News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2016

Google Patches 10 Vulnerabilities in Chrome 52

Google announced new update of Google Chrome 52. This update fixing 10 security issues, will be available to the public in next few days.

Critical Flaws Found in CISCO Small Business Routers

CISCO announced critical flaws in their products: RV110W, RV130W and RV215W routers include a default account that can be leveraged by an attacker to…

Google to deploy HSTS on their server

Google deployed HSTS to further improve security of their services. For full info see original announce by Google Inc.

SMS-based 2-factor authentication secure no more.

The hackernews published an article about new NIST standard, declaring SMS- baset 2-factor authentication not to be secure any more. The insecurity …

PowerWare - Locky's silly brother-in-law

Palo Alto's researchers have created a decrypter for the variant of the PoshCoder ransomware that imitates the Locky ransomware. Dubbed PowerWare …

Bart ransomware decryptor available

AVG releases free decryptor for data encrypted by rensomware Bart. All you need is both encrypted and unencrypted version of the same file. So if you…

Chrome 52 Patches 48 Vulnerabilities

Google on Wednesday released Chrome 52 in the stable channel and revealed that no less than 48 security vulnerabilities were resolved in the popular …

Persistent XSS Patched in WooCommerce WordPress Plugin

An update released this week by the developers of WooCommerce, the popular ecommerce plugin for WordPress, patches a flaw that could allow attackers …

Hacking Apple devices with just a Message exploiting the CVE-2016-4631

This critical flaw CVE-2016-4631 resides in the ImageIO and could be exploited by a remote attacker to steal sensitive information from Apple devices…

OpenSSH affected by a user enumeration bug

By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in most modern configuration due to t…

Millions of Xiaomi Smartphone vulnerable to remote hacking

Millions of Xiaomi smartphone are affected by a critical remote code execution flaw that could be exploited by hackers to take over the mobile device…

3 Popular Drupal Modules Found Vulnerable — Patch Released

Just yesterday, I wrote a warning article announcing that Drupal – the popular open source content management system – will release patches for sever…

CVE-2016-3238 Windows flaw allows to hack companies via printers

Experts consider the CVE-2016-3238 flaw the most dangerous vulnerability of the year because it is really easy to execute and have a significant impa…

Downloading Pokémon GO Game for Android? Beware! It Could be Malicious...

Security researchers have warned users that many of these online tutorials are linked to malicious versions of the Pokémon Go app that install a back…

Persistent XSS in All in One SEO Pack WordPress Plugin

A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin (1+ million active…

Hacker breached an Amazon server containing 80,000 login credentials

The hacker behind the Twitter account 0x2Taylor is claiming to have breached one of the Amazon servers containing 80,000 login credentials of Kindle …

Apache Update: TLS Certificate Authentication Bypass with HTTP/2 (CVE-2016-4979)

Apache released an important update today to fix a vulnerability that affects servers that have http/2 enabled and use TLS client certificates for au…

Critical vulnerabilities open Symantec customers to remote hack

Symantec has fixed dozens of critical vulnerabilities affecting its solutions that can be exploited by remote attackers for arbitrary code execution.

Facebook ‘Comment Tagging Malware’ Spreading via Google Chrome

Currently, a malware scam is infecting Facebook users in which they receive a notification in the app and/or in their email about a friend tagging in…

Google makes 2-Factor Authentication a lot Easier and Faster

Two-factor authentication or 2-step verification is an effective way to secure online accounts, but many users avoid enabling the feature just to sav…

WordPress 4.5.3 fixed several security vulnerabilities

WordPress has recently issued the version 4.5.3 that patches more than two dozen vulnerabilities, including 17 bugs introduced in the last three rele…

New Android malware Godless

A recently observed piece of mobile malware that leverages multiple rooting exploits targets nearly 90 percent of Android devices

A recently observed …

Cisco wireless kits are affected by a critical bug but no fix is available

A security advisory recently released by CISCO announce that three Cisco wireless kits are affected by a critical bug, but no fix is available at the…

Drupal Security Updates Patch Two Vulnerabilities

Security updates released on Wednesday for Drupal 7 and Drupal 8 patch a couple of access bypass and privilege escalation vulnerabilities.

Android Ransomware now targets your Smart TV, Too!

Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device?

If your answer is yes, then you need to know the latest inte…

How to recover files encrypted by all Teslacrypt Ransomware variants

Experts from Cisco Talos team have improved their decryptor tool to allow the recovery of files encrypted by all the Teslacrypt Ransomware variants.

Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload

An independent Vulnerability Laboratory Researcher discovered a arbitrary file upload vulnerability in the Wordpress Levo-Slideshow v2.3 plugin.

Google fixes severe security holes in Chrome browser update

Google has issued fixes for 15 severe vulnerabilities in the Chrome browser. The update, Chrome 51.0.2704.79, is for Windows, Mac and Linux systems, …

Over 10,000 WordPress sites vulnerable to exploit

Security researchers have warned that over 10,000 websites powered by the WordPress content management system (CMS) are at risk of exploit due to a p…

Tor Browser 6.0 is out with significant privacy and security improvements

The Tor Project released the Tor Browser 6.0, the last version of the popular Tor browser that brings along significant privacy and security improvem…

NTP Servers Exposed to Long-Distance Wireless Attacks

Researchers have demonstrated that remote attackers can wirelessly change the time on network time protocol (NTP) servers over long distances using i…

PayPal Users Hit with ”Account Limitation” Phishing Scam

Fresh Wave of Phish Campaign Reaches PayPal—Scammer Lure Users with “How to restore your account” Email.

Teslacrypt decryption tool allows victims to restore their files

A security researcher from ESET security firm issue a Teslacrypt decryption tool after the author closed the project and released a free master key.

Adobe Patches Flash Zero-Day Exploited in the Wild

Adobe has updated Flash Player for Windows, Mac and Linux to address a total of 25 vulnerabilities, including a zero-day that has been exploited in t…

Wi-Fi Flaw Exposes Android Devices to Attacks

A serious vulnerability affecting a Wi-Fi technology used in the Android operating system and many other products allows malicious actors to escalate…

Adobe Flash Zero-Day Under Attack

A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory …

Android Trojan Steals Credit Card Info, Locks Devices Remotely

A new Android banking Trojan capable of spying on users and stealing credit card info is achieving persistency on infected devices by asking for devi…

272 Million Email Credentials Discovered in Cybercrime Forum

Researchers discovered 'a young Russian hacker' bragging in an online forum that he had acquired and was ready to give away 1.17 billion stolen crede…

Attackers Exploit Critical ImageMagick Vulnerability

Researchers have discovered several vulnerabilities in the popular image processing suite ImageMagick, including a serious remote code execution flaw…

Ransomware enters companies through RDP servers

Attackers wielding ransomware are targeting enterprises through an often-found hole in the corporate network: Internet facing, poorly secured remote …

OpenSSL Project plans to patch soon High Severity Vulnerabilities

The OpenSSL Project yesterday announced that it plans to release will release on May 3 security patches for several vulnerabilities affecting the pop…

Cyber crooks find a new and ingenious way to make hundreds of thousands of dollars with no effort

An unknown cyber gang, pretending to be Armada Collective, has made more than $100,000 in less than two months simply by threatening to launch DDoS a…

US-CERT to Windows Users: Dump Apple Quicktime

Microsoft Windows users who still have Apple Quicktime installed should ditch the program now that Apple has stopped shipping security updates for it…

Warning! CCTV Cameras Sold on Amazon Come with Pre-Installed Malware

Be careful while buying any off-brand electronics from Amazon, as they could end up infecting you.

Recently, independent security researcher Mike Ols…

Microsoft, Samba Patch "Badlock" Vulnerability

Updates released by Microsoft and Samba on Tuesday patch the vulnerability dubbed “Badlock,” although it turns out that the issue is not as severe as…

Experts crack Petya ransomware, enable hard drive decryption for free

Security experts have devised a method that allows users to recover data from computers infected with the Petya ransomware program without paying mon…

XSS RCE/RCI in NETGEAR SOHO routers

server firmware.re has published vulnerability of Netgear SOHO network devices enabling takeover of full controo of device. It can be done by exploit…

New way of office macro-based malware protection

Server The Hacker News published new way to protect users from MS Office macro-based malware. You can set MS office to be able run macros only from …

Ransomware attack prevention tool from Bitdefender

Bitdefender Anti-Ransomware will prevent inbfection with known variants of Locky, CTB-Locker a Teslacrypt. Find source article here.

Google issued a new security update to fix flaws in Chrome 49

Google has issued a new security update for its Chrome 49 that patches a number of flaws, most of them discovered by external researchers.