Apple releases OS X Lion 10.7.4 update

By on May 9, 2012 at 5:05 PM.

Apple releases OS X Lion 10.7.4 update

Apple OS X 10.7.4 Update

Apple on Wednesday released an update to its desktop operating system. OS X Lion 10.7.4 contains a number of minor fixes as well as a security update that addresses the FileVault password security issue uncovered recently. The bug made users’ passwords vulnerable by storing them in plain text format. Apple’s 10.7.4 release notes are as follows:

The 10.7.4 update is recommended for all OS X Lion users and includes general operating system fixes that improve the stability, compatibility, and security of your Mac including fixes that:

  • Resolve an issue where the “Reopen windows when logging back in” setting is always enabled
  • Improve compatibility with certain British third-party USB keyboards
  • Address an issue that may prevent files from being saved to a server
  • Improve the reliability of copying files to an SMB server

For detailed information on this update, please visit this website: http://support.apple.com/kb/HT5167.

For information on the security content of this update, please visit: http://support.apple.com/kb/HT1222.

The OS X Lion 10.7.4 update can be downloaded immediately through the integrated software update utility in OS X.

No Comments

Apple said to be prepping $799 MacBook Air

By on May 7, 2012 at 8:55 AM.

Apple said to be prepping $799 MacBook Air

$799 MacBook Air may launch in Q3

While Windows-powered “ultrabooks” have yet to really make a splash in the market, Apple is reportedly considering a move that could further limit their appeal as vendors prepare a second wave of less expensive ultrabook models. Citing unnamed sources within Apple’s supply chain, Digitimes on Monday reported that Apple is readying a new entry-level MacBook Air model that could launch in the third quarter this year. Details are extremely limited, though it is presumed that the notebook will be an updated 11-inch model that could launch around the same time as Apple’s new 13- and 15-inch MacBook Pro models, which are expected to become available some time this summer. Apple may reveal the new model during its annual Worldwide Developer Conference, which begins on June 11th. More →

No Comments

New malware exploits flaw in old versions of Office for Mac

By on May 4, 2012 at 7:30 PM.

New malware exploits flaw in old versions of Office for Mac

Malware exploits flaw in old versions of Office for Mac

Microsoft researchers recently discovered a piece of Mac OS X malware that exploits a three-year-old flaw in old versions of Office for Mac. The threat uses a multi-stage attack, just like a Windows virus would. While Microsoft did fix the problem in 2009, the software giant notes that not every machine is up-to-date. The company’s data indicates, however, that the malware is not widespread. “No operating system that exists outside a laboratory is entirely immune to malware,” Microsoft stated on its blog. “As different operating systems continue to gain in popularity they attract more attention from would-be attackers – especially since, as we see in the example analysis above, the techniques and understanding needed to do so may be much the same as those used against other platforms. And even though an operating system may include many risk-reducing mitigation technologies, any machine’s defenses against vulnerabilities are directly related to how current its security updates for applications are kept.” Microsoft concludes by warning users of Office 2004 for Mac, Office 2008 for Mac or Open XML File Format Converter for Mac to update their software in order to protect themselves from possible threats. More →

No Comments

Flashback OS X malware estimated to generate creators $10,000 per day

By on May 1, 2012 at 4:40 PM.

Flashback OS X malware estimated to generate creators $10,000 per day

Flashback OS X virus generates $10K per day

The “Flashback” virus that originated on a series of WordPress blogs and went on to infected more than 600,000 Mac computers last month may have generated its creators thousands of dollars each day. According to antivirus software firm Symantec, the Flashback malware has been generating revenue for its authors by hijacking users’ ad clicks, and due to the widespread nature of the infection, the authors could have been generating up to $10,000 per day. “Flashback specifically targets search queries made on Google and, depending on the search query, may redirect users to another page of the attacker’s choosing, where they receive revenue from the click,” the firm explained, adding that Google never receives the intended ad click. Symantec notes that ad-clicking Trojans are nothing new and a botnet of 25,000 infections could generate an author up to $450 per day. More →

No Comments

Apple is 10 years behind Microsoft on security, expert says

By on April 26, 2012 at 5:35 PM.

