2016
Critical RCE Flaw Patched in PHPMailer
The developers of PHPMailer have patched a critical vulnerability that can be exploited by a remote attacker for arbitrary code execution, a research…
RansomFree Tool Detects Never-Seen-Before Ransomware Before It Encrypts Your Data
Boston-based cyber security firm Cybereason has released RansomFree — a real-time ransomware detection and response software that can spot most strai…
Ubuntu’s Crash Report Tool Allows Remote Code Execution
A security researcher has discovered a critical vulnerability in Ubuntu Linux operating system that would allow an attacker to remotely compromise a …
DNSChanger Malware is Back! Hijacking Routers to Target Every Connected Device
Next time when you see an advertisement of your favorite pair of shoes on any website, even if it is legitimate, just DO NOT CLICK ON IT.
…Because th…
0-Day Exploits Could Wreak Havoc on Linux Desktops
Security researcher Chris Evans this week made public a full 0-day drive-by download exploit impacting Ubuntu and Fedora and possibly other current L…
Security issues concerning Yahoo
Following a recent investigation, Yahoo identified data security issues concerning certain Yahoo user accounts. In August 2013 unauthorized third par…
Corporate Office 365 users hit phishing attack
Corporate Office 365 users hit with clever phishing attack. Corporate Office 365 users are being targeted by phishers using a clever new trick to byp…
Scammers can trick Microsoft Edge
Scammers can trick Microsoft Edge into displaying fake security warnings.
Yahoo patches critical XSS vulnerability
Yahoo patches critical XSS vulnerability that would allow hackers to read any email.The flaw let malicious codes to pass Yahoo's filtration process.
Stop Using these 2 Easily Hackable Netgear Router Models — US CERT Warns
Netgear's R7000 and R6400 routers, running current and latest versions of firmware, are vulnerable to arbitrary command injection attacks, though the…
Critical Vulnerability Patched in Roundcube Webmail
Open source webmail provider Roundcube has released an update that addresses a critical vulnerability in all default configurations that could allow …
Locky Variant Osiris Distributed via Excel Documents
The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for…
Backdoor Found in Many Sony Security Cameras
Sony has released firmware updates for many of its security cameras to address a critical vulnerability that can be exploited to take control of the …
Researchers Bypass Apple's Activation Lock on iPhones and iPads
Two researchers have found a way to bypass the Apple Activation Lock on both iPhones and iPads, running the two most recent versions of iOS, 10.1 and…
New SmsSecurity Variant Roots Phones, Abuses Accessibility Features and TeamViewer
In January of 2016, we found various “SmsSecurity” mobile apps that claimed to be from various banks. These apps supposedly generated one-time passwo…
Google Promotes Chrome 55 Browser to Stable Channel, 36 Security Issues Patched
On the first day of December, Gooogle decided that it was time for the popular Chrome web browser to get a new release, so it promoted Chrome 55 to t…
More Than 1 Million Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, na…
New Member of the CZ.NIC Association
The company Fortion Networks, s. r. o. is a new member of the CZ.NIC Association as of 1 December 2016. Fortion Networks, s. r. o. become a member of…
GPG key for abuse@csirt.cz was changed
Team CSIRT.CZ changed GPG key for abuse contact. Former GPG key with ID 0x46A050CA was revoked and new key with fingerprint 7071 8BB4 0939 AB7D 4E39 …
TeleCrypt Ransomware's Encryption Cracked
TeleCrypt, the file encryption ransomware that abuses Telegram API for communication, has had its encryption cracked just two weeks after the threat …
Several DoS Vulnerabilities Patched in NTP
The CERT Coordination Center and the Network Time Foundation announced on Monday the availability of NTP 4.2.8p9, which includes nearly 40 security p…
Spammers using Facebook Messenger to Spread Locky Ransomware
If you came across any Facebook Message with an image file (exactly .SVG file format) send by any of your Facebook friends, just avoid clicking it.
A…
Ladislav Lhotka from CZ.NIC is signed under a new IETF Internet standard
On November, IETF released a document called A YANG Data Model for Routing Management (RFC 8022) written by Ladislav Lhotka, who works as an R&D Prog…
Firefox 50 Patches 27 Vulnerabilities
Mozilla this week released Firefox 50 in the stable channel to patch 27 vulnerabilities and to provide users with improved Download Protection.
Several Vulnerabilities Patched in Drupal 7, 8
Drupal developers have released updates for versions 7 and 8 to address security flaws that can lead to information disclosure, cache poisoning, redi…
CrySis ransomware decryption keys published online
The decryption keys for the CrySis ransomware were posted online on the BleepingComputer.com forum by a user known as crss7777.
CVE-2016-4484 Hold down the Enter key for 70 sec to gain a Linux Root shell
The CVE-2016-4484 vulnerability can be exploited to gain a Linux Root shell by simply pressing the Enter Key for 70 Seconds.
