mac

(get it in RSS or Atom)

Monday review - the hot 20 stories of the week

Monday review

Catch up with all the security news from the last seven days - it's weekly roundup time.

Mac malware found in malformed Word documents - is China to blame?

Mac malware found in malformed Word documents - is China to blame?

Minority groups in China appear to have been targeted by a Mac malware attack, delivered via boobytrapped Word documents.

Who could possibly be interested in targeting their computers?

Apple's own Macs bitten by Java-based malware attack

shutterstock_AppleBite250

Apple released a statement today acknowledging that they were victims of the same attackers that Facebook talked about last week. A zero-day Java vulnerability infected Apple Mac developers through a drive-by attack.

More Mac malware attacking minority groups in China

More Mac malware attacking minority groups in China

A targeted Mac malware attack strikes a minority group in China, exploiting an old Microsoft Word vulnerability.

No patch yet for Adobe PDF exploits - Adobe suggests a workaround; Mac and Linux users need not apply

No patch yet for Adobe PDF exploits - Adobe suggests a workaround, but Mac users need not apply

Adobe issues advice on how to mitigate the latest exploits against its PDF Reader software.

For Windows users, anyway. Mac and Linux fans are still out in the cold.

Anatomy of a bug - how Mac OS X chokes if you say "FILE"

Heard about the OS X bug that crashes programs if you display the text FILE colon slash slash slash? (We're not going to write it here in full, just in case!)

It's an intriguing problem - Paul Ducklin explains what goes wrong, and offers you two workarounds.

Serious security holes fixed in Opera - but Mac App Store users left at risk again

Serious security holes fixed in Opera - but Mac App Store users left at risk again

It should go without saying that if you use Opera, you should update to version 12.13 as soon as possible.

But... what if you didn't get your copy of Opera from the official website?

What if, instead, you acquired your version of Opera for Mac from Apple's Mac App Store?

Dockster Mac malware found on Dalai Lama-related website

Dockster Mac malware found on Dalai Lama-related website

Mac malware has been found on a website related to the Dalai Lama, capable of allowing hackers to steal files and spy on keystrokes.

Microsoft Patch Tuesday - there's even a patch for your Mac!

Microsoft Patch Tuesday - there's even a patch for your Mac!

Patch Tuesday has come around again.

The fixes cover Internet Explorer, Excel (on Windows and Mac), the kernel itself, and more.

Here's advice on the what, the why and the where...

Mac malware Crisis on Mountain Lion eve?

Mac malware Crisis on Mountain Lion eve?

SophosLabs recently received a intriguing Mac malware sample, variously known as Crisis and Morcut.

Its appearance so close to the release of Mountain Lion is almost certainly a coincidence - but nevertheless a timely reminder about security if you plan to rush out to get a Mac when the new OS drops later today!

Russian hacker's App Store fraud site adds Mac support

Russian hacker's App Store fraud site adds Mac support

ZonD Eighty, the Russian hacker who brought App Store fraud to unjailbroken iPads and iPhones, has extended his "service" to OS X users.

Mac owners can now join their iDevice brethren in ripping off developers.

Python-based malware attack targets Macs. Windows PCs also under fire

windows-mac-thumb

A new malware attack is targeting Mac computers with a Python-based backdoor Trojan.

And Windows computers aren't getting away scott free either.

SSCC 87 - Mac botnet, Global Payments, Flash Player updater, AES-NI and cloud encryption

Sophos Security Chet Chat

David Schwartzberg is this week's guest on the Chet Chat to talk about the data breach at Global Payments, a new Mac botnet and Flash Player updating. David also explained the new AES-NI encryption acceleration in Intel chips and a new way to safely store files in the cloud.

"600,000+ Macs are in this botnet, including 274 in Cupertino"

shutterstockAppleBite.250

Malware targeting users of Macintosh computers appears to be spreading quickly. One anti-virus vendor is reporting more than 600,000 OS X computers are part of a newly assembled botnet.

Apple patches Java hole that was being used to compromise Mac users

MacBomb250

Apple has released an update to Java for OS X patching a recently exploited vulnerability targeting Mac users. Update now to protect yourself - or, better yet, remove Java entirely

Apple OS X users - it's Security Update time again!

Apple OS X users - it's Security Update time again!

Apple's latest large-scale OS X security updates are out.

In tech-speak, there are 39 fixes, covering 52 CVE identifiers, and including 19 fixes for vulnerabilities potentially allowing arbitrary code execution. That's a lot!

Sophos Security Threat Report 2012 - seeing through the hype

threat-report-2012-250

We know you're probably sceptical of "state of the world" reports from vendors. For all you can tell, they'll turn out to be thinly-digsuised advertorial, unreconstructed product brochures, or worse.

We like to do things differently. Find out how!

History of Mac malware: 1982 - 2011

The short history of Mac malware: 1982 - 2011

Viruses, spyware, worms and Trojans aren't just a Windows problem.

Here's a short history of the Mac malware scene - from 1982 to the present day.

SSCC 74 - fighting hi-tech crime, Kelihos botnet, iCode for USA, Amazon Silk tablet, Mac malware and the BEAST

Sophos Security Chet Chat

This week, Chet and Paul Ducklin discuss the interesting and important topics of the past week: fighting hi-tech crime, tackling the Kelihos botnet, taking on zombified home users, examining the risks of Amazon's new Silk tablet, and understanding the BEAST!