News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2018

Microsoft Releases April 2018 Security Updates

Microsoft has released security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe PhoneGap Push Plugin, Adobe Digital Editions, Adobe InDesign, Adobe Experienc…

Security patches for OpenSSL

New updates for OpenSSL fix a vulnerability that could lead to Denial of Service attack. Users of OpenSSL 1.1.0 should upgrade to 1.1.0h and users of…

New patches for Firefox

Mozilla issues new patches for its Firefox browser (incl Firefox ESR). Exploitation of unpatched vulnerabilities can led to crash.

A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th

Drupal Security Team confirmed that a “highly critical” vulnerability affects Drupal 7 and 8 core and announced the availability of security updates …

New vulnerabilities discovered in AMD processors

Israeli-based CTS Labs has disclosed a discovery of 13 new vulnerabilities affecting processors Ryzen and EPYC.

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Connect, and Dreamweaver. A remote attacker could exploit these…

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities CVE-2018-1050 a CVE-2018-1057 in Samba. An attacker could exploit one of thes…

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities …

Cisco releases security updates for its products

Cisco releases security updates for some of its products. A remote attacker could exploit some of these vulnerabilities to take control of an affecte…

New version of Chrome fixes security vulnerabilities

Several security bugs are being fixed in Chrome65.0.3325.146. The most serious one can cause leak of sensitive information. Automatic update is recom…

Massive Malspam Campaign Targets Unpatched Systems

Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. …

Apple security update

Apple fixed critical vulnerability (CVE-2018-4124) in Apple operating systems, that would cause them to crash from mere exposure to either of two spe…

Patch for vulnerable uTorrent client

The vulnerabilities impact uTorrent Web and on a lesser scale also uTorrent Classic. BitTorrent, Inc., the company behind uTorrent, has released vers…

Critical vulnerability has been patched for PyBitmessage

PyBitmessage is the official client for Bitmessage (decentralized P2P communications protocol). The vulnerability allows attacker to remotely execu…

New version of routing daemon Quagga 1.2.3

Security patches included in Quagga 1.2.3 routing daemon fixes several vulnerabilities. In the worst case scenario a remote attacker could seize cont…

Microsoft issues security updates

Microsoft released a new set of security updates on 13th of February. Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and few …

Adobe releases security updates

New security updates are part of security bulletins APSB18-02 and APSB18-04 issued on 13th of February. One of the most knows patched products is Ado…

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address vulnerabilities in Flash Player CVE-2018-4878. A remote attacker could exploit one of these vulnerabil…

Cisco Releases Security Updates

Cisco has released an updated advisory and security updates to address a vulnerability affecting its Adaptive Security Appliance software CVE-2018-01…

Cisco Releases Security Updates for IOX XR

Cisco has released software updates to address a vulnerability in its IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9…

Hard-coded Password Lets Attackers Bypass Lenovo's Fingerprint Scanner

Lenovo has recently rolled out security patches for a severe vulnerability in its Fingerprint Manager Pro software that could allow leak sensitive da…

Mozila patches Thunderbird

Mozilla issues a patch for its e-mail client Thunderbird. The patch fixes a set of vulnerabilities one of which can be exploited to execute arbitrary…

Vulnerability in desktop apps built on Electron framework

A remote code execution vulnerability was addressed in the Electron framework, which powers highly popular desktop applications, including Slack, Sky…

New version of Chrome fixes security vulnerabilities

Several security bugs are being fixed in Chrome 64.0.3282.119. The most serious one can lead to denial of service. This version also contains mitigat…

Apple issued a number of security patches for its products

Apple patches several vulnerabilities in its products. Some of the vulnerabilities are exploitable and can lead to execution of arbitrary code from a…

Critical updates for Firefox and Firefox ESR

Mozilla issues an update for critical vulnerabilities in its web browsers Firefox 58 and Firefox ESR 52.6. At least one of the vulnerabilities allows…

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit one of these vulnerabilities to…

Oracle releases January’s patch

Oracle released the January 2018 Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle …

Microsoft releases January’s patch

Microsoft released 56 updates that include patches for the Meltdown and Spectre vulnerabilities. The patches also addressed security issues in Window…

VMware and Apple released security updates

Apple has released security updates to address vulnerabilities in multiple products: macOS High Sierra 10.13.2,
iOS 11.2.2 and for the web browser Sa…

New attack on CPU can read arbitrary parts of system memory

New attack aims at modern processor regardless of operating system. It exploits vulnerabilities Spectre (CVE-2017-5753 and CVE-2017-5715) and Meltdow…

Updates for Android

Google issues updates for its Android operating system. It's fixing just over 30 vulnerabilities and a number of critical ones.

Critical vulnerability in vSphere Data Protection

VMware patches several critical vulnerabilities in its vSphere Data Protection. Update fixes 3 issues of one of which can be exploited by a remote at…

2017

Mozilla issues a security update for Thunderbird

Current release of Mozilla Thunderbird 52.5.2 fixes a security vulnerability which can cause a buffer overflow on Windows machines. The vulnerability…

Microsoft Office Docs New Vessel for Loki Malware

Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evad…

Transport Layer Security (TLS) Vulnerability

The TLS vulnerability is also known as Return of Bleichenbacher's Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to …

Apple release security updates

Apple has released security updates to address vulnerabilities in operating systems iOS and tvOS and for the iCloud application running on Windows op…

Microsoft and Apple release security updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to tak…

Security updates from Google and Apple

Google issued new version of its Chrome browser 63.0.3239.84 in which it patches one critical vulnerability and a number of others. Apple announces u…

Security updates for Firefox and Struts 2

Apache Software Foundation and Mozilla issued a patch for their products fixing critical vulnerabilities. There are known issues in REST plug-in and …

Critical Apple login bug puts macOS High Sierra System at risk

A major bug in Apple’s macOS gives anyone with physical access to a computer running the latest version of the High Sierra 10.13.1 operating system a…

Exim Internet Mailer found vulnerable to RCE and DoS bugs

A security researcher has discovered and publicly disclosed two critical vulnerabilities in the popular Internet mail message transfer agent Exim, on…

Cyber Threat Intelligence conference in Prague

OASIS and FIRST will host a unique conference to help organizations identify and avoid some of the biggest pitfalls in threat intelligence. The confe…

Intel releases patch for firmware vulnerability

Intel has released security recommendation to address vulnerabilities in the firmware of the following Intel products: Management Engine (Intel® ME) …

Security updates for products from Adobe, Microsoft and Mozilla

Adobe, Microsoft and Mozilla issued security patches on their products. In all three cases there are vulnerabilities which could be exploited to take…

Microsoft issued security advisory regarding DDE

As email attachments are a primary method an attacker could use to spread malware, Microsoft issued a security advisory regarding potentially harmfu…

Joomla! Releases Security Update

Joomla! has released version 3.8.2 of its Content Management System (CMS) software to address multiple vulnerabilities. A remote attacker could explo…

Google Releases Security Update for Chrome

Google has released Chrome version 62.0.3202.89 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to…

OpenSSL patches two low and medium severity vulnerabilities

The medium severity vulnerability tracked as CVE-2017-3736 was addressed with the release of OpenSSL 1.1.0g and 1.0.2m. The OpenSSL development te…