2018
New security patches of Cisco product
Cisco has released several security patches for its products. Some of the vulnerabilties can be exploited by attacker to gain control of an affected …
New version of Chrome browser
Google has released Google Chrome version 66.0.3359.117. This version fixes vulnerabilites exploitable to take control of an affected system. Google …
FRED 2.36 released
We have released the version 2.36 of the FRED registry system.
This release contains mainly improvements of the code that don't modify functionality, …
Security fixes for Oracle products
Oracle issues security patches for its products. Security updates fixes vulnerabilities some of which may be exploited by attackers to gain control o…
Public authorities shall be protected by Turris Omnia against cyberattacks, applications are accepte
Until June 30 this year, CZ.NIC, the administrator of the Czech national domain, will accept applications for free-of-charge rental of the secure rou…
Turris MOX, a Czech router, has already received more than USD 100,000 on Indiegogo
The modular network device that boosts computer network security now also offers an 8port switch module due to popular demand.
A new Indiegogo campaig…
Microsoft Releases April 2018 Security Updates
Microsoft has released security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe PhoneGap Push Plugin, Adobe Digital Editions, Adobe InDesign, Adobe Experienc…
Turris MOX: Cutting-edge security and custom hardware configuration
The new Czech open source router from CZ.NIC, a non-profit association, has been launched on the Indiegogo crowdfunding platform. The router offers t…
Security patches for OpenSSL
New updates for OpenSSL fix a vulnerability that could lead to Denial of Service attack. Users of OpenSSL 1.1.0 should upgrade to 1.1.0h and users of…
Ladislav Lhotka from CZ.NIC co-authored a new internet standard
This March, the IETF released a new Internet standard RFC 8349 (A YANG Data Model for Routing Management (NMDA Version)). Authors of the new Internet…
New patches for Firefox
Mozilla issues new patches for its Firefox browser (incl Firefox ESR). Exploitation of unpatched vulnerabilities can led to crash.
A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th
Drupal Security Team confirmed that a “highly critical” vulnerability affects Drupal 7 and 8 core and announced the availability of security updates …
The Czech and Slovak network operator communities to meet at the CSNOG conference
Major Czech and Slovak Internet network organizations are preparing the first annual CSNOG (Czech and Slovak Network Operators Group) community meeti…
New vulnerabilities discovered in AMD processors
Israeli-based CTS Labs has disclosed a discovery of 13 new vulnerabilities affecting processors Ryzen and EPYC.
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Connect, and Dreamweaver. A remote attacker could exploit these…
Samba Releases Security Updates
The Samba Team has released security updates to address vulnerabilities CVE-2018-1050 a CVE-2018-1057 in Samba. An attacker could exploit one of thes…
Mozilla Releases Security Updates for Firefox
Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities …
Cisco releases security updates for its products
Cisco releases security updates for some of its products. A remote attacker could exploit some of these vulnerabilities to take control of an affecte…
New version of Chrome fixes security vulnerabilities
Several security bugs are being fixed in Chrome65.0.3325.146. The most serious one can cause leak of sensitive information. Automatic update is recom…
Massive Malspam Campaign Targets Unpatched Systems
Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. …
Apple security update
Apple fixed critical vulnerability (CVE-2018-4124) in Apple operating systems, that would cause them to crash from mere exposure to either of two spe…
What was 2017 like for the Czech national domain?
The CZ.NIC Association, the administrator of the Czech national domain, has published a set of statistics for 2017.
