2015
Serious Vulnerabilities Patched in CUPS Printing Service
CUPS has been updated to address a couple of security bugs that can be exploited by a malicious actor to elevate privileges and execute arbitrary cod…
Facebook – now with added PGP encrypted notification emails to boost your security
In a blog post, Facebook’s security team has explained that from now on, when the social networking site sends you sensitive emails such as password …
Alleged Author of Locker Ransomware Publishes Decryption Keys
An individual claiming to be the developer of the crypto ransomware known as Locker has published the private keys needed to recover the files taken …
And last, but not least: D-link strikes again.
There were 50+ new security flaws found in firmware of D-link NASes and NVRs. As usually, only option for „lucky“ owners of these devices is waiting…
Vulnerability found in OpenSSL
There are dozens of vulnerable Linux and Unix distros. Fortunately updated packages are publicly available.
Want to stalk your facebook friends ?
Good news: it is possible (using linked howto)
Bad new: They can stalk you as well. (Only if you are happy user of Facebook messenger, of course).
Spampionship 2015
SophosLabs prepared 'dirty dozen' of spam sending countries according to the volume of sent spam and the population. They used the spam traps to coll…
Malicious Minecraft apps affect 600,000 Android Users
So you love Minecraft? You might want to be very careful before downloading the cheats for the popular Minecraft game from Google Play Store.
NitlovePoS, The New PoS Malware is being spread by Spam
Researchers at FireEye have detected a new strain of point-of-sale (POS) malware being used in the wild and served through a spam campaign,
New Linux-Based Router Worm Used in Social Network Scheme
Researchers at ESET are shining the light on a new piece of malware compromising routers in a scheme to take fraudulent actions on social networks.
Botnet from compromised routers
In the next release of Turris OS, we would like to give our users the possibility to play a more active part in detection of network attacks. The fir…
Cybercriminals Use SVG Files to Distribute Ransomware
Researchers at email and web security company AppRiver spotted a campaign in which malicious actors attempted to distribute a piece of ransomware wit…
Malicious version of PuTTY is spreading in the wild
Bad actors have released a malicious version of the popular open source tool PuTTY to steal access credentials of computers worldwide.
Ransomware Removal Kit available online for free
A security researcher has compiled the Ransomware Removal kit that could be used in the process of responding to ransomware infections.
CZ.NIC celebrates its 17th anniversary and 1,200,000th domain registration
On this day, since 1998 the CZ.NIC association has celebrated the day of its founding. This year, the occasion is intensified by a truly special gift…
Google Patches 37 Security Bugs With Release of Chrome 43
Google announced on Tuesday that Chrome 43 is available for download. The latest release contains numerous improvements and fixes, including patches …
Logjam TLS Vulnerability Exposes Websites, Mail Servers: Researchers
The vulnerability, dubbed “Logjam,” affects the Transport Layer Security (TLS) protocol and it can be exploited through man-in-the-middle (MitM) atta…
Millions of Routers open to attack due to a NetUSB flaw
A simple vulnerability has been uncovered in the NetUSB component, millions of modern routers and other IoT devices are exposed to the risk of cyber …
Address spoofing vulnerability in Safari Web Browser
A new vulnerability arised in Safari Web Browser that can lead to an address spoofing allowing attackers to show any URL address while loading a diff…
Oracle Issues VENOM Security Updates
Oracle has released updates for its products to address the VENOM vulnerability impacting virtual environments.
Tails 1.4 is out to preserve your privacy and anonymity
The Debian-based distribution Tails, “The Amnesiac Incognito Live System,”version 1.4 is available online! Tails is a popular live operating system (…
Hackers drain money from Starbucks accounts linked to users’ credit cards
Hackers steal money from Starbucks mobile customers using linked credit cards, nearly 16 million customers who use the company app are at risk.
Adobe issued a significant update for Flash Player, Reader and Acrobat
Adobe issued an update to fix 52 flaws in Flash Player, Reader and Acrobat products, that fortunately aren’t being publicly exploited in the wild.
MacKeeper Zero Day Remote Code Execution Vulnerability
The vulnerability details were disclosed on Friday after the patch release, which allows an attacker to execute remotely malicious commands with root…
Lenovo Patches Critical 'System Update' Vulnerabilities
Lenovo has patched critical flaws in its computers that allow an attacker to compromise the System Update service.
