2014
DNS amplification botnet available in the underground
Security expert Dancho Danchev profiled a recently released DNS amplification DDoS service available for sale in the underground.
The marketing approach of cybercrime to phishing emails
Mark Sparshott, director at Proofpoint, explained that cybercrime manages phishing emails using techniques similar to those used by the marketing ind…
Microsoft Closes Critical IE Security Vulnerabilities in Patch Tuesday Update
The bad news - attackers have continued to leverage a highly-publicized Internet Explorer vulnerability. The good news is however that vulnerability …
Facebook 'Watch naked video of friends' malware scam infects 2 million people
Hackers spam Facebook timeline with a friend's picture and "See (Friend)'s naked video," or "(Friend Name's) Private Video."
SNAKE – The last cyber espionage campaign on a large scale
BAE Systems Applied Intelligence has disclosed a Russian cyber espionage campaign codenamed as SNAKE that targeted Governments and Military Networks.
HTTPS Makes Data Vulnerable to Prying Eyes
HTTPS secured websites are vulnerable to traffic analysis that can expose legal, financial and even health information, a recent security shows.
Uroburos Rootkit: Most sophisticated 3-year-old Russian Cyber Espionage Campaign
Recently, The security researchers have unearthed a very complex and sophisticated piece of malware that was designed to steal confidential data and …
GnuTLS flaw in certificate verification exposes Linux world to attacks
A serious flaw in the certificate verification process of GnuTLS exposes Linux distros, apps to attack. Another flaw exploitable for surveillance pur…
Apps on Google Play Send User Info to Remote Servers in Plain Text
New suspicious apps, including a third party market and a chat platform, collect data from smart devices and send it to remote servers in plain text.…
Widespread Attack Campaign Highlights Router Security Woes
Researchers at Team Cymru have detailed a massive compromise of small office/home office (SOHO) routers throughout Europe and Asia and shined a light…
Gameover Trojan Uses Rootkit to Block Removal
According to research from Sophos, a new variant of the malware has been armed with a kernel-level rootkit that stops users from killing the Gameover…
Android Application Security Testing Guide: Part 1
Android is a Linux kernel mobile platform that has been popular throughout its existence on a huge variety of devices, especially mobile smartphones.…
Manual Web Application Penetration Testing: Introduction
In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any auto…
Released a Metasploit module to hack 70% Android devices
Rapid 7 has released the “exploit/android/browser/webview_addjavascriptinterface” module which allows attackers to remotely access on most Android de…
New Apple vulnerability allows Malicious keylogger App to Record User Inputs
Yet another Apple vulnerability has been exposed by security researchers, that can be exploited to track your finger's every action on iOS Devices i.…
New Dating Scam Promises Perfect Matches on eHarmony
A new dating scam pretends to help users review their matches for free on eHarmony.com in a fraudulent campaign that piggybacks on the eHarmony name …
YouTube ads network serving Caphaw Banking Trojan
YouTube users were targeted by a classic drive-by download attack by exploiting client Java software vulnerabilities and serving Caphaw Banking Troja…
Cisco UCS Director Vulnerability and Update
Cisco released a patch for a vulnerability in their Unified Communication Director system, a management system for Cisco UCS and Nexus solutions. Th…
Adobe releases another Emergency Security Patch for Flash Player
All versions of Adobe Flash Player released before today's patch are vulnerable to the zero-day exploit and the patch addresses a critical vulnerabil…
Apple Fixes Dangerous SSL Authentication Flaw in iOS
The 35.4 MB update on an iPhone 5S, released by Apple on Friday, brings the latest version to iOS 7.0.6 and provides an SSL connection verification f…
Skype Forensics
Skype is an application that enables voice and video calls, instant messaging, file transfers, and screen sharing between users. Millions of people d…
Asus router users still vulnerale to remote hacking
Asus routers are still vulnerable to remote hacking after months of the disclosure of the flaw that allows hackers to access to the device-connected …
The CZ.NIC Academy offers courses on the practical use of the Internet
The education center operated by Czech national domain administrator is opening 12 new courses designed for users with minimal experience, for exampl…
MOON, the strange worm spreading on Linksys routers
Researchers at the SANS Institute discovered a new self-replicating worm that is infecting different Linksys home and small business routers. The ana…
More on HNAP - What is it, How to Use it, How to Find it
We've had a ton of discussion on the most recent set of home router vulnerabilities based on the HNAP protocol. But what is the HNAP protocol for, an…
300000 Android Devices infected by Premium SMS-Sending Malware
Downloading various apps blindly from Google play store may bring you at risk in terms of money. PandaLabs, the Cloud Security Company, has ident…
Criminals Control, Cash Out Bank's ATM Machines
New, sophisticated ATM heist used a malware-laden USB stick to hijack the machine -- one arrest is made.
