• Email & Web Malware
• Lost or stolen latops
  1. Win/7 Security Guide (register to access pdf)
  2. Enerprise data protection (InfoClip)
  3. Data loss prevention (webcast)
  4. InfoWorld security bootcamp (signup)
• Insider Threats
• Hacking & Intrusions

If you use e-banking with HSBC, NatWest, RBS, Santander and a growing number of other European and US banks, chances are you'll have been asked to download and install a free copy of Trusteer's Rapport security add-in to your browser.

The Rapport add-in, which monitors for any trojans affecting e-banking and blocks man-in-the-browser attacks, has now been enhanced with the addition of a malware removal utility.

According to Trusteer, this means that, as well as preventing trojans like Zeus, Silon, Bugat, DBJP and zero-day malware from tampering with website communications and transactions, the add-in pro-actively removes malicious code that attempts to attack browser sessions.

• Jailbreaking is the process of opening the phone up for installation of 3rd party apps.
  
  
• Unlocking is the process of allowing non-approved SIM cards to be used on your phone.

Jailbreaking your iPhone or other mobile device will no longer violate federal copyright law, the U.S. Copyright Office ruled Monday.

The decision, part of a process that takes place every three years, said that bypassing a manufacturer's protection mechanisms to allow "handsets to execute software applications" is permissible.

Qualys has become the first on-demand network and site vulnerability company to launch a free malware detection service, designed to protect websites from malicious activities and stop visitors from being infected by malware.

Under the new free service - QualysGuard Malware Detection - clients can upload details of up to 10 websites, and the Qualys network will check the pages for any infections and untoward activities.

According to Joe Stewart, the malware specialist's director, the FFSearcher trojan centres around a downloadable widget available to webmasters from Google.

A nasty new trojan that triggers multiple click-throughs on Google AdSense - the pay-per-click sponsored web search service operated by Google - has been discovered by SecureWorks.

The widget generates a customised search box applet that can be embedded in web pages, so giving a direct access to the Google search engine - encouraging users to search and, of course, access sponsored web search URLs.

The trojan appears to re-route searches on an infected PC to My Web Way and away from Google. Although infected PC users think they are seeing search results from Google, the returned indices are routed via the My Web Way site, Infosecurity notes.

If users then click through on the AdSense ads - i.e. the paid-for search engine indices - My Web Way collects the revenue.

Reports in the press recently, citing facts that smartphones can be plundered by cybercrminals for their data, have been confirmed by the chief technology officer of Veracode, who claims that application software (apps) are often being overlooked when it comes to testing the security of smartphones in the business environment.

"The problem is that smartphone platform developers are trying to get as many apps as they can into the marketplace at the moment, and since each smartphone vendor has different approval systems, it's difficult to tell which apps are the most secure", he explained.

IT managers need to take special care with the Android platform, he says, as this has no formal approval mechanism for apps, and it is the much the same with the BlackBerry, which only has an app revocation system in place, as does Apple, in the event that rogue applications start circulating.

A senior wireless security researcher at AirTight Networks has uncovered a hack for encrypted wireless networks that does not require an encryption key, one the vendor calls a documented yet little know vulnerability for WPA2.

The wireless intrusion prevention provider publicized the WPA2 vulnerability late last week and plans on demonstrating the concept at the upcoming Black Hat and DEF CON conferences this week in Las Vegas. {:grrr: :rolleyes: }

AirTight’s Md Sohail Ahmad discovered the WPA2 exploit, ... which prompted the firm to dub it ‘Hole 196’.