security

Jailed hacker allowed into IT class, hacks prison computers

They're arguing now about who let it happen, but happen it did, with entertaining consequences.

Somehow Nicholas Webber found himself in an IT class while in jail. He's serving five years for creating a site called GhostMarket, which allowed those interested in creating computer viruses, partaking of stolen IDs and enjoying private credit card data to congregate.

He was caught using hacked personal information to buy everything from iPods to luxury hotel stays.

One might have thought that an IT class would have been quite dull for him. One might also have thought that inviting him to an … Read more

DHS built domestic surveillance tech into Predator drones

The U.S. Department of Homeland Security has customized its Predator drones, originally built for overseas military operations, to carry out at-home surveillance tasks that have civil libertarians worried: identifying civilians carrying guns and tracking their cell phones, government documents show.

The documents provide more details about the surveillance capabilities of the department's unmanned Predator B drones, which are primarily used to patrol the United States' northern and southern borders but have been pressed into service on behalf of a growing number of law enforcement agencies including the FBI, the Secret Service, the Texas Rangers, and local police. … Read more

Apple now blocks older versions of Adobe's Flash player in Safari

Apple has tightened up security in its Safari Web browser following recent patches to Adobe's Flash technology.

As part of an update that went out yesterday, OS X will now block older and thus vulnerable versions of Flash, forcing users to update to the latest version if they wish to view Flash-based content. In order to block older versions of the software, Apple is using its Xprotect malware scanner, which is built into Mac OS X and can spot and quarantine known malware.

The move comes roughly a month after Apple began blocking older versions of Oracle-owned Java on … Read more

New Avast features roll out to fan legions

The new version of the Avast security suite focuses on repairing the past mistakes of Windows. Debuting today exclusively with CNET's Download.com, Avast 8 addresses some of today's most pressing security concerns but leaves at least one other growing problem unresolved.

All told, Avast Free Antivirus 8 (download), Avast Pro Antivirus 8 (download), Avast Internet Security 8 (download) and the new top-tier suite, Avast Premier 8 (download) command upwards of 170 million active users, making Avast the most popular consumer security suite by a long shot.

Although the suite leaves privacy in the cold, the rest of … Read more

'MiniDuke' malware takes aim at Euro governments via Adobe

A new attack is targeting European governments through flaws exploited in Adobe's Reader software, according to security researchers.

Kaspersky Lab and CrySys Lab today detailed a new malicious program in the wild, called "MiniDuke," that has been attacking government entities and institutions across Europe. Government entities in the Ukraine, Portugal, Romania, and others have been targeted, according to the security researcher.

MiniDuke finds its way to infected computers through PDFs. The malicious hackers -- who Kaspersky believes might have been dormant for some time because of the technique's similarity to those from the late-1990s -- have … Read more

RSA sees 'big data' as key to corporate security (podcast)

Big data is one the the big themes at this week's annual RSA security conference in San Francisco.

That's because analyzing a company's stores of data is another step in improving information security, RSA Vice President Brian Fitzgerald said.

"Classic security defenses are no longer that effective in a world where data centers no longer have a fixed perimeter. They're connected to suppliers and to customers. Information is flowing between partners on a massive scale," he said in an audio podcast (scroll down to listen).

Analyzing a company's data allows you to "… Read more

Feds strike a deal with alleged illegal streaming site operator

After taking down Channelsurfing.net and arresting its alleged owner in 2011, the feds now seem to be easing up. Before going to trial, the government struck a deal earlier this month with the alleged site owner Brian McCarthy.

In a "Deferred Prosecution" memo filed on February 11, which was obtained by TorrentFreak, U.S. Attorney Preet Bharara writes that "after a thorough investigation, it has been determined that the interest of the United States and your own interest will best be served by deferring prosecution in this District. Prosecution will be deferred during the term of … Read more

Upcoming iOS update likely to kneecap Evasi0n jailbreak

One of the most popular jailbreaking tools for iOS could be snuffed out as part of an upcoming software update from Apple.

iOS 6.1.3, which Apple gave to developers for testing last week, reportedly keeps Evasi0n from being installed, leaving would-be jailbreakers in a lurch.

Evasi0n came out earlier this month and gives iPhone, iPod, and iPad owners deeper access to the software on their devices than Apple allows. The two key benefits for those who install it is that you can make significant changes to basic system software, as well as add additional apps through third-party software … Read more

Samsung amps up business push with Knox security software

BARCELONA, Spain--Samsung Electronics is getting serious about attacking the business world.

The South Korean consumer electronics giant unveiled Knox, an additional layer of security software that will run as part of its SAFE (Samsung for Enterprise) initiative. Samsung is considering embedding Knox into Samsung's next flagship smartphone, YH Lee, executive vice president of Samsung Mobile, told CNET.

Samsung considers the business world to be its next avenue of growth, and has already positioned its ads to emphasize the security and enterprise-ready aspects of its products. In doing so, Samsung is going after a business long dominated by BlackBerry, and … Read more

Add Microsoft to list of hacked companies

Updated to include Microsoft comment Security software companies must be smiling ear to ear as they read the news briefs coming off the transom. Microsoft said today that an undetermined number of computers in its Mac software business unit got infected with malware. The company said the number of infected PCs was small but that there was no indication customer data had been compromised.

In a blog post late Friday, Matt Thomlinson, who directs the company's Trustworthy Computing Security program at Microsoft, wrote:

Consistent with our security response practices, we chose not to make a statement during the initial … Read more