New iOS Threat Capable of “Bricking” iPhones and iPads

If you haven’t updated your iPhone or iPad to the most current version of iOS—iOS 9.3.1—you should make it a priority to do so. That was the advice of security expert Brian Krebs in an April 12 blog post about a potentially devastating new iOS threat. Interestingly, this new threat is as simple as it is dangerous—to the point where any given iPhone or iPad user could manually trip the vulnerability on their own.

To understand what Krebs is talking about, we need to look back a few months …

Johns Hopkins University Team Finds Weakness in Apple Encryption

The FBI was recently pushing for Apple to advertently weaken their encryption technology so that they could crack a terrorist’s iPhone. But based on a recent report from Johns Hopkins University, Apple’s mobile encryption technology is already flawed—or at least, it was.

According to the Washington Post, Johns Hopkins computer science professor Matthew Green recently convened the research team that found this particular zero-day flaw. At first, Green and his research team were mum about exactly how they attacked Apple’s encryption. Their silence gave Apple time to address the …

Malware Scam Uses Phone GPS Data to Pose as Traffic Cops

Email-based scams often trick users into clicking a link by purporting to be from law enforcement agencies or police authorities. A new malware scam out of the small town of Tredyffrin, Pennsylvania takes the concept to the next level by using GPS data to create a greater sense of legitimacy.

According to a report from The Verge, the new scam works by tricking victims into thinking they owe fines for speeding citations. Unlike many email scams, though, this one doesn’t sell the charade by making the email look …

Default Security Settings You Should Change on Your Mac

Whether you just pulled your brand new Mac computer out of the box or are looking for ways to make your system more secure in light of recent OS X threats and vulnerabilities, there are several default Mac security settings that are not in your best interest to keep. Here are just a few settings you should change if you want to make sure that your Mac is as secure as possible.

Customize Your Password Settings: Entering your password every time you boot up your Mac or open your …

Meet AceDeceiver: The First iOS Trojan Horse

Users of iOS devices should be on alert after the arrival of what looks like the first Trojan Horse malware developed for Apple’s mobile operating system. According to a post by Palo Alto Networks, this malware—which is known as AceDeceiver—is unique among other iOS threats in that it doesn’t use counterfeit enterprise certificates to gain access to your device. AceDeceiver doesn’t use an enterprise certificate at all. Rather, it manipulates a major vulnerability in Apple’s DRM (digital rights management) and uses it to install malicious apps on your phone …

New Version of iOS Will Let You Know If Your Employer is Monitoring Your iPhone

If your employer gave you an iPhone when they hired or promoted you, then they are free to track what you do with that phone. This statement has always been true and is one of the top reasons not to send any nasty messages about your boss on a company-owned piece of hardware.

Apple’s mobile operating system has always played into this privilege well for employers, making it easy for your bosses to track your phone if it gets lost, view your internet history, and more. Those features …

A pair of password stealing trojan horses from the App Store are wreaking havoc...

If you’ve recently downloaded InstaCare – Who cares with me? or the similarly-named Who Cares With Me – InstaDetector, you might want to double-check the security of your Instagram account.

The trojan horses, which were also being distributed in the Google Play Store, entice Instagram users with the lure of seeing who viewed their profile. Once installed, the malicious apps steal login credentials for Instagram, sending the username and password to a server controlled by malware author. From there, the affected Instagram accounts are hacked and used …

Apple: FBI Could Force Us to Turn On iPhone Cameras, Microphones

All along, Apple’s biggest argument in their case against the FBI has been one of slippery slopes and escalation. The FBI wants Apple to create software that would allow them to unlock the San Bernardino shooter’s iPhone. Apple says that, once such a backdoor tool is created, they will not be able to guarantee that cybercriminals wouldn’t be able to use it to their advantage. In other words, in order to weaken the security of one iPhone, Apple would have to weaken the security of all iPhones.

Now, as …

The DataVault Password Manager: A Review and Basic How-To Guide

Available for $9.99 from the Mac App Store, the DataVault Password Manager from Ascendo is a robust password management application that is worth the modest price of admission. The program allows you to store passwords, login details, credit card information, membership information, insurance details, vehicle information, and more—all in one secure spot on your computer.

The program uses 256-bit AES encryption to protect your passwords and other sensitive information and has a range of other security features that will help you feel safe, as well. You can even …

Are Popular Mac Apps Rendering Your Computer Unsafe?

Could you be rendering your Mac vulnerable to cyberattacks, just by running several popular applications? That’s the contention being made by security researchers, according to a recent report from Ars Technica. The report highlights popular BitTorrent downloading program uTorrent and screen-cropping video software Camtasia among “a large number of Mac apps” that are likely putting users in danger.

A Man-in-the-Middle Attack

So what’s the problem? According to the Ars Technica report, the danger here is what is called a “man-in-the-middle attack.” In this type of attack, a hacker hijacks a …

Typosquatters Targeting Mac Users Who Mistype URLS

Another day, another Mac malware threat to be aware of. The latest threat comes in the form of typosquatters, who are targeting make users who accidentally mistype URLs while browsing the web. According to a post written by Tom Spring on Threatpost, the Kaspersky Lab security news service, users who accidentally type .om (instead of .com) while browsing the web leave themselves open to the threat.

