Another HTC Magic Smartphone Sports Malware



Panda has uncovered another HTC Magic from Vodaphone sporting malware.

( Read more )

Panda Security Finds Malware on New HTC Magic



A Panda Security employee purchased a new HTC Magic smartphone only to discover malware residing on its SD card.

( Read more )

Microsoft Wants Internet Tax to Keep PCs Clean

Healthcare reform for PCs.

While speaking at the RSA security conference in San Francisco, Microsoft Corporate Vice President for Trustworthy Computing Scott Charney told attendees that the technology industry needs to change in the way its approaches security issues.

The speech comes at the heels of Microsoft's recent attempt to shut down the Waledac botnet through the court system. Microsoft has also spent millions to combat hackers and their devious programs slipping through minuscule OS and browser cracks.

( Read more )

Microsoft Investigating New Internet Explorer Flaw

Another bug was found in Internet Explorer. Oh yay.

The Microsoft Security Response Center issued a warning Friday indicating that users of Internet Explorer 6, 7 and 8 are vulnerable to malware through an un-patched bug in VBScript. The exploit was originally uncovered by Polish security analyst Maurycy Prodeus of iSEC Security Research. He said that the flaw only resides within Windows XP SP3--all other versions of Windows are not affected by the vulnerability.

According to this post, it's possible to invoke winhlp32.exe from Internet Explorer which in turn might lead to remote code execution. Attackers could execute malicious code when their fake web pages convince visitors to press the F1 key. The good news is that Microsoft has not received reports on attackers actually using this exploit.

( Read more )

Google Buzz Flaw Could Give Hackers Control

Despite recent privacy issues, there's another blatant flaw in Google's new Buzz service.

Google has come under fire since the debut of its «Buzz» service last week. The company launched the «Twitter-killer» with the intent of providing a social networking experience, but instead exposed the email addresses and physical locations of its participants.

( Read more )