National Cyber and Information Security Agency

NÚKIB Strengthens Cooperation with Indo-Pacific Partners at Singapore International Cyber Week 2026

Representatives of the Czech National Cyber and Information Security Agency (NÚKIB) attended Singapore International Cyber Week (SICW) from 12 to 16 October 2026. The eleventh edition of this major Asia-Pacific cybersecurity platform brought together representatives of governments, international organisations, the expert community and the private sector. The Czech delegation’s programme focused on developing bilateral cooperation, protecting critical information infrastructure, addressing emerging technologies and strengthening international stability in cyberspace. 

The NÚKIB delegation was led by the Agency’s Director, Lukáš Kintr, and also included Roman Pačka, Head of the Director’s Office, and Veronika Kolek Netolická, Cyber Attachée for the Indo-Pacific. During the conference, the Czech delegation met with representatives of partner countries in the Indo-Pacific and key institutions active in the field of cybersecurity. The bilateral meetings focused primarily on the protection of critical information infrastructure, emerging technological challenges and opportunities to further develop practical cooperation. The meetings also provided an opportunity to share national experiences, identify common priorities and discuss specific activities that could contribute to strengthening cyber resilience in the region. 

A key part of the Czech programme was a side event organised by NÚKIB in cooperation with EU CyberNet, focusing on the identification of critical information infrastructure. The EU CyberNet project was established to strengthen the capacity of the EU and its partner countries to address cyber threats, build cyber resilience and counter cybercrime through knowledge sharing, training and capacity building. In Singapore, NÚKIB Director Lukáš Kintr presented the Czech experience and approach to identifying key systems and services whose disruption could have a major impact on the functioning of the state, the economy and society. 

‘Singapore International Cyber Week is an important opportunity for us not only to present the Czech experience, but above all to engage in an open dialogue with partners facing similar challenges. The resilience of critical infrastructure, the impact of artificial intelligence and the emergence of quantum technologies all require trusted international cooperation. It is precisely these personal contacts and the practical exchange of experience that help us further develop this cooperation,’ said NÚKIB Director Lukáš Kintr. 

Lukáš Kintr also contributed to the conference’s expert programme on the significance of quantum technologies for cybersecurity. In his remarks, he emphasised the need to prepare for technological change at an early stage and to plan for the long-term transition to solutions resilient to future quantum threats. 

The programme also included participation in GovWare, a major technology and industry event held as part of SICW. NÚKIB supported the presentation of Czech cybersecurity companies during the Beer and Cyber networking evening. The event connected Czech companies with representatives of Singapore’s and the wider region’s cybersecurity ecosystem, providing an opportunity to establish new professional and business contacts. 

During SICW, the delegation also took part in discussions on the future direction of international cooperation in cyberspace, including discussions on the UN Global Mechanism for the security of information and communications technologies. The programme in Singapore was subsequently followed by the Czech Republic’s participation in the sixth summit of the international Counter Ransomware Initiative (CRI), which focused on strengthening international coordination in the fight against ransomware. 

NÚKIB’s participation in SICW 2026 also strengthened the Czech Republic’s visibility as an active and trusted partner in cybersecurity and contributed to the further development of cooperation with countries across the Indo-Pacific. 

2026-10-16

Russian Actors Are Targeting Signal Users. NÚKIB Releases an Analysis and Recommendations on How to Secure the App

The National Cyber and Information Security Agency (NÚKIB) is warning about targeted phishing campaigns aimed at users of the Signal messaging app. These activities are primarily linked to actors connected to the Russian Federation, and their goal is to gain access to victims’ communications by exploiting human error. Given the popularity of the Signal app among high-profile individuals and the occurrence of cyber incidents associated with it in the Czech Republic, NÚKIB is publishing an analysis along with recommendations for the secure use of the app. 

Attackers Are Not Targeting Encryption, but Users 

Attackers are not attempting to break the Signal app’s end-to-end encryption. Instead, they use social engineering and phishing techniques to trick users into linking an attacker-controlled device to their account or disclosing their PIN or other credentials. The most common scenarios include fake messages posing as technical support, spoofed links, and malicious QR codes. 

Campaigns recorded so far have primarily targeted individuals working in security, government, and politics. According to available information, similar techniques have been observed, for example, in Ukraine, Germany, France, and the Netherlands. However, the geographic scope of these activities is likely broader. 

The Most Common Scenario: A Message Posing as a Signal Notification 

The primary threat variant relevant to Czech users is so-called linked-device phishing. Knowing the victim’s phone number and assuming that they use Signal, attackers can send them a malicious message. This message most often appears to be a legitimate notification from Signal. 

A second observed variant involves the use of a malicious QR code that may appear to be an invitation to join a group. Both variants may also trick users into entering their Signal PIN or other login or recovery credentials under a false pretext. 

