CyanogenMod to receive iMessage-like encryption feature
Former NSA contractor Edward Snowden triggered one of the largest privacy-related scandals, after he revealed information about a secret phone tracking program which targets more than 100 million Verizon customers. The implications are immense, and combined with subsequent leaks, have triggered a shift in privacy and data security approaches.
Following "recent events", CyanogenMod developer Koushik Dutta announced on Google+ that the popular custom Android distribution will receive an iMessage-like encryption feature that will allow users to securely send and receive texts between devices that run CyanogenMod.
Android threats grow as attackers follow the money
Mobile malware is growing into a profitable business according to the latest Mobile Threats Report from Juniper Networks. Not only is mobile malware growing at a rapid rate its writers are behaving in an increasingly businesslike way when planning their attacks and distribution strategies.
Of the malware detected by Juniper's Mobile Threat Center, 92 percent is aimed at Android thanks to its large share of the market. This is a massive increase over the 24 percent Android accounted for in 2010. Attackers are also seeking to streamline their distribution by using loosely-regulated, third-party app stores. Some three out of five of these originate in China or Russia.
Access management goes self-service with Tufin Security Suite
Policy management specialist Tufin Technologies launches the latest version of its Security Suite for business networks with a number of new features. Version R13-2 has a self-service portal for connectivity requests, enhanced device support and increased automation of security-related policies.
Tufin Security Suite is made up of three modules, SecureApp which manages the network connectivity and security requirements of applications, SecureChange which looks after change management and risk analysis, and SecureTrack which automates policy management for network infrastructure.
Source code for Carberp security threat leaks into the wild
Security is a big business on both sides of the line. Anti-virus companies scare customers with doom and gloom if you do not buy the wares, meanwhile, on the black-hat side of the fence, the sale of exploits is a lucrative trade. Now the source code for one of the biggest exploits, known as Carberp, has leaked and cut off reported sales that top $40,000.
Security researcher Peter Kruse from CSIS says that the firm has been "investigating this further and now confirms that we have the complete source code for Carberp and that the code compiles and works just as descripted in the associated text files included in the package".
Secure Work Space for Android and iOS arrives in BlackBerry Enterprise Service 10
On Tuesday, BlackBerry announced the availability of Secure Work Space for Android and iOS in BlackBerry Enterprise Service 10. The tool, which was unveiled little over three months ago, is designed to provide a safer and BYOD-friendly environment with features like application-wrapping and containerization.
"It offers BlackBerry Balance-like capabilities to provide peace of mind for IT departments in a BYOD environment, while separating personal content for personal use", according to the Canadian maker. BlackBerry's reasons for beefing up the security of Android and iOS devices revolve around expanding needs and the "ever-growing variety of devices" brought into the work space.
Has Microsoft made WebGL Secure? How?
Microsoft has dropped strong clues, without saying it explicitly, that Internet Explorer 11 in Windows 8.1 will support WebGL, a DirectX-like standard for fast gaming on the web. The biggest clue came in a video posted on Vine. Others have found direct evidence in leaked builds.
It's not hard to see why Microsoft would want to support WebGL. Everyone else does. However, the company spelled out the reasons it hadn’t so far in a Security, Research and Defense blog post two years ago.
UK government launches cyber security awareness campaign
As part of its National Cyber Security Programme the UK government has announced the first stage in a new £4 million awareness campaign. The campaign due to be launched in the autumn draws on expertise from various government departments and is led by the Home Office.
Bids are currently being invited from media, PR and creative agencies to produce a communications strategy to educate consumers and small businesses on the risks presented by cyber crime.
Malwarebytes unveils Anti-Exploit Beta
Malwarebytes has released the first public beta of Malwarebytes Anti-Exploit, a rebranded and improved version of ZeroVulnerabilityLabs’ ExploitShield. And just as in its previous incarnation, Anti-Exploit is an extremely easy-to-use tool which protects popular applications from zero-day exploits, web-based vulnerability exploits and more.
