In association with heise online

Top News

Chrome 19 released with tab syncing

Chrome logo The headline feature of the new stable chrome is tab synchronisation, but Google has also slipped in an experimental version of Web Intents more »

Top Feature

Microsoft's struggle against bugs

Microsoft's struggle against bugs It has been ten years since Bill Gates famously emailed all Microsoft's employees declaring that data protection and system security should be the company's top priorities. Uli Ries describes the subsequent progress Microsoft has achieved in making its software more secure more »

IT security news and features

News & Features

16 May 2012
Avira update puts behaviour recognition on hold

Avira logo When Avira's behaviour recognition module disabled important system processes after a Service Pack, the company issued an update to fix the problem. The catch: the update completely removes the behaviour recognition feature for the time being more »

16 May 2012
.secure domains require proof of security

Padlock icon Under the .secure gTLD, Artemis plans to create a form of high security zone on the internet that will offer trustworthy and secure services. Potential .secure services must meet various conditions more »

16 May 2012
Alert!QuickTime for Windows update plugs security holes

QuickTime logo Version 7.7.2 of QuickTime for Windows addresses a total of 17 security vulnerabilities in the media player, all of which could be could exploited by an attacker to crash the application or execute arbitrary code on a victim's system more »

16 May 2012
Avira update fixes Service Pack bug

Avira logo Avira has fixed the problem in this week's Service Pack which resulted in the software blocking harmless processes. Affected users need to manually install an update to implement the fix more »

15 May 2012
Alert!Avira AV update hangs systems - Update

Avira logo Avira's paid-for anti-virus software product is currently hanging users' computers and, in some cases, causing them not to boot. Users who have not yet installed the latest update should refrain from doing so more »

15 May 2012
Fraunhofer Institute finds security vulnerabilites in cloud storage services

Cloud icon The Fraunhofer Institute for Secure Information Technology has tested the security of several cloud storage services. It identified security problems in several areas, including encryption and data protection more »

15 May 2012
Flashback removal tool arrives for Mac OS X 10.5 Leopard

Apple icon Even though the operating system is no longer officially supported, Apple has published a standalone Flashback malware removal tool for computers running Mac OS X 10.5 Leopard, as well as a Security Update that disables older versions of the Adobe Flash Player more »

15 May 2012
Kickstarter security vulnerability exposes projects

Kickstarter logo A security vulnerability on crowd-funding platform Kickstarter means that outsiders have been able to access details of unpublished projects. Kickstarter has reassured project backers that their personal data has not been affected more »

14 May 2012
Notepad++ web site compromised

Notepad++ logo The web site of the text editor was breached last week. The attackers tried to harvest the Facebook account credentials of visitors and defaced the site. Downloads of the software do not seem to have been affected more »

14 May 2012
Alert!Skype for Linux hotfix plugs security hole

Skype logo Nearly one year after the last update arrived, Skype has issued a new hotfix release for Linux that includes a newer version of libpng, which closes a security hole more »

14 May 2012
Bitcoinica Bitcoin site breached

Bitcoin logo Virtual bank robbery with real-world damage: criminals have stolen 18,547 virtual currency coins from the Bitcoinica Bitcoin site - valued at approximately £55,000. The attackers also managed to access the entire database including user data more »

14 May 2012
Fifth Debian 6.0 "Squeeze" update released

Debian logo The developers at the Debian Project have announced the release of the fifth update to version 6.0 of their popular Linux distribution more »

14 May 2012
Worth Reading: Confessions of a botnet operator

Botnet icon A self-confessed operator of a Zeus botnet has hosted a Q&A session on his personal motivations, his area of operations and computer security in general more »

13 May 2012
Sniffer tool displays other people's WhatsApp messages

WhatsApp logo An Android app is able to display messages from WhatsApp users connected to the same network. Since WhatsApp transfers messages in plain text format, this is no great feat more »

12 May 2012
The H Roundup for the week ending 12 May

The H Roundup logo In the last seven days: Apache OpenOffice 3.4.0 made its debut, Adobe put a price on security updates for Photoshop, and Dell and Red Hat signed an OEM partnership. Also, The H took a look at the systemd Linux init system and provided more details about what's coming in Linux 3.4 more »

12 May 2012
Adobe backs down, will release patches for critical holes

Adobe logo Adobe says it is now developing patches for its Photoshop, Illustrator and Flash Professional CS5.x products to close critical holes that it told users could be closed by buying the just-released CS6 versions of the applications more »

11 May 2012
Alert!Opera 11.64 closes critical code execution hole

Opera logo Version 11.64 of the web browser closes a critical hole that could have been exploited by attackers to inject malicious code into a victim's system more »

11 May 2012
Version 5 of OpenVAS vulnerability scanning and management tool arrives

OpenVAS logo Version 5 of the OpenVAS software framework for vulnerability scanning and management has been released with 20 new features, including "asset management" which adds a second view of scan results more »

11 May 2012
DNSCrypt arrives for Windows

OpenDNS icon Following up on last December's Mac-only release of the "last mile" DNS encryption software, OpenDNS has now made a Windows version of the software available more »

10 May 2012
Teens arrested in connection with attack on UK Police Agency

SOCA logo Two Norwegian teenagers have been arrested in connection with the distributed denial-of-service attacks on the web site of the UK's Serious Organised Crime Agency and other sites that took place earlier this month more »

10 May 2012
Adobe: Photoshop is not a target for attackers

Adobe logo Adobe says it is not planning to close the holes in Photoshop and Illustrator CS5 and CS5.5 because they have not historically been attacked and they don't know of any exploits. But a proof-of-concept exploit does exist for one vulnerability more »

10 May 2012
Plaxo online address book service warns of security breach

Plaxo logo Plaxo has confirmed that an unknown malicious third-party gained access to the company's API connection to Google's address book and calendar more »

10 May 2012
Alert!Apple closes numerous holes in Mac OS X and Safari

Apple icon Once the update to 10.7.4 has been installed, Lion will no longer store user passwords in plain text on the hard disk during login. Apple has also released a security update for Safari and other fixes more »

10 May 2012
Alert!Critical vulnerability in vBSEO patched

vBSEO logo Developers have patched a critical SQL injection vulnerability in the SEO enhancement plugin for vBulletin. As an exploit exists in the wild, users are advised to update their installations as soon as possible more »

9 May 2012
FBI: hotel hotspots used to spread malware

Wi-Fi icon According to a report from the Internet Crime Complaint Center, hotel internet connections and hotspots are increasingly being used to infect travellers' systems with malware using fake update notifications more »

Got news? Let us know!







The H open source

The H Security

The H Internet Toolkit