2019
CZ.NIC agreed on coop. with a Brazilian partner, which will improve the quality of the DNS traffic
Uzavřená dohoda umožní reciproční provozování DNS serverů, které zvýší bezpečnost DNS provozu a zrychlí zpracování DNS dotazů na obou stranách oceánu…
The CZ.NIC Association published Domain Report for last year
In the Domain Report 2018, anyone interested will find for example the increase in the number of domains in 2018, domain registration over the past y…
Version 2.38 released
We have released the version 2.38 of the FRED registry software.
Release notes
This release contains the first phase of big changes concerning payments…
Drupal critical flaw
Critical vulnerability (CVE-2019-6340) has been discovered in popular content management system (CMS) Drupal that allows for remote code execution by…
Severe vulnerability in WinRAR that exists for last 19 years
WinRAR, one of the world's most popular Windows file compression applications, has patched last month a severe security flaw (CVE-2018-20250, CVE-201…
Critical vulnerability in WordPress
The latest research from RIPS Technologies GmbH revealed the existence of a critical remote code execution vulnerability that affects all previous ve…
Vulnerability in package manager snapd
Package manager snapd by Canonical contains vulnerability dubbed Dirty Cow (CVE-2019-7304), which can be exploited by an attacker to gain root access…
runc container breakout
The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execut…
Czech and Slovak network operators are preparing CSNOG 2019, the speakers may submit their proposals
The event is designed to enable professionals exchanging experience and sharing of practical solutions that can improve the quality of Czech and Slov…
Vulnerability in LibreOffice and OpenOffice allows for arbitrary code execution
A vulnerability discovered on office suites LibreOffice and OpenOffice allows for a remote code execution as soon as a user opens a malicious ODT fil…
CZ.NIC association to present a new project as part of the international Safer Internet Day
From the beginning, the new project has also involved the Child Helpline, which, thanks to this partnership, will be able to increase its capacities …
Vulnerability in the Microsoft Exchange NTLM authentication protocol
Microsoft Exchange supports a API called Exchange Web Services (EWS). One of the EWS API functions is called PushSubscriptionRequest, which can be us…
Quiz on spotting the phishing
Google’s technology incubator Jigsaw has revealed a quiz that tests users’ abilities to identify phishing attacks. The quiz is created based on the s…
Vulnerability in APT package manager
Vulnerability was discovered in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a ma…
Unpatched critical vulnerability in Cisco Small Business switches
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mecha…
CZ.NIC Association presents CyberSecurity, authored by Czech cyber security experts
On more than 500 pages, the book primarily addresses the issue of cyber security, and lays out its basic principles that should be respected by every…
Over 87GB of email addresses and passwords exposed on the internet
Almost 773 million unique email addresses and just under 22 million unique passwords were found. The data, dubbed Collection #1, is a set of email ad…
Unpatched zero-day vulnerability in Windows including PoC
Unpatched Windows vulnerability was published with a proof of concept. Microsoft plans to release patches as a part of the April update. The vulnerab…
Oracle releases January 2019 Critical Patch Update
Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. We encourages users and admin…
Fraud application preinstalled on Android devices
An unusually high number of transaction attempts encountered by Secure-D in Brazil and Malaysia coming from a series of Alcatel Android smartphone mo…
Three vulnerabilities disovered in systemd
Three (CVE-2018-16864, CVE-2018-16865, CVE-2018-16866) vulnerabilities discovered in systemd-journald. First two are memory corruptions (attacker-con…
Another .CZ Domain Registrar Deployed The DNSSEC Technology for All Its Domains
The registrar Seonet Multimedia, which runs its services under the GIGASERVER.CZ brand, introduced this technology for all domains they administer th…
SME Server Unauthenticated XSS To Privileged Remote Code Execution
The advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack in web management portal that le…
New Member of the CZ.NIC Association
The company Qrator Labs CZ s. r. o. is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of 1 January 2019. The association…