Hackers Find Code Execution Flaw in VMware Workstation
VMware informed customers on Sunday that it has patched a critical out-of-bounds memory access vulnerability affecting its Workstation and Fusion pro…
OpenSSL Releases Patch For "High" Severity Vulnerability Thursday
As announced on Tuesday, the OpenSSL project team released OpenSSL version 1.1.0c that addresses three security vulnerabilities in its software.
The …
Over 300,000 Android Devices Hacked Using Chrome Browser Vulnerability
A vulnerability in Chrome for Android is actively being exploited in the wild that allows hackers to quietly download banking trojan apps (.apk) onto…
Hackers Can Abuse iOS WebView to Make Phone Calls
The iOS applications of Twitter, LinkedIn and possibly other major vendors can be abused by hackers to initiate phone calls to arbitrary numbers. The…
'Web Of Trust' Browser Add-On Caught Selling Users' Data — Uninstall It Now
An investigation by German television channel NDR (Norddeutscher Rundfunk) has discovered a series of privacy breaches by Web Of Trust (WOT) – one of…
Adobe Patches 9 Flash Player Flaws Reported via ZDI
Security updates released by Adobe on this Patch Tuesday address one vulnerability in Connect for Windows and nine arbitrary code execution flaws in …
CVE-2016-6563 RCE flaw affects D-Link Routers, disable remote admin
Carnegie-Mellon CERT warns of a flawed implementation of HNAP in D-Link routers (CVE-2016-6563) that could be exploited for remote execute code.
Critical MySQL flaws can allow attackers to hack into your server
The security expert Dawid Golunski disclosed critical vulnerabilities in MySQL, MariaDB and PerconaDB can lead fully compromise of servers.
After a great success on Indiegogo, the Czech router Turris Omnia is coming into the stores
The total of USD 1,223,205 was collected for the development and production of the router, which is 12 times more than was anticipated by the CZ.NIC …
Multiple Critical Remotely Exploitable Flaws Discovered in Memcached Caching System
Three critical Remote Code Execution vulnerabilities have been reported in Memcached by security researcher Aleksandar Nikolich at Cisco Talos Group …
AtomBombing Code Injection can potentially hack all Windows OS versions
Researchers from ENSILO have devised a method, called AtomBombing, to inject malicious code in Windows OS that bypasses modern anti-malware tools.
Three bugs found in the LibTIFF, one of them yet to be patched
Libtiff library is affected by three vulnerabilities but unfortunately one of them, tracked as CVE-2016-8331, is still unpatched.
CVE-2016-7855 flaw in Adobe Flash Player exploited in targeted attacks
Adobe has issued a security patch for its Flash Player that fixes a critical vulnerability, tracked as CVE-2016-7855, used in targeted attacks.
Two Critical Vulnerabilities Patched in Joomla 3.6.4. Update it asap!
Joomla has released the new version Joomla 3.6.4 that fixes two critical account creation vulnerabilities affecting the popular CMS.
Upgrade your iPhone to iOS 10.1 or you can get hacked by opening a JPEG or a PDF
Viewing a maliciously crafted JPEG may lead to arbitrary code execution, a boobytrapped JPEG could compromise your iPhone. Upgrade to iOS 10.1
The successful open source router Turris Omnia moves from Indiegogo on to e-shops
Today, CZ.NIC Association, the Czech national domain administrator, has completed the production of the Turris Omnia devices purchased during the cro…
Jaromír Talíř appointed to the management board of CENTR Technical Working Group
The CENTR Technical Working Group deals with technical aspects of operation of the domain registry and the DNS infrastructure.
Jaromír Talíř, Technica…
MBRFilter — Open Source Tool to Protect Against 'Master Boot Record' Malware
Talos team at Cisco Systems has released a free, open-source tool that protects the master boot record (MBR) sector of computers from modification by…
SQL Injection zero-day in component ja-k2-filter-and-search of Joomla
Information Security experts have discovered an SQL injection zero-day vulnerability in Joomla component ja-k2-filter-and-search.
"Dirty COW" Linux Kernel Exploit Seen in the Wild
A new Linux kernel vulnerability disclosed on Wednesday allows an unprivileged local attacker to escalate their privileges on a targeted system. Red …
Lexmark Patches Critical Flaw in Printer Management Tool
Lexmark has released an update for its Markvision Enterprise printer management software to address serious vulnerabilities that could allow a remote…
Turris Omnia, a secure router made in Europe, was unveiled today at the CES in Prague
Once all routers pre-ordered in the crowdfunding campaign have been delivered, the commercial sale of Turris Omnia to customers will begin. Potential…
Crooks exploit a zero-day in WordPress eCommerce Plugin to upload a backdoor
Experts from the White Fir Design discovered cybercriminals exploited a zero-day flaw in an e-commerce plugin for WordPress to upload a backdoor.