The full list of shielded apps includes browsers (Firefox, Chrome, IE, Opera), Microsoft Office (Word, Excel, PowerPoint), Media Players (Windows Media Player, VLC, Winamp, QuickTime), PDF-related tools (Adobe Reader, Foxit Reader, Adobe Acrobat) and more (Java, Windows Script Host, Windows Help).
Facebook admits a year-long data breach exposed contact information for 6 million users
Facebook is notoriously bad for privacy and security. While the social network has recently been implicated in Prism, its poor reputation precedes that scandal. Only five months ago, it was discovered that you can search for a person on Facebook with nothing but their phone number -- a stalker’s dream come true. Frequently changing and overly complicated privacy settings don't help the company's cause either.
Today, Facebook announces that it has blundered once again. The social media giant says "We recently received a report to our White Hat program regarding a bug that may have allowed some of a person’s contact information (email or phone number) to be accessed by people who either had some contact information about that person or some connection to them".
Symantec releases new betas for Norton AntiVirus, Norton Internet Security and Norton 360
Symantec has unveiled the first public betas for Norton AntiVirus 21, Norton Internet Security 21 and Norton 360 21.
As we write the company hasn’t provided any information on new features. A first look shows the core interface remains almost entirely unchanged, though -- with the exception of a revamped and extended Identity Safe -- so if you’re already familiar with the previous editions then navigating the new builds should be straightforward.
FISA court orders allow data storage without a warrant
A set of two FISA court orders leaked on Thursday indicate that surveillance agencies can store data it has collected for up to five years, even on those not suspected of any crime.
The latest revelations indicate that the secretive court gives the NSA broad powers to maintain a database of information regardless of how the agency maintained it. This includes data that is "inadvertently" collected as part of a broader investigation. Attorney General Eric Holder signed off on both orders in April 2009, indicating the storage of data has likely occurred for at least four years, if not longer.
Comodo unveils new versions of Internet Security, Firewall and Antivirus
Comodo has announced the public availability of Comodo Internet Security 6.2, Firewall 6.2 and Antivirus 6.2. These are more than just maintenance releases, too -- there are some genuinely significant developments.
Right-click the Comodo icon and choose the new Advanced View, for instance, and the rather basic home screen is replaced with something much more detailed. You’ll be able to view details on your antivirus, update, auto-sandbox, HIPS and firewall status, as well as see which processes are using your network bandwidth, view recently detected threats and intrusions, and more.
Microsoft will pay you to successfully hack Windows
Typically, a company frowns upon having its products hacked. However, Microsoft is inviting people to do just that. The tech company announces that it will be offering direct cash payments "in exchange for reporting certain types of vulnerabilities and exploitation techniques". No, Microsoft has not gone crazy (at least I hope). Companies usually offer such bounty programs for sane reasons -- security and publicity.
From a security standpoint, it makes sense for Microsoft to invite people to hack its products. When a bug or exploit is found, it can be patched. The tech company's products can only get more secure as a result. Heck, maybe Microsoft can even hire the successful hackers!
New server attacks mobile devices only
PC viruses and attacks may run rampant, but mobile threats tend to be rarer. We do hear of them though, and F-Secure reports an interesting new discovery.
The company confirms findings from one of its researchers that an existing server in the wild is designed to ignore computers, and go directly after your smartphone or tablet. The company claims, "we've discovered a server that only attacks and/or spams smartphones and tablets -- and not PCs".
CryptSync lets you easily encrypt all your cloud storage files
Storing important files online is convenient, but it also poses a security risk. Even if your cloud service offers encryption, that won’t necessarily keep your data safe, as if someone manages to obtain your account password then they’ll probably be able to access whatever they like.
If you need real privacy, then, you might want to consider encrypting files before they’re uploaded. This adds a useful extra layer of protection which makes it far more difficult for an attacker to view your files. And it doesn’t have to involve any real extra work, either -- the open source CryptSync makes the process almost automatic.
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.