The CZ.NIC Association, the admini…
Patch for vulnerable uTorrent client
The vulnerabilities impact uTorrent Web and on a lesser scale also uTorrent Classic. BitTorrent, Inc., the company behind uTorrent, has released vers…
Critical vulnerability has been patched for PyBitmessage
PyBitmessage is the official client for Bitmessage (decentralized P2P communications protocol). The vulnerability allows attacker to remotely execu…
New version of routing daemon Quagga 1.2.3
Security patches included in Quagga 1.2.3 routing daemon fixes several vulnerabilities. In the worst case scenario a remote attacker could seize cont…
Microsoft issues security updates
Microsoft released a new set of security updates on 13th of February. Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and few …
Adobe releases security updates
New security updates are part of security bulletins APSB18-02 and APSB18-04 issued on 13th of February. One of the most knows patched products is Ado…
Adobe Releases Security Updates for Flash Player
Adobe has released security updates to address vulnerabilities in Flash Player CVE-2018-4878. A remote attacker could exploit one of these vulnerabil…
Cisco Releases Security Updates
Cisco has released an updated advisory and security updates to address a vulnerability affecting its Adaptive Security Appliance software CVE-2018-01…
The mojeID service has 600,000 users
Last year we also managed to implement mojeID to the IS STAG information system for universities, developed by West Bohemian University. The mojeID s…
Cisco Releases Security Updates for IOX XR
Cisco has released software updates to address a vulnerability in its IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9…
Hard-coded Password Lets Attackers Bypass Lenovo's Fingerprint Scanner
Lenovo has recently rolled out security patches for a severe vulnerability in its Fingerprint Manager Pro software that could allow leak sensitive da…
Mozila patches Thunderbird
Mozilla issues a patch for its e-mail client Thunderbird. The patch fixes a set of vulnerabilities one of which can be exploited to execute arbitrary…
Vulnerability in desktop apps built on Electron framework
A remote code execution vulnerability was addressed in the Electron framework, which powers highly popular desktop applications, including Slack, Sky…
New version of Chrome fixes security vulnerabilities
Several security bugs are being fixed in Chrome 64.0.3282.119. The most serious one can lead to denial of service. This version also contains mitigat…
Apple issued a number of security patches for its products
Apple patches several vulnerabilities in its products. Some of the vulnerabilities are exploitable and can lead to execution of arbitrary code from a…
Critical updates for Firefox and Firefox ESR
Mozilla issues an update for critical vulnerabilities in its web browsers Firefox 58 and Firefox ESR 52.6. At least one of the vulnerabilities allows…
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit one of these vulnerabilities to…
Oracle releases January’s patch
Oracle released the January 2018 Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle …
The .CZ domain celebrates its 25th birthday
On Saturday, January 13, it will be exactly 25 years since the family of the top-level national domains greeted the new member, .CZ
On Saturday, Janua…
Microsoft releases January’s patch
Microsoft released 56 updates that include patches for the Meltdown and Spectre vulnerabilities. The patches also addressed security issues in Window…
VMware and Apple released security updates
Apple has released security updates to address vulnerabilities in multiple products: macOS High Sierra 10.13.2,
iOS 11.2.2 and for the web browser Sa…
New attack on CPU can read arbitrary parts of system memory
New attack aims at modern processor regardless of operating system. It exploits vulnerabilities Spectre (CVE-2017-5753 and CVE-2017-5715) and Meltdow…
Updates for Android
Google issues updates for its Android operating system. It's fixing just over 30 vulnerabilities and a number of critical ones.
A new book from the CZ.NIC Edition will bring wireless communication and the Internet of Things clos
The electronic version of the book is available for free download at http://knihy.nic.cz; here you can also order it as a hard copy.
Another publicati…
Critical vulnerability in vSphere Data Protection
VMware patches several critical vulnerabilities in its vSphere Data Protection. Update fixes 3 issues of one of which can be exploited by a remote at…
2017
Mozilla issues a security update for Thunderbird
Current release of Mozilla Thunderbird 52.5.2 fixes a security vulnerability which can cause a buffer overflow on Windows machines. The vulnerability…
Microsoft Office Docs New Vessel for Loki Malware
Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evad…
Transport Layer Security (TLS) Vulnerability
The TLS vulnerability is also known as Return of Bleichenbacher's Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to …