2013
May's Microsoft Patch Tuesday Fixes IE Zero-Day
Next week's Patch Tuesday, Microsoft's monthly security update, will feature 10 patches, two of which are critical, including one that permanently fi…
Adobe Warns of New Critical Vulnerability in ColdFusion
The critical vulnerability (CVE-2013-3336) affects ColdFusion 10, 9.0.2, 9.0.1 and 9.0 and earlier versions for Windows, Macintosh and UNIX, Adobe sa…
Microsoft Releases 'Fix It' to Address Recent IE Vulnerability Used in Watering Hole Attacks
Microsoft on Wednesday released a one-click fix it to help protect customers from a recently-disclosed security vulnerability (CVE-2013-1347) affecti…
CZ.NIC Provides Work to the Clients of Fokus Praha
Fokus Praha is trying to help its clients cope with life and find opportunities for self-fulfilment in society. The objective of the cooperation is t…
Be aware of new spam targeting Citibank Clients
This new campaign consists of random e-mails allegedly sent by a Citibank billing department. The electronic messages deliver as attachment an archiv…
Special Training Centre Opens Courses in Brno
The first course on the upcoming internet protocol IPv6 in Brno will take place on 28 May.
Brno, 6 May – The education centre of the maintainer of the…
CERT/CSIRT Teams and their Roles
Last article from new series about internet security is dedicated to CERT/CSIRT teams and analyses their roles in security incidents handling.
Russian Dating Scam Drags Users to Javascript Malware
The Russian girls’ messages are straightforward and efficient, prompting users to respond fast to the bait. The text is followed by a link to a da…
Game Site Secretly Put Bitcoin Software on Players' PCs
One online computer gaming site administrator recently used his players to earn more than $3,600 in Bitcoins without telling them.
Almost All Websites Are Vulnerable to Hackers
If you've ever been hacked, exploited or compromised online, then you already know that the web is not a very safe place. It's also not getting much …
Adobe Reader vulnerability reveals where a PDF is opened
The McAfee security firm found an Adobe Reader vulnerability that reveals where a PDF document is opened.
What are tracking cookies?
Educational video from AVG company, which is dedicated to tracking cookies issues.
Department of Labor Website Hacked to Distribute Malware
The United States' Department of Labor's website has been breached and is serving up malware in drive-by-download attacks, security researchers warne…
Hackers Keep Phishing for Apple IDs
People spend a lot of money on iTunes and Apple's App Store, so it's not surprising that their Apple IDs would prove tempting targets for hackers. …
Attackers Using Overlooked Connected Devices to Launch 'DrDoS' Attacks
Criminals are using network connected devices to launch Distributed Reflection and Amplification Denial of Service (DrDoS) attacks. Leveraging IP-bas…
New Member of the CZ.NIC Association
The companies ACOMWARE s. r. o. and WEBNAMES s. r. o. are new members of the CZ.NIC Association as of 1 May 2013. ACOMWARE s. r. o. and WEBNAMES s. r…
A Series of Articles about internet security
Started today, there will be published new series of articles on the Root.cz websites. This series will point at internet security. First article is …
IT 13 Conference: Especially for 3D Printer Enthusiasts
Once again, experts will primarily focus on themes associated with IPv6 and security. Josef Průša, pioneer of open hardware for 3D printing in the Cz…
Cisco Highlights Possible Exploit Vector Used in DarkLeech Web Server Attacks
Attackers are exploiting a vulnerability in a popular website configuration tool (Horde/IMP Plesk) to gain remote access to web servers, said Cisco r…
Critical bug in Viber aplication threatening smartphones
Extremely dangerous vulnerability affects the mobile application of this communication platform on the Andriod operating system.
Java: Attackers exploit recently repaired vulnerabilities
Through the recently repaired vulnerability has been infected a large number of computers.
108,000+ account details of Sims players leaked
NewSeaSims, a website where Sims players can download custom content for their characters, has suffered a breach which resulted in the compromise of …
Beware of fake SourceForge site offering malicious downloads
Cyber crooks have been misusing the reputation of the popular online source code repository SourceForge (sourceforge.net) and have been pushing out m…
Wide-scale attack against WordPress blogs reported
Security firms have been tracking an escalating number of "brute force" attacks against WordPress installations, which have been trying out logins su…
90 Percent of Game Hacks Infected with Malware, AVG Warns
Nearly 90 percent of unauthorized software for popular computer games are infected with malware. The list includes unpirated "cracked" games, license…
MMS - Reply Vodafone (20130410)
E-mail is send with forged sender address reply@vodafone.xx, where xx is national domain, probably identical with national domain of recipient. Forge…
How to catching malware
In our today blogpost on blog site of CZ.NIC association we deal with our experience with one link, which is spreading via skype.
