News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2019

CZ.NIC agreed on coop. with a Brazilian partner, which will improve the quality of the DNS traffic

Uzavřená dohoda umožní reciproční provozování DNS serverů, které zvýší bezpečnost DNS provozu a zrychlí zpracování DNS dotazů na obou stranách oceánu…

The CZ.NIC Association published Domain Report for last year

In the Domain Report 2018, anyone interested will find for example the increase in the number of domains in 2018, domain registration over the past y…

Version 2.38 released

We have released the version 2.38 of the FRED registry software.
Release notes

This release contains the first phase of big changes concerning payments…

Drupal critical flaw

Critical vulnerability (CVE-2019-6340) has been discovered in popular content management system (CMS) Drupal that allows for remote code execution by…

Severe vulnerability in WinRAR that exists for last 19 years

WinRAR, one of the world's most popular Windows file compression applications, has patched last month a severe security flaw (CVE-2018-20250, CVE-201…

Critical vulnerability in WordPress

The latest research from RIPS Technologies GmbH revealed the existence of a critical remote code execution vulnerability that affects all previous ve…

Vulnerability in package manager snapd

Package manager snapd by Canonical contains vulnerability dubbed Dirty Cow (CVE-2019-7304), which can be exploited by an attacker to gain root access…

runc container breakout

The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execut…

Czech and Slovak network operators are preparing CSNOG 2019, the speakers may submit their proposals

The event is designed to enable professionals exchanging experience and sharing of practical solutions that can improve the quality of Czech and Slov…

Vulnerability in LibreOffice and OpenOffice allows for arbitrary code execution

A vulnerability discovered on office suites LibreOffice and OpenOffice allows for a remote code execution as soon as a user opens a malicious ODT fil…

CZ.NIC association to present a new project as part of the international Safer Internet Day

From the beginning, the new project has also involved the Child Helpline, which, thanks to this partnership, will be able to increase its capacities …

Vulnerability in the Microsoft Exchange NTLM authentication protocol

Microsoft Exchange supports a API called Exchange Web Services (EWS). One of the EWS API functions is called PushSubscriptionRequest, which can be us…

Quiz on spotting the phishing

Google’s technology incubator Jigsaw has revealed a quiz that tests users’ abilities to identify phishing attacks. The quiz is created based on the s…

Vulnerability in APT package manager

Vulnerability was discovered in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a ma…

Unpatched critical vulnerability in Cisco Small Business switches

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mecha…

CZ.NIC Association presents CyberSecurity, authored by Czech cyber security experts

On more than 500 pages, the book primarily addresses the issue of cyber security, and lays out its basic principles that should be respected by every…

Over 87GB of email addresses and passwords exposed on the internet

Almost 773 million unique email addresses and just under 22 million unique passwords were found. The data, dubbed Collection #1, is a set of email ad…

Unpatched zero-day vulnerability in Windows including PoC

Unpatched Windows vulnerability was published with a proof of concept. Microsoft plans to release patches as a part of the April update. The vulnerab…

Oracle releases January 2019 Critical Patch Update

Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. We encourages users and admin…

Fraud application preinstalled on Android devices

An unusually high number of transaction attempts encountered by Secure-D in Brazil and Malaysia coming from a series of Alcatel Android smartphone mo…

Three vulnerabilities disovered in systemd

Three (CVE-2018-16864, CVE-2018-16865, CVE-2018-16866) vulnerabilities discovered in systemd-journald. First two are memory corruptions (attacker-con…

Another .CZ Domain Registrar Deployed The DNSSEC Technology for All Its Domains

The registrar Seonet Multimedia, which runs its services under the GIGASERVER.CZ brand, introduced this technology for all domains they administer th…

SME Server Unauthenticated XSS To Privileged Remote Code Execution

The advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack in web management portal that le…

New Member of the CZ.NIC Association

The company Qrator Labs CZ s. r. o. is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of 1 January 2019. The association…