McAfee spies malware in legit JavaScript apps
581203
More anti-virus false alarm madness A dodgy anti-virus update from McAfee on Wednesday wrongly identified legitimate JavaScript files as a virus in the second such screw-up by a major security vendor in less than a week.â¦
204228
An unpatched IE security flaw can install malicious software via rigged Web sites, including porn sites.
423473
Search sites are getting wiser about not directing users to malware-loaded pages, but some companies do a better job of weeding out the garbage than others, according to a new study from McAfee. Two topics are particularly likely to lead to scum-infested sites.
630692
McAfee's VirusScan Enterprise 8.0i integrates intrusion-prevention services and firewall technology with antivirus software to automatically protect PCs and file servers from new malicious code outbreaks.
480779
Malware arrives in the form of a game, disables antivirus protection.
553729
Google's experimental API lets other programs access its blacklist of Web sites that may host malware.
267586
Security researchers have warned of a vulnerability in most web browsers that could let scammers launch phishing attacks from pop-up windows on trusted websites.
747017
Mozilla is investigating hacker claims that the Web browser has a serious flaw in the way it handles JavaScript.
53629
Clicking the fraudulent update could install malicious code on your desktop.
507312
Trojan.Mebroot malware is read at startup, then changes the Windows kernel to avoid detection.
475734
Goes mad for certifying Security firm McAfee has bought ScanAlert - the company behind the "HACKER SAFE" kitemark used to certify ecommerce websites.â¦
67175
McAfee VirusScan Online will come bundled with AOL 9.0 Security Edition.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
285360
Blog: Researcher shows how URLs can be spoofed and content arbitrary within Safari 3.0 beta.
437595
Hackers can drop malicious code into systems running Firefox when the browser is armed with Google Toolbar, Yahoo Toolbar, or other add-ons.
686153
Some Macintosh users have encountered a security program whose function and Web site have the tell-tale signs of a scam.Visitors to the Web site selling the program, called MacSweeper, are offered a free security scan of their computers. The scan, which only works on Macs, highlights supposed security problems with the computers. It offers to remove the problems with the purchase of a $39.99 lifetime subscription.But the awkward English on the program&#39;s Web site, and the way the program operates, have raised doubts over its legitimacy, users and security researchers say.&quot;The imbibed set of features locates all the junk and useless data on your computer and deletes them to reclaim the wasted space,&quot; according to the pitch on MacSweeper&#39;s home page.Security company F-Secure wrote on Tuesday that the program, called MacSweeper, may be the first rogue application for Macs.Windows machines have been more frequently targeted by similar software, sometimes labeled &quot;scareware&quot; since users are warned their computers will be in danger unless they purchase the software. Among the more notorious scareware for PCs is Winfixer, also known by the aliases ErrorSafe, WinAntiVirus, and DriveCleaner.The MacSweeper Web page is hosted on a server in Kiev, Ukraine, said Patrik Runald, security response manager for F-Secure, who is based in Malaysia. Information on the site about MacSweeper&#39;s company, Kiwi Software, has been plagiarized from Symantec&#39;s Web page, Runald said.&quot;They just ripped that information straight off there,&quot; Runald said.The same text is also used on Cleanator.com, which sells a Windows-compatible version of the same kind of program, Runald said. Another security vendor, Sophos, classifies Cleanator as a &quot;potentially unwanted program.&quot;Once MacSweeper is running on a Mac it will often pick odd items, such as language files, and label them as being a privacy risk, Runald said.In at least one instance an F-Secure researcher visited the MacSweeper site and clicked a button labeled &quot;Free scan.&quot; The scan highlighted Mac-related problems, even though the researcher was using a PC.MacSweeper doesn&#39;t use any tricks to get onto a machine other than trying to persuade users to download it, Runald said. Nonetheless, F-Secure typically contacts Finland&#39;s Computer Emergency Response Team when it finds scams such as MacSweeper, Runald said.A user on one of Apple&#39;s discussion boards wrote that their Safari browser kept redirecting to the MacSweeper site, a sign that malicious scripts may be involved.&quot;If I click on anything it&#39;ll try downloading the software,&quot; the person wrote. &quot;How do i get rid of this? It&#39;s really annoying. I don&#39;t want it, and I&#39;d wish it would leave me alone.&quot;
78443
Flaw in the way the Net phone software handles Web links could enable an attacker to launch arbitrary code on some Macs.