2014
Hacking well known website in numbers
Our collegue from Labs NIC.CZ, Jíři Machálek, has described in latest blog post how to hack well known website via unreadable javascript code. The on…
Hunting Session Fixation Bugs
This article illustrates a session fixation bug in a .NET website by demonstrating various live scenarios which usually leads to a website becoming v…
Google Chrome vulnerability allows Websites to Eavesdrop on You
Just imagine, you are sitting in front of your laptop and your laptop is listening to your nearby conversations. What if the recorded audio from the …
Statistics on the impact of Heartbleed on Select Top Level Domains
The Heartbleed Bug is probably the most serious menace to the modern Internet, a serious flaw in the popular OpenSSL library that is having a great i…
Facebook Follower Scam Prompts Victims to Inject Themselves with Dangerous Code
More than 17,000 Facebook users were tricked by a bold scam that promised them over 100,000 followers on the social network and made them willingly i…
Google Boosts Android Security Protection
Google is enhancing security for Android users to make sure installed apps are running safely and not performing malicious actions.
Case study of stolen password to e-mail account
On CZ.NIC's blogpost our collegue Pavel Basta published a case study of stolen password to e-mail account. What are the consequences of accesing e-ma…
Various reaction on the affects of Heartbleed Bug
Concerning the seriousness of new vulnerability The Heartbleed Bug in OpenSSL people are urged to change their passwords on all updated web portals. …
Adobe patches serious vulnerabilities
Adobe released an update for both its Flash Player and AIR software patching four critical vulnerabilities. The Flash Player vulnerabilites carry the…
New version of Wordpress was released
New stable version of Wordpress 3.8.2 is available. It releases fixes for number of weaknesses. One of them could let an attacker force their way int…
Serious vulnerability in OpenSSL
New vulnerability named The Heartbleed Bug was discovered in OpenSSL 1.0.1. through 1.0.1f(inclusive). Unfortunatelly these version were rapidly dep…
This year Czech At Prize goes to CZ.NIC
Educational activities related to the Internet, support for implementation of the new Internet Protocol IPv6 or activities in the field of open sourc…
Apple released fixes for more than 25 flaws in Safari
Apple has updated its Safari browser and created 25 security fixes. Some of the vulnerabilities can lead to remote code execution or cause a denial o…
Proof-Of-Concept 30 Oracle Java Cloud Services flaws released
Polish start-up company released technical details and Proof-of-Concept codes for 30 security vulnerabilities discovered in the environment of Oracle…
Millions of Vulnerable Routers aiding Massive DNS Amplification DDoS Attacks
The new research carried out by DNS providers Nominum, provides ISPs with DNS based analytics and monetization solutions, revealed that the DNS-based…
Most Sophisticated Android Bootkit Malware ever Detected; Infected Millions of Devices
Hardly two month ago we reported about the first widely spread Android Bootkit malware, dubbed as 'Oldboot.A', which infected more than 500,000 Smart…
F-Secure has discovered MiniDuke malware samples in the wild
Security Experts at F-Secure discovered a collection of pdf documents, that had references to Ukraine, containing MiniDuke malware samples.
E-mail adresses of LinkedIn users uncovered
Through free plug-in in browser it is possible to uncover e-mail adrress of LinkedIn user. Plug-in named Sell Hack will pop up a "hack in" button on …
New security flaw in WinRAR
Israeli researchers have discovered new security flaw which might be exploited in all version of WinRAR. Vulnerability named "WinRAR file extension s…
Android Apps Hide Crypto-Currency Mining Malware
Apps downloaded by millions from Google Play and Spanish software forums include hidden altcoin-mining software. But criminals aren't getting rich qu…
Philips SmartTV susceptible to serious hack according ReVuln experts
Researchers at ReVuln firm demonstrated how to exploit the last firmware update for Philips SmartTV to steal user’s cookies and other sensitive data.
Google Says Public DNS Intercepted by ISPs in Turkey
Google on Saturday warned that its Public Domain Name System (DNS) service has been intercepted by the majority of Internet Service Providers (ISPs) …
Cisco patches six security flaws that posed DoS risk
Patches for six vulnerabilities that could be exploited without authentification were released by Cisco as a part of "patch Thursday." Vulnerabilitie…
Multiple Vulnerabilities in Firefox for Android
Security researchers at IBM have discovered new vulnerabilities in Firefox for Android that allows a malicious application to leak the sensitive info…
CASH! CASH! Hacking ATM Machines with Just a Text Message
Security researchers at Antivirus firm Symantec claimed that hackers can exploit a weakness in Windows XP based ATMs, that allow them to withdraw cas…
Another zero-day vulnerability is threatening the Microsoft world
Microsoft issued a security advisory for the presence of a zero-day vulnerability in Microsoft Word products which allows a remote code execution.
