News

Started today, there will be published new series of articles on the Root.cz websites. This series will point at internet security. First article is …

Attackers are exploiting a vulnerability in a popular website configuration tool (Horde/IMP Plesk) to gain remote access to web servers, said Cisco r…

Extremely dangerous vulnerability affects the mobile application of this communication platform on the Andriod operating system.

Through the recently repaired vulnerability has been infected a large number of computers.

NewSeaSims, a website where Sims players can download custom content for their characters, has suffered a breach which resulted in the compromise of …

Cyber crooks have been misusing the reputation of the popular online source code repository SourceForge (sourceforge.net) and have been pushing out m…

Security firms have been tracking an escalating number of "brute force" attacks against WordPress installations, which have been trying out logins su…

Nearly 90 percent of unauthorized software for popular computer games are infected with malware. The list includes unpirated "cracked" games, license…

E-mail is send with forged sender address reply@vodafone.xx, where xx is national domain, probably identical with national domain of recipient. Forge…

In our today blogpost on blog site of CZ.NIC association we deal with our experience with one link, which is spreading via skype.

Hackers love to attack Java. Why? Well, not only because it is full of holes, but because it’s everywhere, embedded on endpoints, Web browsers, mobil…

The most attentive readers and those who are interested in the main trends of virtual currency will surely have noticed the soaring of prices of Bitc…

The maintainers of the PostgreSQL database have released an urgent patch to cope with a vulnerability that allows remote users to crash servers.

The malware infects Linux servers running Apache 2.2.2 and above. The malware injects iFrames into the sites hosted on that compromised box. These si…

Federal law enforcement officials are reporting a rise in attacks in which the telephone lines of emergency call centers were flooded with bogus call…

Your Photos? LOL - if you see this message with a link, don't click it as it will install the Dorifel virus. It looks like that the persons behind Do…

Another wave of spam messages trying to get users to click on an attached link has appeared. The text of the spam is similar to this: “Hi, s…

Last some days some czech bank find out on their ATMs stickers which encourage users to say their PIN aloud instead to put them via keyboard.

By using JavaScript, links can be modified in such a way that even the most attentive user will not notice anything amiss. This can be exploited by a…

The malware, vSkimmer, can detect the card readers, grab all the information from the Windows machines attached to these readers, and send that data …

Cybercriminals are currently mass mailing tens of thousands malicious ‘CNN Breaking News’ themed emails, in an attempt to trick users into clicking o…

Let us see the various approaches currently available for testing of Java based thick client applications and their respective drawbacks.

High-end DSLR cameras come with a multitude of features for sharing pictures, but do they really reveal the contents only to their owners? According …

The Origin platform allows malicious users to exploit local vulnerabilities or features, by abusing the Origin URI handling mechanism. In other words…

Huawei has been accused of poor security practice by Russian researcher Nikita Tarakanov, who told Black Hat Europe last week that the vendor's 3G an…

From today morning greatest czech news servers are under attack, which have knocked out their websites.

Developer Feross Aboukhadijeh has published a simple technique that allows a web page to fill up a hard disk without any action on the user's part. I…

Virtualization has eased many aspects of IT management but has also complicated the task of cyber security.The nature of virtualization introduces a …

A Polish security firm known for rooting out Java vulnerabilities has reported two new bugs in the browser plug-in to Oracle. Vulnerabilities affect …

Mobile banking apps rely on tools such as HTTPS and sandboxing to keep safe, but operating system vulnerabilities may render such measures useless an…

Adobe and Microsoft each have issued security updates to fix multiple critical vulnerabilities in their products. Adobe released updates for Flash Pl…

How does it works, how to protect yourself against it and what to do if you get infected?

The number of free public Wi-Fi hotspots is growing, but not every hotspot can provide the protection of a private home network. Your notebook, table…

An unusual new strain of ransomware makes good on its threat, doing what the majority of other varieties only claim to do. The Trojan actually encryp…

First, and foremost, you need to make sure you've blocked UPnP at your Internet gateway. Specifically, you need your firewall to block any system fro…

Over 80 million unique IPs were identified that responded to UPnP discovery requests from the internet. The risk is an attacker could “execute arbitr…

Siemens S7 programmable logic controllers, the same PLC family exploited by the Stuxnet malware, are in the crosshairs of a password-cracking tool th…

Do you have anti-virus software on your computer? If you do, congratulations. You have taken the first step toward real computer security. However, m…

Printers that use popular print server software sold by Hewlett-Packard are vulnerable to attacks that can bypass built-in biometric defenses, recove…

Microsoft has released a fix for a critical remote code execution flaw in Internet Explorer that is being actively exploited. The fix, MS13-008, did …

Is Java safe to use? That's the refrain heard after every round of new zero-day vulnerabilities that get spotted in Java, followed days or weeks late…

Successful exploitation of a Cisco Linksys WRT54GL model gives the attacker root access on the locally installed Linux-based firmware. The vulnerabil…

Graph Search makes it easier for cyber criminals to gather relevant details that can be used to target phishing attacks more effectively.

According an interesting study presented at last edition of Chaos Communication Congress in Germany, up to 80 percent of certain anonymous undergroun…

Until we come up with a fix for that, it would be a great idea to flush Java off your computer or, at least, to turn off the Java plugin for the brow…

Symantec has identified new malware targeting Google Android devices that collects personal data. The malware, detected as Android.Exprespam, is s…

Security researcher Shahin Ramezany developed an XSS proof-of-concept exploit that he claims puts some 400 million Yahoo Mail users at risk of having…

Ramneek Sidhu has discovered Reflected XSS Vulnerability in one of the biggest webhosting site "HostMonster" (hostmonster.com). Just like in the prev…

The tool is meant to address a vulnerability discovered in the wild roughly a week ago. According to Microsoft, the issue affects IE versions 6, 7 an…

One of the principal features of the malware is its capability to transform the mobile device in a bot to conduct DDoS attack. Once the C&C server se…