Apple

(get it in RSS or Atom)

SSCC 150 - TrueCrypt, Gameover, CryptoLocker and whither mobile malware? [PODCAST]

sscc150-thumb-250

This week, Chet and Duck dig into the bafflement of the disappearing TrueCrypt encryption software: did it jump, or was it pushed?

They also look at the takedown of Gameover and CryptoLocker, and look into what we can learn from ten years of mobile malware.

Unhappy birthday to you - mobile malware turns 10

10yomm-feat-3-250

It's 10 years since June 2004, when the first mobile malware appeared.

We don't want to *celebrate* this anniversary, you understand, but we thought we'd look back to see what we can learn...

FitzRoy, Oleg Pliss, Spotify and TrueCrypt - 60 Sec Security [VIDEO]

2014-05-31-thumb-250

Did FitzRoy get hacked? Who is Oleg Pliss? What's up with Spotify? Where has TrueCrypt gone?

60 Second Security - 31 May 2014

Apple iOS ransomware mystery deepens - "Oleg Pliss" pops up in LA

The mysterious Oleg Pliss, who popped up on iPhones in Australia earlier this week, demanding $100 "for unlock device," is back.

Now we're hearing reports from Southern California...

SSCC 149 - Apple devices ransomed, eBay breached, carders busted and more [PODCAST]

sscc-149-250

Chester Wisnieski and Paul Ducklin dig into the important security stories of the past week, and pull out some lessons we can all learn.

If you haven't listened to a "Chet Chat" before, now's the time to give it a try!

Will it be Apple versus Google for control of your smart home?

Will it be Apple versus Google for control of your smart home?

Rumor has it that Apple is poised to jump into the Internet of Things fray with Google, with plans to announce a new software platform that would turn an iPhone into a remote-control platform for lighting systems, home security, kitchen gadgets and the like.

Apple ransomware strikes Australia - pay Oleg $100 or else

hacked-250

This morning, a number of Australian iPad and iPhone users woke up to a strange sight.

"Device hacked by Oleg Pliss. For unlock device..."

Monday review - the hot 26 stories of the week

dow-250

Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.

Apple Safari 7.0.4 closes 22 holes, including 21 listed under "arbitrary code execution"

saf-250

Apple just pushed out another Safari update, bumping OS X's native browser to version 7.0.4.

Paul Ducklin found himself thinking, "Is it just me, or has Cupertino bumped up the frequency of Safari patches lately?"

SSCC 148 - Cloud privacy policies not related to data security [PODCAST]

sscc-148-250

The Chet Chat comes to you this week from Hanoi, Vietnam with special guest Sean Richmond from Sophos Australia.

This week they tackle the FBI's crackdown on the Blackshades malware, more flaws in Chip-and-PIN, the latest Apple updates, and the EFF's "Who has got your back" report.

Snapchat, AT&T, Amazon = worst privacy protectors says EFF

Snapchat, AT&T, Amazon = worst privacy protectors says EFF

Snapchat makes its debut on the list with the lowest ranking of all when it comes to who's got our backs. The good news is that many companies have made vast strides in criteria including publishing transparency reports about government data requests and fighting for users' data privacy rights both in the courts and in Congress.

As one security hole closes, another one opens! 60 Sec Security [VIDEO]

How many years was that security hole in Linux ? How many security patches for XP? How many lock screen holes in iOS? How much do Google specs cost?

Find out in this week's 60 Second Security video...

Apple rushes out iTunes 11.2.1 - fixes giant permissions hole

itunes-250

Did you just download the quarter-gigabyte iTunes 11.2 update for your Mac?

If so, consider it a practice run: you need to do it all over again...

Apple releases OS X Mavericks 10.9.3, repeats last month's security updates

appst-250

Apple just issued a Security Advisory for OS X Mavericks 10.9.3. Don't get too excited - from a security point of view, it seems to be nothing more than last month's fixes all over again.

So, at betwen 0.5GB and 1GB to download, do you need it?

SSCC 147 - Why Snapchat will have to tell you the truth about security now [PODCAST]

sscc-147-250

As usual, Chester Wisniewski and Paul Ducklin turn their insightful and entertaining gaze on the security lessons we can learn from the past few days.

Give it a listen - it's our weekly quarter-hour security podcast...

"Open the iPhone door, Siri!" - Apple's digital helper coughs up another lock screen hole

iphone-5-lock-screen-250

A hacker has found a way to bypass the iPhone 5 lock screen to get at your contacts. Ironically, he got in by asking Siri, Apple's voice-activated "helper."

Here's how to close the hole while you wait for Apple's fix...

Monday review - the hot 21 stories of the week

dow-250

It's weekly roundup time!

Here's all the great stuff we've written in the past seven days.

Is Apple finally getting real about security? 60 Sec Security [VIDEO]

2014-05-10-thumb-0250

Where does the data breach buck stop? Why do they call them "secret" links? And is Apple finally getting real about security?

Find out in "60 Second Security" for 10 May 2014

Apple will notify customers when the law demands their personal data

Apple logo. Image courtesy of 1000 Words/Shutterstock.

Except, of course, if data demands come with gag orders, Apple's new guidelines say.

Apple admits flaw in email attachment encryption on iPhones and iPads

Apple admits iOS 7 encryption flaw

Apple is under pressure once again to patch a security flaw in iOS 7, after a researcher published his discovery that email attachments are unencrypted on iPhones and iPads.