News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2012

Kaspersy Labs asking for public assistance

Kaspersky Lab appealed for help from top-notch cryptographers to help it break the encryption of a still-mysterious warhead delivered by the Gauss cy…

Why dont forget batch of patches from yesterday

Yesterday was published new batch of patches from Microsoft and Adobe companies. Many of them was marked as critical patch. More information are also…

Reveton, malware which is targeted on European users

Inside view of the malware gang which is responsible for online blackmailing.

New algorithm tracks down the origins of internet attacks

Swiss researcher Pedro Pinto and his colleagues at École Polytechnique Fédérale de Lausanne suggest using the Sparse Interference algorithm to make t…

Malware Gauss found by Pallidi Norrow font

The Gauss malware installs a custom font called Palida Narrow. While it's not clear why this happens, security researchers are already proposing diff…

BotoPedia, emerging web-catalog of botnets

BotoPedia, a registry of Web bots, could help companies keep their sites open to good crawlers but closed to attackers and site scrapers.

FinFisher spyware found running on computers all over the world

The author claims that the one C&C Server is also in Czech Republic Corporate IT should monitor systems for signs of communication with command an…

How to crack SSL on Android

With the new version of Burp Proxy is not a problem.

Zitmo (mobile version of Zeus) is heading to BlackBerry

Researchers have found several samples of a new version of the mobile version of the Zeus malware, with these newest ones targeting the BlackBerry pl…

Ransomware is focusing on Europe

Rather than encrypt the entire hard drive, criminals are using fairly unsophisticated ransomware to lock a victim's PC and then demand cash for the k…

Nvidia Unix driver 304.32 have a high-risk vulnerability

Graphics chip maker Nvidia released a new version of its Unix driver on Friday in order to address a high-risk vulnerability that can be exploited by…

Phishing for Payroll with unpatched Java

Check your version of Java, because you could be another victim. The biggest problem is in path Java JRE. CVE2012-1723.

Hello Microsoft speaking

New wave of fake phone calls from Microsoft technical support.

What is the TDoS

The explanation of this word and more information about this attack, can be found in the article. DDoS attacks aimed at telecom systems are on the ri…

Microsoft warns of critical Oracle code bugs in Exchange

Microsoft last week warned IT administrators that critical vulnerabilities in code licensed from Oracle could give attackers access to Exchange Serve…

How the script kiddies attacks and how to detect it

This is the name of new article on our blog, which prepared for you a colleague Jirka Machálek

Hackers reveal critical vulnerabilities in Huawei routers at Defcon

Security researchers disclosed critical vulnerabilities in routers from Chinese networking and telecommunications equipment manufacturer Huawei at th…

Fraudsters tempt Olympic fans with bogus streaming websites

The Olympic Games in London have sparked interest from fraudsters, with a raft of sites supposedly offering live video streams of events.

Add-on for Internet Explorer Protects Users from Fraudulent Websites

CZ.NIC Association n cooperation with the Czech representative of Microsoft, have launched the DNSSEC Validator, a new security add-on for Internet E…

New malware use Facebook and trade on from children charity

Be aware of new kind of cheats on Facebook. This time is even in more languages.

Siemens fixed vulnerabilities which abused the Stuxnet computer worm

German conglomerate Siemens on Monday said it has fixed vulnerabilities in its software products that appeared to be identical to those that allowed …

Česká spořitelna warns their clients

Česká spořitelna preventive warns their clients on phishing e-mails.

How to Prevent Social Engineering Attacks

True words, which every employee should realize. "Every employee no matter what their function is – they also have the duties of protecting the compa…

DDoS Attacks: What They Are, and How to Defend Against Them

Short summary of information about DDOS attacks and some ways for defending them.

Serious remote vulnerability in DNS server NSD 3

Our colleagues from CZ.NIC Labs team found serious remote vulnerability which makes the way for remote knock down of NSD 3 server. There is also atta…

Attacks via iframe

Attacks via iframe, its uncovering and recovery after attack. Thats a topic of today's blogpost on our blog sites. As bonus you can win t-shirt with …

The web browser built into Amazon's Kindle Touch contains a serious security hole

The web browser built into Amazon's Kindle Touch eBook reader contains a serious security hole: when a user navigates to a specially crafted web page…

DNSenum - tool for DNS information gathering

Information about tool for DNS information gathering. This tool can be useful in the information gathering stage of a penetration testing.

