2014
Malicious Google DoubleClick Advertisements Distributed Malware to Millions of Computers
Cyber criminals have exploited the power of two online advertising networks, Google's DoubleClick and popular Zedo advertising agency, to deliver mal…
Avira – Critical CSRF flaw Vulnerability puts millions users at risk
Egyptian bug hunter discovered that Avira Website is affected by CSRF flaw that allows attackers to hijack users’ accounts and access to their online…
Apple Fixes Numerous Vulnerabilities With Release of Mac OS X 10.9.5
Apple has released updates for several of its products and, in addition to new features and functionality fixes, the company has also addressed sever…
Adobe Fixes Eight Critical Vulnerabilities in Adobe and Acrobat Reader
Adobe has issued a new patch for Adobe and Acrobat Reader to fix eight critical-rated vulnerabilities that could lead to a remote-code-execution atta…
eBay Falls Victim to Cross-Site Scripting Attack
The British website of online retailer eBay was compromised through a cross-site scripting (XSS) vulnerability, exploited to steal customers’ login c…
OWASP Releases New Testing Guide
The Open Web Application Security Project (OWASP) announced on Wednesday the availability of version 4 of the OWASP Testing Guide.
Vulnerabilities Found in Schneider Electric SCADA Product Line
A total of three security holes have been identified in Schneider Electric's StruxureWare SCADA Expert ClearSCADA products, ICS-CERT reported this we…
How a Cell Phone User Can be Secretly Tracked Across the Globe
The tracking technology takes advantage of the SS7, a global network, which is unfortunately vulnerable. SS7 or Signaling System Number 7 is a protoc…
FreeBSD Denial of Service advisory (CVE-2004-0230)
A vulnerability has been discovered by Johnathan Looney at the Juniper SIRT in FreeBSD (base for Junos and many other products) in the way that FreeB…
Android Same Origin Policy flaw affects more than 70% devices
A serious flaw vulnerability has been discovered in the default browser on a large number of Android devices that allows to bypass the Same Origin Po…
AppBuyer iOS Malware Targets Jailbroken iPhones
Researchers at Palo Alto Networks analyzed a piece of malware targeting owners of jailbroken iPhones that steals the vicitm's Apple ID and password i…
Google Public DNS Server Spoofed for SNMP based DDoS Attack
The Distributed Denial of Service (DDoS) attack is becoming more sophisticated and complex, and, according to security experts, the next DDoS vector …
New BoSSaBoTv2 botnet targeting vulnerable Servers
Trustwave has detected a new series of attacks on servers worldwide based on the exploitation of old CGI-PHP vulnerability to spread BoSSaBoTv2 botne…
A new Android ransomware family sets unlock password on devices
Security experts at Dr. Web spotted a new strain of Android ransomware which sets unlock password on compromised devices and is also able to send SMS…
A critical flaw in Twitter allows to delete payment cards from any account
An Egyptian security researcher has discovered a critical flaw in Twitter platform which allows an attacker to delete credit cards from Any Twitter A…
Download this Kindle eBook, and have your Amazon account cookies stolen
A security researcher has reported what appears to be an embarrassing flaw on Amazon’s website that could put Kindle users at risk.
Tinba Banking Malware Expands Target List
A Trojan spotted earlier this year targeting banks in the Czech Republic has expanded its target list and become more global.
Flaws in php5 could cause crash or run programs on Ubuntu
Ubuntu has issued a security notice to inform users about flaws in php5 exploitable to crash or run programs if it received specially crafted network…
DNS cache poisoning attacks to steal emails are reality
CERT warns that DNS Cache Poisoning attacks could be used also to hijack email to a rogue server and not only to divert the Internet traffic.
ISIS is ramping up efforts to mount a massive cyber attack
Extremists groups of ISIS and Al Qaeda are ramping up efforts to launch major cyber attacks on Western Critical Infrastructure to set up digital Cali…
Cybercriminals Target Steam Users with New Trojan
Many users of Steam, Valve’s online gaming platform, have complained over the past few weeks about game items getting stolen, and the culprit appears…
Clickjacking, Strokejacking or UI Redress
There are a lot of attacks discovered these days that have clickjacking working in the backend, just to raise the popularity of the site, stealing on…
Thousands of High-Risk Vulnerabilities Found in NOAA Satellite System
The informational systems that the National Oceanic and Atmospheric Administration (NOAA) run are loaded with several critical vulnerabilities that c…
Dyre Zeus variant malware used for corporate espionage
Security experts warn Dyre malware is being used by cyber criminals for corporate espionage instead harvest banking credentials.
