News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2012

Today was notified the new critical Java flaw

This bug affects not only all latest versions of Oracle Java SE.

CZ.NIC Unveils a New Logo and .CZ Brand

This was the first step in a gradual transformation of the visual identity of the entire Association that will take place over the coming months.

Prag…

Malware programmers start using Go

Google's Go programming language has a growing number of users and, according to a report from Symantec, that number now includes some malware writer…

Today will be release a cumulative update for Internet Explorer

On September 21 will be released a cumulative update for Internet Explorer through Windows Update. We recommend install this update immediately.

Next part of series for webserver administrators

In this tutorial you will see the principles on how to secure your phpMyAdmin. PHP has a lot of badly coded scripts which can be abused by malicious …

ICS-CERT Warns of Hard Coded Password in ORing Industrial Control Systems

Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access, a…

Microsoft Offers Guidance for Internet Explorer Zero-Day

In response to reports of a Zero-Day vulnerability targeting all versions of Internet Explorer, with the single exception of Internet Explorer 10, Mi…

Be aware of LinkedIn-themed spam

Spoofed LinkedIn emails notifying recipients of messages requiring their attention are not a new occurrence, but recently rent out ones seem to be mo…

Manipulated data causes BIND DNS servers to crash

Some versions of BIND contains a security vulnerability that allows attackers to crash it using specially crafted data records.

Permanent cybersecurity team established for EU institutions

European institutions on Wednesday beefed up cybersecurity efforts by establishing a permanent Computer Emergency Response Team (CERT-EU). CERT-EU…

Everything You Always Wanted to Know About Passwords * But Were Afraid to Ask

First part of series about authentication deal with a world of passwords. In article you can read why avoiding trivial passwords is good idea and how…

Botnet which uses Tor for masking

This novel approach brings all sorts of advantages for zombie PC herders, as G-Data explains.

Windows 8 users are vulnerable because of active exploits for Flash

Microsoft's Windows 8 is vulnerable to attack by exploits that hackers have been aiming at PCs for several weeks, Adobe confirmed Friday.

Facebook Contends With 2 Security Threats

Hackers took advantage of a security flaw to make it appear as if spam was being sent from users’ friends while other online malcontents fooled 90,00…

Czech BIRD software the most popular route server

The EURO-IX report indicates that the Czech software BIRD is the clear favourite among the Internet Exchange Points in this association.

Prague, 3 Sep…

New Attack Uses SSL/TLS Information Leak to Hijack HTTPS Sessions

The researchers plan to present their findings at the Ekoparty conference in Argentina later this month and are not revealing exactly which feature o…

2012 Norton Cybercrime report, a worrying scenario

This article brings summary of information from Norton Cybercrime report 2012.

Be aware of fraudulent alert contains a trojan

Unknown attackers are attempting to persuade email recipients to open attachments that contain a trojan by claiming to be from The Google Accounts Te…

Video from hidden cameras that skimmer thieves placed at ATMs

It is terrifying, how many people still don't use basic security recommendation, as for example covering keyboard while entering their 4-digit code. …

FireEye Advanced Threat Report

The security firm FireEye has released an interesting report named “Advanced Threat Report” related first half of 2012 that provides an overview of…

Firefox, Opera allow crooks to hide an entire phish site in a link

The malicious web pages can be stored in data URIs - uniform resource identifiers, not to be confused with URLs - which stuff the web code into a han…

New Ransom malware infecting computers

Ransomware typically propagates like a typical computer worm, entering a system through, for example, a downloaded file or a vulnerability in a netwo…

The top Internet dangers for kids

As the Internet plays an increasingly prominent role in children’s lives, parents are getting increasingly worried about the ease with which undesira…

New RFC published by WG co-chaired by Ondřej Surý of CZ.NIC

The current RFC (Request for Comments) number 6698 concerns a new technology that enables the verification of certification authorities on the basis …