Apple Updates Safari to Patch Several Vulnerabilities
Updates released by Apple on Wednesday for the Safari web browser address several security holes, including ones that could lead to arbitrary code ex…
Attackers Actively Exploiting Flaw That Exposes Millions of WordPress Sites
Malicious actors are actively exploiting a DOM-based cross-site scripting (XSS) vulnerability that could potentially affect a large number of WordPre…
What does The Honeynet Project do and what is our connection to it
The Honeynet Project is a nonprofit organization established by Lance Spitzner, which brings together researchers and programmers from around the wor…
Mumblehard Malware Targets Linux and FreeBSD Servers
Thousands of computers and web servers running Linux and FreeBSD operating systems have been infected over past five years with sophisticated malware…
Tor Browser 4.5 released! It comes with many improvements
Tor Browser 4.5 released! It comes with many improvements for security, privacy and usability. Download it to protect your online privacy.
New Google Password Alert extension already hacked
A few hours after the presentation of the Google Password Alert extension a researcher already have developed two methods to bypass it.
MySQL SSL/TLS Connections at Risk Due to BACKRONYM Flaw
MySQL, Oracle’s relational database management system, is plagued by a vulnerability that can be exploited to downgrade SSL/TLS connections, accordin…
8 Best Android Apps To Improve Privacy and Security in 2015
Just to have a good anti-virus protection app in your smartphone doesn’t mean a complete Security.
Password Alert Chrome Extension to Protect your Google Account from Phishers
As cybercriminals have started using sophisticated phishing techniques in an attempt to hijack online users’ account, Google on Wednesday launched a …
A flaw in Realtek SDK exposes SOHO routers to the attack
A flaw affecting Realtek SDK exposes SOHO routers to remote code execution attacks. List of vulnerable devices include D-Link and TRENDnet products.
Firmware Update for Barracuda Web Filter Fixes SSL Inspection Flaws
Barracuda Networks has released a firmware update for its Barracuda Web Filter solution to address a couple of SSL inspection flaws reported by Will …
WordPress 4.2.1 Security Release
WordPress 4.2.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites im…
WordPress 4.1.2 Security Release
WordPress 4.1.2 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites im…
Wi-Fi Component Flaw Exposes Windows, Linux, OS X Systems
Researchers have identified a vulnerability in wpa_supplicant, the popular Wi-Fi Protected Access (WPA) supplicant for Linux, BSD, Mac OS X, Windows,…
How to use a malicious JPEG to hack corporate networks
Security researcher Marcus Murray discovered a method to exploit a malicious JPEG to compromise modern Windows servers inside corporate networks.
Critical Flaw in Magento eCommerce Platform Exposes Online Shops
Researchers have identified a serious vulnerability in Magento, the popular e-commerce platform owned by eBay. The security hole exposes the details …
Safari cookie access vulnerability affects a billion iThings
A Safari iOS/OS X/Windows cookie access vulnerability (CVE-2015-1126) potentially affects a billion iThings devices, patch it as soon as possible.
Java – New vulnerabilities affects million applications
Oracle warned that a dozen of new Java security vulnerabilities could be exploitable remotely to gain access to a target application without login.
MS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
Denial of Service (DoS) exploits are widely available to exploit CVE-2015-1635, a vulnerability in HTTP.sys, affecting Internet Information Server (I…
Kaspesky releases new tool to fix computers with CoinVault Ransomware
The victims of CoinVault ransomware can now decrypt the files encrypted by the malicious code by using a free removal tool released by Kaspersky firm…
Microsoft Releases April 2015 Security Bulletin
Microsoft has released eleven updates to address vulnerabilities in Microsoft Windows. Some of these vulnerabilities could allow elevation of privile…
Redirect to SMB flaw affects all versions of Windows
The Redirect to SMB vulnerability affects all supported versions of Windows and could be exploited to steal users’ credentials for various services.
Just need the MAC and serial number to generate Belkin WPS Pin
A researcher discovered that Belkin implements a vulnerable procedure to generate WPS PINs. Just knowing MAC and the serial number he can calculate i…
Cisco Patches Several Vulnerabilities in ASA Software
Cisco informed customers on Wednesday that it has released software updates to address several high severity vulnerabilities affecting Cisco Adaptive…
Steam users beware! Bad guys hide malware inside fake game demos
Steam users are being warned to be on their guard after cybercriminals were found trying to infect video game fans by disguising their malicious down…