Most of us have dozens of passwords to remember, including for multiple email accounts, Google, Facebook, online banking and credit card accounts, services like Dropbox and Evernote, and on and on, and it’s simply a pain. It can be...
Read more...
When Oracle released its Java Update 11 earlier this week, it patched several zero-day exploits that security researchers had previously identified. Nevertheless, a number of firms still recommended uninstalling Java due to a number of...
Read more...
Java is a mess; Oracle’s software has become a popular target of cybercriminals, and news about Java exploits is becoming more and more common, even as the solutions Oracle provides offer little comfort. Wait, it gets worse: According to Kaspersky Labs and security company Seculert, the...
Read more...
Verizon's Risk Team has published a blog post on a mind-boggling security adventure (it's the only term that really fits) detailing just how poorly some IT workers -- including those working for "critical infrastructure" companies --...
Read more...
Software vulnerabilities are common, but it’s not every day that the Computer Readiness Team (CERT) at the U.S. Department of Homeland Security steps in and starts warning the public. Not surprisingly, Oracle jumped on the...
Read more...
Consider this a PSA: Oracle is going to patch that hole in Java, the one that security pros discovered last week. Cybercriminals were using a zero-day exploit in Oracle’s Java to deliver malware payloads, steal identities, and take over computers to force them to commit nefarious acts...
Read more...
Here we go again. We're not even halfway through the first month of the New Year, and already we're being warned to disable Java. Not as a general practice, mind you (though that's not a bad idea), but because of yet another zero-day exploit spotted in the wild "There appears to be multiple ad...
Read more...
Nokia can ill-afford any missteps as it attempts to rebuild its brand into a major smartphone player, so it's a little concerning on a number of levels that it was caught intercepting Internet traffic on its phones and redirecting the data...
Read more...
The antivirus market is enormous, responsible for billions in revenue each year. That being the case, it'd be easy to believe that current offerings are quite good, but not so claims a report (PDF) by security company iMPERVA. This...
Read more...
Although it’s disturbing that there needed to be laws preventing employers and institutions of higher learning from demanding Facebook usernames and passwords from job applicants and employees, apparently the practice (or at least...
Read more...
Microsoft is currently investigating reports of a zero day bug affecting Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8, the company announced in a Security Advisory. At issue is a remote code execution vulnerability...
Read more...
A couple of years ago, the Stuxnet worm went on a bit of a rampage worldwide and hit Iranian systems especially hard. Primarily, it hit industrial targets including nuclear power plants and oil rigs. Stuxnet itself has faded a bit, although it was revealed this summer that another particularly nasty piece of malware called Flame had a lot...
Read more...
Software vulnerabilities will be the main target of cyber criminals in 2013, according to research by Panda Security's malware laboratory, PandaLabs. Java and Adobe in particular will prove points of emphasis for both cyber criminals and...
Read more...
The quest for a bullet-proof but human-usable CAPTCHA continues. A couple of months ago, we talked about a CAPTCHA implementation that relies on human empathy to bypass, but for a couple of reasons, it might not be ideal for a lot of people. Now, the folks at Minteye have given us yet another...
Read more...
Smart TVs are intriguing pieces of technology that seem to foreshadow a future where our TVs and computers are one and the same. It seems that if nothing else, one of the things that computers and smart TVs--in particular, some of the ones...
Read more...
Early last month, we learned about what Google had in store for its "App Verification Service" that comes bundled with Android 4.2 (Jelly Bean). The concept was simple; the app would gather bits of information about any app you are about...
Read more...
Security researcher Carlos Reventlov discovered a vulnerability in Instagram version 3.1.2 on the iPhone 4 (iOS 6) that leaves users’ Instagram accounts open to attacks. Specifically, users are at risk for partial eavesdropping and man-in-the-middle attacks that a ne’er-do-well...
Read more...
It's a patent that sounds like a plot description for a science-fiction movie or the result of Apple's Siri and Google's AdSense mating. With it, Verizon could program its set-top boxes to survey a room to determine relevant ads to display...
Read more...
On Friday, security firm Symantec discovered a Trojan called Backdoor.Makadocs, which in typical backdoor Trojan fashion accesses a compromised system and attempts to swipe data from it. The interesting bit is that it uses Google Docs as a proxy server to get around firewalls and connect to a...
Read more...
Skype temporarily removed the page that enables users to reset their password after a security hole was found that enables someone to take control of another user's account. After making changes to the password reset feature, Skype turned...
Read more...
It's beginning to feel like we're unable to go even a single week without learning of a public official caught in an affair, but last week's discovery of the affair of CIA Director David Petraeus came as a shock for a couple of reasons. David wasn't some mere politician, but a decorated war...
Read more...
Blizzard has been hit with a lawsuit over its $6.50 Battle.net Authenticator keychains that it sells online. According to the lawsuit, Blizzard makes millions of dollars by "deceptively and unfairly" charging customers for an after-sale security product, essentially shifting responsibility...
Read more...
