2017
Critical RCE flaw found in OpenVPN
This year, two independent security audits of OpenVPN were carried out to look for flaws, backdoors, and other defects in the open source software. R…
CZ.NIC Association Represents the Czech Republic in the INHOPE international Association
The threat of illegal online content, particularly child pornography, goes beyond the capabilities of individual states. That is why a close cooperat…
Microsoft Windows updates
The latest updates for Microsoft Windows are patching several remote code execution vulnerabilities. Some of the bugs are so important that Microsoft…
New Tor Browser 7.0 implements multiprocess mode, content sandbox, and Unix domain sockets
The Tor Project Team has announced the release of Tor Browser 7.0, it comes with multiprocess mode, content sandbox, and Unix domain sockets.
Hard-coded Passwords Make Hacking Foscam ‘IP Cameras’ Much Easier
Security researchers have discovered over a dozen of vulnerabilities in tens of thousands of web-connected cameras that can not be protected just by …
Google releases security updates for Chrome
Google has released Chrome version 59.0.3071.86 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may …
Microsoft issues out-of-band updates for its products
Microsoft issues out-of-band [update] fixing a bug in Microsoft Protection Engine (contained in i.e.: Windows Defender or Exchange Server). Five of t…
Malicious file path can brick Windows 7 and 8
Computers with Windows 7 and Windows 8 contain a bug, which can lead to system hang. All an attacker needs to do is to access a nonexistent file in C…
Vulnerability in sudo version from 1.8.6p7 to 1.8.20
From version 1.8.6p7 to 1.8.20 Linux sudo command contains a security vulnerability CVE-2017-1000367, which allows the local user to get the root pe…
Judy Android Malware Infects Over 36.5 Million Google Play Store Users
Security researchers have claimed to have discovered possibly the largest malware campaign on Google Play Store that has already infected around 36.5…
FreeRadius Authentication Bypass
Today, Stefan Winter released details about a vulnerability in FreeRADIUS, an open source implementation of the RADIUS protocol, which can be used to…
enSilo released a free patch for RDP exploit EseemAudit
New exploits were published in recently leaked NSA documents. One of them - EsteemAudit exploit is a hacking tool that targets RDP service (port 3389…
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
A 7-year-old critical remote code execution vulnerability has been discovered in Samba networking software that could allow a remote attacker to take…
National CSIRT.CZ team participated on Cyber Czech excercise
National CSIRT.CZ team participated on Cyber Czech exercise on 23rd and 24th of May. The goal was to improve technical skills and even more important…
Beware! Subtitle Files Can Hack Your Computer While You're Enjoying Movies
A team of researchers at Check Point has discovered vulnerabilities in four of the most popular media player applications, which can be exploited by …
Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!
Joomla maintainers released a fix for a critical SQL injection flaw, tracked as CVE-2017-8917, that can be exploited by a remote attacker to hijack w…
How to Stop Ransomware
Ransomware is a fast-growing security threat. Here's how to prevent it - or get rid of it if you have it.
Adobe, Cisco and Microsoft release security updates
Microsoft has released monthly security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulne…
Google users hit by an massive phishing attack
Google users were hit with an extremely convincing phishing spree. Targets received messages with the subject like "[Sender] has shared a document on…
Display Software Flaw Affects Millions of Devices
The security hole was identified by researchers at SEC Consult in display software developed by Portrait Displays. The impacted product allows users …
Squirrelmail 1.4.22 is affected by a Remote Code Execution flaw, no fix is available
The popular PHP webmail package SquirrelMail is affected by a remote code execution vulnerability tracked as CVE-2017-7692, that could be exploited b…
Oracle, Drupal and Google Chrome release security updates
Oracle released their April 2017 Critical Patch Update, that resolves a record breaking 299 vulnerabilities across all of their products. Of thes…
Phishing with Unicode Domains
A Chinese infosec researcher has discovered a new "almost impossible to detect" phishing attack that can be used to trick even the most careful users…
Thousands of Hacked Home Routers are Attacking WordPress Sites
Last week, while creating the Wordfence monthly attack report, we noticed that Algeria had moved from position 60 in our “Top Attacking Countries” li…
Critical Security Updates from Adobe, Microsoft
Adobe and Microsoft separately issued updates on Tuesday to fix a slew of security flaws in their products. Adobe patched dozens of holes in its Flas…
Vulnerability in wireless chips in mobile phones
Team Project Zero discovered a flaw in the implementation of wireless chip made by Broadcomm, which can be exploited to run arbitrary code in the con…
Major Security Flaws Uncovered in Samsung's Tizen Operating System
Equus Software security researcher Amihai Neiderman recently uncovered several major security flaws in Samsung's Linux-based Tizen operating system, …
UEFI Vulnerabilities allow to fully compromise Gigabyte Mini PCs
Experts at Cylance disclosed two UEFI flaws that can be exploited by attackers to install a backdoor on some Gigabyte BRIX mini PCs.
