2012
FBI warns of new internet virus holding computers hostage
The Federal Bureau of Investigation is warning computer users of a new virus that can attack computers when they visit an infected website. Unlike tr…
Crisis malware infects VMware virtual machines
Crisis is a computer Trojan program that targets Mac OS and Windows users. The malware was discovered by antivirus vendor Intego on July 24 and can r…
Microsoft warns of 'man-in-the-middle' VPN password hack
Microsoft yesterday warned Windows users of possible "man-in-the-middle" attacks able to steal passwords for some wireless networks and VPNs, or virt…
New Linux Distro for security analyst
A new GNU/Linux distribution or distro designed for helping you in every aspect of your mobile forensics, mobile malware analysis, reverse engineerin…
McAfee has a new Mobile Security software for Android
McAfee is expanding its mobile security software for Android tablets and smartphones, as it sees an increase in threats targeting Android devices, th…
Serious security flaw: iPhone bug allows SMS spoofing
It is a security bug which is present on all iPhones. Without your knowing sends SMS messages and also allows attackers to access your personal infor…
New spear-phishing attack targets energy sector
A new spear-phishing attack targeting a number of specific companies in a few industries including the energy sector has been spotted by several secu…
How to Spot Fake Antivirus Software
What a fake anti-virus looks like, and what to do if you have it installed in your PC, described us Raul R. Alvarez in his article.
Dark site of the internet
Dark site of the internet. Thats a topic of today's blogpost on our blog sites. You can read how and where criminal activity are going on.
Are you using Adobe Reader, consider change
Security analytics from Google points at the fact that Adobe still waiting with patching 46 reported bugs, and suggest change to other PDF viewer.
What Microsoft did for better security in Windows 8
Windows 8 is getting mixed reviews but there’s no doubt that Microsoft has taken significant steps to improve security. Patrick Lambert describes the…
Kaspersy Labs asking for public assistance
Kaspersky Lab appealed for help from top-notch cryptographers to help it break the encryption of a still-mysterious warhead delivered by the Gauss cy…
Why dont forget batch of patches from yesterday
Yesterday was published new batch of patches from Microsoft and Adobe companies. Many of them was marked as critical patch. More information are also…
Reveton, malware which is targeted on European users
Inside view of the malware gang which is responsible for online blackmailing.
New algorithm tracks down the origins of internet attacks
Swiss researcher Pedro Pinto and his colleagues at École Polytechnique Fédérale de Lausanne suggest using the Sparse Interference algorithm to make t…
Malware Gauss found by Pallidi Norrow font
The Gauss malware installs a custom font called Palida Narrow. While it's not clear why this happens, security researchers are already proposing diff…
BotoPedia, emerging web-catalog of botnets
BotoPedia, a registry of Web bots, could help companies keep their sites open to good crawlers but closed to attackers and site scrapers.
FinFisher spyware found running on computers all over the world
The author claims that the one C&C Server is also in Czech Republic Corporate IT should monitor systems for signs of communication with command an…
Zitmo (mobile version of Zeus) is heading to BlackBerry
Researchers have found several samples of a new version of the mobile version of the Zeus malware, with these newest ones targeting the BlackBerry pl…
Ransomware is focusing on Europe
Rather than encrypt the entire hard drive, criminals are using fairly unsophisticated ransomware to lock a victim's PC and then demand cash for the k…
Nvidia Unix driver 304.32 have a high-risk vulnerability
Graphics chip maker Nvidia released a new version of its Unix driver on Friday in order to address a high-risk vulnerability that can be exploited by…
Phishing for Payroll with unpatched Java
Check your version of Java, because you could be another victim. The biggest problem is in path Java JRE. CVE2012-1723.
