Ryan Naraine

The U.S. Computer Emergency Readiness Team has raised an alert for an in-the-wild malware attack against Microsoft Windows CE powered mobile devices.According to the US-CERT warning, the Trojan horse program is capable of disabling Windows Mobile application installation security.The Trojan, dubbed WinCE/InfoJack by anti-virus vendor McAfee, has been programmed to hijack the infected device’s serial […]

One of the most hated things on Apple’s new MacBook Air laptops-the fact that it’s impossible to upgrade the laptop’s RAM-could accidentally turn out to be quite a useful security feature. In fact, according to Ivan Krstic, director of security architecture at OLPC (One Laptop per Child), the sleek new MacBook Air is one firmware […]

Organizers of the annual CanSecWest security conference have expanded the PWN 2 OWN hacking contest to pit fully patched laptops running Mac OS X, Windows Vista and Ubuntu against some of the world’s smartest hackers.Last year, the contest was aimed specifically at two MacBook Pro machines and was won by Dino Dai Zovi, a New […]

After a short stay of execution, America Online has finally pulled the plug on Netscape with an update notice encouraging users to migrate immediately to either Firefox or Flock. On the screen, Flock is listed ahead of Netscape and there’s even a nudge on the Netscape blog recommending the social media browser (which is based […]

WASHINGTON – Personally identifiable information baked into the magnetic strip on your credit card can be easily hijacked by hackers using lightweight tools, according to a warning from RFID security guru Adam Laurie.At the Black Hat DC briefings here, Laurie announced the release of CHaP.py, a test program created to read chip and PIN credit […]

Cult of the Dead Cow, or cDc, an old-school hacking crew famous for its anti-censorship stance, has shipped a new tool that turns the Google search engine into an easy-to-use vulnerability scanner.Taking its cue from Johnny Long’s Google Dorks-search queries that reveal sensitive information-cDc’s new Goolag Scan pushes the envelope even more, offering a stand-alone […]

Four of the most widely used disk encryption technologies-Windows Vista’s BitLocker, Apple’s FileVault, TrueCrypt and dm-crypt-have been rendered useless by a new attack class, according to a research paper released Feb. 21.The issue is described as a design limitation that could allow practical attacks against laptops in “sleep” or “hibernation” mode.Although a successful attack requires […]

The Google-backed StopBadware.org group has explained the thinking behind its decision to slap the “badware” label on two versions of RealNetworks’ RealPlayer software, insisting there are serious problems with the installation process and behavior of the products.But RealNetworks is hitting back, arguing that the claims raised by StopBadware.org doesn’t justify the company’s flagship media player […]

Opera has shipped a high-priority update to its flagship Web browser to correct multiple flaws that put Windows users at risk of malicious hacker attacks. With Opera 9.26 for Windows, the Norwegian company shipped patches for at least three vulnerabilities that can be exploited to launch malware installations or conduct identity theft attacks.The most serious […]

WASHINGTON – A pair of security researchers have developed a way to use $1,000 worth of off-the-shelf hardware to receive and decipher GSM signals, significantly reducing the time it takes to eavesdrop on conversations on the world’s largest mobile phone network.The technology was introduced Feb. 20 at the Black Hat DC Briefings here by David […]

WASHINGTON-A four-month investigation into the inner workings of the phishing scourge that drives identity theft attacks has uncovered an underground ecosystem of compromised Web servers, do-it-yourself phishing kits, brazen credit card thieves and lazy code copycats.At the Black Hat DC Briefings here, security researchers Billy Rios and Nitesh Dhanjani shared the findings of their investigation […]

Microsoft’s Secure Windows Initiative unit has emerged from the shadows, promising a new level of transparency, as well as details of software vulnerabilities and security bulletins.SWI, tasked with maintaining and managing all aspects of Microsoft’s mandatory SDL (Security Development Lifecycle), has launched a new blog that provides customers with technical details on security vulnerabilities, mitigations […]