Social engineering leads to ransomware for Skype users
Once again, Microsoft’s secure communication tool is used to spread malware, according to several complaints on Reddit last Wednesday. Criminals targ…
Update Your Apple Devices to iOS 10.3.1 to Avoid Being Hacked Over Wi-Fi Tuesday
Less than a week after Apple released iOS 10.3 with over 100 bug fixes and security enhancements; the company has just pushed an emergency patch upda…
Apple Patches Hundreds of Vulnerabilities Across Product Lines
Apple on Monday released security patches for its macOS and macOS Server, iOS, watchOS, tvOS, Safari, and Pages, to address over 200 vulnerabilities.
Vulnerability of some types of Cisco network switches
Cisco is warning of a new critical zero-day IOS / IOS XE vulnerability that affects more than 300 of its switch models. A vulnerability CVE-2017-3881…
End of Windows Vista support is getting closer
The date for end of support for Windows Vista is set to 11.4.2017. This day onward Microsoft will stop issuing new security patches and hotfixes. Tec…
Turris Omnia to appear at CeBIT
Turris Omnia has successfully entered the general market and will now appear at the global information technologies fair at CeBIT, which is taking pl…
New security patches
New security patches by Microsoft, Adobe and VMware were released yesterday. Microsoft patches 18 vulnerabilities across its products, namely Windows…
Multiple unpatched vulnerabilities discovered in Western Digital My Cloud devices
Multiple Western Digital MyCloud NAS devices are affected by several security flaws, varying in severity, that allow attackers to bypass authenticat…
Unpatched flaw in Edge, Internet Explorer browsers
Google Project Zero has disclosed an unpatched vulnerability in browsers Edge and Internet Explorer. Disclosure includes proof-of-concept code. Vulne…
Czechs refused diacritics in domain names again
The survey also shows that the most frequent disadvantages of using the diacritics in domain names reported spontaneously were complicated access for…
Beware! Don't Fall For "Font Wasn't Found" Google Chrome Malware Scam
Next time when you accidentally or curiously land up on a website with jumbled content prompting you to download a missing font to read the blog by u…
Microsoft issues critical security patches for Adobe Flash Player
Microsoft released numerous patches late on Tuesday to fix flaws in Adobe Flash. The flaws are rated "Critical" for Windows client operating systems …
Flaws in Python and Java libraries Allow Firewall Bypass
Unpatched libraries in Java and Python allows attacers to bypass firewall in remote networks. Vulnerability can be exploited for establishing another…
SQL malware targeting online shops running on Magento hides the code in SQL database
Security experts have discovered a new strain of malware that is targeted websites raising the Magento eCommerce platform. The novelty is that this i…
Fraudulent SMS messages containing malware disguised as sent by delivery companies.
In recent days phishing SMS messages were found aimed at czech mobile users. Message contains a link to malware which is designed to work on Android …
Microsoft Windows DRM issue could be exploited to uncloak Tor Browser users
The anonymity of the Tor users is threatened by a new issue related the Microsoft’s DRM. Windows users running the Tor browser can be de-anonymized w…
SMB vulnerability affecting Microsoft Windows
US-CERT has released information on a Server Message Block (SMB) vulnerability affecting Microsoft Windows. In particular, Windows fails to properly …
Critical vulnerability in Wordpress
Wordpress released patches for vulnerabilities affecting versions 4.7 and 4.7.1. The critical bug allowed attacker to execute two vulnerabilities: Re…
CZ.NIC Publications released a book on cybercrime
The official presentation of the book with an autograph session of Jan Kolouch will be held on February 7 during the Seminar on security of networks …
Vulnerability causing continuous reboots on Samsung Galaxy S4 and S5
Combination of vulnerabilities can cause continuous reboots remotely via malicious SMS.
Newly published vulnerability can restart mobile phone via SMS…
New Member of the CZ.NIC Association
The company ALEF NULA, a. s. is a new member of the CZ.NIC Association as of 1 February 2017. ALEF NULA, a. s. become a member of the Chamber of doma…