2019
NSA released internal reverse engineering framework Ghidra as open source
The National Security Agency (NSA) announced the release at the RSA Conference of the free reverse engineering framework GHIDRA - a multi-platform re…
CZ.NIC agreed on coop. with a Brazilian partner, which will improve the quality of the DNS traffic
Uzavřená dohoda umožní reciproční provozování DNS serverů, které zvýší bezpečnost DNS provozu a zrychlí zpracování DNS dotazů na obou stranách oceánu…
The CZ.NIC Association published Domain Report for last year
In the Domain Report 2018, anyone interested will find for example the increase in the number of domains in 2018, domain registration over the past y…
Version 2.38 released
We have released the version 2.38 of the FRED registry software.
Release notes
This release contains the first phase of big changes concerning payments…
Drupal critical flaw
Critical vulnerability (CVE-2019-6340) has been discovered in popular content management system (CMS) Drupal that allows for remote code execution by…
Severe vulnerability in WinRAR that exists for last 19 years
WinRAR, one of the world's most popular Windows file compression applications, has patched last month a severe security flaw (CVE-2018-20250, CVE-201…
Critical vulnerability in WordPress
The latest research from RIPS Technologies GmbH revealed the existence of a critical remote code execution vulnerability that affects all previous ve…
Vulnerability in package manager snapd
Package manager snapd by Canonical contains vulnerability dubbed Dirty Cow (CVE-2019-7304), which can be exploited by an attacker to gain root access…
runc container breakout
The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execut…
Czech and Slovak network operators are preparing CSNOG 2019, the speakers may submit their proposals
The event is designed to enable professionals exchanging experience and sharing of practical solutions that can improve the quality of Czech and Slov…
Vulnerability in LibreOffice and OpenOffice allows for arbitrary code execution
A vulnerability discovered on office suites LibreOffice and OpenOffice allows for a remote code execution as soon as a user opens a malicious ODT fil…
CZ.NIC association to present a new project as part of the international Safer Internet Day
From the beginning, the new project has also involved the Child Helpline, which, thanks to this partnership, will be able to increase its capacities …
Vulnerability in the Microsoft Exchange NTLM authentication protocol
Microsoft Exchange supports a API called Exchange Web Services (EWS). One of the EWS API functions is called PushSubscriptionRequest, which can be us…
Quiz on spotting the phishing
Google’s technology incubator Jigsaw has revealed a quiz that tests users’ abilities to identify phishing attacks. The quiz is created based on the s…
Vulnerability in APT package manager
Vulnerability was discovered in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a ma…
Unpatched critical vulnerability in Cisco Small Business switches
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mecha…
CZ.NIC Association presents CyberSecurity, authored by Czech cyber security experts
On more than 500 pages, the book primarily addresses the issue of cyber security, and lays out its basic principles that should be respected by every…
Over 87GB of email addresses and passwords exposed on the internet
Almost 773 million unique email addresses and just under 22 million unique passwords were found. The data, dubbed Collection #1, is a set of email ad…
Unpatched zero-day vulnerability in Windows including PoC
Unpatched Windows vulnerability was published with a proof of concept. Microsoft plans to release patches as a part of the April update. The vulnerab…
Oracle releases January 2019 Critical Patch Update
Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. We encourages users and admin…
Fraud application preinstalled on Android devices
An unusually high number of transaction attempts encountered by Secure-D in Brazil and Malaysia coming from a series of Alcatel Android smartphone mo…
Three vulnerabilities disovered in systemd
Three (CVE-2018-16864, CVE-2018-16865, CVE-2018-16866) vulnerabilities discovered in systemd-journald. First two are memory corruptions (attacker-con…
Another .CZ Domain Registrar Deployed The DNSSEC Technology for All Its Domains
The registrar Seonet Multimedia, which runs its services under the GIGASERVER.CZ brand, introduced this technology for all domains they administer th…
SME Server Unauthenticated XSS To Privileged Remote Code Execution
The advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack in web management portal that le…
New Member of the CZ.NIC Association
The company Qrator Labs CZ s. r. o. is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of 1 January 2019. The association…
2018
CZ.NIC Publications has issued a book on the Perl programming language by Pavel Satrapa
The aim of this almost 300-page book is to guide the reader through the interesting world of the Perl programming language. The new publication is no…
National Cyber and Information Security Agency issued warning about Huawei and ZTE
National Cyber and Information Security Agency issued warning about software and hardware products from the following chinese companies:
Huawe…
New version of phpMyAdmin patches several vulnerabilities
New version of phpMyAdmin (one of the most popular and widely used MySQL database management systems) was released. Among other bug fixes, the newest…
Elections To The Associations's Supervisory Board And Collegium
The CZ.NIC Collegium meeting, which took place on November 22, Vlastimil Pečínka and Jan Redl were re-elected to the Supervisory Board for the next t…
SamSam ransomware
US-CERT team issues a warning to inform computer network defenders about SamSam ransomware. So far it seems that the threat gains access through vul…
The CZ.NIC Association Changes The Wholesale Domain Prices
This is the first change in the wholesale price of the .CZ domain in the last almost seven years.