Android OS Update Process Vulnerable to Exploitation
A new type of security vulnerability has been found in the Android system’s updating process, which can be exploited to steal sensitive data, alter s…
WordPress hosting: Do not try this at home!
Compromised WordPress blogs were used to host nearly 12,000 phishing sites in February. This represents more than 7% of all phishing attacks blocked …
A Guide to Debugging Android Binaries
In this paper, I’ll describe how to start reverse code engineering in Android devices.
New variant of Zorenium Bot can infect iOS devices
Security analysts at SenceCy which are monitoring the advancement of a new Zorenium Bot discovered that it is able to infect also iOS devices.
Tor Browser in Apple’s App Store Still Packed with Spyware and Adware
The Tor Browser in Apple’s app store is allegedly still packed with spyware and adware despite repeated complaints, according to Softpedia. The tech …
National Geographic Fans Targeted with Mobile Scareware
Mobile users of the National Geographic website are targeted with scareware saying they have been infected with malware, according to the Bitdefender…
The end of support for Windows XP
We would like to kindly inform you about the end of technical support for Windows XP and possible threats that come along with that. Technical suppor…
The CZ.NIC association continues to verify the data in the domains registry
The campaign aimed to review the registry data of .CZ domains for better security of domain owners’ personal data. This campaign will run throughout …
Google Public DNS Server Traffic Hijacked, Millions users impacted
The last successfully attack against Google occurred yesterday, the Google’s public DNS (Domain name system) was hit, the Internet monitoring firm B…
Researchers crack ransomware encryption
Ransomware is nothing new. You might already have heard about it already, since it is a kind of fraud which can impact anyone and do severe damages. …
Windows Spy tool equipped with Android malware to hack Smartphones
If you are using windows operating system and Android devices, then it’s a bad news for you, because FireEye Security Researchers have identified a n…
Warning! Invitation for PC Version of 'Grand Theft Auto V' Game infects Computers with Malware
Mind this, "There is no Grand Theft Auto V for PC," accept the reality and don’t let cyber criminals take leverage of this fact. If you receive any e…
Linux Operation Windingo hit 500000 PC and 25000 dedicated servers
Operation Windigo is the name of a sophisticated malware-based campaign uncovered by security Experts at ESET, that exploiting the Linux/Ebury backdo…
Nearly 7600 critical infrastructure vulnerable to bugs in Yokogawa App
Several thousands of critical infrastructure may still be vulnerable to SCADA flaws public disclosed this week. It has been estimated that more than …
A sophisticated phishing scheme is targeting Google Docs Users
The attackers used phishing email with the subject “Documents”, the content is requesting the recipient to view an important document published on Go…
Securing Cookies with HttpOnly and secure Flags
Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate the…
WhatsApp flaw allows hackers to steal private Chats on Android devices
A security consultant disclosed a security flaw in WhatsApp which can be exploited to gain access to the private chats of Android device owners.
Computer Forensics Investigation – A Case Study
A Computer Forensic Investigation generally investigates the data which could be taken from computer hard disks or any other storage devices with adh…
The Top 8 Ways That Privileged Accounts Are Exploited
Rogue insiders, former employees, criminal hackers and sophisticated state-sponsored attackers can exploit these unmanaged privileged accounts to ano…
162,000 WordPress instances abused for DDoS attack
Sucuri firm detected a large DDOS attack that leveraged thousands of unsuspecting WordPress websites as indirect amplification vectors. To discover i…
Samsung Galaxy backdoor allows files access on the mobile’s storage
The developer of the open source operating system Replicant OS, Paul Kocialkowski, has uncovered a backdoor pre-installed on Samsung Galaxy devices a…
Firms Warn of Rising Threat From NTP Amplification DDoS Attacks
Prolexic Technologies and Arbor Networks both issued warnings to organizations this week about the increased threat of NTP amplification DDoS attacks…
Oracle VirtualBox Memory Corruption Vulnerabilities Uncovered
Researchers at Core Security uncovered a set of serious vulnerabilities affecting Oracle VirtualBox that can be targeted to remotely execute code.
Introduction to Memory Analysis with Mandiant Redline
In a previous diary we talked about memory acqusition with Dumpit. In this diary we will talk about how to use Mandiant Redline to analysis the memor…