2020
New Member of the CZ.NIC Association
The company Modrá Busina s. r. o. is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of January 1. The association has ac…
2019
Accept or reject diacritics in Czech domains? The public opinion on this issue is unchanged
For the seventh time in a row, the Czechs showed no interest in the option of registering .CZ domains with diacritics. It is evidenced by the results…
Elections To The Association's Collegium
At the general meeting held on December 4, Tomáš Košňar and Zbyněk Pospíchal were elected the members of the Collegium (both for the ISP chamber), a…
The General Assambly has elected new-old members of the Board of Directors
Marek Antoš, Tomáš Košňar and Martin Kukačka were re-elected as members of the Board of Directors of the CZ.NIC Association for another three year te…
New Member of the CZ.NIC Association
The company Adytia Innovation OÜ is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of December 1. The association has ac…
IANA has appointed Ondřej Filip a member of the prestigious TCR group
Respected experts from Trusted Community Representatives group (TCR) supervise the process of signing the root zone and are ready to resume its opera…
After a great success on Indiegogo, the modular router Turris MOX is coming to the market
The basic Turris MOX Start module costs EUR 169 and the individual extension modules are available for prices ranging from EUR 45 to EUR 109. The pr…
International Organization of Domain Registry Administrators Honored CZ.NIC Researcher's Work
This week, Maciej Andziński, a research of CZ.NIC Labs, received the R&D Working Group Champion Award from CENTR, which associates domain registries …
New Member of the CZ.NIC Association
The company Mailkit s. r. o. is a new members of the CZ.NIC association (chamber of Domain Name Holders) as of October 1. The association has actuall…
Vulnerability in Exim mail server
Newly released version of Exim mail server patches remote code execution vulnerability in versions up to and including 4.92.1. The vulnerability (CVE…
Critical vulnerability in Cisco IOS XE system
Cisco released patches for a critical vulnerability (CVE-2019-12643) with a CVSS score of 10. The vulnerability is due to an improper check performe…
Apple released an emergency patch to address CVE-2019-8605 iOS flaw
Recently, Apple accidentally unpatched a vulnerability it had already fixed, making current versions of iOS vulnerable to hackers and allowing the ja…
Code Execution Flaw in QEMU Mostly Impacts Development, Test VMs
The open source machine emulator QEMU is affected by a vulnerability that can lead to a denial-of-service (DoS) condition or arbitrary code execution…
Serious Security Vulnerability Found In Bitdefender Antivirus Free 2020
Antivirus software supposedly provide robust security to users against cyber attacks. However, like all other tools, these tools can also suffer secu…
Hackers Target Vulnerabilities in Fortinet, Pulse Secure Products
Recently disclosed vulnerabilities affecting enterprise virtual private network (VPN) products from Fortinet and Pulse Secure have been exploited in …
How Activity Logs Help WordPress Admins Better Manage Website Security
Managing a WordPress website can sap a lot of your time and energy, which otherwise you'd spend on managing your business.
A new Zero-Day in Steam client impacts over 96 million Windows users
A new zero-day vulnerability in the for Windows impacting over 96 million users was disclosed by researcher Vasily Kravets.
Flaws in 4G Routers of various vendors put millions of users at risk
Security expert discovered multiple flaws in 4G routers manufactured by several companies, some of them could allow attackers to take over the device…
Infecting Canon EOS DSLR camera with ransomware over the air
A researcher discovered 6 flaws in the image transfer protocol used in Canon EOS 80D DSLR cameras that allow him to infect the device with ransomware…
Gaining remote code execution using a tainted SQLite database
Experts demonstrated that SQLite database can be abused by threat actors as an attack vector to execute malicious code in other apps.
Vulnerabilities in Device Drivers From 20 Vendors Expose PCs to Persistent Malware
Researchers at firmware security company Eclypsium have analyzed device drivers from major vendors and identified over 40 drivers from 20 firms conta…
Patch Your Cisco 220 smart switches now! Critical flaws exposed
Networking behemoth Cisco has rolled out an important firmware update for users of its 220 Series smart switches after a researcher discovered three …
A Zero-Day in Steam client for Windows affects over 100 Million users
Two researchers publicly disclosed a zero-day vulnerability that affects the popular Steam game client for Windows, 0ver 100 million users at risk.
Critical vulnerabilities in VxWorks system
Security researchers have discovered almost a dozen zero-day vulnerabilities in VxWorks, one of the most widely used real-time operating systems (RTO…
The Gransy company terminated its membership in the CZ.NIC association
As of today, Gransy s. r. o. is not a member of the CZ.NIC association (Chamber of Registrars). The association has currently 115 members.
