Ryan Naraine

The security model of that BlackBerry on your hip isn’t holding up very well to third-party scrutiny. According to a white paper by John O’Connor, a researcher on Symantec’s security response team, hackers can pay $100 for an API developer key that can open doors to the theft of data from Research in Motion’s BlackBerry […]

A critical security vulnerability in an ActiveX control used by Internet Explorer could allow malicious hackers to use Adobes Reader and Acrobat software to launch PC hijack attacks, according to a warning from Adobe Systems. The San Jose, Calif., company released an advisory with pre-patch workarounds and warned that multiple unpatched flaws could cause software […]

The latest installment of the eWEEK OnSecurity podcast is a sharp discussion between my colleague Matt Hines and Symantec’s anti-spam guru Doug Bowers about the rising tide of unwanted e-mail and the range of Internet and computer security threats. Download audio.

UPDATED: Cesar Cerrudo has suddenly cancelled plans to release daily zero-day flaws in Oracle databases during the first week in December. Just days before the project was due to start, Cerrudo announced that “due to many problems,” the WoODB (Week of Oracle Database Bugs) is being scrapped.

UPDATED: Researchers at the University of Toronto are working on a free tool to allow Web surfers to bypass government censorship of the Web. The tool, called psiphon, is part of a human rights software project developed by the Citizen Lab at the Munk Centre for International Studies and funded by the Open Society Institute […]

Apple Computer has shipped a monster security update to correct a total of 22 vulnerabilities in its Mac OS X operating system. The Cupertino, Calif, companys patch batch includes a fix for a critical Wi-Fi flaw affecting eMac, iBook, iMac, PowerBook G3, PowerBook G4 and Power Mac G4 systems. The Wi-Fi flaw, first exposed at […]

British security researcher David Litchfield is raising an alert for a brand-new class of vulnerabilities affecting Oracle database products. Litchfield, a database security expert who has clashed with Oracle in the past, went public with the discovery in a research paper that warns that dangling cursors in database code can be manipulated and used to […]

Anti-virus researchers have spotted the first signs of an adware/spyware program capable of launching browser windows on Apple Computers Mac OS X. According to a warning from F-Secure, a security vendor in Helsinki, Finland, the proof-of-concept program could be silently installed on a Macs User account and hooked to each application used by that account. […]

On the heels of HD Moore’s Month of Browser Bugs and LMH’s Month of Kernel Bugs, a database security research expert plans to start a new project dedicated to releasing zero-day flaws in Oracle database server and application products…

The recent surge in e-mail spam hawking penny stocks and penis enlargement pills is the handiwork of Russian hackers running a botnet powered by tens of thousands of hijacked computers. Internet security researchers and law enforcement authorities have traced the operation to a well–organized hacking gang controlling a 70,000-s-trong peer-to-peer botnet seeded with the SpamThru […]

On the heels of its July acquisition of Mark Russinovichs Winternals Software, Microsoft has replaced the popular Regmon and Filemon utilities with a single tool offering advanced capabilities for real-time monitoring of registry and process thread activity. The release of the new utility, called Process Monitor, coincides with the relaunch of the Sysinternals portal as […]

A well-respected British security researcher has found a way to use a PCI device to plant an offensive rootkit on Windows machines. John Heasman, principal security consultant at NGSS (Next-Generation Security Software) released a research paper on the Daily Dave mailing list discussing a means of persisting a rootkit on a PCI device containing a […]