2013
10 Facts: Secure Java For Business Use
Is Java safe to use? That's the refrain heard after every round of new zero-day vulnerabilities that get spotted in Java, followed days or weeks late…
Linksys Routers Vulnerable to Remote Ownage
Successful exploitation of a Cisco Linksys WRT54GL model gives the attacker root access on the locally installed Linux-based firmware. The vulnerabil…
Facebook Graph Search is an dangerous tool for phishing attacks
Graph Search makes it easier for cyber criminals to gather relevant details that can be used to target phishing attacks more effectively.
Stylometric analysis to track anonymous users in the underground
According an interesting study presented at last edition of Chaos Communication Congress in Germany, up to 80 percent of certain anonymous undergroun…
Critical Java Exploit Spreads like Wildfire; No Fix Available
Until we come up with a fix for that, it would be a great idea to flush Java off your computer or, at least, to turn off the Java plugin for the brow…
The .CZ Domain Celebrates Its 20th Birthday
On Sunday, 13 January 2013, it will be exactly 20 years since the family of top-level national domains was extended by the .CZ suffix.
Prague, 10 Janu…
New Android Malware Steals Personal Data
Symantec has identified new malware targeting Google Android devices that collects personal data. The malware, detected as Android.Exprespam, is s…
Yahoo Mail XSS Vulnerability Could Affect Millions of Accounts
Security researcher Shahin Ramezany developed an XSS proof-of-concept exploit that he claims puts some 400 million Yahoo Mail users at risk of having…
Reflected XSS vulnerability affects Millions of sites hosted in HostMonster
Ramneek Sidhu has discovered Reflected XSS Vulnerability in one of the biggest webhosting site "HostMonster" (hostmonster.com). Just like in the prev…
Ondřej Filip manages an international centre for Internet domains
The non-profit organisation DNS-OARC, where Ondřej Filip has held the position of director, associates the key players in the field of the research, …
Microsoft issues tool to repair Internet Explorer Zero-Day Security Vulnerability
The tool is meant to address a vulnerability discovered in the wild roughly a week ago. According to Microsoft, the issue affects IE versions 6, 7 an…
2012
TheAndroid.DDoS.1.origin, a new malware detected on Android mobile
One of the principal features of the malware is its capability to transform the mobile device in a bot to conduct DDoS attack. Once the C&C server se…
Ceska sporitelna warns about a new type of computer virus
New virus can ask you to insert code from SMS message during login or during your work in SERVIS 24 Internetbanking service.
CZ.NIC and NSA signed a new Memorandum of Cooperation
The new Memorandum will enter into force on 1 January 2013.
On Wednesday, 19 December 2012, a new Memorandum was signed by the CZ.NIC Association and …
Vulnerabilities in SCADA systems
Pierluigi Paganini shows in his article ways, how easy can attackers break into these systems.
Internet Explorer flaw allows Hackers to Track your Mouse
A vulnerability in different versions of Microsoft‘s widely used browser Internet Explorer can allow hackers to [track the movements of your mouse](h…
VMware Patches Critical Vulnerability In Server Software
VMware on Thursday fixed a critical directory traversal vulnerability (CVE-2012-5978) in its View server products, which if exploited, could enable a…
Macs Hit by New Wave of Money-Stealing Malware
Apple users who think they're immune to malware and other bugs need to pay attention: A new Trojan is infecting Apple computers in order to obtain vi…
Rare critical Word vuln is the star of December Patch Tuesday
All currently supported operating systems (including Windows 8 and Windows RT) will need patching. The updates feature critical updates for Redmond's…
Thieves Hack Directly Into ATM
Criminals in Brazil have figured out an innovative new way to rip off ATMs that puts other techniques to shame.
Are you aware of the 12 scams of Christmas?
Christmas is coming, but many still don't know how to identify a secure shopping site. For czech users we can suggest to look at this website too.
New Members of the CZ.NIC Association
The companies ALENSA, s. r. o. and igloonet, s. r. o. are new members of the CZ.NIC Association as of 1 December 2012. ALENSA and igloonet become mem…
Domain google.ro was hijacked yesterday morning
Google Romania (google.ro) was hacked on the 28th of November 2012 by the algerian hacker MCA-CRB.
