2012
Ceska sporitelna warns about a new type of computer virus
New virus can ask you to insert code from SMS message during login or during your work in SERVIS 24 Internetbanking service.
Vulnerabilities in SCADA systems
Pierluigi Paganini shows in his article ways, how easy can attackers break into these systems.
Internet Explorer flaw allows Hackers to Track your Mouse
A vulnerability in different versions of Microsoft‘s widely used browser Internet Explorer can allow hackers to [track the movements of your mouse](h…
VMware Patches Critical Vulnerability In Server Software
VMware on Thursday fixed a critical directory traversal vulnerability (CVE-2012-5978) in its View server products, which if exploited, could enable a…
Macs Hit by New Wave of Money-Stealing Malware
Apple users who think they're immune to malware and other bugs need to pay attention: A new Trojan is infecting Apple computers in order to obtain vi…
Rare critical Word vuln is the star of December Patch Tuesday
All currently supported operating systems (including Windows 8 and Windows RT) will need patching. The updates feature critical updates for Redmond's…
Thieves Hack Directly Into ATM
Criminals in Brazil have figured out an innovative new way to rip off ATMs that puts other techniques to shame.
Are you aware of the 12 scams of Christmas?
Christmas is coming, but many still don't know how to identify a secure shopping site. For czech users we can suggest to look at this website too.
Domain google.ro was hijacked yesterday morning
Google Romania (google.ro) was hacked on the 28th of November 2012 by the algerian hacker MCA-CRB.
HSTS is becoming the new Internet standard
Technology HTTP Strict Transport Security, which prevents certain types of attacks against HTTPS is now done, but support is still very small.
What can do the Audio Jack
Hardware based malware steals contacts from all mobile platforms using only the Audio Jack!
W32.Narilam, the malware that hit databases in Middle East
Symantec has published an interesting alert on a new worm named W32.Narilam that has been designed to damage corporate databases. The geographic area…
Linux users are under attack by mysterious rootkit
Security researchers have found an experimental rootkit probably focused at a narrowly defined Debian users.
Malware Targeting Windows 8 Uses Google Docs
Backdoor.Makadocs arrives as a Rich Text Format (RTF) or Microsoft Word document. This document does not utilize any vulnerability in order to drop i…
Localized Dorkbot malware variant spreading across Skype
The malware spreads by messaging to all of your contacts with a bogus "new profile picture message". It targets all the major web browsers and is als…
Windows 8 Vulnerable to 15% of the Web's Common Malware
One test system had Windows Defender activated and the other did not. On the system with Windows Defender, 61 different malware variants successfully…
Opera Users Exposed to BlackHole through Browser Homepage
The hidden and obfuscated piece of code in the Opera Portal homepage inserts an IFrame that loads malicious content from an external source. If the O…
Skype, serious vulnerability found
The Russian Blog Pixus.ru has published a post where it is described a workaround to hijack the accounts of the famous application. The vulnerability…
Important security updates arrive for all Windows users
On its November Patch Tuesday, Microsoft has closed critical holes in all currently supported versions of Windows – from Windows XP SP3 to the newly …
Mobile Threat report from F-Secure Labs for Q3 2012
Android malware still dominate the mobile threat landscape.
Siemens software targeted by Stuxnet still full of holes
Software made by Siemens and targeted by the Stuxnet malware is still full of other dangerous vulnerabilities, according to Russian researchers whose…
Experts Warn of Zero-Day Exploit for Adobe Reader
Software vendor Adobe says it is investigating claims that instructions for exploiting a previously unknown critical security hole in the latest vers…
New malware is focused on image-stealing
Malware is usually focused on stealing passwords, personal and banking information. This new type of malware "PixSteal" is focused on file types JGP,…
The big, fake, Anonymous ransomware
Swiss security blog abuse.ch has revealed to have found ransomware currently circulating in the wild infecting many Windows users.
