iPhone Apps with Camera Permissions Could Secretly Take Your Picture

iPhone Apps with Camera Permissions Could Secretly Take Your Picture

When is your phone able to take a picture? Put that question to the average user and chances are they will say something about having the actual camera viewfinder on screen. Whether it’s from the default camera app, Instagram, or Facebook, we all expect that the camera isn’t at work when we can’t see ourselves on the screen. As one Google researcher, Felix Krause, recently uncovered, however, that is not actually the case. In fact, when users grant permissions to apps for the use of the camera, it turns …

November 3, 2017 • 2 min read
Apple Releases iOS 11.1 and Other Important Security Updates

Apple Releases iOS 11.1 and Other Important Security Updates

The latest round of Apple security updates arrived on Halloween, delivering everything from iOS 11.1 to updates that affect macOS, watchOS, and more. As is often the case with large patch days, these updates address a wide variety of security flaws affecting different parts of the systems in question. From WebKit vulnerabilities to memory handling issues on the Apple Watch and in macOS, Apple squashed plenty of bugs with this batch of updates. Perhaps one of the most important issues addressed in this round of updates, however, is Apple’s …

October 31, 2017 • 2 min read
Securing Your Data with macOS and Keychain

Securing Your Data with macOS and Keychain

Every time a new version of Apple’s operating system arrives, every tech-focused publication on the Internet does a deep dive on the new key features. Occasionally, though, cool bells and whistles go overlooked. Such is the case with the macOS Keychain Access application, which, in addition to storing passwords and account information, can also be used to store and secure sensitive data.

Keychain Access gives users the option to store what it calls “Secure Notes,” alongside passwords and other valuable data. Say you need to store something like a …

August 11, 2017 • 3 min read
Apple Covers All the Bases with Over 100 Security Updates in May

Apple Covers All the Bases with Over 100 Security Updates in May

In mid-May, while the world was waking up to deal with the chaos caused by the WannaCry ransomware spreading over the web, Apple was making its users safer again. Released on May 15th, a new set of patches dropped for iOS, macOS Sierra, and both the El Capitan and Yosemite version of OS X. So many different fixes were implemented that  it would be difficult to cover exactly what each of them accomplishes. However, of particular note in this update is the fact that ethical hackers previously identified more …

June 29, 2017 • 2 min read
Competing Hackers Discover Method for Hijacking the Touch Bar

Competing Hackers Discover Method for Hijacking the Touch Bar

When Apple revealed its long-awaited refresh of the MacBook line last year, the Touch Bar was touted as a major selling point. By incorporating the same sensor technology already present in the iPhone, Apple said that a wide variety of new applications were available. From rapid online purchasing to using your fingerprint to unlock your Mac, it attracted plenty of attention. Apple even discussed its efforts to secure the Touch Bar, since protecting user biometric information and payment data is of obvious importance.

However, a recent hack of …

March 30, 2017 • 2 min read
Apple Reassures Users: Flaws in WikiLeaks/CIA Vault7 Leak Already Patched

Apple Reassures Users: Flaws in WikiLeaks/CIA Vault7 Leak Already Patched

On March 7th, WikiLeaks entered the news and made waves again by releasing almost nine thousand documents they claimed came from within the US Central Intelligence Agency. Contained in the leak was a vast range of information about the CIA’s intelligence gathering practices regarding technology. The revelations included information that the agency had undertaken spying efforts through exploiting vulnerabilities in various technologies, including some “smart” TVs and mobile operating systems. Also, contained within the documents, however, were fourteen previously undisclosed flaws in iOS. Through these flaws, an attacker could …

March 21, 2017 • 2 min read
Iranian Malware Targets User Passwords in the macOS Keychain

Iranian Malware Targets User Passwords in the macOS Keychain

A brand-new type of malware affecting Macs is in the wild, and this time there are definite signs of development in conjunction with a foreign nation. Designed (albeit rather poorly) to look like a Flash update, this malware, dubbed MacDownloader, is a unsophisticaed attempt to glean user passwords. Uncovered by security researchers after the malware targeted major defense contractors, the program may feature amateurish code, but its threat is very real.

After fooling a user into downloading the false Flash update, the malware quickly goes to work profiling the …

February 17, 2017 • 2 min read
Disruptive macOS Malware Takes Over Mail App

Disruptive macOS Malware Takes Over Mail App

Modern malware adopts a huge number of different forms, from the destructive to the secretive. Some will seek to damage your system, while others snoop around for personal information to steal. Because these are the types of malware infections that users most often encounter, it’s easy to think that an anti-malware solution is all you need to stay protected. However, some malware can exploit flaws at a more fundamental level in the system. Such is the case with the emergence of a recent malware threat for Mac users which …

January 23, 2017 • 2 min read
Apple Corrects Slew of Security Issues with New Updates

Apple Corrects Slew of Security Issues with New Updates

Following a month-long gap after the release of iOS 10.1.1, Apple has finally released its latest round of updates not just for its iOS devices but several other products as well. In addition to iOS 10.2, macOS Sierra received many security updates, as did Safari. iCloud and iTunes for Windows also received minor patches as well. While Apple took the time to add some additional features and tweaks to iOS in its update, these patches were mainly aimed at closing many ongoing system vulnerabilities.

Among the most crucial fixes …

December 20, 2016 • 2 min read
Malvertising Hits macOS Users Through Google AdWords

Malvertising Hits macOS Users Through Google AdWords

With the huge number of ads present on the web today, it’s no surprise that they’re often a target and an attack vector for hackers looking for an open door. We’ve discussed malvertising here before to alert our readers to the potential threat. Now there comes word from security researchers that malvertisers executed a campaign specifically targeting macOS users early in November. This time the target was users who were hoping to install Google Chrome.

When searching for the keywords “Google Chrome,” a malicious ad purchased by the …

December 12, 2016 • 2 min read
Russian Hackers Target OS X with New Trojan

Russian Hackers Target OS X with New Trojan

Mac users who haven’t yet updated from OS X El Capitan to the brand new macOS Sierra might want to make doing so a priority. According to security site Dark Reading, there is a new Trojan out in the wild that is targeting OS X. Any machines running any incarnation of the OS X operating system could be vulnerable to the threat.

The initial discovery of the Trojan was by a Palo Alto Networks research team, who codenamed the threat “Komplex.” The researchers said that the Trojan is the …

October 12, 2016 • 3 min read
New App Helps Detect Unauthorized Audio or Video Recording

New App Helps Detect Unauthorized Audio or Video Recording

UPDATE 01/23/17 : Skype patches privacy concern in OS X version

There’s a new app out there that Mac users would be wise to consider installing. It’s called OverSight and is designed to alert Mac users whenever their microphones or webcams are activated. The application is currently available for free download here.

Patrick Wardle, a former NSA employee, and noted security researcher developed OverSight and recently presented the technology at the Virus Bulletin conference in Denver, Colorado. Wardle’s presentation showed how it would be possible for malware to …

October 11, 2016 • 3 min read