Web Security


Apple Taps Security Experts Ahead Of Lion OS Release

Apple is distributing copies of its yet unreleased OS X 10.7 (Lion) operating system to a handful of security experts, including former Pwn2Own winner, Charlie Miller, who claims this is the first time Apple has taken such actions, according to a report from PC World.

Android App Makers Should be Held Accountable

Google’s response to the recent discovery of malicious apps in the Android market place is proof that we’re now entering a new phase in malware mitigation. Can you imagine Microsoft automatically pushing an executable to (part of) its user-base with no opt-out option?


A simple, trivially exploitable persistent cross-site scripting bug on the Google Android Web Market allowed anyone to upload an app that could be used to later run arbitrary code on the user’s Android device. The vulnerability, which Google has patched, enabled an attacker to silently install his malicious app and then get any and all permissions on the device.

It’s been known for some time now that the creator/maintainer of the Zeus malware had turned over responsibility for his code to the author of the SpyEye Trojan and it was assumed that the two code bases had merged, rendering Zeus extinct. However, some new samples of the Zeus bot have surfaced that include new features, indicating that development of the tool is still underway.

The main WordPress.com site was the target of a major DDoS attack yesterday that knocked the popular blogging platform offline for a couple of hours, and another attack that hit the site again Friday morning. The service is back online now, but the attacks may be an indication that the service could be collateral damage in some politically motivated attacks against WordPress blogs.