Brian Prince

Researchers at the Fraunhofer Institute for Secure Information Technology (SIT) in Germany have found a way to steal passwords from Apple iPhones in six minutes. The institute’s discovery could pose a security problem if phones are lost, as the attack requires physical access to the device. The researchers’ target was the “Keychain,” Apple’s password-management system. […]

Microsoft’s Internet Explorer 9 Release Candidate arrived Feb. 10 with privacy and malware protections built in to protect users. At the forefront of those features is the new TPL (tracking protection list), which enables users to choose to visit only certain Websites if they click on a link or type in the address. The feature […]

VMware is warning customers that two Microsoft patches effectively disable the VMware View desktop virtualization software on Windows 7. The Microsoft updates in question are 2482017 and 2467023, which were released by Microsoft on Patch Tuesday. According to VMware, the updates left users of the VMware View client on Windows 7 unable to connect to […]

In an age of compliance regulations and a growing awareness of the costs of a data breach, encrypting data has become a key part of many enterprise security plans. But encrypting data has little value if an organization loses track of encryption keys. And it is that last part that a recent survey (PDF) by […]

Roughly five months after taking two-factor authentication to Google Apps users, the company is adding a setup wizard and other features to bring the security approach to more users. “Most of us are used to entrusting our information to a password, but we know that some of you are looking for something stronger,” blogged Nishit […]

It is no secret critical infrastructure companies are on the hit list of cyber-attackers. The latest entry on the list today comes courtesy of McAfee, whose researchers uncovered a campaign of coordinated, covert attacks targeting oil, energy and petrochemical companies that stretches back to November 2009. The attacks, which McAfee has collectively dubbed “Night Dragon” […]

Mozilla is taking its privacy proposal directly to users in the latest beta release of Firefox 4. In it, the company has brought the “Do Not Track” HTTP header it recently proposed to bear for users who want to opt out of behavioral tracking by online advertisers. “The Web is evolving quickly, and so are […]

Microsoft continues to take aim at malware abusing the AutoRun feature in Windows-this time placing a fix into the Windows Update channel to prevent exploitation by attackers. AutoRun is a feature that allows removable media such as USB devices and CDs to launch automatically whenever they are inserted; it is also one of the chief […]

Do-it-yourself toolkits for attackers are a common item on the shelves of the underground cyber-marketplace, and ones targeting Facebook users have no shortage of customers. One such kit is “Tinie App,” which researchers at Websense said they discovered being sold on various sites for $25. Tinie App is a Facebook application template behind the most […]

With its planned acquisition by Intel not far ahead, McAfee posted fourth-quarter 2010 revenue of $550 million. The figure represents an increase of 5 percent year-over-year. The company also posted a net income of roughly $60.6 million for the quarter, up from $54.5 million in 2009. All totaled, McAfee’s 2010 revenues reached $2.1 billion, an […]

Membase and CouchOne have joined forces to form Couchbase-a marriage in the NoSQL movement the companies hope will spawn an end-to-end family of database products. The Couchbase product family is slated to be rolled out during the coming months and will span from the desktop to the data center. On the road map so far […]

Microsoft plugged 22 security holes today in the second Patch Tuesday of the year. The fixes are included in 12 security bulletins spanning Windows, Internet Explorer, Microsoft Office and IIS. Three of the bulletins are rated “critical” while the other nine are considered “important.” Within the critical bulletins are fixes for a bug in the […]