2016
Facebook ‘Comment Tagging Malware’ Spreading via Google Chrome
Currently, a malware scam is infecting Facebook users in which they receive a notification in the app and/or in their email about a friend tagging in…
Google makes 2-Factor Authentication a lot Easier and Faster
Two-factor authentication or 2-step verification is an effective way to secure online accounts, but many users avoid enabling the feature just to sav…
WordPress 4.5.3 fixed several security vulnerabilities
WordPress has recently issued the version 4.5.3 that patches more than two dozen vulnerabilities, including 17 bugs introduced in the last three rele…
New Android malware Godless
A recently observed piece of mobile malware that leverages multiple rooting exploits targets nearly 90 percent of Android devices
A recently observed …
Cisco wireless kits are affected by a critical bug but no fix is available
A security advisory recently released by CISCO announce that three Cisco wireless kits are affected by a critical bug, but no fix is available at the…
Drupal Security Updates Patch Two Vulnerabilities
Security updates released on Wednesday for Drupal 7 and Drupal 8 patch a couple of access bypass and privilege escalation vulnerabilities.
Android Ransomware now targets your Smart TV, Too!
Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device?
If your answer is yes, then you need to know the latest inte…
How to recover files encrypted by all Teslacrypt Ransomware variants
Experts from Cisco Talos team have improved their decryptor tool to allow the recovery of files encrypted by all the Teslacrypt Ransomware variants.
Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload
An independent Vulnerability Laboratory Researcher discovered a arbitrary file upload vulnerability in the Wordpress Levo-Slideshow v2.3 plugin.
Google fixes severe security holes in Chrome browser update
Google has issued fixes for 15 severe vulnerabilities in the Chrome browser. The update, Chrome 51.0.2704.79, is for Windows, Mac and Linux systems, …
Over 10,000 WordPress sites vulnerable to exploit
Security researchers have warned that over 10,000 websites powered by the WordPress content management system (CMS) are at risk of exploit due to a p…
Tor Browser 6.0 is out with significant privacy and security improvements
The Tor Project released the Tor Browser 6.0, the last version of the popular Tor browser that brings along significant privacy and security improvem…
NTP Servers Exposed to Long-Distance Wireless Attacks
Researchers have demonstrated that remote attackers can wirelessly change the time on network time protocol (NTP) servers over long distances using i…
PayPal Users Hit with ”Account Limitation” Phishing Scam
Fresh Wave of Phish Campaign Reaches PayPal—Scammer Lure Users with “How to restore your account” Email.
Teslacrypt decryption tool allows victims to restore their files
A security researcher from ESET security firm issue a Teslacrypt decryption tool after the author closed the project and released a free master key.
The Free Internet initiative has started, support from both users and enterprises is welcome
Major Internet organizations have signed the initiative, which aims to draw attention to the consequences that will be brought by the approval of the…
Adobe Patches Flash Zero-Day Exploited in the Wild
Adobe has updated Flash Player for Windows, Mac and Linux to address a total of 25 vulnerabilities, including a zero-day that has been exploited in t…
Wi-Fi Flaw Exposes Android Devices to Attacks
A serious vulnerability affecting a Wi-Fi technology used in the Android operating system and many other products allows malicious actors to escalate…
Adobe Flash Zero-Day Under Attack
A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory …
Czechs will pay for censorship, senators are going to raise the price of Internet access
A significant increase in Internet connection prices for end users of the Czech Republic may occur next year, if the government bill on gambling pass…
Android Trojan Steals Credit Card Info, Locks Devices Remotely
A new Android banking Trojan capable of spying on users and stealing credit card info is achieving persistency on infected devices by asking for devi…
The Internet and Technology Conference Mostly Focuses on Security Issues
Panel discussion, discussions on online safety, presentation on the impact of the lottery law on blocking the Internet or an accompanying program in …
272 Million Email Credentials Discovered in Cybercrime Forum
Researchers discovered 'a young Russian hacker' bragging in an online forum that he had acquired and was ready to give away 1.17 billion stolen crede…
Attackers Exploit Critical ImageMagick Vulnerability
Researchers have discovered several vulnerabilities in the popular image processing suite ImageMagick, including a serious remote code execution flaw…
Ransomware enters companies through RDP servers
Attackers wielding ransomware are targeting enterprises through an often-found hole in the corporate network: Internet facing, poorly secured remote …
OpenSSL Project plans to patch soon High Severity Vulnerabilities
The OpenSSL Project yesterday announced that it plans to release will release on May 3 security patches for several vulnerabilities affecting the pop…
Cyber crooks find a new and ingenious way to make hundreds of thousands of dollars with no effort
An unknown cyber gang, pretending to be Armada Collective, has made more than $100,000 in less than two months simply by threatening to launch DDoS a…
US-CERT to Windows Users: Dump Apple Quicktime
Microsoft Windows users who still have Apple Quicktime installed should ditch the program now that Apple has stopped shipping security updates for it…
Changes in Conditions of domain name registration and the mojeID service
Mid-May will bring changes to the Conditions of registration of .cz domain names and ENUM domain names as well as Conditions of the mojeID service fo…
Warning! CCTV Cameras Sold on Amazon Come with Pre-Installed Malware
Be careful while buying any off-brand electronics from Amazon, as they could end up infecting you.