Millions of Home Networks Infected by ZeroAccess Botnet
A report from network-based security and analytics vendor Kindsight says that 2.2 million home networks were infected with the ZeroAccess botnet in Q…
How Banking Trojans Can Rob You Blind
Whether it's viruses, spyware or any other type of malware, computer owners are being attacked from every angle every day. It's getting harder to kee…
Malicious program from Czech Republic locked users PC for ransom.
This type of malware works as follows: once installed on your computer, it will lock the desktop and for unlock the user requires a smaller amount of…
Open DNS resolvers increasingly abused to amplify DDoS attacks
Open and misconfigured DNS (Domain Name System) resolvers are increasingly used to amplify distributed denial-of-service (DDoS) attacks, according to…
Why Phishing Works And How To Avoid Becoming a Victim
Phishing is a form of social engineering that attempts to steal sensitive information. An attacker’s goal is to compromise systems to obtain username…
FBI warns commercial spyware has made jump to Android
"FinFisher is a prime example of what is so risky about government agencies using software tools that can be abused for malicious purposes," Stephen …
Social networks users under attacks
After attacks at Facebook users, there is now very similar issue which aims at LinkedIn users - "invitations to connect" from prominent businesse…
Domain google.ie has been Hijacked! Can this happen in .cz domain too?
Hijack of google.ie domain and information how can domain holders in Czech domain registry protect their domains against the same attack. That is a t…
CSIRT.CZ warns of phishing e-mails to targeted customers CSOB
Tonight were sent a large amount of phishing e-mails to customers of ČSOB bank. CSIRT.CZ and the ČSOB bank are working on eliminating sources of atta…
Phishers Favor Friday for Attacks
If you and your co-workers are looking forward to Friday, you are not alone – phishers are looking forward to it as well.
3G flaw makes any device vulnerable to tracking
A flaw in the way in which 3G-enabled mobile phones and other devices deal with 3G protocol logic means that a third party could track a device at an…
Be aware! Trojan disguised as image delivered via Skype messages
The spamming campaign has surfaced in the last few days and is being propagated via compromised Skype accounts. The offered links don't lead to an…
Humans The weakest link in cyber security
Interesting presentation Humans The weakest link in cyber security from Mark Johnson, chairman of the Risk Management Group, was presented on Cyber T…
Adobe Code Signing Certificate used to sign malware
On Thursday Adobe came out in a blog post stating an "inappropriate use of an Adobe code signing certificate for Windows". Apparently they discovere…
New bug in the software for Samsung mobile phones
Some Samsung phones with Android can be reset to factory default by clicking on links
Today was notified the new critical Java flaw
This bug affects not only all latest versions of Oracle Java SE.
Malware programmers start using Go
Google's Go programming language has a growing number of users and, according to a report from Symantec, that number now includes some malware writer…
Today will be release a cumulative update for Internet Explorer
On September 21 will be released a cumulative update for Internet Explorer through Windows Update. We recommend install this update immediately.
Next part of series for webserver administrators
In this tutorial you will see the principles on how to secure your phpMyAdmin. PHP has a lot of badly coded scripts which can be abused by malicious …
ICS-CERT Warns of Hard Coded Password in ORing Industrial Control Systems
Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access, a…
Microsoft Offers Guidance for Internet Explorer Zero-Day
In response to reports of a Zero-Day vulnerability targeting all versions of Internet Explorer, with the single exception of Internet Explorer 10, Mi…
Be aware of LinkedIn-themed spam
Spoofed LinkedIn emails notifying recipients of messages requiring their attention are not a new occurrence, but recently rent out ones seem to be mo…
Manipulated data causes BIND DNS servers to crash
Some versions of BIND contains a security vulnerability that allows attackers to crash it using specially crafted data records.
Permanent cybersecurity team established for EU institutions
European institutions on Wednesday beefed up cybersecurity efforts by establishing a permanent Computer Emergency Response Team (CERT-EU). CERT-EU…
Everything You Always Wanted to Know About Passwords * But Were Afraid to Ask
First part of series about authentication deal with a world of passwords. In article you can read why avoiding trivial passwords is good idea and how…