Fahmida Y. Rashid

The key takeaway from the incident where nine fraudulent SSL certificates were issued for popular Websites was not the fact that the certificates were issued, but that the DNS infrastructure is not protected, Comodo Security said. A day after it was revealed that a Comodo Security partner had been compromised and attackers issued valid digital […]

A Chinese mobile security firm has been accused of bundling viruses with its anti-malware software in an expose aired on Chinese state-run television. The expose claims the company, NetQin, partnered with another mobile software firm Feiliu to deliberately infect smartphones with malware and then charge users for removing it, according to CNET’s Asian blog Sinobytes. […]

Big data gives organizations a better understanding of trends and customer behavior, and the ultimate opportunity lies in the ability of using “geolocational data” to perform “space-time-travel” analyses. Organizations are taking information they’ve collected and analyzing it to gain better insights in their customers’ behavior, but the ultimate opportunity lies in analyzing geolocational data to […]

Analyzing “big data” doesn’t have to be expensive, and it got even cheaper, thanks to a new tool that automates the data analysis needed to make sense of massive amounts of data. Pete Warden, the man who became famous after he scraped 220 million public Facebook profiles last year, unveiled his Data Science Toolkit at […]

The Secure Sockets Layer certificates that were issued fraudulently for five popular Websites were only a step in a multipronged attack by those aiming to steal information or distribute malware, according to security experts. Attackers impersonating a Comodo Security partner managed to request nine valid digital certificates for seven domains belonging to popular Websites, including […]

A Comodo Security partner was compromised and attackers issued valid digital certificates for popular Websites that would have potentially allowed them to spoof content and perform man-in-the-middle attacks, Microsoft warned. The nine fraudulent Web certificates affected seven domains, including Microsoft Live service, Google’s mail system, Yahoo and Skype, Microsoft said in a March 23 security […]

For its first major move as an Intel company, McAfee has acquired database-security company Sentrigo to boost its database offerings. McAfee announced the acquisition of privately held Sentrigo March 23. The financial terms of the deal were not disclosed. The deal is expected to close as soon as early April, according to McAfee. The Sentrigo […]

Rumor has it Apple will release iOS 4.3.1 in the next few weeks to close security holes, including the one in Safari mobile Web browser that allowed Charlie Miller to crack the iPhone during the recent Pwn2Own hacking contest. At the same time the rumor made the rounds, Apple released OS X 10.6.7, which fixed […]

Twitter is deploying one of the security features Mozilla built into the new Firefox 4 Web browser in an ongoing quest to improve security for its users. Mozilla launched Firefox 4 on March 22 with a number of security features, including features to thwart cross-site scripting attacks. Twitter announced on the same day that it […]

Researchers released attack code exploiting dozens of vulnerabilities in software used to control hardware at nuclear plants, gas refineries and other heavy industries, raising the specter of yet another Stuxnet-style attack. Serious vulnerabilities currently exist in programs sold by Siemens, Iconics, 7-Technologie, Datac and Control Microsystems, according to a researcher who released the exploits on […]

As RSA deals with the data breach where attackers stole information about its two-factor authentication technology, organizations can watch and learn how to deal with these kinds of attacks. RSA acknowledged on March 17 in a letter on its Web site about having been hit by an advanced persistent threat, and that some information about […]

Adobe has fixed and issued a security update to the zero-day vulnerability in its Flash Player. In addition, the company has updated older versions of Acrobat and Reader that could cause user systems to crash. A week after announcing the critical vulnerability in Adobe Flash Player, Acrobat and Reader, the company issued out-of-cycle security updates […]