Apple is 10 years behind Microsoft on security, expert says

Apple may be the most valuable company in the world, but when it comes to security, the Cupertino-based company doesn’t hold a candle to Microsoft. Kaspersky Lab co-founder and chief executive Eugene Kaspersky on Wednesday told CBR that Apple is a decade behind Microsoft in terms of computer security. “I think they are ten years behind Microsoft in terms of security,” Kaspersky said. “For many years I’ve been saying that from a security point of view there is no big difference between Mac and Windows. It’s always been possible to develop Mac malware, but [Flashback] was a bit different. For example it was asking questions about being installed on the system and, using vulnerabilities, it was able to get to the user mode without any alarms.” More than 600,000 Macs were infected by the Flashback trojan virus before it was discovered earlier this month and the exploit it used to infect OS X PCs was patched. “Apple will understand very soon that they have the same problems Microsoft had ten or 12 years ago,” Kaspersky said. “They will have to make changes in terms of the cycle of updates and so on and will be forced to invest more into their security audits for the software.”

More →

No Comments

Pre-launch Windows 8 usage doubles that of OS X Mountain Lion

By on April 26, 2012 at 2:45 PM.

Pre-launch Windows 8 usage doubles that of OS X Mountain Lion

Since Microsoft released its Windows 8 Consumer Preview in February, millions of users have downloaded the software giant’s latest operating system, which looks to carefully blend its existing mobile and desktop experiences into one. According to research from ad network Chitika, the Windows 8 CP adoption rate in the U.S. and Canada has doubled that of OS X Mountain Lion, Apple’s upcoming operating system. Of course Microsoft’s Windows 8 preview is publicly available for free while Apple’s Mountain Lion preview is available only to those with paid developer accounts. Chitika’s research was conducted from April 13th to April 19th and it analyzed hundreds of millions of impressions across the Chitika ad network. The Consumer Preview makes up .1% of all Windows traffic and exhibits traffic levels more than three times the peak level that the Windows 8 Developer Preview produced. The increased level of activity is a good sign for Microsoft, which will reportedly complete work on Windows 8 this summer. According to rumors, the first wave of PCs and tablets powered by the new platform are slated to launch in October. More →

No Comments

Man offers to legally change name for a ticket to Apple’s WWDC

By on April 26, 2012 at 10:45 AM.

Man offers to legally change name for a ticket to Apple’s WWDC

Apple announced on Wednesday that its annual Worldwide Developer Conference will take place from June 11th through June 15th this year in San Francisco, California. The company made tickets available at around 8:30 a.m. EDT on Wednesday, and they were sold out within two hours, likely before most West Coast-based developers even woke up. Tickets are not transferable this year and as such, developers who didn’t manage to secure a ticket don’t have many options. One man, however, found a way around Apple’s restrictions. More →

No Comments

New Flashback variant continues Java attack on Macs

By on April 25, 2012 at 9:05 PM.

New Flashback variant continues Java attack on Macs

Security firm Intego on Monday announced that it had discovered a new variant of the Flashback malware called Flashback.S that continues to use a Java vulnerability Apple has already patched. This variant requires no password to install, and it places its files into the user’s home folder in “~/Library/LaunchAgents/com. java.update.plist” and “~/.jupdate.” Once Fashback.S is installed, it will then delete all files and folders in “~/Library/Caches/Java/cache” in order to delete the applet from the infected Mac, and avoid detection. The virus is actively being distributed, although it will not install if it finds Intego VirusBarrier X6, Xcode or Little Snitch installed on the Mac it tries to attack.

More →

No Comments

‘HackStore’ brings Cydia-like app store to Macs

By on April 25, 2012 at 6:25 PM.

