Apple fixed more than 100 security vulnerabilities across eight different products yesterday including updates for the iTunes, Safari, iOS 7, Keynote 6.0, two versions of Apple’s Remote Desktop (3.7, 3.5.4) and OS X Server 3.0.
The Apache Software Foundation released a new version of Shindig, a framework for web applications, yesterday, fixing what the collective has deemed an important information disclosure vulnerability.
Google and Arbor Networks are collaborating on a project that shows exactly how large and damaging some DDoS attacks are, and who’s attacking who at any given moment.
A new spam campaign has been circulating over the last few weeks in hopes of duping users of the popular cloud storage service Dropbox. The e-mails purport to come from the service but instead lead those who click through to a malware landing page.
A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with.
Dennis Fisher and Mike Mimoso discuss the big stories of the last couple of weeks, including the grassroots effort to audit the TrueCrypt source code, the Apple iMessage security model and Yahoo enabling SSL by default.
The Apache Software Foundation have pushed out a new version of Struts, fixing two issues in the framework that were giving developers difficulties.
Snapchat cleared up any doubts users may have had about the privacy surrounding the images sent back and forth on its photo messaging service when the company confirmed this week that it has shared some images with law enforcement.
Yahoo’s decision to turn SSL on by default for its email users is being met with halfhearted applause by the security industry.
Attacks emanating from Indonesia and China were plentiful over the last few months, with both countries being credited for three quarters of the world’s attacks in April, May and June.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
