2015
Windows 10 Security
In contrast to its quick adoption by users, Windows 10 has been plagued by a number of privacy and security concerns. Here are the top five articles …
Joomla 3.4.5 patches Critical SQL Injection Vulnerability
Joomla – one of the most popular open source Content Management System (CMS) software packages, has reportedly patched three critical vulnerabilities…
Apple fixes serious flaws in the Productivity Apps
Updates released last week by Apple for Apple Productivity Apps fix a number of flaws that can be exploited for a number of attacks.
Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
The Network Time Foundation's NTP Project has released an update addressing multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabi…
Western Digital self-encrypting hard drives are not secure
A trio of researchers has demonstrated that some versions of self-encrypting hard drives manufactured by the Western Digital are affected by security…
The new Chairman of the DNS-OARC Association is again Ondřej Filip
The non-profit organization DNS-OARC brings together key companies in the fields of research, development and implementation of Internet technologies…
Thousands of Magento Sites Abused for Malware Distribution
A large number of websites powered by eBay’s Magento e-commerce platform have been breached and abused to deliver malware, researchers warned over th…
LibreSSL Vulnerability Found During OpenSMTPD Bug-Hunt
Researchers investigating ways to cause remote code execution against known vulnerabilities in OpenSMTPD have stumbled across a memory leak in LibreS…
Google Chrome 46 Boosts Security
In a bid to help simplify security, Google is now reducing the number of page security warnings in its Chrome browser from four to three. The move co…
Emergency Patch released for Latest Flash Zero-Day Vulnerability
Two days ago, The Hacker News (THN) reported about the Zero-day vulnerability in the freshly patched Adobe Flash Player. The vulnerability was exploi…
Critical Flaw Patched in Akismet Plugin for WordPress
The developers of the Akismet plugin for WordPress have released an update to address a critical vulnerability that exposes websites to hacker attack…
Recently Patched Adobe Flash Versions Hit by Another Zero-day Exploit
Now today, Security researchers have disclosed a new zero-day vulnerability in fully patched versions of Adobe Flash, which is currently being exploi…
Patch Report: All Versions of Windows affected by Critical Vulnerability
Microsoft has rolled out six security updates this Patch Tuesday, out of which three are considered to be "critical," while the rest are marked as "i…
Adobe Patches Many Flaws in Flash Player, Acrobat, Reader
Updates released on Tuesday by Adobe for Flash Player, Reader and Acrobat address a significant number of vulnerabilities that expose the users of th…
Chrome 46 Patches Vulnerabilities, Simplifies Page Security Icon
Google announced on Tuesday the release of Chrome 46, a version that patches several serious vulnerabilities and simplifies the security icon display…
Vulnerability in Netgear Wireless Router
Multiple NETGEAR wireless routers are out of the box vulnerable to an authentication bypass attack. No router options has to be changed to exploit th…
New Attack Targeting Microsoft Outlook Web App (OWA) to Steal Email Passwords
Researchers have unearthed a dangerous backdoor in Microsoft's Outlook Web Application (OWA) that has allowed hackers to steal e-mail authentication …
AV-Test – Which is the best Antivirus for Linux systems?
The Independent AV-Test Institute has analyzed 16 Linux security solutions against Windows and Linux threats under Ubuntu. The results are disconcert…
WordPress Jetpack Plugin Patched Against Stored XSS Vulnerability
Insecure plugins have been at the heart of numerous attacks launched from compromised WordPress site. One was patched this week in Jetpack, a plugin …
TrueCrypt Vulnerabilities Allow System Compromise, Researchers Warn
Two new security vulnerabilities affecting free encryption tool TrueCrypt may allow attackers to obtain admin-level privileges and install malware on…
Microsoft Clarifies User Data Collection in Windows 10
Microsoft on Monday published new details on the user data collection in Windows 10, in an attempt to put controversy on the matter to rest.
Android Malware Possibly Infects 1 Million Devices via Google Play
A new malicious Android application has been discovered in Google Play, disguised as a game application called BrainTest, which could potentially hav…
Adobe Releases 23 Security Updates for Flash Player
Adobe has released an important security bulletin that addresses a total of 23 Critical vulnerabilities in Adobe Flash Player. The security fixes for…
Firefox 41 includes critical security updates
Mozilla released Firefox 41.. This latest version comes with includes four critical, five high, nine moderate and one minor security update.
Facebook Scam: Get Facebook Dislike Button
Facebook users are being targeted in a new scam that takes advantage of the recent widely publicized announcement by Facebook CEO Mark Zuckerberg tha…
CZ.NIC Association strengthens its management: Bedřich Košata became the head of CZ.NIC Labs
Ondřej Surý, the co-founder and the previous head of CZ.NIC Labs, will become a Technical Fellow addressing key projects, which include primarily the…
Malvertising campaign targeted the Forbes Website, million users at risks
Security researchers at FireEye have uncovered a new malvertising campaign that exploited the popular Forbes.com news website.