Critical flaw found in just-patched Java

Security Explorations - the Polish security startup that discovered the Java SE 7 vulnerabilities, which was target of recent web-based exploits, has…

AV-killing worm spreads via Facebook chat and IM clients

A rather industrious piece of malware that - among other things - paves the way for other malware by disabling AV solutions and software update modul…

Oracle's emergency Java patch blocks zero-day exploits

Oracle today issued an emergency update to patch the critical vulnerabilities hackers have been using in increasing numbers to hijack Windows PCs. Yo…

It is time to shutdown Java in browser up to corrected version release

The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and Metasploi…

Cybercriminals impersonate popular security vendors

According to Websense, the campaign is low-volume, and is currently impersonating Symantec, F-Secure, Verisign and Sophos. The malicious payload (…

Use of popular toolbar can be risky too

Also a very popular and well-known toolbar can be a risk for security. About our experience with toolbar from Alexa you can read in actual blogpost f…

ICANN appoints Czech representative to its prestigious security committee

During his three-year term Ondřej Filip will be in charge of specific tasks related to the reliability and integrity of the root name system, analysi…

Educational video about Internet risks

Nice educational video about viruses, malware, phishing and other risks.

10 Tips for Protecting Mobile Users

Mobile employees, devices and data need protecting. Here are 10 tips to make it happen.

Enisa published report about existing and planned legislation in computer security

Report "Cyber Incident Reporting in the EU" mentioned besides other things also the role of national CSIRT teams in the course of incident handling.

NIST Issues Guidance on Certificate-Based Breaches

NIST's new "Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance" guidelines bulletin, which my com…

New Java Exploit

According to FireEye researcher Atif Mushtaq, the latest version of Java is vulnerable, and presumably earlier versions are as well.

Secure PHP Configuration

Repetition is the mother of wisdom. Several advices for secure PHP configuration.

Contemplation about malware Crisis

Resuming we have a malware that is able to infect four different environments such as Mac, Windows, virtual machines, and Windows Mobile and that rep…

New malware targeting BlackBerry Users

Those users who are targeted receive an email with the subject line “Your BlackBerry ID has been created.” The email encourages users to follow instr…

FBI warns of new internet virus holding computers hostage

The Federal Bureau of Investigation is warning computer users of a new virus that can attack computers when they visit an infected website. Unlike tr…

Crisis malware infects VMware virtual machines

Crisis is a computer Trojan program that targets Mac OS and Windows users. The malware was discovered by antivirus vendor Intego on July 24 and can r…

Microsoft warns of 'man-in-the-middle' VPN password hack

Microsoft yesterday warned Windows users of possible "man-in-the-middle" attacks able to steal passwords for some wireless networks and VPNs, or virt…

New Linux Distro for security analyst

A new GNU/Linux distribution or distro designed for helping you in every aspect of your mobile forensics, mobile malware analysis, reverse engineerin…

McAfee has a new Mobile Security software for Android

McAfee is expanding its mobile security software for Android tablets and smartphones, as it sees an increase in threats targeting Android devices, th…

Serious security flaw: iPhone bug allows SMS spoofing

It is a security bug which is present on all iPhones. Without your knowing sends SMS messages and also allows attackers to access your personal infor…

New spear-phishing attack targets energy sector

A new spear-phishing attack targeting a number of specific companies in a few industries including the energy sector has been spotted by several secu…

How to Spot Fake Antivirus Software

What a fake anti-virus looks like, and what to do if you have it installed in your PC, described us Raul R. Alvarez in his article.

Dark site of the internet

Dark site of the internet. Thats a topic of today's blogpost on our blog sites. You can read how and where criminal activity are going on.

Are you using Adobe Reader, consider change

Security analytics from Google points at the fact that Adobe still waiting with patching 46 reported bugs, and suggest change to other PDF viewer.

What Microsoft did for better security in Windows 8

Windows 8 is getting mixed reviews but there’s no doubt that Microsoft has taken significant steps to improve security. Patrick Lambert describes the…