‘HackStore’ brings Cydia-like app store to Macs

A group of developers in Russia recently launched the “HackStore,” a centralized location for third-party OS X applications. Like Cydia on iOS, the HackStore is a software hub that allows developers to distribute applications without having to endure Apple’s approval process. The developers behind the project claim that piracy will not be tolerated in their app store, though it is unclear exactly what measures they are taking to prevent pirated software from being distributed through the HackStore. “The biggest Mac Appstore problem is that they limit their users in everything, without giving an opportunity to expand these limits,” HackStore’s creators wrote on their website. “This is not correct, because ONLY users should decide which applications they should install and which one do not. We think HackStore [will] break through the narrow confines of Mac Appstore.” More →

No Comments

Though risks are minimal, one in five Mac computers found to contain Windows malware

By on April 24, 2012 at 11:00 PM.

Though risks are minimal, one in five Mac computers found to contain Windows malware

Security firm Sophos on Tuesday indicated that a surprisingly high level of malware has been found on Mac computers — the firm’s research revealed that one in every five Mac computers is harboring some kind of Windows malware. Of the 100,000 customers sampled through Sophos’s antivirus offerings, 20% of users were found to be carrying one or more instances of Windows malware. The firm highlighted that Windows malware on a Mac won’t cause any harm, however, unless the computer also runs a Windows partition in addition to OS X. The company’s research found that just 2.7% of Macs that installed the company’s free anti-virus software were infected by OS X malware. Nearly all of the OS X malware discovered was an iteration of the “Flashback” trojan called “Flshplyr.” Sophos said that cybercriminals may find Macs to be targets because OS X users are less likely to be running an anti-virus software, however Macs can get viruses and the right software can keep a user’s computer safe. A second pie chart follows below. More →

No Comments

Apple to discontinue the 17-inch MacBook Pro, analyst predicts

By on April 23, 2012 at 6:00 PM.

Apple to discontinue the 17-inch MacBook Pro, analyst predicts

Research analyst Ming-Chi Kuo of KGI Securities predicts that Apple may discontinue the 17-inch MacBook Pro model due to weak sales, MacRumors reported on Monday. The analyst has previously offered accurate information regarding the discontinuation of Mac products, specifically the 13-inch Macbook in 2011. Kuo estimates Apple will sell 5.32 million Mac computers in the second quarter of 2012, representing a 35.2% year-over-year increase. The Cupertino-based company is expected to launch an updated line of MacBook computers this summer that will be will be thinner and may feature Retina-resolution displays. More →

No Comments

140,000 Mac computers still infected by ‘Flashback’ trojan, firm says

By on April 18, 2012 at 8:45 AM.

140,000 Mac computers still infected by ‘Flashback’ trojan, firm says

Apple responded fairly quickly to news that more than 600,000 Mac computers were infected with a trojan virus called “Flashback.” One week after the massive botnet was discovered, Apple issued an update fixing the Java vulnerability that allowed Flashback to infect the machines, as well as a removal tool for affected machines. Despite the company’s efforts, Symantec stated on Tuesday evening that approximately 140,000 OS X PCs were still infected with the virus at that time. “The statistics from our sinkhole are showing declining numbers on a daily basis,” the company wrote on its blog. “However, we had originally believed that we would have seen a greater decline in infections at this point in time, but this has proven not to be the case. Currently, it appears that the number of infected computers has tapered off, but remains around the 140,000 mark.” Symantec offers its own Flashback removal tool separate from the one Apple made available in a system update on April 12th. More →

No Comments

Second Mac trojan discovered, also exploits Java vulnerability

By on April 16, 2012 at 1:15 PM.

Second Mac trojan discovered, also exploits Java vulnerability

The “Flashback” trojan virus affecting at least 600,000 Macs was discovered last week that is capable of intercepting passwords and other private data. The discovery prompted Apple to release a Java update for OS X users that removed a number of common variants of the virus. Securelist on Saturday found another Mac trojan that is also spread through Java exploits, however. The malware, called Backdoor.OSX.SabPub, can take screenshots of a user’s current session, execute commands on an infected machine and connect to a remote website to transmit the data. It is not clear how users get infected with the trojan, but because of the low number of instances and the trojan’s backdoor functionality, Securelist speculates that it is most likely used in targeted attacks, possibly launched through emails containing a URL pointing to two one of websites hosting the exploit. More →

No Comments