Apple

(get it in RSS or Atom)

Apple bans outdated Adobe Flash plugins from Safari

by Paul Ducklin on March 4, 2013 | 5 Comments

Last week, Apple showed that it is getting more serious about security by getting strict about the version of Flash you're allowed to use in Safari.

Paul Ducklin explains the what and the why...

Second iPhone passcode hack vulnerability discovered

by Lisa Vaas on February 27, 2013 | 7 Comments

You too can get into somebody's locked iPhone, particularly if you have a prehensile tail and don't mind (almost) placing a phony emergency call. Which you a) probably don't and b) hopefully do.

SSCC 103 - Mandiant report, iOS coders owned, Twitter accounts hacked, and more...

by Paul Ducklin on February 24, 2013 | 1 Comment

Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?

Here's the latest Naked Security podcast, Sophos Security Chet Chat 103, discussing a range of recent and newsworthy topics from the world of computer security.

Apple patches the Java hole its own developers fell into - eventually

by Paul Ducklin on February 20, 2013 | 1 Comment

Shortly after admitting that its own techies got infected thanks to a Java hole, Apple has pushed out a Java update for the rest of us.

Apple, with this most recent update, seems to have washed its hands permanently of browser-based Java. Paul Ducklin explains...

Apple's own Macs bitten by Java-based malware attack

by Chester Wisniewski on February 19, 2013 | 6 Comments

Apple released a statement today acknowledging that they were victims of the same attackers that Facebook talked about last week. A zero-day Java vulnerability infected Apple Mac developers through a drive-by attack.

Unlock an iPhone without the passcode - harmless trick or computer crime?

by Paul Ducklin on February 15, 2013 | 8 Comments

A YouTube video showing you how to unlock an iPhone 5 without the passcode has racked up nearly 300,000 hits over the past two weeks.

Paul Ducklin looks into the good and the bad of the story...

SSCC 102 - Probably the best 15 minute security podcast you'll hear today

by Naked Security writer on February 12, 2013 | 10 Comments

Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?

Here's the latest Naked Security podcast, Sophos Security Chet Chat 102, discussing a range of recent and newsworthy topics from the world of computer security.

Anatomy of a bug - how Mac OS X chokes if you say "FILE"

by Paul Ducklin on February 6, 2013 | 28 Comments

Heard about the OS X bug that crashes programs if you display the text FILE colon slash slash slash? (We're not going to write it here in full, just in case!)

It's an intriguing problem - Paul Ducklin explains what goes wrong, and offers you two workarounds.

Jailbreak iOS 6.1 today, or wait until Sunday?

by Paul Ducklin on January 31, 2013 | 15 Comments

The cat-and-mouse game between Apple and its diehard technical fans continues.

Update - jailbreak - update - jailbreak...

Should Apple open up iOS and offer an official route to jailbreaking?

Serious security holes fixed in Opera - but Mac App Store users left at risk again

by Graham Cluley on January 30, 2013 | 2 Comments

It should go without saying that if you use Opera, you should update to version 12.13 as soon as possible.

But... what if you didn't get your copy of Opera from the official website?

What if, instead, you acquired your version of Opera for Mac from Apple's Mac App Store?

Apple updates iOS fixing 27 vulnerabilities and TURKTRUST revocation

by Chester Wisniewski on January 28, 2013 | 8 Comments

Apple has released updates for users of the iPod Touch, iPhone, iPad and Apple TV products that fix critical vulnerabilities. Apple users should update their devices to iOS 6.1 as soon as possible.

PWN2OWN - hack the Big Four browsers in public and go home with half a million dollars

by Paul Ducklin on January 22, 2013 | 4 Comments

Only six weeks to go until PWN2OWN 2013, where you can hack the Big Four browsers and the Big Three plugins, and win over half a million dollars.

But is it just about the money?

Paul Ducklin investigates...

Apple and Mozilla - 'Just say no to Java'

by Chester Wisniewski on January 11, 2013 | 12 Comments

After the recent discovery of a zero-day vulnerability in Oracle's Java Web Start plugin Apple and Mozilla are now disabling Java by default until fixes are made available.

Apple acts against "bait-and-switch" scammers in the App Store

by Paul Ducklin on January 10, 2013 | 1 Comment

Apple announced today that the bait-and-switch of software screenshots in the App Store will no longer be allowed.

Once you submit an app, you'll have to stick to your original marketing materlal until the app is updated and re-approved. Good thing.

Fake Apple invoices lead to Blackhole exploit kit that drains your bank account

by Chester Wisniewski on November 23, 2012 | 9 Comments

Fake Apple invoices lead to Black Hole that drains your bank account

A new round of spams proclaims you have been charged for a large purchase from Apple.

All links lead to webpages infected with the Blackhole exploit kit. Be cautious with your online shopping this holiday season.

Microsoft Patch Tuesday - there's even a patch for your Mac!

by Paul Ducklin on November 14, 2012 | 1 Comment

Patch Tuesday has come around again.

The fixes cover Internet Explorer, Excel (on Windows and Mac), the kernel itself, and more.

Here's advice on the what, the why and the where...

We explain why this is different from previous hacks, and treat you to the war of words between the original hackers and the pirates who stole their work...