2014
Facebook’s Latest Reading List Includes Your Text and Multimedia Messages
The security researcher told users they should either stick with the old version, get rid of Facebook on Android or accept that the social network ha…
Critical vulnerabilities in Oracle servers in the wild
Two serious vulnerabilities affect Oracle’s older database packages, allowing an attacker to remotely access a server bypassing authentication mechan…
Hackers Hit Yahoo Mail
Yahoo has issued a warning of an attack targeting users of its email service, and is initiating password resets for potentially affected accounts.
Mozilla Thunderbird vulnerability allows hackers to Insert malicious code into Emails
Do you use Thunderbird, a free; open-source; cross-platform application for managing email and news feeds? According to a Pakistani Security Research…
Buggy Webcams, IP Cameras and Baby Monitors Reveal Too Much to Anyone
Some models of webcams, IP surveillance cameras and baby monitors from Chinese manufacturer Foscam have vulnerable firmware that permits anyone with …
Fully Functional FileZilla Client Capturing FTP Login Details
Researchers from AVAST are warning users to beware of modified and malicious versions of the popular open source FileZilla FTP client that captures l…
Manual Web Application Penetration Testing: Introduction
In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any auto…
Discovered first Win trojan to serve banking Android malware on mobile
Researchers at Symantec antivirus firm have discovered a malicious code that is able to infect Android mobile device with a banking malware during sy…
The mojeID Service Now Has 300,000 Users
The service has been in operation since the autumn of 2010, and the last 100,000 accounts have been added since May of 2013.
Prague, 23 January 2014 –…
Microsoft remotely deleted Tor-based 'Sefnit Botnet' from more than 2 Million Systems
In October 2013, Microsoft adopted a silent, offensive method to tackle infection due to a Tor-based botnet malware called Sefnit.
Weak passwords, in 2013 it is still a frequent error
SplashData has issued its Annual “25 Worst Passwords of the Year” enumerating the list of the most common password chosen by users.
10 million Starbucks customers at risk for official iOS app flaw
10 million Starbucks customers who purchases drinks and food using their Smartphones are exposed to serious risk of data breach.
ReVuln team founds a zero-day in SCADA component
A researcher at of ReVuln disclosed a buffer overflow zero-day flaw in HMI software produced by Malaysian company Ecava.
Turris project awarded for protecting privacy
The Privacy Protection award is the only category in the Big Brother competition that has a positive meaning.
The Iuridicum Remedium non-governmental …
Cisco confirmed that a Backdoor affects small business devices
Cisco confirmed the presence of a Backdoor that affects small business devices. The flaw was discovered by the French hacker Eloi Vanderbeken weeks a…
ASUS Routers setting could expose users data on Internet
[A default setting(http://securityaffairs.co/wordpress/21212/hacking/asus-routers-hack.html)] in Asus Routers allows an attacker to remotely access d…
Zero-Day Flaws Found, Patched In Siemens Switches
A security researcher has discovered a pair of zero-day vulnerabilities in a popular family of Siemens industrial control system switches that could …
Internet of Things Poses New Security Risks
The hackers who got into your computer or smartphone are now taking aim at the Internet of Things.
The Tablexia educational application is now available to the general public
The first version of the application contains three separate games for distinguishing sounds, spatial orientation and working memory. The aim of the …
Is XXE the new SQLi?
Many modern applications today use XML documents to transfer data between clients and servers. Due to its simplicity, XML is actually great for this …
Kali Linux introducing Emergency Self Destruct feature to Full Disk Encryption
In an Emergency situation, triggering the nuke password from boot screen will delete all the key slots and makes the data on the drive inaccessible. …
23-year-old Stack overflow vulnerability discovered in X11 Server
At the 30th Chaos Communication Congress (CCC) in Germany, Ilja van Sprundel, a [security researcher gave the presentation(http://thehackernews.com/2…
Windows Zero-Day vulnerability used in targeted attacks against 28 Embassies
TrendLab malware analysts confirmed that recent Windows Zero-Day vulnerability was exploited in cyber attack against Embassies in a Middle Eastern ca…
VSAT terminals are opened for targeted cyber attacks
VSAT terminals (very-small-aperture terminal) used for satellite communications are vulnerable to external cyber attacks, the discovery was made by s…
The mojeID service has a new website with a large number of improvements
The CZ.NIC Association unveiled the new version of the mojeID website today. Changes include the graphic design of the web presentation and its overa…
New version of Knot DNS server supports automatic DNSSEC signing
The greatest improvement to this purely authoritative DNS server is support for automatic DNSSEC signing. Version 1.4.0 also has a significantly lowe…
Tajikistan's Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced
Website of Tajikistan's Domain registrar (domain.tj) authority has been hacked, that allows the hacker to access domain control panel.
