security

Some Android apps could leak personal data, researchers find

Android applications are once again in the hotseat over possible security vulnerabilities.

Security researchers at the Leibniz University of Hanover in Germany recently released a study (PDF) examining the way in which legitimate Android applications in the Google Play marketplace respond to attacks on security protocols known as Secure Sockets Layer (SSL) and Transport Layer Security (TLS). In eight percent of those cases, the researchers found that apps used the security protocols improperly, leaving sensitive data open to hackers with some know-how.

The security team, however, didn't suggest that anyone has yet deliberately exploited these vulnerabilities.

SSL and TLS … Read more

SEC finds Facebook didn't hold back info from investors -- report

The Securities and Exchange Commission didn't find any evidence that Facebook withheld pertinent information from investors prior to its initial public offering, Bloomberg reported today.

The commission began investigating the social network's initial public offering, or IPO, in May, after Facebook's stock dropped. The stock still hasn't recovered from that day, and is currently trading at around half of its $38 IPO price.

While the investigation isn't over, the commission has determined that Facebook did not act wrongly, an unnamed source told Bloomberg. The SEC is still looking at whether or not retail investors lost … Read more

FTC offers $50,000 to robocall killers

The Federal Trade Commission is offering a cash reward of $50,000 to whoever develops a solution to block robotic calling on both landlines and mobiles.

In 2009, the FTC banned automatic commercial telemarketing calls -- but solicitation is still a problem as advanced technology makes illegal, irritating calls more difficult to block.

The FTC Robocall Challenge site says that anyone who wants to take on the war with robo-marketeers can submit their idea from October 25 to January 17.

The FTC is asking these basic questions: does it work? Is it easy to use? And can it be rolled … Read more

Ally Financial sees 'unusual traffic,' cyberattack fears abound

Ally Financial is experiencing some odd traffic issues that have prompted some to wonder if there's more there than meets the eye.

In a statement to CNET today, an Ally Financial spokeswoman confirmed that the company has witnessed some unusual activity across its site, but so far, no major issues have erupted.

"Ally has seen some unusual traffic on our Web site, which we continue to monitor; however, we have not experienced the type of disruption that has been associated with the denial of service attacks," the spokeswoman told CNET in an e-mailed statement. "There has … Read more

White House reportedly finds no evidence of spying by Huawei

An 18-month review by the White House found "no clear evidence" that Chinese telecommunications gear maker Huawei had performed any spying on behalf of the Chinese government, according to a Reuters report.

The news service, citing two unnamed sources, said the White House looked into reports of suspicious activity, with the help of intelligence agencies and other government departments, and queried nearly 1,000 telecom equipment buyers. One of the sources said that "certain parts of government" very much wanted evidence of espionage. In the end, though, they came up with nothing definitive.

"We would … Read more

Small biz survey: No cybersecurity plans -- no worries. What?

Someone needs to smell the coffee in a big way.

Seventy-seven percent of small- and medium-sized businesses believe that their companies are safe from cyberthreats and yet 83 percent of them have no formal cybersecurity plan. Um, yeah. And that was just one of the contradictions uncovered in a survey of 1,015 small- and medium-sized businesses carried out by the National Cyber Security Alliance and Symantec.

"It's not part of the culture yet," said Michael Kaiser, executive director of the NCSA, who added that he was "a little disheartened that we didn't see substantial … Read more

Facebook pushing malware security even harder

Facebook is expanding its antivirus offerings by adding seven new partners, and mobile software, to its network of security companies.

The social network just added Avast, AVG, Avira, Kaspersky, Panda, Total Defense, and Webroot to its Antivirus Marketplace -- a place on its security page where users can download anti-malware software.

Since it launched in April, more than 30 million Facebook users have visited the marketplace page, which originally featured software from McAfee, Norton, Sophos, Trend Micro, and Microsoft. The software can be used for free for six months to a year, depending on what a user downloads.

The companies … Read more

Three not so simple but necessary security tips

If you stick with your software's default settings, you're letting the programs' vendors determine how much security is right for your system. Those vendors have their best interests in mind, not yours.

As I pointed out in last week's post titled "Ten simple, common-sense security tips," PC security doesn't have to be complicated. However, not all important PC security measures are easy to implement. Follow these less-than-intuitive steps to block Flash cookies, lock down your browser, and test your Facebook profile's privacy.

Note that not everyone needs the level of protection offered by … Read more

Social network protection, scam guards, and Windows 8 support make Norton 2013 an attractive package

Review: Symantec has moved Norton 360 to the same release schedule as Norton Internet Security and Norton AntiVirus, making them into a three-tiered strategy for consumer security. Norton AntiVirus is the entry-level product, with Norton Internet Security occupying the middle rung and Norton 360 aimed at people who want the most bang for the most buck.

Notoriously slow to respond to trends, the consumer security field is surprisingly not taking Windows 8 lying down. Norton and many of its competitors are optimizing their suites for Microsoft's new operating system ahead of its release, and Norton is combining that strategy … Read more

Europe suffered 51 'severe' communications outages in 2011, study shows

Eleven European countries suffered major communications outages last year, according to a new report by the European Union's top cybersecurity agency.

The report, released today by the European Network and Information Security Agency (ENISA), said that 11 EU member states reported 51 "severe outages" in their countries' communications networks and services during 2011.

The report said that 60 percent of the incidents affected cellular networks or mobile Internet, with the remainder involving services such as fixed phone and internet, messaging and e-mail.

According to ENISA, the main cause of the outages was hardware or software failure, which … Read more