2017
Oracle released Critical Patch Update fixing 270 vulnerabilities
Oracle has released its first quarterly critical patch update of the year, urging customers to immediately apply the bundle's 270 fixes to a number …
New phishing campaign targeting Google Gmail users
Security researchers have discovered a new phishing campaign targeting Gmail users, which is so convincing and highly effective that even tech-savvy …
A new era of the Turris Omnia project with Patrick Zandl as head of the development team
The CZ.NIC association thus obtained a figure whose aim will be to push the Turris project a bit further. In CZ.NIC, Patrick Zandl will be in charge …
Czech Republic is at the forefront of an open data international project
Besides the Czech national domain administrator, participants include national telecommunications regulators from the Czech Republic, Slovakia and Sl…
Eight Vulnerabilities Patched in WordPress
Eight security flaws and 62 bugs have been addressed with the release of WordPress 4.7.1 on Wednesday. The latest update for the content management s…
Ansible patches 'own the farm' vulnerability
Ansible sysadmins, make with the patch-fingers because the project's just gone public with a high-severity bug.
CVE-2016-9587 is a peach: “a compromi…
Thousands of unpatched Magento shops hacked in the last two years
According to the BSI more than 6,000 online stores running eBay’s Magento platform have been hacked across the last two years.
Adobe Patches 42 Flaws in Reader, Acrobat, Flash
Adobe informed users on Tuesday that updates released for Acrobat, Reader and Flash Player patch a total of 42 vulnerabilities, including many that c…
This ransomware targets HR departments with fake job applications
Cybercriminals are posing as job applicants as part of a new campaign to infect victims in corporate human resources departments with GoldenEye ranso…
New Member of the CZ.NIC Association
The company H17 Networks, s. r. o. is a new member of the CZ.NIC Association as of 1 January 2017. H17 Networks, s. r. o. become a member of the Cham…
2016
Critical RCE Flaw Patched in PHPMailer
The developers of PHPMailer have patched a critical vulnerability that can be exploited by a remote attacker for arbitrary code execution, a research…
RansomFree Tool Detects Never-Seen-Before Ransomware Before It Encrypts Your Data
Boston-based cyber security firm Cybereason has released RansomFree — a real-time ransomware detection and response software that can spot most strai…
Ubuntu’s Crash Report Tool Allows Remote Code Execution
A security researcher has discovered a critical vulnerability in Ubuntu Linux operating system that would allow an attacker to remotely compromise a …
DNSChanger Malware is Back! Hijacking Routers to Target Every Connected Device
Next time when you see an advertisement of your favorite pair of shoes on any website, even if it is legitimate, just DO NOT CLICK ON IT.
…Because th…
0-Day Exploits Could Wreak Havoc on Linux Desktops
Security researcher Chris Evans this week made public a full 0-day drive-by download exploit impacting Ubuntu and Fedora and possibly other current L…
Security issues concerning Yahoo
Following a recent investigation, Yahoo identified data security issues concerning certain Yahoo user accounts. In August 2013 unauthorized third par…
Corporate Office 365 users hit phishing attack
Corporate Office 365 users hit with clever phishing attack. Corporate Office 365 users are being targeted by phishers using a clever new trick to byp…
Scammers can trick Microsoft Edge
Scammers can trick Microsoft Edge into displaying fake security warnings.
Yahoo patches critical XSS vulnerability
Yahoo patches critical XSS vulnerability that would allow hackers to read any email.The flaw let malicious codes to pass Yahoo's filtration process.
Stop Using these 2 Easily Hackable Netgear Router Models — US CERT Warns
Netgear's R7000 and R6400 routers, running current and latest versions of firmware, are vulnerable to arbitrary command injection attacks, though the…
Critical Vulnerability Patched in Roundcube Webmail
Open source webmail provider Roundcube has released an update that addresses a critical vulnerability in all default configurations that could allow …
Locky Variant Osiris Distributed via Excel Documents
The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for…
Backdoor Found in Many Sony Security Cameras
Sony has released firmware updates for many of its security cameras to address a critical vulnerability that can be exploited to take control of the …
Researchers Bypass Apple's Activation Lock on iPhones and iPads
Two researchers have found a way to bypass the Apple Activation Lock on both iPhones and iPads, running the two most recent versions of iOS, 10.1 and…
New SmsSecurity Variant Roots Phones, Abuses Accessibility Features and TeamViewer
In January of 2016, we found various “SmsSecurity” mobile apps that claimed to be from various banks. These apps supposedly generated one-time passwo…
Google Promotes Chrome 55 Browser to Stable Channel, 36 Security Issues Patched
On the first day of December, Gooogle decided that it was time for the popular Chrome web browser to get a new release, so it promoted Chrome 55 to t…
More Than 1 Million Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, na…
New Member of the CZ.NIC Association
The company Fortion Networks, s. r. o. is a new member of the CZ.NIC Association as of 1 December 2016. Fortion Networks, s. r. o. become a member of…
GPG key for abuse@csirt.cz was changed
Team CSIRT.CZ changed GPG key for abuse contact. Former GPG key with ID 0x46A050CA was revoked and new key with fingerprint 7071 8BB4 0939 AB7D 4E39 …
TeleCrypt Ransomware's Encryption Cracked
TeleCrypt, the file encryption ransomware that abuses Telegram API for communication, has had its encryption cracked just two weeks after the threat …
Several DoS Vulnerabilities Patched in NTP
The CERT Coordination Center and the Network Time Foundation announced on Monday the availability of NTP 4.2.8p9, which includes nearly 40 security p…
Spammers using Facebook Messenger to Spread Locky Ransomware
If you came across any Facebook Message with an image file (exactly .SVG file format) send by any of your Facebook friends, just avoid clicking it.