Czech National Domain Among the Fastest Growing in the EU
In 2012 the Czech national domain .CZ had nearly 21,000 new registrations per month and surpassed the one million domain mark overall (ccTLD). Also t…
Serious Vulnerabilities Found in Popular Home Wireless Routers
Hackers love to attack Java. Why? Well, not only because it is full of holes, but because it’s everywhere, embedded on endpoints, Web browsers, mobil…
New statistics
Today CZ.NIC Association has released a new statistics which can be found at https://stats.nic.cz/. New statistics monitor information divided into c…
Soaring of Bitcoin value continues to attract cybercrime
The most attentive readers and those who are interested in the main trends of virtual currency will surely have noticed the soaring of prices of Bitc…
Patch time for PostgreSQL
The maintainers of the PostgreSQL database have released an urgent patch to cope with a vulnerability that allows remote users to crash servers.
Thousands of compromised Apache servers direct users to malware
The malware infects Linux servers running Apache 2.2.2 and above. The malware injects iFrames into the sites hosted on that compromised box. These si…
DHS, FBI warn over TDoS attacks on emergency centers
Federal law enforcement officials are reporting a rise in attacks in which the telephone lines of emergency call centers were flooded with bogus call…
Facebook chat spreading the Dorifel malware
Your Photos? LOL - if you see this message with a link, don't click it as it will install the Dorifel virus. It looks like that the persons behind Do…
CSIRT.CZ warns Czech users: watch out for spam claiming your pictures have been misused
Another wave of spam messages trying to get users to click on an attached link has appeared. The text of the spam is similar to this: “Hi, s…
Pay attention and dont tell your PIN
Last some days some czech bank find out on their ATMs stickers which encourage users to say their PIN aloud instead to put them via keyboard.
The trick behind camouflaged links
By using JavaScript, links can be modified in such a way that even the most attentive user will not notice anything amiss. This can be exploited by a…
VSkimmer Botnet Targets Credit Card Payment Terminals
The malware, vSkimmer, can detect the card readers, grab all the information from the Windows machines attached to these readers, and send that data …
Fake ‘CNN Breaking News Alerts’ themed emails lead to Black Hole Exploit Kit
Cybercriminals are currently mass mailing tens of thousands malicious ‘CNN Breaking News’ themed emails, in an attempt to trick users into clicking o…
Hacking Java Applications using JavaSnoop
Let us see the various approaches currently available for testing of Java based thick client applications and their respective drawbacks.
High-End Digital Cameras can Forward Pictures to Attackers
High-end DSLR cameras come with a multitude of features for sharing pictures, but do they really reveal the contents only to their owners? According …
Gaming platforms as vector of cyber attack
The Origin platform allows malicious users to exploit local vulnerabilities or features, by abusing the Origin URI handling mechanism. In other words…
Huawei USB modems vulnerable
Huawei has been accused of poor security practice by Russian researcher Nikita Tarakanov, who told Black Hat Europe last week that the vendor's 3G an…
CZ.NIC Releases the First Stable Version of Datovka for Android
Datovka for Android is one of the CZ.NIC Labs projects for communicating with egovernment mailboxes.
Prague, 18 March 2013 – The research and developm…
Recap of the (D)DOS Attacks of 4-7 March
This document provides insight into the period between 4 and 7 March, which saw a series of (D)DOS attacks launched against www services operated in…
The CZ.NIC Association is Ready for Potential Attacks
Thanks to the robustness of the entire system the CZ.NIC Association is using, it is unlikely that its operation could be interrupted in the event of…
Czech news servers are under DDOS attack
From today morning greatest czech news servers are under attack, which have knocked out their websites.
Web page fills up hard disk
Developer Feross Aboukhadijeh has published a simple technique that allows a web page to fill up a hard disk without any action on the user's part. I…
New Member of the CZ.NIC Association
The company ComSource s. r. o. is a new member of the CZ.NIC Association as of 1 March 2013. ComSource company become a member of the Chamber of Doma…