2015
CVE-2015-8562 – 16,000 Daily Attacks on vulnerable Joomla servers
Experts at Symantec discovered that hackers quickly take advantage of CVE-2015-8562 remote code execution to compromise Joomla servers.
Adobe Issues Emergency Patch For Flash Zero-Day Under Attack
Adobe released an out-of-band security update on Monday to address multiple vulnerabilities rated as critical in its Flash Player, including one (CVE…
Victims of the Gomasom Ransomware can now decrypt their files for free
Fabian Wosar, security researcher at Emsisoft, created a tool for decrypting files locked by the Gomasom Ransomware.
Turris Omnia became the most successful Czech project on Indiegogo.com having callected 10M CZK
The project of the non-profit association CZ.NIC confirms that safety is a big issue everywhere in the world, and not only from the perspective of co…
The CZ.NIC Association and the NSA have concluded an agreement on the operation of the CSIRT.CZ team
Ondřej Filip, CEO of CZ.NIC, and Dušan Navrátil, Director of the National Security Authority, concluded a public contract, under which in future year…
Juniper Firewalls with ScreenOS Backdoored Since 2012
Juniper Networks has announced that it has discovered "unauthorized code" in ScreenOS, the operating system for its NetScreen firewalls, that could a…
Microsoft Removes Trust in Root Certificates from CAs
Microsoft on Thursday announced that it plans on removing trust on root certificates issued by 11 Certificate Authorities (CAs) in January 2016.
Critical DoS Flaw Patched in BIND
The Internet Systems Consortium (ISC) announced on Tuesday the availability of BIND updates that address several vulnerabilities, including a remotel…
Critical Flaw in FireEye Appliances Exploitable by Sending an Email
Simply just sending an email or getting a user to click on a link was enough to exploit a critical remote code execution vulnerability in FireEye app…
The European router Turris Omnia now supports RaspberryPi applications
Similar to RaspberryPi, Turris Omnia has an expansion connector for additional peripherals. In contrast to RaspberryPi, Turris Omnia has a limited nu…
Wireless Routers Plagued by Unpatched Flaws
Wireless SOHO routers from ZyXEL, Belkin, ReadyNet, Amped Wireless, Buffalo and Netgear are plagued by multiple unpatched vulnerabilities, researcher…
Dell, Lenovo and Toshiba bloatware bugs put millions of users at risk of being hacked
Proof-of-concept code released in the wild can exploit vulnerabilities in pre-installed software (bloatware, crapware) on Dell, Lenovo and Toshiba PC…
Linksys wireless routers are open to cyber attacks
According to an advisory published by the KoreLogic firm the Linksys EA6100-6300 wireless routers are vulnerable to attacks due to flawed CGI scripts…
Adobe, Microsoft Each Plug 70+ Security Holes
Adobe and Microsoft today independently issued software updates to plug critical security holes in their software. Adobe released a patch that fixes …
Apple Issues Security Updates for OS X, iOS, Safari
Updates released by Apple on Tuesday for OS X, iOS, Safari, Xcode, watchOS and tvOS address tens of vulnerabilities.
Changes in the Supervisory Board and the Collegium of the CZ.NIC Association
The General Meeting of the Association held on December 8 brought about changes in the composition of the Supervisory Board and the Advisory Board of…
Google Patches Over Dozen Serious Flaws in Chrome
Google announced on Tuesday the availability of Chrome 47, a version that brings 41 security fixes, including more than a dozen serious vulnerabiliti…
Ondřej Surý of CZ.NIC became an ICANN committee member
The main task of RSSAC within ICANN is to provide consultation and advice on the operation, administration, security, and integrity of the Internet's…
Node.js to Patch Serious DoS Flaw
The developers of Node.js, the popular cross-platform runtime environment, this week will release security updates that patch a couple of vulnerabili…
Turris Omnia is a self-updating router for maximum user’s safety in IoT age
Today, the Internet is an important part of our lives and it is no longer true that we are connected to the Internet only when we are looking up some…
Login to eAmbulance is now possible with the mojeID account
eAmbulance has enabled scheduling doctor’s appointments online in five regional hospitals in Jihlava, Havlíčkův Brod, Nové město na Moravě, Pelhřimov…
Dell puts users at risk with dangerous eDellRoot root certificate
Dell is in the headlines for shipping PCs with a pre-installed trusted root certificate dubbed eDellRoot that opens users to a number of cyber attack…
VMware Updates Products Due to Flaw in Apache Flex BlazeDS
VMware has released updates for several of its products to address an information disclosure issue caused by a vulnerability in Apache Flex BlazeDS.