Researcher Uncovers Backdoor In DSL Routers
Flaw in DSL routers could give attackers full, unauthenticated administrative access, researcher says.
Curse Hits World of Warcraft Players with Malware
A malicious Trojan hiding in a legitimate World of Warcraft (WoW) add-on is infecting players’ accounts.
Windows Autorun
When someone suspecting that a malware activity that may exist in a system or a compromised system one of the most obvious places to check is the sta…
Malicious advertisements served via Yahoo
Clients visiting yahoo.com received advertisements served by ads.yahoo.com. Some of the advertisements are malicious.
Snapchat To Update App In Wake Of Breach
App vendor planning new version that lets users opt out of appearing in 'beleagured Find Friends' feature.
Netgear, Linksys and many other Wireless Routers have a backdoor
The French hacker Eloi Vanderbeken discovered the presence of a backdoor in principal models of routers including Netgear, Linksys and Cisco.
The pre…
Vulnerability Assessment with Nexpose
Nexpose is one of the leading vulnerability assessment tools. The Nexpose community edition is a free program and the other editions are paid ones. I…
I will hack your systems with an SD Card
The hardware hacker Bunnie Huang presented at the Chaos Compute Club Congress how to exploit SD cards microcontroller for malicious purposes.
Cyber Thieves Are Stealing Money From ATMs With Infected USB Sticks
Cyber criminals are exploiting new techniques to attack ATMs (Automated Teller Machines) infecting the devices with specifically crafted malware.
New Member of the CZ.NIC Association
The company ADAPTIVITY s. r. o. is a new member of the CZ.NIC Association as of 1 January 2014. ADAPTIVITY s. r. o. become a member of the Chamber of…
2013
NTP Reflection Attack
Symantec has notice in the last few weeks that there is a significant NTP reflection attacks. NTP is Network time protocol and it’s used to synch the…
Snapchat Users Menaced By A Couple Of Malicious Exploits
Gibson Security revealed that The ‘Find Friends’ exploit and the ‘Bulk Registration’ Exploit menace the security and privacy of million of Snapchat u…
More than 1,400 Financial institutions in 88 Countries targeted by Banking Trojan in 2013
The financial malware's were the most popular threat this year. Money is always a perfect motivation for attackers and cyber criminals who are contin…
Samsung KNOX Security Software Embedded in Galaxy S4 Vulnerable, Researchers Say
Researchers have reportedly found a vulnerability in a security system embedded in Samsung's Galaxy S4 smartphone that could allow an attacker to ste…
Suspicious Mobile App Sends Bulk Messages
Promises of easy money should be taken with a grain of salt – especially when they come with a request to download a mobile app.
CryptoLocker Ransomware Now Spreading Through Removable Drives
During the past few months, advancements in CryptoLocker put ransomware on the public's radar in a major way.
DGA.Changer Malware: Changing Seed to Evade Sandbox
On October 24, adversaries hacked php.net and deployed an exploit kit, which served five different malware types. While the attack received extensive…
Library of the Technical University of Liberec Offers mojeID Validation
Validated mojeID accounts can currently be used at e-shops requiring age verification, community portals or portals of various cities and municipalit…
Hackers Can Covertly Activate MacBook Webcams Without Warning Light
Recently, a Hacker has managed to take nude photos of his high school classmate by covertly activating the Webcam in Macbook without turning on the w…
Facebook Launches the Magic Button: Scammers, Here’s our Official Dislike for You
Facebook launched the dislike option, which is so far available in the Messenger app. We can finally express disgust and discontent at the things our…
Government approves requirement to implement DNSSEC and expand IPv6 support
The Czech Republic is probably the first country in the world to require mandatory DNSSEC protection for all public administration sites.
Prague, 19 D…
Adallom Discovered an Important Office 365 Token Disclosure Vulnerability
Adallom demonstrated that exploiting an Office 365 Token Disclosure Vulnerability an attacker can steal organisations SharePoint credentials.
Bad Version of Vulna Active on Google Play – in GTA V PC Countdown
GTA V PC Countdown, a rather popular application on Google Play, incorporates a vulnerable version of ad-serving framework AppLovin, also known as Vu…