Virus Information News

[First]  [Previous] |    11     12     13     14     15     16     17     18     19     20    | [Next]  [Last] of 172 page(s)

Apple Security: "Safe" Files

F-Secure Weblog

by Sean

March 15, 2013

Open "safe" files after downloading... on by default. You may wish to consider unchecking that particular box.

Things that Apple's OS X 10.8.3 update patched - which may allow for arbitrary code execution - that are also on the "safe" file type list used by Mac browsers: ImageIO (picture); IOAcceleratorFamily (picture); PDFKit (PDF); QuickTime (movie).

About the Security Content of OS X Mountain Lion v10.8.3

F-Secure Weblog

by Sean

March 15, 2013

Apple has released update v10.8.3 for OS X Mountain Lion. And as always, it's interesting to read about the security content.

"Impact: Visiting a maliciously crafted website could allow a Java Web Start application to be launched automatically even if the Java plug-in is disabled." Even if the Java plug-in is disabled?

Google Play: Potentially Unwanted

F-Secure Weblog

by Sean

March 11, 2013

Google Play has a problem - and it isn't malware.

Depending on location, Potentially Unwanted Applications (PUA) can be rather difficult to avoid. Here's a screenshot of User Reviews from a "weather widget" application...

Mobile Bot "Perkele Lite" [Android Only]

F-Secure Weblog

by Sean

March 7, 2013

Here's some evidence of Android malware commoditization - an ad for "Perkele Lite" - a kit to generate trojans which catch and forward SMS messages. Quite useful in cracking two factor authentications.

Flash: Click to Play

F-Secure Weblog

by Sean

March 5, 2013

Adobe released several security updates for its Flash Player during February.

Security bulletin APSB13-04: "Adobe is also aware of reports that CVE-2013-0634 is being exploited in the wild in attacks delivered via malicious Flash (SWF) content hosted on websites that target Flash Player in Firefox or Safari on the Macintosh platform, as well as attacks designed to trick Windows users into opening a Microsoft Word document delivered as an email attachment which contains malicious Flash (SWF) content."

Evernote Hacked: 50 Million E-mail Addresses Exposed

F-Secure Weblog

by Sean

March 4, 2013

Evernote is now officially a member of the recently hacked . The company develops software for notetaking and archiving.

Its customers received password reset notifications over the weekend. Almost 50 million e-mail addresses and usernames have also been exposed by the hack. How was Evernote hacked? Its security notice doesn't offer any details. But... here's Evernote CEO Phil Libin (surrounded by Macs).

RSA Conference: Ransomware + Mitigating Botnets

F-Secure Weblog

by Sean

February 28, 2013

RSA Conference USA 2013 is taking place this week. On Wednesday, our Antti Tikkanen and Paolo Palumbo gave a talk called: Ransomware Attacks!

Things That Make You Go Hmmm? About Apple "Security"

F-Secure Weblog

by Sean

February 27, 2013

Dear Tim Cook, Have you searched for the term "antivirus" lately? - I'm guessing not. Here's what Google Instant is currently offering up...

Hmm, "antivirus for mac" - very interesting. You know, maybe it's time for Apple to adjust its "security culture"? Let's do some more searches. Here's what you'll get from apple.com when you search for "security updates": Marketing material. Typical. Oh, support info is on the right-hand side. Alright, fair enough then, security is a support issue. Here's what you'll get from apple.com/support/ when you search for "security updates"...

The Lowest Hanging Fruit: Java

F-Secure Weblog

by Sean

February 25, 2013

By all measures, Java is the current title holder for the lowest hanging fruit in computer security. (And by Java, we mean JRE and its various browser plugins.)

It wasn't always so. How did it happen? Let's review some highlights in the history of low hanging fruit. From 2004 to 2008: Attacks shifted from Windows to Office. From 2008 to 2010: Attacks increasingly focused on Adobe. From 2010 to 2013: Java claims the title lowest hanging fruit (on multiple OS)...

Another Friday Night Disclosure: Microsoft

F-Secure Weblog

by Sean

February 23, 2013

In this week's episode of Friday Night Disclosures: Microsoft.

General Manager of Trustworthy Computing Security, Matt Thomlinson, provided details in a post on the MSRCTeam's blog...

[First]  [Previous] |    11     12     13     14     15     16     17     18     19     20    | [Next]  [Last] of 172 page(s)