A flaw in D-Link Switches opens corporate networks to hack
A flaw in certain D-Link switches can be exploited by remote attackers to access configuration data and hack corporate networks.
Libpng Library Updated to Patch Vulnerabilities
Libpng, the official Portable Network Graphics (PNG) reference library, has been updated to address a couple of memory corruption vulnerabilities.
Chrome exploit leaves million Android devices open to attack
At the MobilePwn2Own, a Chinese expert has demonstrated how to hijack an Android smartphone by exploiting a zero-day flaw in the Chrome browser.
The CZ.NIC association collected 100 000 USD for the Turris Omnia project in less than 24 hours
The CZ.NIC association launched a crownfunding campaign yesterday on the Indiegogo.com platform to collect 100 000 USD in 61 days to fund the researc…
The Turris Omnia router wants to increase the safety of users on the Internet
The non-profit association CZ.NIC, the Czech national domain administrator, introduces a unique router based on the open-source philosophy and active…
Flaw in Linux.Encoder1 ransomware reveals the decryption key
Experts at Bitdefender have discovered a flaw in Linux Encryption Ransomware Linux.Encoder1 that exposes the decryption Key used to lock the files.
Critical Fixes for Windows, Adobe Flash Player
For the third time in a month, Adobe has issued an update to plug security holes in its Flash Player software. The update came on Patch Tuesday, when…
1-Click Way to Check If your Android Device is Vulnerable to Hacking
Android Vulnerability Test Suite (VTS), developed by mobile security firm NowSecure, is a free vulnerability scanner that scans your Android device f…
Remote Code Execution Flaw Found in Java App Servers
Several popular Java-based products are affected by a serious vulnerability that can be exploited by malicious actors to remotely execute arbitrary c…
High-Risk SAP HANA Vulnerabilities Patched
Today, researchers at Onapsis disclosed 21 security issues in SAP’s HANA in-memory database management, application processing and integration servic…
Linux ransomware already infected at least tens of users
Researchers at Russian antivirus company Doctor Web have discovered a Linux ransomware that has already infected tens of users.
vBulletin security patches and zero-day exploit available online
Rumors on the Internet says that the hackers who breached vBulletin forum website exploited a zero-day flaw, the company issued emergency security pa…
Cisco Patches Serious Flaws in Security, Wireless Appliances
Cisco has released software updates to address a series of critical and high severity vulnerabilities affecting some of the company’s security and wi…
Google Researchers Find Serious Flaws in Galaxy S6 Edge
Researchers from Google’s Project Zero have identified nearly a dozen high severity vulnerabilities in the Android operating system running on Samsun…
How CoinVault or Bitcryptor victims could try to recover their files
Victims of CoinVault ransomware can now rely on a new set of encryption keys added to the free CoinVault Ransomware Decryptor tool to recover their f…
New Member of the CZ.NIC Association
The company Vema, a. s. is a new member of the CZ.NIC Association as of 1 November 2015. Vema, a. s. become a member of the Chamber of domain name ho…
Project Turris was awarded
Security project Turris was awarded IPASCO International Award in the category of Innovative Cyber Security or Privacy Research. The IPACSO jury …
Several Flaws Patched in Xen Hypervisor
The Xen Project released on Thursday a total of nine advisories describing recently patched Xen hypervisor vulnerabilities.
The Turris project got an international award for innovation in cyber security and privacy
The aim of this competition is to encourage innovative companies and innovators in the field of Internet technologies that focus primarily on securit…
Adobe Patches Critical Vulnerability in Shockwave Player
Adobe updated Shockwave Player on Tuesday to address a critical vulnerability that can be exploited for arbitrary code execution.
Beware of fake plane tickets hoax on Facebook
A fake giveaway is circulating on Facebook, offering free tickets to British Airways or Emirates flights. The scam spreads through the same link, sha…
Windows 10 Security
In contrast to its quick adoption by users, Windows 10 has been plagued by a number of privacy and security concerns. Here are the top five articles …
Joomla 3.4.5 patches Critical SQL Injection Vulnerability
Joomla – one of the most popular open source Content Management System (CMS) software packages, has reportedly patched three critical vulnerabilities…
Apple fixes serious flaws in the Productivity Apps
Updates released last week by Apple for Apple Productivity Apps fix a number of flaws that can be exploited for a number of attacks.
Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
The Network Time Foundation's NTP Project has released an update addressing multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabi…
Western Digital self-encrypting hard drives are not secure
A trio of researchers has demonstrated that some versions of self-encrypting hard drives manufactured by the Western Digital are affected by security…
The new Chairman of the DNS-OARC Association is again Ondřej Filip
The non-profit organization DNS-OARC brings together key companies in the fields of research, development and implementation of Internet technologies…