apple

ComputerWorldIndependent

Apple is learning why shortcut security is a bad idea

Credit to Author: Evan Schuman| Date: Wed, 20 Feb 2019 11:00:00 -0800

When Apple launched its enterprise developer certificate program — which helps enterprises make their homegrown apps for employee use-only available through iTunes — it had to make a difficult convenience-vs.-security decision: how much hassle to put IT managers through to get their internal apps posted. It chose convenience and, well, you can guess what happened.

Media reports say pirate developers used the enterprise program to improperly distribute tweaked versions of popular apps — including Spotify, Angry Birds, Pokemon Go and Minecraft — while others used the platform to distribute porn apps along with real-money gambling apps. And all the bad guys had to do was lie to Apple reps about being associated with legitimate businesses. Apple didn’t bother to investigate or otherwise verify the answers.

To read this article in full, please click here

Read More
MalwareBytesSecurity

A week in security (February 4 – 8)

Credit to Author: Malwarebytes Labs| Date: Mon, 11 Feb 2019 17:05:33 +0000

A roundup of security news from February 4 – 8, including Facebook’s secure messaging integration, Google’s changes to URLs, a scam involving the Kindle store and John Wick, and more.

Categories:

Tags:

(Read more…)

The post A week in security (February 4 – 8) appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Merging Facebook Messenger, WhatsApp, and Instagram: a technical, reputational hurdle

Credit to Author: davidruiz| Date: Thu, 07 Feb 2019 16:53:35 +0000

Facebook’s plan to integrate secure messaging across Messenger, WhatsApp, and Instagram will demand technical know-how and a fierce commitment to user privacy.

Categories:

Tags:

(Read more…)

The post Merging Facebook Messenger, WhatsApp, and Instagram: a technical, reputational hurdle appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Apple pulls Facebook enterprise certificate

Credit to Author: Christopher Boyd| Date: Thu, 31 Jan 2019 16:44:03 +0000

After an app using an internal-only certificate from Facebook made its way into the outside world, Apple has responded by pulling Facebook’s developer certificate with immediate consequences for the social media giant.

Categories:

Tags:

(Read more…)

The post Apple pulls Facebook enterprise certificate appeared first on Malwarebytes Labs.

Read More
SecuritySophos

Grave fallo de seguridad en FaceTime de Apple

Credit to Author: Naked Security| Date: Thu, 31 Jan 2019 08:37:58 +0000

Apple se está apresurando a solucionar un problema vergonzoso que permite espiar con su popular FaceTime. Mientras tanto Apple aparentemente ha desactivado las llamadas grupales en FaceTime, prefiriendo eliminar una funcionalidad de su app antes que dejar abierto un agujero de seguridad. La popular web de noticias sobre Mac 9to5Mac informó del fallo y se [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/BkN0DR2uFTA” height=”1″ width=”1″ alt=””/>

Read More
SecuritySophos

Apple publica la primera actualización del año para iOS y macOS ¡Actualiza ya!

Credit to Author: Naked Security| Date: Fri, 25 Jan 2019 12:32:41 +0000

Apple ha publicado las actualizaciones de enero que solucionan la mayoría de las CVE que afectan iOS y macOS con unas pocas que afectan a Safari, watchOS, tvOS e iCloud para Windows. iOS v12.1.3 Esta última versión arregla una lista de CVEs para el iPhone 5 y posteriores, iPad e iPod Touch 6th Generation. Casi [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/KwaI2t9xcYo” height=”1″ width=”1″ alt=””/>

Read More