As with most two letter URL suffixes, .om is the top level domain for a foreign country (in this case, Oman of the …

Has Hacking Team Returned? New Mac Malware Suggests As Much

Last year, the spyware developer Hacking Team seemed to go down in flames after a massive internal leak exposed the company’s dirty secrets for the world to see. Prior to that occurrence, the Milan-based firm had been in operation since 2003, selling products to governments, law enforcement, corporations, and other entities to help them spy on customers or private citizens. From monitoring emails to breaking encrypted communications, all the way to covertly activating webcams, Hacking Team traded in software that gleefully wrecked privacy rights and laundry lists of other …

Apple and the FBI Do Battle in Front of Congress

For weeks, Apple and the FBI have been arguing with one another over matters of privacy, cybersecurity, and national security. In February, the FBI issued a court order demanding that Apple help them break the iPhone’s security measures. Specifically, the government wants Apple to write software that would allow the FBI to get around iPhone encryption and other security safeguards.

Right now, the FBI wants to crack the iPhone that belonged to the terrorist behind the San Bernardino, California shooting that took place on December 2, 2015. In …

Apple Busts (And Then Fixes) Ethernet Ports

In an age where wireless internet is available just about everywhere, the wired Ethernet protocol may well be a technology of the past. If you were using an Ethernet port on a Mac computer recently, you might have even noticed that it stopped working entirely. Now, Apple has addressed the issue and released a rather complex fix for the problem on their support site.

According to Apple, the malfunctioning Ethernet ports were the result of a software update that included a flawed version of “Incompatible Kernel Extension Configuration Data.” …

Researcher Creates Fix for Gatekeeper Problems

Can you count on Gatekeeper, Apple’s proprietary malware blocking tool, to keep your computer safe? The jury is still out on that question, but one researcher has at least done his part to make Gatekeeper a bit more efficient.

Last year, Patrick Wardle of the cybersecurity firm Synack discovered not one but two major security holes in the Gatekeeper tool. He showed how both of those holes could allow a piece of malware to bypass Gatekeeper altogether and infect a Mac computer.

How Gatekeeper Works

To understand how Wardle …

KeRanger Ransomware Takes Macs Ransom for Bitcoin – Ransomware...

BitTorrent Client Exposes Users to First Known Piece of OS X Ransomware

Unlucky BitTorrent users who installed the latest version of Transmission over the weekend unwittingly exposed themselves to the first known piece of ransomware seen in the wild for OS X. According to a report published on March 4th by the Palo Alto Networks Research Center, hackers figured out a way to bundle ransomware with two different installers for Transmission 2.90. Transmission bills itself as a “fast, easy, and free BitTorrent client.”

According to the Palo Alto Networks report, …

Apple Buys the Company That Built Mac Worm

Well, you could never say that Apple doesn’t take security threats seriously. Last year, a security firm called LegbaCore built one of the most serious threats yet to Mac computers. Typically, Macs have been known for having far, far fewer viruses and worms than PCs. For the most part, that lack of attacks has had more to do with market share than anything else. Hackers and cyber criminals can benefit more from creating viruses and malware for Windows PCs, simply because there are more Windows PCs out there than …

Passwords of 2015: How to Recognize Bad Passwords and Select Better Ones

Every year, SplashData compiles a list of the most common and least secure passwords. In January, the company unveiled their “Worst Passwords of 2015” list. Hopefully, the feature can serve as a sobering reminder to Apple users—and frankly, to everyone—that some passwords really are plainly, objectively weak.

As you will see from looking at the list, most of the worst passwords of 2015 were the weakest passwords in years past, as well. The top two (or bottom two) picks were “123456” and “password,” both of which were unchanged from …

A Brief Recap of Some of 2015’s Biggest Data Breaches

In a recent feature covering some of the biggest hacks and data breaches of 2015, ZDNet dropped a chilling statistic: “Almost every American has been affected by at least one data breach this year.” Indeed, it was the year of the data breach, a year that saw everyone from retailers to the government facing cyber security disasters.

The Data Breaches

On the retail or consumer end of the spectrum, drug stores like CVS, Walgreens, Costco, and Rite Aid were all hit, with customers’ names, addresses, phone numbers, and credit information compromised in …

SecureMac Launches MacScan 3, Giving Its Flagship Mac Anti-Malware Software a...

Designed exclusively for Mac OS X, and including full support for Apple’s latest release of OS X 10.11 (El Capitan), MacScan 3 provides protection against the continued growth of malware by offering advanced detection and removal of security and privacy threats.

SecureMac, the leader in security solutions for OS X, today introduced MacScan 3, the next generation of its flagship anti-malware software for Mac users. MacScan 3 offers an all-new approach to the way we protect against security and privacy threats, including a streamlined user experience, new features, and major improvements …