News

A recently conducted security assessment of VeraCrypt has revealed over 25 security vulnerabilities in the popular encryption platform, including a c…

Ondřej Filip served in the DNS-OARC organization’s governing body since 2010, also as its Chairman since 2012. Ondřej Filip could not be re-elected t…

Every two years, the European agency ENISA organizes a pan-European cyber exercise Cyber Europe.

Every two years, the European agency ENISA organizes …

Akamai Technologies revealed that hackers are exploiting a 12-year-old bug in OpenSSH to hack into millions of IoT devices with SSHowDowN Proxy attac…

Kaspersky Lab experts have released a Polyglot ransomware decryption tool, which enables users who have suffered from this ransomware, also known as …

Cisco issued a security advisory about a vulnerability, tracked as CVE-2016-6406, affecting the Email Security Appliance Internal Testing Interface.

D-Link DWR-932B LTE router is allegedly vulnerable to over 20 issues, including backdoor accounts, default credentials, leaky credentials, firmware u…

Law enforcement and IT Security companies have joined forces to disrupt cybercriminal businesses with ransomware connections. In this case, we are re…

A firmware update released by Siemens this month for some of its industrial network security products fixes a vulnerability that could expose potenti…

OSquery, an open-source framework created by Facebook that allows organizations to look for potential malware or malicious activity on their networks…

Mozilla has patched many critical and high severity vulnerabilities this week with the release of Firefox 49, including a recently disclosed certific…

Mozilla plans to release a Firefox update to address the cross-platform remote code-execution vulnerability recently patched in the Tor browser.

The …

Cisco has released software updates for its WebEx Meetings Server product to address a couple of critical and high severity vulnerabilities that can …

An independent research has revealed multiple severe MySQL vulnerabilities. This advisory focuses on a critical vulnerability with a CVEID of CVE-…

WordPress 4.6.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately…

Security analyst Graham Cluley published description of new linux rootkit "Umbreon", using some kind of "stealth technology" to hide itself from sc…

While searching for new scenarios to deliver their malwares[1][2], attackers launched a campaign to deliver malicious code embedded in Microsoft Publ…

Tens of thousands of devices running Cisco’s Adaptive Security Appliance (ASA) software are still vulnerable to attacks leveraging an exploit leaked …

A newly observed Linux Trojan backdoor is actively targeting Internet of Things (IoT) devices and enjoying very low detection rate, even on systems u…

Article published on blog.nic.cz describes surprisingly high telnet traffic on internet, caused in majority by insecured smart devices (IoT devices).

Server The hacer news has published an [article]https://thehackernews.com/2016/08/dropbox-data-breach.html) about massive leak od Dropbox credential…

Database security has never been more important, given the high value hackers place on data. These database security best practices will help protect…

Opera Software reported a security breach last night, which affects all users of the sync feature of its web browser. So, if you’ve been using Ope…

A new type of ransomware, dubbed Alma, was recently observed being distributed via the RIG exploit kit. Researchers at PhishLabs have analyzed Alma ,…

DetoxCrypto ransomware is raising suspicions that a new ransomware-as-a-service (RaaS) affiliate program might be in the works.

Researchers published two attack schemes against car locking systems utilizing radio device. These attack schemes are related to hundreds of millions…

Secure Boot Bypass Allows Hackers to Load Bootkits/Rootkits on Windows Devices. Microsoft has been attempting to patch a serious Secure Boot vuln…

Juniper Networks released hotfixes this week to address a vulnerability in its JUNOSe software. The issue, related to the processing of IPv6 packets,…

According to article on The Hacker news server vulnerability called "Quadrooter" applies to cellphones using Qualcomm chipset. You can check your dev…

New article on blog.nic.cz regarding the resulst of pentesting of home gateways provided by hungarian UPC.

Google announced new update of Google Chrome 52. This update fixing 10 security issues, will be available to the public in next few days.

CISCO announced critical flaws in their products: RV110W, RV130W and RV215W routers include a default account that can be leveraged by an attacker to…

Google deployed HSTS to further improve security of their services. For full info see original announce by Google Inc.

Twelve case studies in which the authors describe methods and tricks to improve the performance of open source applications, this is what readers can…

The Argentinian national domain registry will use the Czech registration system FRED (Free Registry for ENUM and Domains) for the administration of i…

The hackernews published an article about new NIST standard, declaring SMS- baset 2-factor authentication not to be secure any more. The insecurity …

Palo Alto's researchers have created a decrypter for the variant of the PoshCoder ransomware that imitates the Locky ransomware. Dubbed PowerWare …

AVG releases free decryptor for data encrypted by rensomware Bart. All you need is both encrypted and unencrypted version of the same file. So if you…

Google on Wednesday released Chrome 52 in the stable channel and revealed that no less than 48 security vulnerabilities were resolved in the popular …

An update released this week by the developers of WooCommerce, the popular ecommerce plugin for WordPress, patches a flaw that could allow attackers …

This critical flaw CVE-2016-4631 resides in the ImageIO and could be exploited by a remote attacker to steal sensitive information from Apple devices…

By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in most modern configuration due to t…

Millions of Xiaomi smartphone are affected by a critical remote code execution flaw that could be exploited by hackers to take over the mobile device…

Just yesterday, I wrote a warning article announcing that Drupal – the popular open source content management system – will release patches for sever…

Experts consider the CVE-2016-3238 flaw the most dangerous vulnerability of the year because it is really easy to execute and have a significant impa…

Security researchers have warned users that many of these online tutorials are linked to malicious versions of the Pokémon Go app that install a back…

A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin (1+ million active…

The hacker behind the Twitter account 0x2Taylor is claiming to have breached one of the Amazon servers containing 80,000 login credentials of Kindle …

Apache released an important update today to fix a vulnerability that affects servers that have http/2 enabled and use TLS client certificates for au…

Symantec has fixed dozens of critical vulnerabilities affecting its solutions that can be exploited by remote attackers for arbitrary code execution.