News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2012

Microsoft warns of critical Oracle code bugs in Exchange

Microsoft last week warned IT administrators that critical vulnerabilities in code licensed from Oracle could give attackers access to Exchange Serve…

How the script kiddies attacks and how to detect it

This is the name of new article on our blog, which prepared for you a colleague Jirka Machálek

Hackers reveal critical vulnerabilities in Huawei routers at Defcon

Security researchers disclosed critical vulnerabilities in routers from Chinese networking and telecommunications equipment manufacturer Huawei at th…

Fraudsters tempt Olympic fans with bogus streaming websites

The Olympic Games in London have sparked interest from fraudsters, with a raft of sites supposedly offering live video streams of events.

New malware use Facebook and trade on from children charity

Be aware of new kind of cheats on Facebook. This time is even in more languages.

Siemens fixed vulnerabilities which abused the Stuxnet computer worm

German conglomerate Siemens on Monday said it has fixed vulnerabilities in its software products that appeared to be identical to those that allowed …

Česká spořitelna warns their clients

Česká spořitelna preventive warns their clients on phishing e-mails.

How to Prevent Social Engineering Attacks

True words, which every employee should realize. "Every employee no matter what their function is – they also have the duties of protecting the compa…

DDoS Attacks: What They Are, and How to Defend Against Them

Short summary of information about DDOS attacks and some ways for defending them.

Serious remote vulnerability in DNS server NSD 3

Our colleagues from CZ.NIC Labs team found serious remote vulnerability which makes the way for remote knock down of NSD 3 server. There is also atta…

Attacks via iframe

Attacks via iframe, its uncovering and recovery after attack. Thats a topic of today's blogpost on our blog sites. As bonus you can win t-shirt with …

The web browser built into Amazon's Kindle Touch contains a serious security hole

The web browser built into Amazon's Kindle Touch eBook reader contains a serious security hole: when a user navigates to a specially crafted web page…

DNSenum - tool for DNS information gathering

Information about tool for DNS information gathering. This tool can be useful in the information gathering stage of a penetration testing.

Microsoft advises disabling Windows Gadgets amid vulnerability fears

Microsoft is advising system administrators to disable the Windows Sidebar and Gadgets in supported versions of its desktop operating system due to s…

How to have unique passwords for each website and yet remember them easily?

One of possible ways how to solve issue of unique access passwords on the web services.

Microsoft revokes trust almost in 30 of its own certificates

Microsoft Security Advisory 2728973 announces that Microsoft is revoking trust in in a number of Microsoft certificates. A list of 28 Microsoft inter…

Last point in DNSChanger virus issue

Our collegue Michal Prokop inform on our blog site how users uses our diagnostic site www.dns-ok.cz.

To be or not to be on Internet, this is what is going on

Mr. Johannes B. Ullrich, Ph.D. from SANS Technology Institute published a news that points to the possibility of disconnection from the Internet, tha…

Beware of new application Find and Call

There was found another application which try to steal data from the mobile devices. The application is called ‘Find and Call’ and can be found in th…

A new security threat in Android 4

A research team at North Carolina State University led by Professor Xuxian Jiang recently announced that a security flaw in Android Version 4.0.4 and…

CSIRT.CZ Warns Against a High-Risk Configuration of RouterOS

In a recent incident in which we witnessed several DNS amplification attacks, we have been informed that some of the DNS servers involved were runnin…

Smart TVs are vulnerable to attacks

This article brings information about vulneralibities of smart TVs.

10 vulnerable web applications you can play with

In this article at pentestlab.org are ten web applications, which are given for vulnerabilities testing purpose.

Phishing is not just for banks

In this article at blogs.technet.com are interesting examples of phishing websites.

In this article at blogs.technet.com are interesting examples of p…

Beware of fake antivirus program Android Security Suite Premium

As is recommended by author of this article at blog.webroot.com site, when you downloading Android apps choose them wisely and download from a truste…

MySQL liner hack gives root access without password

The latest news that has hit the streets is the occurence of the easiest hack ever, if you have local shell access (any user privelege level) and you…

Hackers spread trojan following Internet Explorer patch

If you have not installed new updates from Microsoft yet, it is time to do it. More information about the trojan Naidu find in this article at scmaga…