Version 2.39 released
We have released the version 2.39 of the FRED registry software.
Release notes
This release contains minor enhancements, futher code refactoring and so…
ACSC Relases New Essential Eight Maturity Model
The Australian Cyber Security Centre (ACSC) has released updates to its Essential Eight Maturity Model. The model assists organizations in determinin…
Mozilla releases fixes for critical vulnerability in Firefox browser
Mozilla released new versions of it's browser Firefox (67.0.3) and Firefox ESR (60.7.1) to address critical vulnerability (CVE-2019-11707) that is be…
Bitdefender releases decryptor for the newest versions of GandCrab ransomware
Antivirus company Bitdefender with cooperation of several law enforcement agencies released decryptor for the newest versions of GandCrab ransomware.…
Critical vulnerability in Exim e-mail server
Email server Exim contains a critical remote code execution vulnerability (CVE-2019-10149). An attacker could exploit the vulnerability to take cont…
The long-awaited fourth edition of the IPv6 book is on sale
The PDF electronic version of the book is available for free download at http://knihy.nic.cz, and the printed version can be purchased from most book…
Ondřej Filip of CZ.NIC entered the Cybersecurity Hall of Fame
The award was handed by Juraj Šedivý, the Chairman of the Board of Directors of CETIN. The first laureate of the award was Jaroslav Šmíd from NÚKIB, …
Ondřej Filip has been elected a Board member of the European Internet Registry administrator
RIPE NCC is primarily a regional Internet registry (RIR) that provides services to more than 22,000 members, primarily Internet Service Providers (IS…
Core security features of the Elastic Stack are now free
Elasticsearch announced that the core security features of the Elastic Stack are now free. This means that users can now encrypt network traffic, cre…
Microsoft patches critical vulnerability in Remote Desktop Services
Microsoft releases security patches to address critical remote code execution vulnerability (CVE-2019-0708) that exists in Remote Desktop Services fo…
Vulnerability in Linux kernel allows remote code execution
Linux systems based on kernel versions prior to 5.0.8 are affected by a race condition vulnerability CVE-2019-11815 leading to a use after free that …
New collision attack on SHA-1 hashing algorithm
Attacks on the SHA-1 hashing algorithm just got a lot more dangerous last week with the discovery of the first-ever "chosen-prefix collision attack,"…
THE NEW FINANCIAL DIRECTOR OF CZ.NIC IS TOMÁŠ FUŇKA, THE HARDWARE DIVISION IS LED BY MICHAL HRUŠECKÝ
Tomáš Fuňka is an experienced economist and financial auditor, who, in his new position, will now be responsible for the European projects team. Mich…
Mozilla releases fix for disabled add-ons issue in Firefox
Mozilla has released an update today for Firefox (66.0.4) and Firefox ESR (60.6.2) that fixes the issue with an expired signing certificate that disa…
New Member of the CZ.NIC Association
The company Pe3ny Net s. r. o. is a new members of the CZ.NIC association (chamber of ISP) as of 1 May 2019. The association has actually 116 members…
Multiple vulnerabilities in Dell EMC iDrac web interface
Web management interface iDrac from Dell EMC contains several vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take …
ISC releases BIND security updates
The Internet Systems Consortium (ISC) has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain (BIND). A re…
Organizers of the CSNOG 2019 meeting published the first abstracts and launched registration
The aim of the meeting that will take place on May 27 and 28 in Brno is to enable the experts to exchange experience, discuss the current issues and …
Drupal Releases Security Updates
Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilitie…
Vulnerability in multiple enterprise VPN apps
Multiple VPN applications store the authentication and/or session cookies insecurely in memory and/or log files. If an attacker has persistent access…
New Member of the CZ.NIC Association
The company VIVO CONNECTION, spol. s r. o. is a new members of the CZ.NIC association (chamber of ISP) as of 1 April 2019. The association has actual…
The IETF 104 meeting started in Prague today, the CZ.NIC Association is hosting it
The main objective of the IETF’s regular meetings is to provide in-person contacts of members of individual working groups. The active members of the…
Organizers of CSNOG 2019 extend the call for abstracts until March 29
Interested Internet access providers, telecom and computer network operators, domain registrars or technical enthusiasts can sign up through the even…
Ladislav Lhotka from CZ.NIC is signed under the new Internet standard
The new Internet Standard RFC 8528 defines an optional extension of YANG for modeling configuration and status data. This extension, called “schema m…
SPARTA Project brings a new approach to cyber security research, innovation and training in Europe
Three important Czech partners – Brno University of Technology, CESNET and CZ.NIC – have joined the prestigious European project SPARTA.
Three importa…