Suspected mobile phone virus author arrested
According to a statement issued by Spanish police, a 28-year-old man was arrested in Valencia following a seven month investigation. The man is accused of creating and …
Apple releases new security update
Today Apple released Security Update 2007-006 which addresses: WebCore An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By …
Collection of security news, happenings and articles from the past week
This is a weekly roundup of all the security news, articles, software releases, vendor advisories and webcasts that were published on Help Net Security during the past week. …
AOL, Avaya, MSN and Nortel VoIP phone vulnerabilities
Sipera VIPER Lab disclosed seven threat advisories for SIP-based soft phones from AOL, Avaya, MSN and Nortel, and four advisories for Avaya SIP-based hard phones. These threat …
Safari Beta 3.0.2 for Windows fixes another batch of vulnerabilities
Apple has released a new version of its Microsoft Windows web browser. Safari Beta 3.0.2 fixes four newly found vulnerabilities: CVE-ID: CVE-2007-2398 Impact: A maliciously …
A closer look at UserLock access and control software
UserLock is a tool for securing access to Windows networks by restricting simultaneous sessions, by limiting user access to the network and by providing administrators with …
A good week for trojans and worms
This week’s PandaLabs report provides information about Harrenix.A, a dangerous Trojan that disguises itself as a trailer for the latest Harry Potter movie in order to …
Backdoor discovered in popular financial planning software
Elcomsoft has discovered a backdoor in Intuit’s Quicken software. Millions of people worldwide have chosen Quicken as their financial software, in part because of …
PGP Corporation receives $27.3 million in Series C funding
PGP Corporation has announced it has closed $27.3 million in Series C funding. The round adds new investors Intel Capital, the venture capital arm of Intel Corporation, and …
Tips for protecting against malware, scams and identity theft
Don’t add friends you don’t actually know when using social networking sites. Often the “free” code available in social networking sites, such as …
Spammers turn to PDF files in latest pump-and-dump scam
Sophos is warning of a new ‘pump-and-dump’ stock spam campaign which uses a PDF file to hoodwink potential investors. Sophos has identified email messages being …
Virtualisation adopters face security challenges
Virtualisation is moving into the mainstream with 50% of IT professionals already using this new technology, or planning to do so within the next 18 months, reveals a survey …
Featured news
Resources
Don't miss
- Download: The High-Performance Team Playbook
- PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)
- Marathon Petroleum’s CISO on OT security automation, supply chain risk
- Nono: Open-source sandbox for AI agents
- What the identity attack surface looks like when trust becomes the target