Researcher warns of unpatched iPhone bugs   23 Jul 2008 13:00 GMT
Security researcher Aviv Raff warned today that security flaws in the iPhone's e-mail and Web browser apps can be used by phishers to dupe users into visiting malicious sites or by spammers to flood the phone's in-box with junk mail.

Source: Computerworld

RFID chipmaker loses suit, says users must take 'urgent' action   23 Jul 2008 13:00 GMT
A Dutch court has ruled that Radboud University Nijmegen researchers can publish a paper outlining flaws in an RFID chip manufactured by NXP Semiconductors.

Source: Computerworld

Avoiding the Latest Phishing Attacks   23 Jul 2008 13:00 GMT
(Source: Computerworld) hat started as an inbox-clogging, bandwidth-hogging, mass email marketing nuisance has evolved into a sophisticated, highly structured underground economy that can have catestrophic results on individuals and organizations. In this latest webcast from Computerworld, learn how to identify phishing emails, and ways in which email users can protect themselves. You'll also have access to four additional resources on this topic from our partner MessageLabs.

Source: Computerworld

Kaminsky: DNS bug tattler not the first to guess flaw details   23 Jul 2008 13:00 GMT
Dan Kaminsky, the security expert who found a critical DNS flaw and organized a massive patching effort, reiterated the need for quick patching.

Source: Computerworld

Fortify sets off FUD flood   23 Jul 2008 12:50 GMT
The Fortify study did not say enterprises must avoid open source because all open source is a security risk. But that's how lazy reporters played it. by Dana Blankenhorn
Source: ZDNet

McAfee debunks recent vulnerabilities in AV software research, n.runs restates its position   23 Jul 2008 11:24 GMT
Several days after blogging about a research conduced by n.runs AG that managed to discover approximately 800 vulnerabilities in antivirus products, McAfee issued a statement basically debunking the number of vulnerabilities found, and providing its own account into the number of vulnerabilities affecting its own products : "A recent...
Source: ZDNet

News to know: Yahoo; VMware; Apple; DNS vulnerability   23 Jul 2008 09:23 GMT
Notable headlines: Ryan Naraine: Vulnerability disclosure gone awry: Understanding the DNS debacle RIM ships fix for BlackBerry code execution bug Dancho Danchev: Georgia President's web site under DDoS attack from Russian hackers 75% of online banking sites found vulnerable to security design...
Source: ZDNet

75% of online banking sites found vulnerable to security design flaws   23 Jul 2008 07:52 GMT
In a paper entitled "Analyzing Web sites for user-visible security design flaws" to be published at the Symposium on Usable Privacy and Security meeting at Carnegie Mellon University July 25, Atul Prakash and two of his doctoral students examined 214 financial institutions in 2006, finding that over 75% of all...
Source: ZDNet

Georgia President's web site under DDoS attack from Russian hackers   23 Jul 2008 03:43 GMT
From Russia with political love? It appears so according to a deeper analysis of the command and control servers used by the attackers. During the weekend, Georgia President's web site was under a distributed denial of service attack which managed to take it offline for a couple of hours. The...
Source: ZDNet

Twitter anti-spam efforts go overboard   22 Jul 2008 18:08 GMT
Twitter's spam-blocking efforts have falsely identified popular company Twitter feeds and individuals as spammers, creating a definite damper in community engagement. by Jennifer Leggio
Source: ZDNet