Access Private Photos and Contacts Without a Passcode on iOS 9 devices
A hacker has found a way to access images and contacts stored on Apple iOS 9 devices even if they are protected with a passcode or Touch ID.
Warning! Popular Apple Store Apps Infected with Data-Theft Malware
A total of 39 apps, including the popular instant messaging app WeChat, Chinese Uber-like cab service Didi Kuaidi, music streaming service NetEase, p…
iOS 9 Resolves Hijacking via AirDrop Vulnerability
iOS 9, the operating system that Apple is making available for download today to its mobile device users, comes with more than new usability and func…
Synology Patches Serious Flaws in NAS Software
Network attached storage (NAS) company Synology has released updates for its Video Station and Download Station applications to patch several vulnera…
SAP Updates Patch Twenty Vulnerabilities
Germany-based enterprise software maker SAP has addressed a total of twenty vulnerabilities as part of its September 2015 Security Patch Day.
ICANN and CZ.NIC Collaborate to Increase Regional Internet Stability and Reliability
A joint operation between ICANN and CZ.NIC, the deployment of the L-Root server cluster in Prague is designed to respond to traffic in excess of 500 …
Adobe Patches Critical Vulnerabilities in Shockwave Player
Adobe has released an updated version of its popular Shockwave Player for Windows to resolve two critical vulnerabilities newly discovered in the pro…
Microsoft Patches Windows Vulnerability Exploited in the Wild
Microsoft has released a dozen security bulletins to patch more than 50 vulnerabilities affecting Windows, Internet Explorer, Edge, Office, Lync, Exc…
Warning! Seagate Wireless Hard Drives Have a Secret Backdoor for Hackers
Several of Seagate's 3rd generation Wireless Hard drives have a secret backdoor for hackers that puts users' data at risk.
A Recent study done by the…
Kaspersky Patches Critical Vulnerability in Antivirus Products
Kaspersky Lab has pushed out an update to address a serious antivirus vulnerability reported over the weekend by a Google security engineer.
How to Remove KeyRaider Malware that Hacked Over 225,000 iOS Devices
A malware named ‘KeyRaider’ has supposedly stolen user credentials of approximately 225K iPhone users. It has been given this name as it raids victim…
Using Android 'AppLock' to Protect Your Privacy? — It's Useless
Widely popular Android AppLock application by DoMobile Ltd. is claimed to be vulnerable to Hackers.
AppLock Android app enables users to apply a secu…
26 Android Phone Models Shipped with Pre-Installed Spyware
A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data h…
Multiple Vulnerabilities in Belkin Router Could Allow DNS Spoofing and Credentials Theft
Five zero-day vulnerabilities in Belkin N600 DB Wireless Dual Band N+ routers could have allowed attackers to grab credentials in clear text and spoo…
Cisco Patches Flaw in Data Center Management Products
Cisco has released software updates to patch a remotely exploitable vulnerability affecting the company’s UCS Director and Integrated Management Cont…
Microsoft Boosts Remote Data Collection in Windows 7 and 8
Despite being criticized that it collects customer experience and diagnostic telemetry data in Windows 10, Microsoft decided months back that it woul…
10 Free or Cheap WiFi Security Testing Tools
Do not kid yourselves, security professionals. You need more than one WiFi security testing tool. Here are 10 free or inexpensive options.
Here's How Iranian Hackers Can Hack Your Gmail Accounts
Hackers are getting smarter in fooling us all, and now they are using sophisticated hacking schemes to get into your Gmail.
Yes, Iranian hackers have…
"KeyRaider" iOS Malware Targets Apple Accounts
Researchers have uncovered a new malware family designed to target devices running Apple’s iOS mobile operating system. The threat has already been u…
IBM Warns of New CoreBot Stealer
Researchers at IBM have come across a new piece of malware designed to steal sensitive information from infected computers.
Intrusion Detection System and CSIRT.CZ
IDS (Intrusion Detection System) detects unauthorized access to it and captures the information about the machines from which the attempts for connec…
The CZ.NIC Association will keep operating the CSIRT.CZ National Security Team
The CZ.NIC Association has operated the CSIRT.CZ security team since January 1, 2011, on the basis of the memorandum concluded with the Ministry of I…
Vulnerability in Pocket Addon for Firefox Could Have Affected Company Servers
A server-side vulnerability found in the save-for-later service would have allowed attackers to gain access to all user data and even populate their …