security

Google says malware creators are using a simple workaround to bypass security on the official Play Store for Android apps. The problem is that the simplest fix would undermine one of the key differences between Android and closed systems such as ... Apple. In theory, all apps in the Play Store are vetted for security, including malware checks. That's one of the reasons Google recommends only using the Play Store, while still giving users the choice to get and install Android software from other sources. The problem is that scammers are using an extremely simply workaround called "versioning". ... (view more)

The number of 0-day bugs, which give hackers a dangerous advantage, fell in 2022 according to Google. However, the company warns this may risk misleading complacency that forgets other factors. The figures come from Google's Threat Analysis Group, ... which aims to track, identify and report security bugs, regardless of the software or hardware concerned. The logic is that the better Internet security is overall, the better it is for an Internet-dependent business such as Google. For the past nine years, it's put together an annual tally of 0-day bugs. While definitions vary, Google classes them ... (view more)

Google will stop some of its employees accessing the Internet. It's a bold experiment to see if it can reduce security threats without affecting performance. The idea is reduce the risk of hackers getting access to employee machines, either to get ... hold of data on those machines or to use them as an entry point into Google's network. Perhaps unsurprisingly, Google's internal data is particularly attractive to attackers, whether they are seeking financial gain, political or commercial advantage, or plain old mischief making. For example, attackers being able to find out how Google ranks ... (view more)

Users of Windows versions dating right back to Windows 95 can now get updates for their system. It's thanks to an enthusiast project and is absolutely not meant to be a sensible alternative to using modern version of Windows. The Windows Update ... Restored site aims to recreate the official Microsoft web pages for getting feature and security updates for older versions of Windows. Those pages were used by people who chose to manually download and install updates rather than use automatic updates. Understandably, Microsoft has long since taken down the pages for updating many Windows versions ... (view more)

Amazon has agreed to pay a total of $30 million in penalties for privacy violations related to its Ring and Alexa devices, according to an announcement by the Federal Trade Commission (FTC). The penalties consist of $25 million for allegedly ... retaining children's data without deletion and $5.8 million for failing to limit employee and contractor access to Ring security videos. (Source: cnet.com ) The settlements do not require Amazon to make any admission of legal wrongdoing. (Source: theguardian.com ) Amazon Accused of Retaining Kid's Data The FTC accused Amazon of preventing parents from ... (view more)

Microsoft is to forcibly upgrade computers running a version of Windows 10 that's about to stop being supported. It's billed as a way to keep users "protected and productive." The update will cover consumer devices plus "non-managed business ... devices" running Windows 10 version 21H2. That was the version with the major feature update in the second half of 2021. (Source: theregister.com ) The move should only affect users who have switched off automatic updates, which is why the forced update won't be to everyone's taste. The chances are that many people in this position have deliberately ... (view more)

Quantum computers could produce genuinely random numbers according to new research. It could boost security, an ironic effect given fears over the ways cyber criminals could use quantum computing. In extremely simplified terms, a quantum computer ... uses quantum physics in which something can exist in more than one state at a time. That's in contrast to traditional computing where data is stored in bits that represent either a 0 or a 1 at any given time. To date, the main claimed advantage of quantum computing has been processing speed. The same "bit" representing multiple states removes a ... (view more)

A notorious botnet that spreads malware through fake emails is back in action. Emotet has returned with some new tactics to try to bypass security checks. Emotet had already gained a reputation for being (comparatively) successful at fooling humans ... and computers alike. Its most notable characteristic was that it not only used messages that appeared to come from a trusted contact, but that it addressed the recipient by name and even appeared to be a reply to a previous genuine message. Most commonly, Emotet sends malware through Microsoft Word documents with macros. These are now disabled by ... (view more)

Google's Chrome browser will soon be unsafe to use on Windows 7, 8 or 8.1. Google is about to finally ditch support for the systems, meaning no more updates. Version 109 of Chrome, scheduled for a full public release on January 10th, 2022, will be ... the last available for those editions. Starting with version 110, expected in February, new versions will only be available for Windows 10 and later. (Source: google.com ) Windows 7, 8 and 8.1 users can still run Chrome 109 (or earlier versions) but the browser will become increasingly outdated with no new features or performance fixes. More ... (view more)

Apple looks set to allow iPhone and iPad users to get apps from sources other than the official App Store. It's a major change of policy, almost certainly sparked by forthcoming changes to European law. Analysts predict Apple will find ways to ... minimize the effect of the change. However, stock prices in many companies that make apps have risen on the assumption they'll make more revenue because Apple won't take a cut of app purchases. Unlike rival Android, Apple has always kept tight control on the apps users can install, making the App Store the only option without "jailbreaking" the device, ... (view more)