Nethemba | We care about your security

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

BLOG

Critical security problem in UpdraftCentral: an attacker holding the service’s keys planted a backdoor on our websites

On the night of 19 October 2026 an attacker abused UpdraftCentral, the remote management service built into UpdraftPlus, a backup plugin with more than 4 million installations, and planted a backdoor on two of our three websites. Our sites were fully up to date and the fault was not on our side: the attacker signed the commands with valid keys that the UpdraftCentral Cloud service generates and keeps. We publish an analysis of the backdoor, indicators of compromise and a...

Read More

Facebook

Nethemba
Nethemba24 hours ago
"Data you don’t collect can’t leak, can’t be sold, and won’t bring anyone knocking on your family’s door. As long as an operator doesn’t have to compensate the victims, a database leak will be cheaper for them than securing it, and both the state and companies will keep collecting everything. Just put a price on every record and the market will take care of the rest."

A Market-Based Way to Curb Excessive Mass Data Collection (State Registers, KYC Databases, E-Invoices, etc.)
https://nethemba.com/market-based-way-to-curb-mass-data-collection/
Nethemba
Nethemba2 days ago
"Údaje, ktoré nezbierate, nemôžu uniknúť, nedajú sa predať a nikto kvôli nim nezaklope na dvere vašej rodiny. Kým prevádzkovateľ nemusí obete odškodniť, bude pre neho únik databázy lacnejší než jej zabezpečenie a štát aj firmy budú zbierať všetko. Stačí dať každému záznamu cenu a o zvyšok sa postará trh."

Trhový spôsob, ako obmedziť nadmerné plošné zbieranie údajov (štátne registre, KYC databázy, e-faktúry atď.)
https://nethemba.com/sk/trhovy-sposob-ako-obmedzit-plosne-zbieranie-udajov/
Nethemba
Nethemba3 days ago
openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you've pulled) has had a little problem since 2016.
accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters.
https://sshhole.com/