Proof-of-concept code for exploiting a Google Android master key vulnerability that can be used to Trojanize legitimate apps is making the round on t…

Cecilia Malmström Welcomes New EU Rules to fight cyber-crime

The Directive on attacks against information systems builds on rules that have been in force since 2005 (Council Framework Decision 2005/222/JHA). Wh…

Microsoft to Patch Seven Flaws in July's Patch Tuesday

The patch that will get the most news attention is likely to be CVE-2013-3660, which is a memory management problem in win32k.sys – the Windows Kerne…

Rampant Apache Website Attack Hits Visitors with Highly Malicious Software

Darkleech is back. Or maybe it never left. Either way, it's a growing problem. A campaign that forces sites running the Apache Web server to install …

Apple Issues Emergency Security Patch for Macs

If you're a Mac user and watch video files on your computer, consider downloading Apple's Security Update 2013-003 sooner rather than later. A vulner…

Massive Android Flaw Allows Hackers To ‘Take Over’ and ‘Control’ 99 % of Android Devices

Mobile security company Bluebox said today that it recently discovered a vulnerability in Android that makes any Android device released in the last …

Demystifying HTML 5 Attacks

To address the growing needs of developers to build high quality sites, HTML5 has relaxed some of the restrictions which were placed earlier by the S…

Ubisoft Breached, Sensitive Account Data Leaked

Game publisher Ubisoft was breached and unauthorized parties accessed customers’ usernames, e-mail addresses and hashed passwords. Ubisoft urges all …

Skype for Android May Bypass Smartphone Lockscreens

Phone thieves might be able to bypass lockscreens on Android devices, thanks to a flaw in Skype for Android.

Android Hack-Tool Discovered By F-Secure

The recently discovered Android malware - dubbed USB Cleaver, is able to compromise the victim’s mobile and also infects his PC stealing sensitive in…

Bait and CAPTCHA: How Malware Can Change Your Computer Screen

Italian security researcher Rosario Valotta has discovered — or rather, rediscovered — a trick that would let cybercriminals alter aspects of your co…

Behind Top Ten Rules for Network Administrators

Last article from series about internet security is dedicated to some situations which you can face as administrator of medium-sized network. CSIRT.C…

Facebook Hacked With an SMS

The hacker “fin1te” revealed that Facebook account was hackable within a minute simply with an SMS.

Malware Mostly Comes from Legitimate Websites

A new report from Google suggests that malware infections from malevolent "attack sites," which intentionally distribute harmful software, are relati…

Surveillance Cams Get Party Hats for Orwell's Birthday

Famed author George Orwell was born on June 25, 1903, and two Dutch artists decided that the best way to celebrate his birthday was with party hats —…

Opera Software Hit by 'Infrastructure Attack'; Malware Signed with Stolen Cert

Norwegian browser maker Opera Software has confirmed that a targeted internal network infrastructure attack led to the theft of a code signing certif…

Attacks-as-a-Service, MaaS, FaaS - Different Terms, Same Success History

Attacks-as-a-Service, Malware-as-a-Service and Fraud-as-a-Service - all are terms used to better qualify the complex evolution of cybercrime offer.

Car Hacking - Cinematographic Fiction or Reality

Car hacking is one of the effect of the massive introduction of technology in our vehicles, a hacker that gain access to our transport is an event th…

'World of Warcraft' Hackers Steal Millions in Gold

Adventurers in the online game "World of Warcraft" generally have to worry about bandits and dragons, but their most dangerous threat this week comes…

Forwarding Your Phone's Texts Could Invite Hackers

Getting your text messages delivered to your PC or tablet sounds pretty convenient, until a hacker uses that text-forwarding feature to hijack your G…

Compromised Yahoo! Accounts Used to Spread Android Trojan

Over the last several days, weeks really for some, people have noticed an uptick in the amount of spam coming from compromised Yahoo! accounts. But t…

What's the best way to test and secure Joomla?

Joomla is one of the most popular CMS which gives ease of installation, handling and managing your web application. And so being obvious is used in m…

Google Docs Abused to Protect Malicious Traffic

Researchers at FireEye have spotted a malware campaign using Google Docs to redirect victims and evade callback detection mechanisms.

Security iPhone Hotspot Passwords Take Seconds to Crack

If you use your iPhone as a mobile hotspot, a hacker could probably get into it in less than a minute. By default, iOS 6 generates randomized passwor…

Fortune-teller

In today's hot day, perhaps we can afford something funny. It is video, which could be projected to internet users as educational.

Java Mega-Patch Fixes 40 Serious Flaws

Java is not the safest software that users can install, as evidenced by the 40 flaws patched in its latest update. Users should install Java 7, Updat…

Trojan.Obad.A Gets Administrator Privileges and Manages Your Device for You

Android.Obad.A is equipped with an array of malicious functions including sending SMS to premium-rate numbers, entering commands in the device consol…

Some iPhones Duped by Impostor Wi-Fi Hotspots

Experts from security research company SkyCure have uncovered a security vulnerability in the carrier configuration settings of some iPhones that cou…