Topic: software security

iOS malware steals users’ data

A new iOS threat has been revealed that affects more than 225,000 Apple users. Researchers from WeipTech and Palo Alto Networks have the malware, dubbed KeyRaider, and detected thousands of Apple accounts and passwords that have already been stolen. “We believe this to be the largest known Apple account theft caused by malware,” wrote Claud … continue reading

Combining Angular 1 and Angular 2, Google’s self-driving cars, and Qualcomm’s Smart Protect technology—SD Times news digest: Aug. 31, 2015

Developers looking to upgrade to Angular 2 won’t have to worry about their existing Angular 1 applications. Google has announced it will enable developers to mix Angular 1 and Angular 2 in their applications. Angular 2 features improved performance, powerful templating, simpler APIs, and easier debugging, according to the Angular team. “We’re making it easy … continue reading

Researchers tackle software security tools

Researchers want to help software developers find the best tools for detecting security issues. Emerson Murphy-Hill, a National Science Foundation-funded computer science researcher and associate professor at North Carolina State University, and his colleagues are attempting to uncover the shortcomings and disadvantages of security tools. “Our work is focused on understanding the developers who are … continue reading

Docker announces a new security feature: Docker Content Trust

Docker is looking to improve container security with a newly announced capability in Docker 1.8: Docker Content Trust. The feature uses digital signatures to secure Dockerized content. “As organizations evolve from a monolithic software architecture to distributed applications, the secure distribution of software becomes increasingly difficult to solve,” said Diogo Mónica, security lead for Docker. … continue reading

Security startup tries to outdo Windows

Windows 10 was only released last week, and already another company is trying to build a bigger and better Windows. Israeli security startup MorphiSec is working on a more secure version of Microsoft’s operating system, Business Insider reported. Dudu Mimran, the cofounder of MorphiSec, tells Business Insider that it is the Windows Microsoft should have … continue reading

Android to get monthly security patches from Google, LG and Samsung

It looks like Google, LG and Samsung no longer have stage fright when it comes to releasing security patches. Following the revelation that there was a bug nestled in Android’s Stagefright media library that affected the majority of devices, the companies have announced they will release monthly security updates. “With the recent security issues, we … continue reading

Google’s Customer-Supplied Encryption Keys, NSA phone surveillance ending, and Microsoft’s Android launcher—SD Times news digest: July 28, 2015

Google is enabling developers to use their own encryption keys on its cloud platform. The company recently announced that Customer-Supplied Encryption Keys for Google Compute Engine, which allows developers to bring their own encryption key to encrypt resources, is in beta. “You create and hold the keys, you determine when data is active or at … continue reading

Android vulnerability puts 95% of devices at risk, researcher says

Researchers say they have found the biggest Android security flaws known to date. The vulnerabilities, nestled inside Android’s media playback library Stagefright, are said to affect 950 million Android devices, which amounts to 95% of them. Mobile security researcher Joshua J. Drake, vice president of platform research and exploitation at Zimperium zLabs, discovered the vulnerabilities … continue reading

Smartwatches pose huge security risks, HP says

Smartwatch users might want to think twice about the information they plug into their wearable device, as a recent study from HP revealed a majority of these technologies have serious security flaws. “Smartwatches have only just started to become a part of our lives, but they deliver a new level of functionality that could potentially … continue reading

Sony Mobile’s Concept for Android, and the Trustwave Managed IoT Security service—SD Times news digest: July 23, 2015

Sony Mobile has announced it is launching a new initiative to for its Concept for Android. The Sony Concept for Android is an experimental operating system based on Android 5.1 Lollipop. It will include Sony’s user experience, popular Sony apps and features, and a stripped-back vanilla Android look and feel, according Anthony Devenish, public relations … continue reading

United Airlines awards millions of miles to hackers

Two hackers will be able to fly anywhere in the world with the help of United Airlines. The airline recently awarded the pair 1 million frequent-flier miles each for detecting security vulnerabilities in its computer systems, Business Insider reported. The awards are part of the airline’s bug bounty program announced in May. The program rewards … continue reading

CrowdStrike receives $100 million for cybersecurity

CrowdStrike is expanding its efforts to help organizations detect, prevent and respond to cyber attacks with its latest round of funding. The cybersecurity company announced a US$100 million Series C financing round led by Google Capital, bringing the company’s total funding to $156 million. “The question you may be asking is why is Google Capital … continue reading

DMCA.com Protection Status