Articles about Security

Document metadata can be a great help in organizing files on your own PC. Add the appropriate keywords in a Comments tag, say, and it’ll be much easier to find the file later.

If you intend to share the documents online, though, metadata can be a real menace, leaking all kinds of data: network folders and user names, email addresses, details on the operating systems and software packages you’re using and a whole lot more.

Continue reading →

Mac users need to be careful of what they're installing on their computers following the discovery of a new Trojan making its rounds. Security firms ESET and Sophos both say the malware is actually a port of a Linux "backdoor Trojan" that has been around for nearly a decade.

"In terms of functionality, the Mac variant of the backdoor is similar to its older Linux brother, with only the IRC server, channel and password changed," ESET malware researcher Robert Lipovsky says.

Continue reading →

Finnish security vendor F-Secure has released the 2012 editions of its flagship antivirus package and security suite. As updates go, it’s relatively minor, with most of the changes being beneath the surface. Still, there are some worthwhile improvements on offer.

F-Secure says it has upgraded the behavior monitoring, scanning performance and malware removal capabilities in this edition, for instance. Improved automation in the handling of malware samples means F-Secure’s cloud-based protection network can offer an even faster response to the latest security threats.

Continue reading →

One way to stay safer online is to run your browser in a sandbox, where it’s isolated from your main PC: even if you’re infected by something unpleasant, this greatly limits the damage that malware can do.

You don’t have a sandbox? Then one simple alternative is to download and install Dell KACE’s free Secure Browser, which essentially provides a virtualized version of Firefox 3.6.13.

Continue reading →

iPad 2 owners need to reconsider just how secure their tablets are following the discovery of a flaw that allows attackers with Apple Smart Covers to unlock iPads, even if they are password protected. The issue was first disclosed in the forums of German Apple enthusiast site apfeltalk.de, and has since been replicated numerous times including in tests by BetaNews.

As opposed to an issue where Siri allowed access to phone features from the lock screen -- that actually can be disabled with Siri's settings -- the locking issue actually appears to be a legitimate flaw. The issue was verified by Betanews in iOS 5, however, Internet reports seem to suggest that it can also be recreated in iOS 4.3.

Continue reading →

Has your webcam turned on without your permission? You may be the target of a new Flash exploit.

Adobe is scrambling to fix a vulnerability that may allow an attacker to turn on your webcam and microphone to spy on you. Stanford University computer science student Feross Aboukhadijeh discovered the flaw, which is found in every version of Flash and can be exploited in Safari and Firefox on Mac OS X and some browsers within Windows (Chrome appears to be unaffected).

Continue reading →

For many people, their cell phone is one of the most expensive items they own, it is certainly the most valuable possession most people have on them at any given time. Losing a phone does not just mean taking a financial hit, though, it also means that the data you had stored on the device -- phone numbers, personal files and more could well fall into the wrong hands. There are various tools available that can be used to track down a misplaced device, and the latest contender to enter the arena is Lookout Mobile Security.

This is a free app that has been available for Android devices for a little while, but it has just been released for iPhone and iPad. At its heart, this is an app that has been designed to reunite you with a lost iPhone or iPad -- and this could mean a device that you have left lying around the house, lost while out and about, or even had stolen. With Location Services enabled and an account created with Lookout, you can log into your online account and check the location of your iOS device on a map.

Continue reading →

I've never been a big fan of social networking sites.

I'm not on Facebook. Or Myspace. Or LinkedIn. Or Bebo. Or Orkut. Of course, I have to follow what's happening on these services as they are very popular. And I have set up placeholder accounts on them to prevent someone from posing as me. But I don't really use them. And when I monitor these sites, what I can see is that they are more and more targeted by online criminals.

Continue reading →

Sony's PlayStation Network is once again the target of hackers as Sony disclosed late Tuesday that it had disabled some 93,000 PSN and Sony Online Entertainment accounts. According to the company these accounts had been "tested" by hackers, although a majority of the login attempts failed.

The data was said to be obtained from "one or more compromised lists from other companies, sites or other sources," although chief information security officer Phillip Reitinger said it was likely that the data did not come from Sony itself.

Continue reading →

Comodo has launched the 2012 range of its free security products. Standalone antivirus and firewall products Comodo Antivirus and Comodo Firewall are joined by Comodo Internet Security 2012 Premium, which combines both products in one app.

The products, which sport a relatively minor version number (5.8), promise to be faster, lighter and stronger than previous releases, sporting revamped user interfaces alongside bug fixes and a handful of new options.

Continue reading →

This analysis is excerpted from AVG Technologies' Q3 "Community Powered Threat Report", which released Oct. 11, 2011.

Facebook is the second most popular site in the world according to Alexa's traffic rankings. The social network had explosive growth from 2008 with 100 million users to 750 million users today. This equates to about 11 percent of the world’s population or 36 percent of global Internet users; Facebook became the largest social network worldwide. The social network's popularity and its fast growth make it a prime target for cybercriminals.

Continue reading →

Bank, credit card and PayPal accounts aren't as lucrative treasures for cybercriminals -- not like they once were. New security measures make pilfering accounts more difficult than years past. So the bad guys are going after easier money and, in process, younger users. In its third-quarter "Community Powered Threat Report", released today, AVG Technologies identifies two emerging security trends: Clipjacking and Survey Scamming Facebook accounts and siphoning digital money from Bitcoin users. With both, cybercriminals tap new revenue streams, cell phone accounts for the one and pure currency for the other.

Yesterday, I spoke with Yuval Ben-Itzhak, AVG's chief technology officer, about the new report and these two trends. "There's a ridiculous number of stolen credit cards on criminal sites", Ben-Itzhak says. "The main issue is how to use these compromised credit cards, because the credit card companies have taken serious actions to prevent and minimize the damages". Auction of PayPal accounts is commonplace, too, "but this is also becoming challenging to monetize because of all the security that is in place".

Continue reading →

Symantec has revealed the first public beta of Norton 360 6.0, the company’s do-everything security suite.

The Norton site claim this build offers “our best protection and performance ever” and “improved local or secure online backups”. If you’re familiar with the package you’ll see it’s also had a few interface tweaks, but there are no other specifics regarding new features available just yet.

Continue reading →

If you were hoping that Avira’s new 2012 range would unleash some major new features and technologies then the reality may at first seem a little underwhelming. There are no game changers here, no new killer features. But if you’re happy simply to see incremental improvements, a company that’s building on what’s gone before to produce something better, then it could be a different story -- and that’s because there are plenty of small but still worthwhile enhancements and improvements dotted all around the package.

When we decided to try Avira’s Antivirus Premium 2012 (their commercial antivirus engine), for example, the first tweak was immediately obvious in the arrival of a new Express installation option. This keeps all the usual setup complexities at bay, getting you up and running with the minimum of hassle.

Continue reading →

At its Cybersecurity Symposium in New York City on Thursday, Security company Kaspersky Lab debuted the Windows version of its Endpoint Security 8 corporate security suite. The new security product takes a twofold approach to network security: Deep anti-malware protection, and comprehensive management and control systems.

On the anti-malware side, Endpoint 8 integrates with the Kaspersky Security Network, a cloud-based reputation database that is built from data submitted by millions of Kaspersky users so new definitions are acquired quickly without having to update an ever-growing local database. Secondly, it includes application whitelisting for administrators who want to set policies against specific applications, or against entire classes of apps. Third, the "System watcher" function tracks client system behavior for anomalies, and can revert to states before the system was infected. Finally, Endpoint 8 is based on Kaspersky's improved signature-and-pattern-based antivirus engine.

Continue reading →