The official website SK

The gov.sk domain is official

This is the official website of the public authority of the Slovak Republic. Official websites mainly use the gov.sk domain. Links to individual websites of public authorities can be found at this link.

This page is secured

Be careful and always make sure that you share information only through the secure website of the Slovak public administration. A secure page always starts with https:// before the domain name of the website.

About Us Old

Ransomware “goodwill” and arrested cybercriminals (Week 22)

Security researchers have uncovered ransomware that forces victims to perform socially beneficial activities. The director of the US NSA has publicly acknowledged the involvement of US military hackers in the Ukraine conflict, and widespread activity by the international security community has led to multiple arrests, infrastructure seizures, and convictions. Ransomware to help the underprivileged Cyber…

Regional workshops for senior management of health facilities

Cybersecurity in healthcare. Let’s discuss responsibilities and solutions Tuesday 21st June Bratislava 13:30 (Hotel Hilton Trnavská cesta 27/a) Wednesday 22nd June Banská Bystrica 13:30 (Hotel Lux Námestie Slobody 2) Thursday 23rd June Košice 8:30 (Hotel Hilton Hlavná 1) Programme registration, coffee presentation and discussion Rastislav Janota, Director, National Cyber Security Centre SK-CERT The pillars of…

Warning about exploitation of 0-day vulnerability in Microsoft Office – Word ms-msdt (Follina)

UPDATE 01.06.2022 at 17:20: Warning of active vulnerability exploitation and added mitigation recommendations UPDATE 31.05.2022 at 13:40: Added CVE and vulnerability mitigation method The National Cyber Security Centre SK-CERT warns of a critical 0-day vulnerability in Microsoft Office. The vulnerability is currently being actively exploited by attackers and there is a very high assumption that…

NCSC SK-CERT warns against the spread of Flubot malware

The National Cyber Security Centre SK-CERT warns against the spread of the Flubot malware, which targets mobile devices running the Android operating system. The malware is currently spreading via SMS and MMS in several EU countries and there is a high probability that attackers will also target Slovak cyberspace. NCKB SK-CERT has been tracking Flubot…

TL; DR: Persistent phishing campaign and Flubot beyond Slovakia’s borders (week 19 and 20)

Security researchers have published information about a phishing campaign targeting German car companies, the malicious Flubot malware is spreading in the Czech Republic, and cybercriminals have exploited the theft of a well-known car company’s subdomain. A long-term phishing campaign Security researchers at CheckPoint have released information about a persistent phishing campaign that began in July…

The largest Slovak CTF exercise is over. The results are surprising!

Over a thousand registered players, hundreds of active players, surprise victories and the youngest participants aged 12. Such was the CyberGame The first edition of the Slovak cybersecurity game CyberGame, where more than one thousand and two hundred participants registered, has ended. 581 players of different ages and professions “collected flags” on the gaming platform,…

TL;DR: Chinese hackers’ espionage operation and medical data leak (Week 18)

Russian payment service QIWI was the target of a ransomware attack and data theft, which was subsequently made public. Security researchers uncovered a large-scale spying campaign and Google will allow some data to be removed from search results on request. Chinese APT espionage campaign Cybereason security researchers uncovered an operation by the Chinese APT group…

TL;DR: Google changes rules and new ransomware groups (Week 17)

A new ransomware group Black Basta has emerged, a new cybercrime group Onyx is mixing ransomware with vipers, Google has changed the terms for Android app developers, and a (un)clever cybercriminal has successfully stolen a million in cryptocurrencies. An attack on a wind turbine manufacturer German wind turbine manufacturing company Deutsche Windtechnik was the target…

More than a thousand players have registered for the cybersecurity game

As of the beginning of March, there are more than one thousand and two hundred registered participants in the Slovak CyberGame and 540 male players and 32 female players are actively playing. The extraordinary interest of different age categories and professions surprised the official sponsor of the competition, which is the National Cyber Security Centre…

Warning about exploiting 0-day vulnerability in Spring Framework (Spring4Shell)

On 31 March 2021, the National Cyber Security Centre SK-CERT warned of a 0-day vulnerability in the Spring Framework, which is used to develop applications in Java. Since this is a widely used framework and there have been cases of exploiting this 0-day vulnerability, we are supplementing the previous warning with this article. What is…