2014
Hackers Hit Yahoo Mail
Yahoo has issued a warning of an attack targeting users of its email service, and is initiating password resets for potentially affected accounts.
Mozilla Thunderbird vulnerability allows hackers to Insert malicious code into Emails
Do you use Thunderbird, a free; open-source; cross-platform application for managing email and news feeds? According to a Pakistani Security Research…
Buggy Webcams, IP Cameras and Baby Monitors Reveal Too Much to Anyone
Some models of webcams, IP surveillance cameras and baby monitors from Chinese manufacturer Foscam have vulnerable firmware that permits anyone with …
Fully Functional FileZilla Client Capturing FTP Login Details
Researchers from AVAST are warning users to beware of modified and malicious versions of the popular open source FileZilla FTP client that captures l…
Manual Web Application Penetration Testing: Introduction
In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any auto…
Discovered first Win trojan to serve banking Android malware on mobile
Researchers at Symantec antivirus firm have discovered a malicious code that is able to infect Android mobile device with a banking malware during sy…
The mojeID Service Now Has 300,000 Users
The service has been in operation since the autumn of 2010, and the last 100,000 accounts have been added since May of 2013.
Prague, 23 January 2014 –…
Microsoft remotely deleted Tor-based 'Sefnit Botnet' from more than 2 Million Systems
In October 2013, Microsoft adopted a silent, offensive method to tackle infection due to a Tor-based botnet malware called Sefnit.
Weak passwords, in 2013 it is still a frequent error
SplashData has issued its Annual “25 Worst Passwords of the Year” enumerating the list of the most common password chosen by users.
10 million Starbucks customers at risk for official iOS app flaw
10 million Starbucks customers who purchases drinks and food using their Smartphones are exposed to serious risk of data breach.
ReVuln team founds a zero-day in SCADA component
A researcher at of ReVuln disclosed a buffer overflow zero-day flaw in HMI software produced by Malaysian company Ecava.
Turris project awarded for protecting privacy
The Privacy Protection award is the only category in the Big Brother competition that has a positive meaning.
The Iuridicum Remedium non-governmental …
Cisco confirmed that a Backdoor affects small business devices
Cisco confirmed the presence of a Backdoor that affects small business devices. The flaw was discovered by the French hacker Eloi Vanderbeken weeks a…
ASUS Routers setting could expose users data on Internet
[A default setting(http://securityaffairs.co/wordpress/21212/hacking/asus-routers-hack.html)] in Asus Routers allows an attacker to remotely access d…
Zero-Day Flaws Found, Patched In Siemens Switches
A security researcher has discovered a pair of zero-day vulnerabilities in a popular family of Siemens industrial control system switches that could …
Internet of Things Poses New Security Risks
The hackers who got into your computer or smartphone are now taking aim at the Internet of Things.
The Tablexia educational application is now available to the general public
The first version of the application contains three separate games for distinguishing sounds, spatial orientation and working memory. The aim of the …
Is XXE the new SQLi?
Many modern applications today use XML documents to transfer data between clients and servers. Due to its simplicity, XML is actually great for this …
Kali Linux introducing Emergency Self Destruct feature to Full Disk Encryption
In an Emergency situation, triggering the nuke password from boot screen will delete all the key slots and makes the data on the drive inaccessible. …
23-year-old Stack overflow vulnerability discovered in X11 Server
At the 30th Chaos Communication Congress (CCC) in Germany, Ilja van Sprundel, a [security researcher gave the presentation(http://thehackernews.com/2…
Windows Zero-Day vulnerability used in targeted attacks against 28 Embassies
TrendLab malware analysts confirmed that recent Windows Zero-Day vulnerability was exploited in cyber attack against Embassies in a Middle Eastern ca…
VSAT terminals are opened for targeted cyber attacks
VSAT terminals (very-small-aperture terminal) used for satellite communications are vulnerable to external cyber attacks, the discovery was made by s…
The mojeID service has a new website with a large number of improvements
The CZ.NIC Association unveiled the new version of the mojeID website today. Changes include the graphic design of the web presentation and its overa…
New version of Knot DNS server supports automatic DNSSEC signing
The greatest improvement to this purely authoritative DNS server is support for automatic DNSSEC signing. Version 1.4.0 also has a significantly lowe…
Tajikistan's Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced
Website of Tajikistan's Domain registrar (domain.tj) authority has been hacked, that allows the hacker to access domain control panel.
Researcher Uncovers Backdoor In DSL Routers
Flaw in DSL routers could give attackers full, unauthenticated administrative access, researcher says.
Curse Hits World of Warcraft Players with Malware
A malicious Trojan hiding in a legitimate World of Warcraft (WoW) add-on is infecting players’ accounts.
Windows Autorun
When someone suspecting that a malware activity that may exist in a system or a compromised system one of the most obvious places to check is the sta…
Malicious advertisements served via Yahoo
Clients visiting yahoo.com received advertisements served by ads.yahoo.com. Some of the advertisements are malicious.
Snapchat To Update App In Wake Of Breach
App vendor planning new version that lets users opt out of appearing in 'beleagured Find Friends' feature.
Netgear, Linksys and many other Wireless Routers have a backdoor
The French hacker Eloi Vanderbeken discovered the presence of a backdoor in principal models of routers including Netgear, Linksys and Cisco.
The pre…
Vulnerability Assessment with Nexpose
Nexpose is one of the leading vulnerability assessment tools. The Nexpose community edition is a free program and the other editions are paid ones. I…
I will hack your systems with an SD Card
The hardware hacker Bunnie Huang presented at the Chaos Compute Club Congress how to exploit SD cards microcontroller for malicious purposes.
Cyber Thieves Are Stealing Money From ATMs With Infected USB Sticks
Cyber criminals are exploiting new techniques to attack ATMs (Automated Teller Machines) infecting the devices with specifically crafted malware.
New Member of the CZ.NIC Association
The company ADAPTIVITY s. r. o. is a new member of the CZ.NIC Association as of 1 January 2014. ADAPTIVITY s. r. o. become a member of the Chamber of…