security

ACLU to FTC: Mobile carriers fail to provide good Android security

The America Civil Liberties Union filed a complaint with the Federal Trade Commission today asking the agency to investigate the four major mobile carriers' security practices in regards to smartphones.

The civil liberties group claims that AT&T, Verizon, T-Mobile, and Sprint are not doing enough to protect users' private and personal data -- specifically on Android devices. The gist of the complaint (PDF) is that these carriers aren't providing users with timely security updates, which the ACLU says is akin to "deceptive and unfair business practice."

"The major wireless carriers have sold millions of … Read more

Targeted cyberattacks jump 42 percent in 2012, Symantec says

Internet users are seeing less spam but more targeted attacks, according to security software company Symantec.

Looking at last year's security landscape, Symantec's Internet Security Threat Report 2013 found that traditional spam accounted for 69 percent of all e-mail in 2012, down from 75 percent in 2011. Yet, 30 billion spam messages are still sent on a daily basis.

Junk e-mails that hawk sex or dating products and services now account for 55 percent of all spam, taking the top spot away from pharmaceutical spam.

Malware is also part of one out of every 291 e-mail messages, with … Read more

Oracle preps 128 security patches; Java gets 42

Oracle will release today 128 fixes for security vulnerabilities that affect "hundreds" of its products.

The software giant and Java maker said in a pre-release announcement today that four of the patches include fixes for Oracle's flagship database product, which can be exploited remotely without the need for a username or password.

Also, 29 security fixes will arrive for Oracle Fusion Middleware, with 22 of these also for preventing attacks without the need for authentication.

Affected components include Oracle HTTP Server, JRockit, WebCenter, and WebLogic.

Both Oracle products have a common vulnerability scoring system (CVSS) rating of … Read more

Facebook, attorneys general kick off online safety campaign

Facebook and the National Association of Attorneys General for the U.S. have signed a deal that will see the world's largest social network educate both kids and parents on Internet safety.

Facebook has been the subject of much debate among attorneys general around the U.S. who have been concerned about children's safety on the social network. Facebook has said for years that it has worked on ensuring the protection of children, and has aided attorneys general from time to time with cases or issues they're working on.

This agreement, the latest between the parties, is … Read more

McAfee, NIST partner to boost U.S. cyberdefenses

Security firm McAfee is working with the National Institute of Standards and Technology to try to shore up America's defenses against cyberthreats.

McAfee announced today that the company is now part of the the National Cybersecurity Excellence Partnership and will join cybersecurity professionals from both the private and public sector to tackle the escalating problem of computer-based threats.

The partnership is part of the National Cybersecurity Center of Excellence, which is hosted by NIST in collaboration with the state of Maryland and Maryland's Montgomery County.

Launched in February 2012, the center has a particular slant toward sharing technology … Read more

Microsoft pulls security update over software conflicts

A security update issued by Microsoft on Tuesday isn't playing nicely with other software, prompting Microsoft to pull it from its download center.

Dustin Childs, group manager of Microsoft Trustworthy Computing, revealed the problem in a blog post late yesterday:

We are aware that some of our customers may be experiencing difficulties after applying security update 2823324, which we provided in security bulletin MS13-036 on Tuesday, April 9. We've determined that the update, when paired with certain third-party software, can cause system errors. As a precaution, we stopped pushing 2823324 as an update when we began investigating the … Read more

Guantanamo legal files mysteriously disappear from PCs

In an institution already cloaked in mystery, puzzling happenings seem to be afoot at Guantanamo Bay prison.

Not only have many legal files suddenly disappeared from the defense team's computers, but also hundreds of thousands their documents have landed on the prosecution's computers, according to Reuters. This debacle has caused several pretrial hearings in the prison's military tribunals to be delayed.

It's not clear how the files vanished or if there was any illegal action behind the disappearance. It could have been a simple computer blip, IT issues, a security breach, hackers, or one of the … Read more

How to set up Google's Inactive Account Manager

What happens to your Gmail account, Google Drive documents, Picasa photos, and the other data you have stored with Google when you head to that big cloud drive in the sky? Google introduced a feature today called Inactive Account Manager that lets you tell Google what to do with your data after you're gone, whether you want to share it with family and friends or delete it altogether.

The new Inactive Account Manager can be accessed from the Accounts page. You'll find a link to it under the Account Management section.

After reading the brief introduction to the … Read more

Prepare a digital will for your Google accounts

Google doesn't want you worry about what happens to your online self when you leave finally this world -- or just the virtual world.

The company introduced a tool today called the Inactive Account Manager that lets you tell Google what you want done with your data hosted on its network after you die, or stop using your account for a long period of time. Think of it as an automated will for your digital assets.

"Not many of us like thinking about death -- especially our own," Product Manager Andreas Tuerk wrote in a blog post. &… Read more