May 1, 2012 - Skype Tool Potentially Reveals User's IP Address

Skype, which is owned by Microsoft, is investigating a new tool that collects a person's last known IP address, a potential privacy-compromising issue. An IP address is an important piece of information that could potentially be used to track the approximate location of a user and their service provider.

April 30, 2012 - Google Chrome Update Closes High-Risk Security Holes

Google released a new update for its Chrome Web browser. The update closes a number of security holes found in the application. Users are encouraged to update to Chrome 18.

April 11, 2012 - More Vulnerabilities Found in Adobe

Adobe has released versions 10.1.3 and 9.5.1 of its Acrobat and Reader products to address high priority security vulnerabilities that could be used by an attacker to cause the application to crash and potentially take control of an affected system. These include memory corruption in the JavaScript API and JavaScript handling, and a security bypass via the Adobe Reader installer which could lead to arbitrary code execution.

April 11, 2012 - Apple iOS Owners Asked to Increase Security

Some Apple owners have been emailed by Apple's security team, asking them to set up three new security questions and a backup email address before they could download apps from the App Store. The request has caught some Apple owners off-guard, thinking it is a phishing scam. But the request is real! Apple is trying to shore up security issues tied to their retail Web site and media services.

April 9, 2012 - New Security Flaws Detected in Mobile Devices

You might want to think twice about doing your banking on your SmartPhones.those cool mobile devices carry deep-rooted security flaws. Recent reports found that Mobile devices highlight how designers of smartphones and tablet PCs fail to fully account for security and privacy implications. "Today's smartphones and tablet devices perform the same functions as a PC," says Dan Hoffman, chief of mobile security at Juniper Networks. "However, the vast majority of devices lack security software and mistakenly rely upon the operating system to keep people safe."

April 5, 2012 - Google Chrome Updates Released

Google has announced updates to both the Stable and Beta versions of their Chrome browser. The updated versions fix several bugs, including twelve classified by Google developers as 'high risk' security vulnerabilities.

April 4, 2012 - New Virus Targeting Mac Operating Systems

Over 600,000 Macs have been infected with a new version of the Flashback Trojan horse, installed on people's computers with the help of Java exploits. Flashback is a family of Mac OS malware first appearing in September 2011. Older versions relied on social engineering tricks to infect computers, but the latest variant is distributed via Java exploits that DON'T require user interaction. Protect your Mac and the UF network you connect to! Visit Apple's support site to learn more about the Java update released to address this critical vulnerability.

April 2, 2012 – Joomla! Two Security Updates Released for Joomla! Content Management System

The Joomla! project published an update to the 2.5.x branch of its open source content management system (CMS) which addresses two vulnerabilities.

Version 2.5.4 of Joomla! closes an information disclosure hole that allows unauthorized access to administrative information and fixes a problem that could be exploited by an attacker to conduct cross-site scripting (XSS) attacks. Versions 2.5.0 to 2.5.3 are affected. This update adds three new features, including an option to show the full CMS version number in the generator tag, and fixes more than 150 bugs.

March 29, 2012 – Xbox 360 Hard Drives Store Credit Card, Other Personal Information

Thinking of selling or giving away your Xbox 360? Take a hammer to the hard drive first! Hackers can steal credit card information on your old Xbox. Even restoring your console to factory settings won't remove some of the data it stores, according to an ongoing study from researchers at Drexel University. With a handful of common tools, hackers can dig into a system's hard drive and excavate credit card numbers or other personal information.

March 1, 2012 - Apple Gets Tougher on Malware

In summer 2012, Apple will introduce a new Mac security model with OS X Mountain Lion. The default settings let users install only programs downloaded from the Mac App Store or those digitally signed by a registered developer.

February 28, 2012 - Attackers Targeting Adobe Reader Bug

Another reminder for those of us who do not update our computer applications: old vulnerabilities never die, they just get overtaken by newer and shinier ones. Attackers know this, and every once in a while serve up a nice reminder to the rest of us. The most recent one of these is a string of attacks against Adobe Reader on a vulnerability first publicized in 2010.

February 14, 2012 - Android Phones

Users searching for games on the official Android Market are being heavily targeted by ad-pushing scammers. First it was the fake Temple Run app. Now there are numerous reports of bogus copies of popular iPhone games supposedly developed by Rovio Mobile Ltd, the developers of the famous Angry Birds game.

February 7, 2012 – Apple

Apple has released a security update for its OS X Lion, Snow Leopard and Server platforms. The update, Apple’s first major OS X security fix of the year, includes nearly 40 patches for security vulnerabilities in the operating system.

February 7, 2012 – HTC

HTC has confirmed that the way some Android smartphones handle requests for passwords allows applications to obtain the passwords for Wi-Fi networks that the phones are connected to. If that application also has permission to connect to the Internet then password information could be transferred to an unknown server.

February 3, 2012 - Mozilla

Mozilla has detailed security fixes included in each of the updates released last week for its browser and email clients. According to the project's Security Center page for Firefox, version 10.0 closes a total of eight security holes in the browser, five of which are rated as "Critical" by Mozilla.

February 2, 2012 - Facebook

As Facebook users prepare for Valentine's Day, cyber-criminals are relying on the fact that lovebirds may be tempted to install a so-called "Valentine's theme" to make their profiles more special. Facebook users are advised not to click on ads that offer a Valentine's Day theme, or any similar element, due to scams associated with these ads. Several ads have been reported to dupe Facebook users into downloading a malicious Trojan that later places itself in the browser with the purpose of retrieving personal information

January 26, 2012 - Joomla!

The Joomla! Project announced the arrival of version 2.5.0 of its open-source PHP-based content management system (CMS). The update also addresses two medium priority cross-site scripting (XSS) vulnerabilities and two low priority information disclosure holes. The Joomla! developers remind users that the 1.7.x branch will reach its end of life on February 24, 2012. All users are advised to upgrade to the current release.

January 19, 2012 - Facebook

A phishing and survey scam rolled into one is currently targeting Facebook users. The end-result is that a user's account is hijacked, making it difficult for users to get them back. Victims are lured with messages seemingly posted by their friends claiming that they have received a "100rs free recharge". Following the offered link, they land to a page asking them to enter their Facebook login credentials in order to get it. Once the account details are entered and the "Log In" button is pressed, the page redirects users to a page mimicking a Facebook one, which asks the user to complete a survey in order to unlock the recharge option.

In the background, the page sends the recorded login credentials - in clear text via a HTTP POST request - to a remote server operated by the scammers. The scammers then use the login credentials to access the victims' Facebook accounts, change information contained in them (including the password and the email address) and post the same message that lured in the victims in the first place. Affected users are not only endangering their friends, but are also unable to immediately do anything about it.

January 19, 2012 - Facebook

A new strain of cybercrime Trojan is targeting Facebook users by taking over their machines and shaking them down for cash.

January 10, 2012 - Adobe

A Security Bulletin (APSB12-01) has been posted regarding this quarter's security updates for Adobe Reader and Acrobat. The updates address critical security issues in the products, including CVE-2011-2462 and CVE-2011-4369, previously addressed in Adobe Reader and Acrobat 9.x for Windows as referenced in Security Bulletin APSB11-30. Adobe recommends that users apply the updates for their product installations.

January 10, 2012 - Gameover

The FBI last week issued a warning on one such new Internet blight called "Gameover," which, once ensconced on your PC, can steal usernames and passwords and defeat common methods of user authentication employed by financial institutions.