Nethemba | We care about your security

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

BLOG

Critical security problem in UpdraftCentral: an attacker holding the service’s keys planted a backdoor on our websites

On the night of 19 October 2026 an attacker abused UpdraftCentral, the remote management service built into UpdraftPlus, a backup plugin with more than 4 million installations, and planted a backdoor on two of our three websites. Our sites were fully up to date and the fault was not on our side: the attacker signed the commands with valid keys that the UpdraftCentral Cloud service generates and keeps. We publish an analysis of the backdoor, indicators of compromise and a...

Read More

Facebook

Nethemba
Nethemba14 hours ago
"Údaje, ktoré nezbierate, nemôžu uniknúť, nedajú sa predať a nikto kvôli nim nezaklope na dvere vašej rodiny. Kým prevádzkovateľ nemusí obete odškodniť, bude pre neho únik databázy lacnejší než jej zabezpečenie a štát aj firmy budú zbierať všetko. Stačí dať každému záznamu cenu a o zvyšok sa postará trh."

Trhový spôsob, ako obmedziť nadmerné plošné zbieranie údajov (štátne registre, KYC databázy, e-faktúry atď.)
https://nethemba.com/sk/trhovy-sposob-ako-obmedzit-plosne-zbieranie-udajov/
Nethemba
Nethemba2 days ago
openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you've pulled) has had a little problem since 2016.
accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters.
https://sshhole.com/
Nethemba
Nethemba2 days ago
#90 Netmon (HackTheBox) (Easy)
Here we find some non-working credentials which require a little adaptation to gain access to a network monitor. After a search of the version we find a vulnerability which can grant us system access.

https://www.youtube.com/watch?v=38J5IeUobbg