HSTS is becoming the new Internet standard
Technology HTTP Strict Transport Security, which prevents certain types of attacks against HTTPS is now done, but support is still very small.
What can do the Audio Jack
Hardware based malware steals contacts from all mobile platforms using only the Audio Jack!
W32.Narilam, the malware that hit databases in Middle East
Symantec has published an interesting alert on a new worm named W32.Narilam that has been designed to damage corporate databases. The geographic area…
Linux users are under attack by mysterious rootkit
Security researchers have found an experimental rootkit probably focused at a narrowly defined Debian users.
Malware Targeting Windows 8 Uses Google Docs
Backdoor.Makadocs arrives as a Rich Text Format (RTF) or Microsoft Word document. This document does not utilize any vulnerability in order to drop i…
Localized Dorkbot malware variant spreading across Skype
The malware spreads by messaging to all of your contacts with a bogus "new profile picture message". It targets all the major web browsers and is als…
The .CZ Domain Is Now a Millionaire
Today at 17:24 pm, domain name number 1,000,000 appeared in the register of the Czech national domain .CZ maintained by the CZ. NIC Association.
Pragu…
Windows 8 Vulnerable to 15% of the Web's Common Malware
One test system had Windows Defender activated and the other did not. On the system with Windows Defender, 61 different malware variants successfully…
Opera Users Exposed to BlackHole through Browser Homepage
The hidden and obfuscated piece of code in the Opera Portal homepage inserts an IFrame that loads malicious content from an external source. If the O…
Skype, serious vulnerability found
The Russian Blog Pixus.ru has published a post where it is described a workaround to hijack the accounts of the famous application. The vulnerability…
The mojeID Service Has 100,000 Users
Not only the number of mojeID users keep growing; there are also increasingly more websites supporting its login system.
Prague, 15 November 2012 – Th…
Important security updates arrive for all Windows users
On its November Patch Tuesday, Microsoft has closed critical holes in all currently supported versions of Windows – from Windows XP SP3 to the newly …
Mobile Threat report from F-Secure Labs for Q3 2012
Android malware still dominate the mobile threat landscape.
Siemens software targeted by Stuxnet still full of holes
Software made by Siemens and targeted by the Stuxnet malware is still full of other dangerous vulnerabilities, according to Russian researchers whose…
Experts Warn of Zero-Day Exploit for Adobe Reader
Software vendor Adobe says it is investigating claims that instructions for exploiting a previously unknown critical security hole in the latest vers…
New malware is focused on image-stealing
Malware is usually focused on stealing passwords, personal and banking information. This new type of malware "PixSteal" is focused on file types JGP,…
The big, fake, Anonymous ransomware
Swiss security blog abuse.ch has revealed to have found ransomware currently circulating in the wild infecting many Windows users.
Millions of Home Networks Infected by ZeroAccess Botnet
A report from network-based security and analytics vendor Kindsight says that 2.2 million home networks were infected with the ZeroAccess botnet in Q…
How Banking Trojans Can Rob You Blind
Whether it's viruses, spyware or any other type of malware, computer owners are being attacked from every angle every day. It's getting harder to kee…
First December entry into force the new Rules of Registration
New version of .cz Registration Rules will be in effect as of 1 December 2012.
New Member of the CZ.NIC Association
The company Klíč, spol. s r. o. is a new member of the CZ.NIC Association as of 1 November 2011. Klíč become a member of the Chamber of domain name …
Malicious program from Czech Republic locked users PC for ransom.
This type of malware works as follows: once installed on your computer, it will lock the desktop and for unlock the user requires a smaller amount of…
Open DNS resolvers increasingly abused to amplify DDoS attacks
Open and misconfigured DNS (Domain Name System) resolvers are increasingly used to amplify distributed denial-of-service (DDoS) attacks, according to…
CZ.NIC Representative Elected to the Board of the Internet Domains Analysis and Research Centre
Domain Name System Operations, Analysis, and Research Center (DNS-OARC) has elected Ondřej Filip, executive director of the CZ.NIC Association, to it…
Why Phishing Works And How To Avoid Becoming a Victim
Phishing is a form of social engineering that attempts to steal sensitive information. An attacker’s goal is to compromise systems to obtain username…
FBI warns commercial spyware has made jump to Android
"FinFisher is a prime example of what is so risky about government agencies using software tools that can be abused for malicious purposes," Stephen …