What NÚKIB recommends:

Regularly check the list of connected devices and immediately remove any unknown ones.  Enable the ‘Registration Lock’ feature.  Never disclose your PIN or authentication credentials to anyone. Signal’s official support will never ask you for them.  Do not scan QR codes or open links that you did not request.  For more sensitive communications, use disappearing messages and restrict who can find you on Signal using your phone number.  In case of suspicious communication, verify through a different communication channel that the message really came from the purported sender.  Download Signal exclusively from the official Signal website at signal.org.

Related document: Misuse of the Signal app for phishing: https://nukib.gov.cz/download/publications_en/Misuse-of-the-Signal-app-for-phishing_ENG.pdf

2026-10-13

Czechia and Bhutan Strengthen Cooperation on Cybercrime Response and Responsible Reporting

From 6 to 8 October 2026, Czech and Bhutanese institutions continued their long-term cybersecurity cooperation through a three-day seminar in Thimphu. The programme focused on strengthening national capacities for cybercrime response, incident coordination, and responsible public reporting on cybersecurity incidents.  

Following activities implemented in previous years, the seminar brought together representatives of government institutions, regulatory authorities, law enforcement agencies, and media organisations. The programme was organized in cooperation with the Embassy of the Czech Republic in New Delhi, the National Cyber and Information Security Agency of the Czech Republic (NÚKIB), Bhutan’s GovTech Agency and the Honorary Consulate of the Czech Republic in Thimphu, with the support of the CyberVac programme of the Ministry of Foreign Affairs of the Czech Republic.  

The 2026 seminar follows earlier Czech–Bhutanese capacity-building activities focused on cybersecurity policy, legislative frameworks, and digital forensics. Delivered by Czech cybersecurity professionals Veronika Kolek Netolická, Petra Lompejová, Ondřej Polák, and Žaneta Puttnerová, this year’s programme marks another step in the growing partnership between Czechia and Bhutan. By bringing together technical experts, policymakers, regulators, law enforcement representatives, and media professionals, the initiative contributes to stronger institutional resilience, practical knowledge sharing, and a more coordinated national cybersecurity ecosystem. 

The first two days were dedicated to cybercrime response and the development of standard operating procedures. Participants examined the cybersecurity threat landscape, the incident-response lifecycle, and the roles of different institutions during a cyber incident. Practical sessions focused on evidence preservation, escalation mechanisms, inter-agency coordination, and information sharing. Through group work and a tabletop exercise, participants tested draft procedures against a realistic incident scenario and identified opportunities to improve cooperation among technical, regulatory, and law-enforcement stakeholders.  

The final day focused on journalists, and media professionals. Sessions covered common cyber threats, digital hygiene, source verification, and safe investigative practices, as well as the media’s role in promoting cybersecurity awareness. Particular attention was paid to accurate and responsible reporting without creating unnecessary public concern or compromising an ongoing investigation.  

‘Effective cyber incident response depends not only on technical expertise, but also on clear institutional roles, trusted information sharing, and responsible public communication. This seminar reflects the practical and long-term character of Czech-Bhutanese cooperation,’ said  Veronika Kolek Netolická, Cyber Attachée for the Indo-Pacific at NÚKIB.

Czech experts shared practical experience in incident response, coordination, stakeholder cooperation, and cybersecurity communication. The programme combined expert presentations with discussion, scenario-based exercises, and peer exchange, allowing participants to relate international practices to Bhutan’s institutional and operational environment.

2026-10-12

NÚKIB Joins International Advisory on Russian Cyber Campaign Targeting Zimbra Collaboration Suite

The National Cyber and Information Security Agency of the Czech Republic (NÚKIB) has joined partners from several countries in issuing a Joint Cybersecurity Advisory concerning an ongoing cyber campaign by the threat group LAUNDRY BEAR, which has been targeting users of the Zimbra Collaboration Suite (ZCS) email platform since at least July 2025. 

According to the advisory, actors linked to the Russian Federation are primarily seeking access to e-mail communications and other sensitive information from government institutions, the defence sector, energy organisations, media outlets, educational institutions, non-governmental organisations, and technology companies. The campaign exploits a vulnerability in the Zimbra webmail interface that allows malicious code to be executed simply by viewing a specially crafted e-mail in a vulnerable version of the system. 

After successfully exploiting the vulnerability, attackers attempt to obtain e-mail contents, contact lists, authentication credentials, multi-factor authentication back-up codes, and other data that may subsequently be used for espionage activities. The campaign also includes efforts to maintain long-term access to compromised accounts. 

NÚKIB recommends that organisations using Zimbra Collaboration Suite immediately verify that they are running updated versions of the platform containing the fix for vulnerability CVE‑2025‑66376. Organisations should also review available indicators of compromise, monitor suspicious activity related to email services, and pay increased attention to protecting user accounts. 

The full advisory is available here: NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign > National Security Agency/Central Security Service > Press Release View  

2026-08-10