News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2018

New security patches of Cisco product

Cisco has released several security patches for its products. Some of the vulnerabilties can be exploited by attacker to gain control of an affected …

New version of Chrome browser

Google has released Google Chrome version 66.0.3359.117. This version fixes vulnerabilites exploitable to take control of an affected system. Google …

FRED 2.36 released

We have released the version 2.36 of the FRED registry system.

This release contains mainly improvements of the code that don't modify functionality, …

Security fixes for Oracle products

Oracle issues security patches for its products. Security updates fixes vulnerabilities some of which may be exploited by attackers to gain control o…

Public authorities shall be protected by Turris Omnia against cyberattacks, applications are accepte

Until June 30 this year, CZ.NIC, the administrator of the Czech national domain, will accept applications for free-of-charge rental of the secure rou…

Turris MOX, a Czech router, has already received more than USD 100,000 on Indiegogo

The modular network device that boosts computer network security now also offers an 8port switch module due to popular demand.

A new Indiegogo campaig…

Microsoft Releases April 2018 Security Updates

Microsoft has released security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe PhoneGap Push Plugin, Adobe Digital Editions, Adobe InDesign, Adobe Experienc…

Turris MOX: Cutting-edge security and custom hardware configuration

The new Czech open source router from CZ.NIC, a non-profit association, has been launched on the Indiegogo crowdfunding platform. The router offers t…

Security patches for OpenSSL

New updates for OpenSSL fix a vulnerability that could lead to Denial of Service attack. Users of OpenSSL 1.1.0 should upgrade to 1.1.0h and users of…

Ladislav Lhotka from CZ.NIC co-authored a new internet standard

This March, the IETF released a new Internet standard RFC 8349 (A YANG Data Model for Routing Management (NMDA Version)). Authors of the new Internet…

New patches for Firefox

Mozilla issues new patches for its Firefox browser (incl Firefox ESR). Exploitation of unpatched vulnerabilities can led to crash.

A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th

Drupal Security Team confirmed that a “highly critical” vulnerability affects Drupal 7 and 8 core and announced the availability of security updates …

The Czech and Slovak network operator communities to meet at the CSNOG conference

Major Czech and Slovak Internet network organizations are preparing the first annual CSNOG (Czech and Slovak Network Operators Group) community meeti…

New vulnerabilities discovered in AMD processors

Israeli-based CTS Labs has disclosed a discovery of 13 new vulnerabilities affecting processors Ryzen and EPYC.

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Connect, and Dreamweaver. A remote attacker could exploit these…

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities CVE-2018-1050 a CVE-2018-1057 in Samba. An attacker could exploit one of thes…

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities …

Cisco releases security updates for its products

Cisco releases security updates for some of its products. A remote attacker could exploit some of these vulnerabilities to take control of an affecte…

New version of Chrome fixes security vulnerabilities

Several security bugs are being fixed in Chrome65.0.3325.146. The most serious one can cause leak of sensitive information. Automatic update is recom…

Massive Malspam Campaign Targets Unpatched Systems

Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. …

Apple security update

Apple fixed critical vulnerability (CVE-2018-4124) in Apple operating systems, that would cause them to crash from mere exposure to either of two spe…

What was 2017 like for the Czech national domain?

The CZ.NIC Association, the administrator of the Czech national domain, has published a set of statistics for 2017.

The CZ.NIC Association, the admini…

Patch for vulnerable uTorrent client

The vulnerabilities impact uTorrent Web and on a lesser scale also uTorrent Classic. BitTorrent, Inc., the company behind uTorrent, has released vers…

Critical vulnerability has been patched for PyBitmessage

PyBitmessage is the official client for Bitmessage (decentralized P2P communications protocol). The vulnerability allows attacker to remotely execu…

New version of routing daemon Quagga 1.2.3

Security patches included in Quagga 1.2.3 routing daemon fixes several vulnerabilities. In the worst case scenario a remote attacker could seize cont…

Microsoft issues security updates

Microsoft released a new set of security updates on 13th of February. Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and few …

Adobe releases security updates

New security updates are part of security bulletins APSB18-02 and APSB18-04 issued on 13th of February. One of the most knows patched products is Ado…

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address vulnerabilities in Flash Player CVE-2018-4878. A remote attacker could exploit one of these vulnerabil…

Cisco Releases Security Updates

Cisco has released an updated advisory and security updates to address a vulnerability affecting its Adaptive Security Appliance software CVE-2018-01…

The mojeID service has 600,000 users

Last year we also managed to implement mojeID to the IS STAG information system for universities, developed by West Bohemian University. The mojeID s…

Cisco Releases Security Updates for IOX XR

Cisco has released software updates to address a vulnerability in its IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9…

Hard-coded Password Lets Attackers Bypass Lenovo's Fingerprint Scanner

Lenovo has recently rolled out security patches for a severe vulnerability in its Fingerprint Manager Pro software that could allow leak sensitive da…

Mozila patches Thunderbird

Mozilla issues a patch for its e-mail client Thunderbird. The patch fixes a set of vulnerabilities one of which can be exploited to execute arbitrary…

Vulnerability in desktop apps built on Electron framework

A remote code execution vulnerability was addressed in the Electron framework, which powers highly popular desktop applications, including Slack, Sky…

New version of Chrome fixes security vulnerabilities

Several security bugs are being fixed in Chrome 64.0.3282.119. The most serious one can lead to denial of service. This version also contains mitigat…

Apple issued a number of security patches for its products

Apple patches several vulnerabilities in its products. Some of the vulnerabilities are exploitable and can lead to execution of arbitrary code from a…

Critical updates for Firefox and Firefox ESR

Mozilla issues an update for critical vulnerabilities in its web browsers Firefox 58 and Firefox ESR 52.6. At least one of the vulnerabilities allows…

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit one of these vulnerabilities to…

Oracle releases January’s patch

Oracle released the January 2018 Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle …

The .CZ domain celebrates its 25th birthday

On Saturday, January 13, it will be exactly 25 years since the family of the top-level national domains greeted the new member, .CZ

On Saturday, Janua…

Microsoft releases January’s patch

Microsoft released 56 updates that include patches for the Meltdown and Spectre vulnerabilities. The patches also addressed security issues in Window…

VMware and Apple released security updates

Apple has released security updates to address vulnerabilities in multiple products: macOS High Sierra 10.13.2,
iOS 11.2.2 and for the web browser Sa…

New attack on CPU can read arbitrary parts of system memory

New attack aims at modern processor regardless of operating system. It exploits vulnerabilities Spectre (CVE-2017-5753 and CVE-2017-5715) and Meltdow…

Updates for Android

Google issues updates for its Android operating system. It's fixing just over 30 vulnerabilities and a number of critical ones.

A new book from the CZ.NIC Edition will bring wireless communication and the Internet of Things clos

The electronic version of the book is available for free download at http://knihy.nic.cz; here you can also order it as a hard copy.

Another publicati…

Critical vulnerability in vSphere Data Protection

VMware patches several critical vulnerabilities in its vSphere Data Protection. Update fixes 3 issues of one of which can be exploited by a remote at…

2017

Mozilla issues a security update for Thunderbird

Current release of Mozilla Thunderbird 52.5.2 fixes a security vulnerability which can cause a buffer overflow on Windows machines. The vulnerability…

Microsoft Office Docs New Vessel for Loki Malware

Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evad…

Transport Layer Security (TLS) Vulnerability

The TLS vulnerability is also known as Return of Bleichenbacher's Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to …