security

Thu
04
Aug
John Lister's picture

New Android Malware Discovered

Some Google Play Store apps with more than a million downloads have turned out to house malware. It's a reminder that however good Google's security vetting process is, it's not perfectly reliable. Two security companies, ThreatLabZ and Evina, say ... they found a total of 60 apps that are or have been in the Play Store and house one of four "families" of malware. One type appears to be new and has been dubbed Autolycos by researcher Maxime Ingrao. Promoted via Facebook and Instagram ads, the apps use a common technique. They are listed as carrying out a specific feature, which they ... (view more)

Wed
03
Aug
John Lister's picture

Windows 11 Update Causing Problems

A recent Windows 11 update has failed to install for some users. Meanwhile, some of those who did install it have reported annoying bugs. It reawakens an age-old dilemma: some users may conclude it's safer to avoid the update altogether and even ... manually uninstall it, but that means missing out on some security fixes for previous vulnerabilities. To make the decision more difficult, Microsoft hasn't provided much detail about these fixes other than to say the update "addresses security issues for your Windows operating system." For some users, there's no choice to make as they ... (view more)

Thu
28
Jul
John Lister's picture

Microsoft Pauses MS Office Macro Overhaul

Microsoft says it still plans to make a key security move with Microsoft Office, despite already having reversed it. It says it has put the changes to macros on hold to "enhance usability." The back-and-forth involves Visual Basic for Applications ... (VBA) macros. In principle, these are shortcuts that automate detailed processes with multiple steps. In some cases, users will share macros as part of their work. While macros can be very useful, they also offer a security risk. That's because a maliciously crafted macro could carry out unwanted tasks without the user knowing exactly what ... (view more)

Wed
20
Jul
John Lister's picture

Software Updates May Bring Back Zero-day Bugs

At least half the zero-day bugs discovered by Google this year were preventable according to one of its security experts. She pointed to sloppiness by software developers. The claims came in a talk and subsequent blog post by Maddie Stone. She's ... part of Google's Project Zero security program. While precise definitions sometimes vary, the general principle of a zero-day bug is that it's where attackers are exploiting the vulnerability before the software developers have a chance to develop a fix - in most cases because they aren't even aware of the bug. The name comes from the way the ... (view more)

Tue
24
May
John Lister's picture

Windows 11 .NET Update Goes Badly

The most recent Windows 11 update has caused bugs so significant that some users may be better off uninstalling it, despite the security implications. It's a situation with some particularly embarrassing elements for Microsoft. The update has the ... code name KB5013943 and was released to the general public on May 10th. It's reported some users in Microsoft's test program who got the update early experienced problems, meaning it's a surprise the same bugs appear to still have been present in the general release. Compatibility Glitches The problem is with the .NET Framework. That's effectively a ... (view more)

Tue
10
May
John Lister's picture

Microsoft Edge Offers VPN, With a Catch

Microsoft Edge is getting what looks suspiciously like a virtual private network (VPN). It comes with a catch and requires some serious trust in Microsoft. The "Secure Network" feature is now mentioned in a support document and has also shown up in ... Edge for some users who've signed up for early access to in-development features. It appears to be a variant of a VPN, which involves routing internet connection through a VPN provider. The data traveling back and forth between the provider and the user is encrypted in a setup likened to a "tunnel" that stops it being accessible ... (view more)

Tue
03
May
John Lister's picture

Report: Zero Day Bugs On The Rise

Two separate reports point to a spike in zero-day bugs . That's when would-be attackers trying to exploit a bug have a head-start over developers who are trying to fix and patch it. When software developers discover a security vulnerability (or are ... told about it by responsible researchers), they are in a race against time to find and roll out a fix before attackers discover it and start trying to take advantage. Often they'll only have a matter of days. A zero-day bug is defined as one whose existence is (or was) discovered by hackers before it is known to the software developers. That means ... (view more)

Wed
13
Apr
John Lister's picture

Latest MS Security Tool Requires Windows Reinstall

Microsoft is releasing a major security update to Windows 11 that could theoretically block malicious applications completely. It's such a fundamental change in the operating system that it will require a reset and clean installation of Windows. At ... the moment, most of the built-in security on Windows uses two main approaches. One is to scan any files or links the user wants to open or download, then alerts the user if they match any know threats. This is referred to as file and link scanning. The other is to scan files on the hard drive to look for anything suspicious. This is usually done in ... (view more)

Wed
22
Dec
John Lister's picture

Biden Signs Exec Order to Overhaul Gov't Sites

US President Joe Biden has ordered the federal government to modernize its online services. It aims to remove a "time tax" on citizens navigating inefficient services. It comes in an executive order, which doesn't require legislation passed by ... Congress. The order says the US government is responsible for "designing and delivering services with a focus on the actual experience of the people whom it is meant to serve." (Source: whitehouse.gov ) The main requirement of the order is to overcome the current problem of limited interoperability between different government sites, which often require ... (view more)

Wed
15
Dec
John Lister's picture

Android Scammers Try New Tactics

Google has cracked down on a key method that scammers used to distribute Android malware through the Play app store. But like a game of whack-a-mole, the scammers are adjusting their tactics for greater success. The Google change is to the way it ... handles accessibility tools on Android devices. These include screen-readers, voice input systems and other modifications for users to interact with the device. Such tools often need access to key components such as the camera, microphone or speakers, access that can be abused by malware. Google relaxes the security and permissions system on such ... (view more)

Pages

Subscribe to RSS - security