Microsoft advises disabling Windows Gadgets amid vulnerability fears

Microsoft is advising system administrators to disable the Windows Sidebar and Gadgets in supported versions of its desktop operating system due to s…

How to have unique passwords for each website and yet remember them easily?

One of possible ways how to solve issue of unique access passwords on the web services.

Microsoft revokes trust almost in 30 of its own certificates

Microsoft Security Advisory 2728973 announces that Microsoft is revoking trust in in a number of Microsoft certificates. A list of 28 Microsoft inter…

Last point in DNSChanger virus issue

Our collegue Michal Prokop inform on our blog site how users uses our diagnostic site www.dns-ok.cz.

To be or not to be on Internet, this is what is going on

Mr. Johannes B. Ullrich, Ph.D. from SANS Technology Institute published a news that points to the possibility of disconnection from the Internet, tha…

Beware of new application Find and Call

There was found another application which try to steal data from the mobile devices. The application is called ‘Find and Call’ and can be found in th…

A new security threat in Android 4

A research team at North Carolina State University led by Professor Xuxian Jiang recently announced that a security flaw in Android Version 4.0.4 and…

CSIRT.CZ Warns Against a High-Risk Configuration of RouterOS

In a recent incident in which we witnessed several DNS amplification attacks, we have been informed that some of the DNS servers involved were runnin…

CZ.NIC and the Czech Ministry of Industry and Trade sign Memorandum of Understanding

This step highlighted the importance of the Internet and domain name management (DNS) for the state economy.

During the international meeting of ICANN…

Smart TVs are vulnerable to attacks

This article brings information about vulneralibities of smart TVs.

10 vulnerable web applications you can play with

In this article at pentestlab.org are ten web applications, which are given for vulnerabilities testing purpose.

Phishing is not just for banks

In this article at blogs.technet.com are interesting examples of phishing websites.

In this article at blogs.technet.com are interesting examples of p…

The leaders of the Internet community will meet in Prague next week

From 24 to 29 June, Prague will host an international meeting of ICANN (Internet Corporation for Assigned Names and Numbers), the world’s top authori…

Beware of fake antivirus program Android Security Suite Premium

As is recommended by author of this article at blog.webroot.com site, when you downloading Android apps choose them wisely and download from a truste…

MySQL liner hack gives root access without password

The latest news that has hit the streets is the occurence of the easiest hack ever, if you have local shell access (any user privelege level) and you…

Hackers spread trojan following Internet Explorer patch

If you have not installed new updates from Microsoft yet, it is time to do it. More information about the trojan Naidu find in this article at scmaga…

Czech Cities and Municipalities Lagging Behind in Implementation of IPv6 Protocol

Only 15 of the 205 major cities and municipalities (with extended competence) – or just 7.3% – have IPv6-ready web services.

Prague, 5 June 2012 – Mos…

CZ.NIC Association, EURid, and NIX.CZ Support World IPv6 Day with Professional Conference

This meeting will take place at the National Technical Library in Dejvice, Prague with the active participation of representatives of operators, the …

New members of the CZ.NIC Association

The companies Gransy s. r. o. (Chamber of Registrars) and Seznam.cz, a. s. (Chamber of Domain Name Holders) are new members of the CZ.NIC Association…

Czech Republic a Superpower in the Transition to IPv6

The Czech Republic is the leader in the implementation of IPv6. The Czech Republic, with 8.6 % of websites available over IPv6, is followed by Sloven…

Ondřej Filip Re-Elected Member of UN Secretary General’s Advisory Body

For many years, the Multistakeholder Advisory Group (MAG) has been the UN Secretary General’s advisory body for the Internet Governance Forum which w…

CZ.NIC released DNSSEC Validator for Internet Explorer (version 0.1.1)

CZ.NIC has released an alpha version of the DNSSEC Validator extension for Internet Explorer. The most important change in this version is the abilit…