A…
Ladislav Lhotka from CZ.NIC is signed under a new IETF Internet standard
On November, IETF released a document called A YANG Data Model for Routing Management (RFC 8022) written by Ladislav Lhotka, who works as an R&D Prog…
Firefox 50 Patches 27 Vulnerabilities
Mozilla this week released Firefox 50 in the stable channel to patch 27 vulnerabilities and to provide users with improved Download Protection.
Several Vulnerabilities Patched in Drupal 7, 8
Drupal developers have released updates for versions 7 and 8 to address security flaws that can lead to information disclosure, cache poisoning, redi…
CrySis ransomware decryption keys published online
The decryption keys for the CrySis ransomware were posted online on the BleepingComputer.com forum by a user known as crss7777.
CVE-2016-4484 Hold down the Enter key for 70 sec to gain a Linux Root shell
The CVE-2016-4484 vulnerability can be exploited to gain a Linux Root shell by simply pressing the Enter Key for 70 Seconds.
Hackers Find Code Execution Flaw in VMware Workstation
VMware informed customers on Sunday that it has patched a critical out-of-bounds memory access vulnerability affecting its Workstation and Fusion pro…
OpenSSL Releases Patch For "High" Severity Vulnerability Thursday
As announced on Tuesday, the OpenSSL project team released OpenSSL version 1.1.0c that addresses three security vulnerabilities in its software.
The …
Over 300,000 Android Devices Hacked Using Chrome Browser Vulnerability
A vulnerability in Chrome for Android is actively being exploited in the wild that allows hackers to quietly download banking trojan apps (.apk) onto…
Hackers Can Abuse iOS WebView to Make Phone Calls
The iOS applications of Twitter, LinkedIn and possibly other major vendors can be abused by hackers to initiate phone calls to arbitrary numbers. The…
'Web Of Trust' Browser Add-On Caught Selling Users' Data — Uninstall It Now
An investigation by German television channel NDR (Norddeutscher Rundfunk) has discovered a series of privacy breaches by Web Of Trust (WOT) – one of…
Adobe Patches 9 Flash Player Flaws Reported via ZDI
Security updates released by Adobe on this Patch Tuesday address one vulnerability in Connect for Windows and nine arbitrary code execution flaws in …
CVE-2016-6563 RCE flaw affects D-Link Routers, disable remote admin
Carnegie-Mellon CERT warns of a flawed implementation of HNAP in D-Link routers (CVE-2016-6563) that could be exploited for remote execute code.
Critical MySQL flaws can allow attackers to hack into your server
The security expert Dawid Golunski disclosed critical vulnerabilities in MySQL, MariaDB and PerconaDB can lead fully compromise of servers.
After a great success on Indiegogo, the Czech router Turris Omnia is coming into the stores
The total of USD 1,223,205 was collected for the development and production of the router, which is 12 times more than was anticipated by the CZ.NIC …
Multiple Critical Remotely Exploitable Flaws Discovered in Memcached Caching System
Three critical Remote Code Execution vulnerabilities have been reported in Memcached by security researcher Aleksandar Nikolich at Cisco Talos Group …
AtomBombing Code Injection can potentially hack all Windows OS versions
Researchers from ENSILO have devised a method, called AtomBombing, to inject malicious code in Windows OS that bypasses modern anti-malware tools.
Three bugs found in the LibTIFF, one of them yet to be patched
Libtiff library is affected by three vulnerabilities but unfortunately one of them, tracked as CVE-2016-8331, is still unpatched.
CVE-2016-7855 flaw in Adobe Flash Player exploited in targeted attacks
Adobe has issued a security patch for its Flash Player that fixes a critical vulnerability, tracked as CVE-2016-7855, used in targeted attacks.