What is the TDoS
The explanation of this word and more information about this attack, can be found in the article. DDoS attacks aimed at telecom systems are on the ri…
Microsoft warns of critical Oracle code bugs in Exchange
Microsoft last week warned IT administrators that critical vulnerabilities in code licensed from Oracle could give attackers access to Exchange Serve…
How the script kiddies attacks and how to detect it
This is the name of new article on our blog, which prepared for you a colleague Jirka Machálek
Hackers reveal critical vulnerabilities in Huawei routers at Defcon
Security researchers disclosed critical vulnerabilities in routers from Chinese networking and telecommunications equipment manufacturer Huawei at th…
Fraudsters tempt Olympic fans with bogus streaming websites
The Olympic Games in London have sparked interest from fraudsters, with a raft of sites supposedly offering live video streams of events.
Add-on for Internet Explorer Protects Users from Fraudulent Websites
CZ.NIC Association n cooperation with the Czech representative of Microsoft, have launched the DNSSEC Validator, a new security add-on for Internet E…
New malware use Facebook and trade on from children charity
Be aware of new kind of cheats on Facebook. This time is even in more languages.
Siemens fixed vulnerabilities which abused the Stuxnet computer worm
German conglomerate Siemens on Monday said it has fixed vulnerabilities in its software products that appeared to be identical to those that allowed …
Česká spořitelna warns their clients
Česká spořitelna preventive warns their clients on phishing e-mails.
How to Prevent Social Engineering Attacks
True words, which every employee should realize. "Every employee no matter what their function is – they also have the duties of protecting the compa…
DDoS Attacks: What They Are, and How to Defend Against Them
Short summary of information about DDOS attacks and some ways for defending them.
Serious remote vulnerability in DNS server NSD 3
Our colleagues from CZ.NIC Labs team found serious remote vulnerability which makes the way for remote knock down of NSD 3 server. There is also atta…
Attacks via iframe
Attacks via iframe, its uncovering and recovery after attack. Thats a topic of today's blogpost on our blog sites. As bonus you can win t-shirt with …
The web browser built into Amazon's Kindle Touch contains a serious security hole
The web browser built into Amazon's Kindle Touch eBook reader contains a serious security hole: when a user navigates to a specially crafted web page…
DNSenum - tool for DNS information gathering
Information about tool for DNS information gathering. This tool can be useful in the information gathering stage of a penetration testing.
Microsoft advises disabling Windows Gadgets amid vulnerability fears
Microsoft is advising system administrators to disable the Windows Sidebar and Gadgets in supported versions of its desktop operating system due to s…
How to have unique passwords for each website and yet remember them easily?
One of possible ways how to solve issue of unique access passwords on the web services.
Microsoft revokes trust almost in 30 of its own certificates
Microsoft Security Advisory 2728973 announces that Microsoft is revoking trust in in a number of Microsoft certificates. A list of 28 Microsoft inter…
Last point in DNSChanger virus issue
Our collegue Michal Prokop inform on our blog site how users uses our diagnostic site www.dns-ok.cz.
To be or not to be on Internet, this is what is going on
Mr. Johannes B. Ullrich, Ph.D. from SANS Technology Institute published a news that points to the possibility of disconnection from the Internet, tha…
Beware of new application Find and Call
There was found another application which try to steal data from the mobile devices. The application is called ‘Find and Call’ and can be found in th…
A new security threat in Android 4
A research team at North Carolina State University led by Professor Xuxian Jiang recently announced that a security flaw in Android Version 4.0.4 and…
CSIRT.CZ Warns Against a High-Risk Configuration of RouterOS
In a recent incident in which we witnessed several DNS amplification attacks, we have been informed that some of the DNS servers involved were runnin…
CZ.NIC and the Czech Ministry of Industry and Trade sign Memorandum of Understanding
This step highlighted the importance of the Internet and domain name management (DNS) for the state economy.
During the international meeting of ICANN…
Smart TVs are vulnerable to attacks
This article brings information about vulneralibities of smart TVs.
10 vulnerable web applications you can play with
In this article at pentestlab.org are ten web applications, which are given for vulnerabilities testing purpose.