Kaspersky discovers new version of German state-sponsored trojan - The H Security: News and Features

Kaspersky discovers new version of German state-sponsored trojan - The H Security: News and Features: "The researchers also discovered a 64-bit driver signed using a certificate issued by fictitious CA Goose Cert; 64-bit versions of Windows will not load unsigned drivers. A normal copy of Windows will not accept the fake certificate, meaning that the installation process also has to modify Windows' certificate store – how it does this is not yet known."

The modern German police state told Microsoft to allow this – any serious other options? If so, I will delete this silly comment immediately.

Mac OS X Lion makes it unnecessarily easy for password crackers - The H Security: News and Features

Mac OS X Lion makes it unnecessarily easy for password crackers - The H Security: News and Features: A security expert reports that under Lion, even users without root privileges have access to other users' password hashes. Hashes can be used to establish the original password

Report: Android malware on the rise - The H Security: News and Features

Report: Android malware on the rise - The H Security: News and Features: According to a report from McAfee, Google's Android operating system has become the most targeted mobile platform in just three months. The company also says that there has been "a significant uptick in rootkits"

UPnP-enabled routers allow attacks on LANs - The H Security: News and Features

UPnP-enabled routers allow attacks on LANs - The H Security: News and Features: Routers by various manufacturers support UPnP on their WAN interfaces. This makes it relatively easy for attackers to infiltrate internal LANs or misuse the routers as proxies for anonymous surfing. A tool demonstrates the problem

Mac OS X Lion fails to check passwords when authenticating via LDAP - The H Security: News and Features

Mac OS X Lion fails to check passwords when authenticating via LDAP - The H Security: News and Features: When the new version of Mac OS X uses the LDAP directory service to store user data centrally, a username alone is sufficient to log onto Mac systems. In some circumstances it is also possible for all users to find themselves locked out

Accelerometer used to log smartphone keystrokes - The H Security: News and Features

Accelerometer used to log smartphone keystrokes - The H Security: News and Features: Researchers have succeeded in using the movement of a smartphone to record keystrokes entered on its on-screen keyboard. A less theoretical threat has reared its head in the shape of GingerMaster, which includes a root exploit for Android 2.3.3

CSI:Internet - Controlled from the beyond - The H Security: News and Features

CSI:Internet - Controlled from the beyond - The H Security: News and Features: When the boss's computer opens confidential emails remotely as if haunted, it is time to call the ghost busters or, even better, a professional forensic IT investigator.