Archive for September, 2007

Microsoft’s Stealth Update Backfires for Some Users

Saturday, September 29th, 2007

A software update Microsoft quietly delivered to millions of PCs this summer prevents the installation of at least 80 security updates when some Windows users try to fix a problem with their computer using the software’s “repair” feature, according to reports. Microsoft has acknowledged that in July it started shipping an update to its Windows Update program. The patch was automatically installed for any Windows user who took advantage of the built-in software-update feature (including automatic update users who had selected the option to “download updates for me, but let me choose when to install them”). The story received a fair amount of attention in the tech press, with many people remarking that they had suspected all along that Microsoft would try something like this, and that such a scenario was the primary reason they had chosen not to allow automatic updates of any kind. Microsoft acknowledged that it […]

Read more…

NSA writes more potent malware than hacker

Friday, September 28th, 2007

Spooky project plots zero day defences
A project aimed at developing defences against malware that attacks unpatched vulnerabilities involved tests on samples developed by the NSA.…

Read more…

Apple Ships iPhone Security Updates

Friday, September 28th, 2007

Apple today issued a software update to plug at least 10 security holes in the iPhone, including at least seven fixes for Safari, the device’s built-in Web browser. The updates are available only through iTunes, recent versions of which are programmed to check Apple’s update server every week or so and download any updates. Alternatively, iPhone users can download the updates manually via the “Check for Update” button within iTunes and then docking the device to the computer. A word of caution to anyone who has installed special third-party software to “unlock” their iPhone so that it can be used with multiple wireless carriers. This update will likely turn your iPhone into an expensive paperweight, assuming this patch bundle is the firmware update Apple warned was coming earlier this week.

Read more…

Calculating the Costs of Cyber Crime

Friday, September 28th, 2007

On Monday, Security Fix looked at figures published by the Justice Department suggesting that the FBI had between 3 and 6 percent of its field agents dedicated to fighting cyber crime. On the surface, that number may seem low for an area the FBI rates as its No. 3 priority, behind only counter-terrorism and counter-espionage activities. Is that ratio appropriate? The only real way to know is to try to figure out how costly the cyber crime problem is in the first place. After all, how can we judge the proper level of resources to throw at a problem if we don’t have a good idea of just how bad cyber crime is? The problem, it seems, is that nobody really has any clue about how much cyber crime is costing U.S. businesses and consumers each year. The best guesses so far have been just that, and have ranged all

Read more…

Jailed worm author offered job by victim

Thursday, September 27th, 2007

$133K salary awaits Fujacks fiend
A Chinese virus writer sent to jail for four years earlier this week has being offered a well-paying job by one of his victims.…

Read more…