News

Joomla has released the new version Joomla 3.6.4 that fixes two critical account creation vulnerabilities affecting the popular CMS.

Viewing a maliciously crafted JPEG may lead to arbitrary code execution, a boobytrapped JPEG could compromise your iPhone. Upgrade to iOS 10.1

Today, CZ.NIC Association, the Czech national domain administrator, has completed the production of the Turris Omnia devices purchased during the cro…

The CENTR Technical Working Group deals with technical aspects of operation of the domain registry and the DNS infrastructure.

Jaromír Talíř, Technica…

Talos team at Cisco Systems has released a free, open-source tool that protects the master boot record (MBR) sector of computers from modification by…

Information Security experts have discovered an SQL injection zero-day vulnerability in Joomla component ja-k2-filter-and-search.

A new Linux kernel vulnerability disclosed on Wednesday allows an unprivileged local attacker to escalate their privileges on a targeted system. Red …

Lexmark has released an update for its Markvision Enterprise printer management software to address serious vulnerabilities that could allow a remote…

Once all routers pre-ordered in the crowdfunding campaign have been delivered, the commercial sale of Turris Omnia to customers will begin. Potential…

Experts from the White Fir Design discovered cybercriminals exploited a zero-day flaw in an e-commerce plugin for WordPress to upload a backdoor.

A recently conducted security assessment of VeraCrypt has revealed over 25 security vulnerabilities in the popular encryption platform, including a c…

Ondřej Filip served in the DNS-OARC organization’s governing body since 2010, also as its Chairman since 2012. Ondřej Filip could not be re-elected t…

Every two years, the European agency ENISA organizes a pan-European cyber exercise Cyber Europe.

Every two years, the European agency ENISA organizes …

Akamai Technologies revealed that hackers are exploiting a 12-year-old bug in OpenSSH to hack into millions of IoT devices with SSHowDowN Proxy attac…

Kaspersky Lab experts have released a Polyglot ransomware decryption tool, which enables users who have suffered from this ransomware, also known as …

Cisco issued a security advisory about a vulnerability, tracked as CVE-2016-6406, affecting the Email Security Appliance Internal Testing Interface.

D-Link DWR-932B LTE router is allegedly vulnerable to over 20 issues, including backdoor accounts, default credentials, leaky credentials, firmware u…

Law enforcement and IT Security companies have joined forces to disrupt cybercriminal businesses with ransomware connections. In this case, we are re…

A firmware update released by Siemens this month for some of its industrial network security products fixes a vulnerability that could expose potenti…

OSquery, an open-source framework created by Facebook that allows organizations to look for potential malware or malicious activity on their networks…

Mozilla has patched many critical and high severity vulnerabilities this week with the release of Firefox 49, including a recently disclosed certific…

Mozilla plans to release a Firefox update to address the cross-platform remote code-execution vulnerability recently patched in the Tor browser.

The …

Cisco has released software updates for its WebEx Meetings Server product to address a couple of critical and high severity vulnerabilities that can …

An independent research has revealed multiple severe MySQL vulnerabilities. This advisory focuses on a critical vulnerability with a CVEID of CVE-…

WordPress 4.6.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately…

Security analyst Graham Cluley published description of new linux rootkit "Umbreon", using some kind of "stealth technology" to hide itself from sc…

While searching for new scenarios to deliver their malwares[1][2], attackers launched a campaign to deliver malicious code embedded in Microsoft Publ…

Tens of thousands of devices running Cisco’s Adaptive Security Appliance (ASA) software are still vulnerable to attacks leveraging an exploit leaked …

A newly observed Linux Trojan backdoor is actively targeting Internet of Things (IoT) devices and enjoying very low detection rate, even on systems u…

Article published on blog.nic.cz describes surprisingly high telnet traffic on internet, caused in majority by insecured smart devices (IoT devices).

Server The hacer news has published an [article]https://thehackernews.com/2016/08/dropbox-data-breach.html) about massive leak od Dropbox credential…

Database security has never been more important, given the high value hackers place on data. These database security best practices will help protect…

Opera Software reported a security breach last night, which affects all users of the sync feature of its web browser. So, if you’ve been using Ope…

A new type of ransomware, dubbed Alma, was recently observed being distributed via the RIG exploit kit. Researchers at PhishLabs have analyzed Alma ,…

DetoxCrypto ransomware is raising suspicions that a new ransomware-as-a-service (RaaS) affiliate program might be in the works.

Researchers published two attack schemes against car locking systems utilizing radio device. These attack schemes are related to hundreds of millions…

Secure Boot Bypass Allows Hackers to Load Bootkits/Rootkits on Windows Devices. Microsoft has been attempting to patch a serious Secure Boot vuln…

Juniper Networks released hotfixes this week to address a vulnerability in its JUNOSe software. The issue, related to the processing of IPv6 packets,…

According to article on The Hacker news server vulnerability called "Quadrooter" applies to cellphones using Qualcomm chipset. You can check your dev…

New article on blog.nic.cz regarding the resulst of pentesting of home gateways provided by hungarian UPC.

Google announced new update of Google Chrome 52. This update fixing 10 security issues, will be available to the public in next few days.

CISCO announced critical flaws in their products: RV110W, RV130W and RV215W routers include a default account that can be leveraged by an attacker to…

Google deployed HSTS to further improve security of their services. For full info see original announce by Google Inc.

Twelve case studies in which the authors describe methods and tricks to improve the performance of open source applications, this is what readers can…

The Argentinian national domain registry will use the Czech registration system FRED (Free Registry for ENUM and Domains) for the administration of i…

The hackernews published an article about new NIST standard, declaring SMS- baset 2-factor authentication not to be secure any more. The insecurity …

Palo Alto's researchers have created a decrypter for the variant of the PoshCoder ransomware that imitates the Locky ransomware. Dubbed PowerWare …

AVG releases free decryptor for data encrypted by rensomware Bart. All you need is both encrypted and unencrypted version of the same file. So if you…

Google on Wednesday released Chrome 52 in the stable channel and revealed that no less than 48 security vulnerabilities were resolved in the popular …

An update released this week by the developers of WooCommerce, the popular ecommerce plugin for WordPress, patches a flaw that could allow attackers …