Brian Prince

IBM is talking up virtualization security with a new product aimed at protecting enterprise virtual infrastructures. According to IBM, the product – known as IBM Virtual Server Security for VMware vSphere – is designed to help protect every layer of the virtual infrastructure, from the hypervisor to server-based virtual desktops. By integrating it with VMware […]

New research from WhiteHat Security painted a bleak picture for Website security. In its latest iteration of its Website Security Statistics report, WhiteHat found 64 percent of the 1,364 sites the company analyzed have at least one serious vulnerability. But the news isn’t all bad-according to the company, 17 percent of the sites have never […]

The notorious Koobface botnet has pushed out a new component to help snag Facebook users. According to Trend Micro, the component automates the following routines: registering a Facebook account, confirming an e-mail address in Gmail to activate the registered account, joining random Facebook groups, adding “friends” and posting messages on their walls. The point of […]

Microsoft announced the availability of the November SQL Server 2008 R2 community technology preview today. The CTP can be downloaded here. Microsoft officials said the CTP is feature-complete. The new capabilities in the latest CTP include support for Windows Server 2008 R2 – including Hyper-V with Live Migration – as well as enhanced data compression […]

Security researchers have found a new tool targeting users of jailbroken iPhones. On the heels of the discovery of a worm targeting jailbroken iPhones in Australia, security researchers at Intego now say they have detected a program known as iPhone/Privacy.A that hackers can use to swipe personal data. The program does not get installed on […]

Less than 24 hours after Microsoft’s Patch Tuesday, a security researcher revealed a zero-day bug affecting Windows 7 and Windows Server 2008 Release 2. Researcher Laurent Gaffie posted proof-of-concept code as well as information about the flaw on his blog and the Full Disclosure mailing list Nov. 11. The exploit takes advantage of the implementation […]

Perhaps underscoring a concern with fraud and identity theft, a new survey from Unisys found that a growing number of consumers are open to biometric authentication solutions. The company’s biannual Unisys Security Index included responses from 8,300 people from nine countries. Unisys found that despite a general decrease in overall concern about security threats, consumers […]

Apple has pushed out a massive patch to address nearly 60 vulnerabilities affecting Mac OS X. The most serious of the flaws can be exploited by a remote attacker to take over a vulnerable system. Most of the vulnerabilities impact Snow Leopard, the latest version of Apple’s operating system. The batch of fixes addresses more […]

A U.S. grand jury has indicted eight people in connection with the theft of more than $9 million from over 2,100 ATMs in at least 280 cities around the world. The indictment accuses Viktor Pleshchuk, 28, of St. Petersburg, Russia; Sergei Tsurikov, 25, of Tallinn, Estonia; Oleg Covelin, 28, of Chisinau, Moldova; and an unidentified […]

An anonymous group going by the name Control Your Info hijacked hundreds of Facebook groups Nov. 10 to put a spotlight on the social networking site’s security. Control Your Info seized control of the Facebook groups and renamed each Control Your Info. On the wall of every group was a message stating that it had […]

Microsoft released six patches Nov. 10 to cover 15 security vulnerabilities. Three of the bulletins address critical Windows security issues. Those bulletins cover a variety of issues affecting the WSDAPI (Web Services on Devices Application Programming Interface), vulnerabilities in the Windows kernel and a privately reported vulnerability in Windows 2000. “The Embedded OpenType (EOT) font […]

The first known worm for the Apple iPhone is sweeping across Australia, and it is taking advantage of default SSH passwords on jail-broken phones. The attack vector is the same as the one exploited by a Dutch teenager last week in a brief extortion attempt. This time around, the mind behind the attack isn’t doing […]