Recently, independent security researcher Mike Ols…
Microsoft, Samba Patch "Badlock" Vulnerability
Updates released by Microsoft and Samba on Tuesday patch the vulnerability dubbed “Badlock,” although it turns out that the issue is not as severe as…
Experts crack Petya ransomware, enable hard drive decryption for free
Security experts have devised a method that allows users to recover data from computers infected with the Petya ransomware program without paying mon…
XSS RCE/RCI in NETGEAR SOHO routers
server firmware.re has published vulnerability of Netgear SOHO network devices enabling takeover of full controo of device. It can be done by exploit…
FRED 2.23 released
We have released a version 2.23 of FRED registry system. This version includes RDAP server and is again available for most recent versions of Fedora …
New way of office macro-based malware protection
Server The Hacker News published new way to protect users from MS Office macro-based malware. You can set MS office to be able run macros only from …
Turris Omnia Router has gained USD 1 million; the most was contributed by Czechs
The countries whose inhabitants contributed the most to this sum are the Czech Republic with more than a quarter share (28 %), followed by USA (16 %)…
Ransomware attack prevention tool from Bitdefender
Bitdefender Anti-Ransomware will prevent inbfection with known variants of Locky, CTB-Locker a Teslacrypt. Find source article here.
Google issued a new security update to fix flaws in Chrome 49
Google has issued a new security update for its Chrome 49 that patches a number of flaws, most of them discovered by external researchers.
Critical flaw in Oracle Java allows remote modification of content viewed java-enabled browser
The CVE-2016-0636 vulnerability affects Java SE running in web browsers on desktops, this means that an attacker could set up a malicious web page to…
Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw
Microsoft and Samba developers are working on patching a severe vulnerability that is said to affect almost every version of Windows and Samba.
iOS malware successfully infects non-jailbroken devices, researchers found
Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infec…
95% of HTTPS servers vulnerable to trivial MITM attacks
Only 1 in 20 HTTPS servers correctly implements HTTP Strict Transport Security, a widely-supported security feature that prevents visitors making une…
CZ.NIC Association Works with Czech TV on a New Program Teach Your Aunt about the Internet
The educational program Teach Your Aunt about the Internet, the first episode of which will be broadcast today, is a fun way to teach children aged 9…
Two vulnerabilities were reported in Bind9 Debian package
Vulnerabilities that can cause on Bind Server DoS were found in number of distributions:Wheezy, Jessie, Stretch and Sid. Updated packages are availab…
Cisco reports four vulnerabilities in their products
All in cathegory "High".
See following docs:
Cisco Cable Modem with Digital Voice Model DPC2203 allows unauthorized execution of arbitrary code us…
Adobe, Microsoft Push Critical Updates
Microsoft today pushed out 13 security updates to fix at least 39 separate vulnerabilities in its various Windows operating systems and software.
Google Patches Three High Risk Flaws in Chrome 49
Google on Tuesday released a security update for Chrome 49 to resolve three vulnerabilities assessed with a High risk score.
Subgraph OS — Secure Linux Operating System for Non-Technical Users
Subgraph OS is a feather weighted Linux flavor that aims to combat hacking attacks easier, even on fairly low-powered computers and laptops. Subgr…
How To Test SSLv2 DROWN Attack Vulnerability
Server The Geekstuff has published article describing how to test DROWN Attack vulnerability using short python script.
Cisco Patches Critical, High Severity Flaws in NX-OS
Cisco informed customers on Wednesday that it has released software updates for several of its products to address critical and high severity vulnera…