Fahmida Y. Rashid

The team behind the Duqu Trojan may have been working on the Trojan for at least four years, according to the latest analysis of the sophisticated malware. Kaspersky Lab researchers have identified the overall methods used by the authors of the Duqu Trojan and an approximate timeline of the attack, Alexander Gostev, chief security expert […]

Huawei Technologies will pay $530 million to buy out Symantec from the joint venture the two companies established in 2008 to sell storage and security products, the companies said Nov. 14. Huawei Symantec Technologies, based in Hong Kong, was established to integrate Symantec’s storage and security software into appliances built by Huawei Technologies to create […]

The infamous TDSS rootkit is known for its versatility, as it has been put to work in drive-by downloads and a wide range of malware-based targeted attacks. Now it appears to have been the delivery mechanism for the DNSchanger Trojan, according to Dell Secureworks. Researchers at Dell Secureworks Counter Threat Unit said Nov. 11 that […]

Intego VirusBarrier Mac-security firm Intego’s VirusBarrier application scans the iPhone, iPad and iPod Touch for malicious content. Unlike comparable Android products, the VirusBarrier application scans only files downloaded onto the device, such as email attachments and files downloaded from the Web. The sandbox technology used in iOS prevents VirusBarrier from being able to see what […]

In a two-pronged attack, cyber-attackers have broken into a database belonging to the Steam videogame service that contained credit card information for an unknown number of users. After unknown perpetrators defaced the Steam discussion forums a little over a week ago, investigators discovered the same attackers had accessed at least one database belonging to the […]

Despite a growing awareness of security threats and basic security measures necessary to secure networks and data, many misconceptions and myths keep computer users and enterprises at risk, a security consultant said at a Kaspersky Lab event in New York City. While organizations are deploying firewalls, public key cryptography and complying with various security and […]

IBM announced a new managed service to help IT administrators manage and support all the personal mobile devices being used by employees. With IBM’s Hosted Mobile Device Security Management service, IT departments can ensure personal phones and tablets comply with corporate security policies, protect them from malware infections, track user activity and secure connections to […]

Organizations can now use their SecurID two-factor authentication deployments to secure cloud applications running on Microsoft Windows Active Directory Federation Services (ADFS), RSA Security said.Users will be able to add multi-factor authentication into Office 365 applications, including Microsoft Exchange and Microsoft Azure, and still use Active Directory roles to control authentication for both on-premise applications […]

Earlier this week, a security researcher well-known for hacking Apple products said he’d found a kernel bug that let him run unsigned code on iOS devices, bypassing Apple’s protections. Within 72 hours, Apple has fixed that flaw. Apple released an update to iOS 5 on Nov. 10 for the iPhone, iPod Touch, and iPad to […]

Two more certificate authorities have recently uncovered breaches in their networks and suspended issuing new digital certificates, prompting new concerns about trusting the CA system and the danger of relying on a system riddled with so many problems. The largest CA in Netherlands, KPN/Getronics, suspended its certificates business after discovering a distributed denial-of-service tool on […]

Under a proposed 20-year settlement, Facebook would be required to obtain express consent from users before sharing material that was posted under earlier terms, The Wall Street Journal reported. The U.S. Federal Trade Commission has proposed a 20-year settlement with Facebook over charges that the social networking giant changed default user settings that resulted in […]

Cyber-criminals are increasingly attacking banks and other financial institutions to transfer funds fraudulently into accounts under their control. There are a number of ways for attackers to gain control, and malware is just one of them, according to Jorge Solis, a senior vice president of security at First Midwest Bank in Itasca, Ill.First Midwest Bank […]