UNHcFREG researchers disclosed flaws dozen Android apps
Researchers from the UNHcFREG (University of New Haven) is publishing on YouTube a series of videos to disclose vulnerabilities in a dozen Android ap…
The HTTPS Phishing Websites will double by the end of 2014
According to the investigation conducted by experts at TrendMicro the number of HTTPS phishing sites is increasing and it will double by the end of 2…
5 Million Google Account Credentials Leaked Online
Close to five million Google account credentials have been leaked online by hackers.
De-Anonymize Google Users with new Timing Attack
De-Anonymize Google Users with new Timing Attack is possible, it is also possible identify Tor users if they’re logged in to Google while using Tor b…
Windows and Mac Users Targeted in Malvertising Campaign
Cybercriminals have been serving malicious advertisements on several high-profile websites in an effort to push shady software onto the computers of …
Vendor Fixes Vulnerabilities in Wireless Traffic Sensors
Sensys Networks, a company that provides integrated wireless traffic data systems, announced last week the availability of software updates that addr…
Special learning center opens courses in Ostrava
The first course on the emerging Internet protocol IPv6 and its implementation is held in Ostrava on October 16. Those interested in participating in…
Hackers plotted fake Flappy Bird app to steal girls’ photos from Android phones
Next time you install an app on your phone, you’d best think twice if it asks permission to access your photos.
Facebook’s privacy dinosaur will check your settings for you
Facebook has announced that it has started rolling out a new feature which will help you “review and control who you’re sharing with” on the world’s …
EPPB tool copies usable to download victims’ data from iCloud backups
Copies of the Elcomsoft EPPB tool are circulating in the underground and could have been used in the recent leak of celebrity photos.
Cyber Espionage Group Ported Windows Malware to Mac
Researchers have unmasked a group of cyber criminals that has recently started using a new variant of XSLCmd backdoor program to target Mac OS X syst…
China Launches MitM Attack on Google Users
Chinese authorities want to keep tabs on the users of an education and research network so they have started intercepting encrypted traffic to and fr…
Analyze VirusTotal Metadata to profile hackers
An independent researcher has analyzed for years the metadata on submissions to VirusTotal service identifying patterns related to many bad actors.
CERT Warns of Android Apps Vulnerable to MitM Attacks
The CERT Coordination Center at Carnegie Mellon University (CERT/CC) has published a list of popular Android applications that fail to properly valid…
Rigged industrial software site points to watering hole attack
Attackers have rigged the website of an industrial software firm with a sophisticated reconnaissance tool, possibly in preparation for attacks agains…
Brazilian cyber criminals targeting home routers
Experts at Kaspersky spotted an interesting attack from Brazilian criminals that try to change the DNS settings of home routers by using a web-based …
Enterprises Warned of DDoS Attacks Leveraging Linux Malware
Akamai Technologies has published a threat advisory to warn organizations of attacks where cybercriminals are infecting Linux servers with malware ca…
Firefox 32 Brings Security Fixes, Public Key Pinning
Mozilla has released Firefox 32 for Windows, Linux, OS X and Android. In addition to some new features, the latest version of the Web browser also in…
APWG Q2 2014 report, phishing is even more dangerous
The APWG Report Q2 2014 states that phishing activities continue to increase, phishers are targeting Crypto Currency, Payment Services and Retail Sit…
The case of Linux DDoS Trojan ported to Windows
Experts at Dr.Web detected a Linux DDoS Trojan designed to infect also Windows OS, the circumstance is considered rare in the criminal ecosystem.
Bogus cellphone towers found in the US
CryptoPhone 500 security firm has found 17 bogus cellphone towers in the US with a heavily customized handset exploited for surveillance activities.
Tor-Enabled Bifrose Variant Used in Targeted Attack
A new variant of the Bifrose backdoor has been used in a cyberattack aimed at an unnamed device manufacturer, Trend Micro reported.
Changes in membership of the CZ.NIC Association
The company Informační a bezpečnostní agentura s. r. o. is not a member of the CZ.NIC Association as of 1 August 2014. Otherwise the company NetArt G…
How to discover Wi-Fi WPS password in one second with offline calculations
Dominique Bongard has presented an improvement to previous attack on WPS which allows to discover the PIN in just one second with offiline calculatio…
10 Common Software Security Design Flaws
Google, Twitter, and others identify the most common software design mistakes -- compiled from their own organizations -- that lead to security woes …
470 million sites are One Day Wonders, one in five is malicious
A study conducted by Blue Coat on 660 million unique hostnames reports that 470 Million websites are One Day Wonders and 22 Percent are malicious.