From January 1 next year, the CZ.NIC Association wil…
The 'How to Use the Internet' Comic Book Now a Sequel
The book is a loose continuation of the educational series How to Use the Internet and the comic book of the same name. In the twelve stories, comic …
Password-less sign-in with Microsoft account
Microsoft turned on the ability to securely sign in with your Microsoft account using a standards-based FIDO2 compatible device—no username or passwo…
CZ.NIC has gained the highest possible recognition of the TF-CSIRT for its security team
The national security team CSIRT.CZ run by the CZ.NIC Association, the administrator of the Czech national domain, has gained “certified” status with…
CZ.NIC has gained the highest possible recognition of the TF-CSIRT for its security team
Among more than 40 Czech security teams, CSIRT.CZ is the second to boast this prestigious status.
The national security team CSIRT.CZ run by the CZ.NI…
The 'On-line ZOO': A Children's Book That Teaches Safe Behavior On The Internet
The book explains in a fun way the most common risks associated with Internet use to children of pre-school and younger school age. It is primarily i…
VMware Releases Security Updates
VMware has released security updates to address vulnerabilities in ESXi, Workstation, and Fusion. An attacker could exploit these vulnerabilities to …
Jaromír Talíř from CZ.NIC selected to the Boards of important Internet institutions
Jaromír Talíř, Technical Partner of the CZ.NIC Association, has been selected a member of the Board of Directors of the international organization DN…
CyberExchange project strengthens cooperation of security teams across Europe
The CyberExchange project reacts to the increasing threats in the cybersecurity area and the necessity of cross-border cooperation in the fight again…
New Privilege Escalation Flaw Affects Most Linux Distributions
An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, includ…
The CZ.NIC Association provides its DNS services to the Canadian national domain administrator
For several years now, in a similar way the CZ.NIC Association has been hosting domains for smaller registries: Macedonia, Tanzania and Angola. These…
VMware Releases Security Advisory
VMware has released a security advisory to address a vulnerability in ESXi, Workstation, and Fusion. An attacker could exploit this vulnerability to …
Microsoft Releases October 2018 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…
Just Answering A Video Call Could Compromise Your WhatsApp Account
Google Project Zero security researcher Natalie Silvanovich found a critical vulnerability in WhatsApp messenger that could have allowed hackers to r…
New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root Access
A known vulnerability in MikroTik routers is potentially far more dangerous than previously thought.A cybersecurity researcher from Tenable Research …
Google Project Zero Discloses New Linux Kernel Flaw
Google Project Zero this week disclosed the details and released a proof-of-concept (PoC) exploit for a potentially serious Linux kernel vulnerabilit…
ecent MikroTik vulnerability exploited in the wild
It has been noted that, that recently patched MikroTik vulnerability CVE-2018-14847 is being exploited in the wild. Security patches were issued in A…
3D Printers in The Wild, What Can Go Wrong?
Richard wrote a quick diary yesterday about an interesting information that we received from one of our readers. It's about a huge amount of OctoPrin…
Expert publicly disclosed exploit code for Windows Task Scheduler Zero-Day
A security researcher has publicly disclosed the details of zero-day privilege escalation vulnerability affecting all Microsoft’s Windows operating s…
Microsoft Releases August 2018 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…