TESCO thousands shopping account credentials leaked online
Thousands of Tesco.com shopping accounts were suspended after hackers have leaked users details including credentials and Tesco Clubcard vouchers.
Hackers Steal User Data From Kickstarter
Kickstarter, a web site that serves as a funding platform for creative projects, said on Saturday that malicious hackers gained unauthorized access t…
Apple Publishes Secure Coding Guide for Developers
Apple has published a new guide designed to help developers of Mac OS and iOS applications build more secure programs by design.
The CZ.NIC association has joined the pilot phase of the AMDoS project.
The project is aimed at finding solutions to yet unsolved problems related to phishing websites. This project will involve the end users.
The associat…
Update Adobe Shockwave Player to fix Critical Remote Code Execution Vulnerabilities
Adobe has released a security update to address critical vulnerabilities for Adobe Shockwave Player 12.0.7.148 and earlier versions of the Windows an…
TSA Carry-On Baggage Scanners Easy To Hack
A widely deployed carry-on baggage X-ray scanner used in most airports could easily be manipulated by a malicious TSA insider or an outside attacker …
Largest Ever 400Gbps Distributed Denial of Service NTP Amplification attack hit Cloudfare
Largest Ever 400Gbps Distributed Denial of Service NTP Amplification attack hits Europe servers of anti-DDoS protection firm Cloudfare.
Mobile Valentine Apps Send Love, Take Sensitive Data
Using an Android app to express your love for someone this Valentine’s Day may just earn you a slap instead of eternal gratitude. And not just becaus…
NIST Releases Cyber Security Framework for Critical Industries
The National Institute of Standards and Technology (NIST) issued today the final version of a set of cybersecurity guidelines meant to help critical …
Millions computers running Computrace agent can be remotely hijacked
Experts at Kaspersky confirm hidden threat in BIOSes of Popular Laptops and warns that Absolute Computrace Anti-Theft agent can be remotely hijacked.
Fake SSL certificates deployed across the internet
Netcraft has found dozens of fake SSL certificates impersonating banks, ecommerce sites, ISPs and social networks. Some of these certificates may be …
Hackers exploiting Router vulnerabilities to hack Bank accounts through DNS Hijacking
In past months, we have reported about critical vulnerabilities in many wireless Routers including Netgear, Linksys,TP-LINK, Cisco, ASUS, TENDA and m…
New iFrame Injections Leverage PNG Image Metadata
Today however we found an interesting type of iFrame injection. The uniqueness is not in the use of an iFrame tag to embed the content, but rather in…
Snapchat app vulnerable to denial-of-service attack, allows remotely crash iPhone
Jamie Sanchez, a security researcher has found the app vulnerable, which can enable a hacker to launch a denial-of-service attacks, resulting prompt …
Hacking a Car remotely with $20 iPhone sized Device
Two Security researchers - Javier Vazquez-Vidal and Alberto Garcia Illera have developed a homemade gadget called 'CAN Hacking Tools (CHT)', made up …
Adobe Issues Emergency Flash Update
Adobe released a new security patch addressing a critical zero-day vulnerability in its Flash Player plugin that could help cyber-attackers hijack a …
The CZ.NIC Association joins the Secure VLAN project
Today the Czech Internet exchange point NIX.CZ introduced the founding members of the Secure VLAN project, the goal of which is to improve preparatio…
Microsoft's Process Explorer added VirusTotal Multi-Antivirus Scanner support
Windows Sysinternal Suite has released the latest version of Process Explorer v16.0 that has an awesome feature which allows a user to scan any runni…
Chainfire's Pry-Fi Android App released to defend against NSA Spying under Public Wi-Fi
It was revealed that the agencies are tracking all the travelers who passed through the airport terminal, and could be tracked throughout the country…
Android app that notifies you whenever GPS enabled apps access your location
A team of Researchers at Rutgers University has developed an Android application which will notify you every time, whenever an app installed on your …
Facebook’s Latest Reading List Includes Your Text and Multimedia Messages
The security researcher told users they should either stick with the old version, get rid of Facebook on Android or accept that the social network ha…
Critical vulnerabilities in Oracle servers in the wild
Two serious vulnerabilities affect Oracle’s older database packages, allowing an attacker to remotely access a server bypassing authentication mechan…