A week in security: Facebook secures log-ins

Facebook has tried to clamp down on unauthorised access

In a week dominated by the launch of Microsoft’s Office 2010 suite, there was not much happening in the security space.

However, the main events centred around anger at Linux spam research from Symantec Hosted Services, and new Facebook tools to clamp down on unauthorised access attempts.

First up, Sophos warned of a Twitter phishing scam designed to harvest personal data with the offer of a new iPhone 4G as a lure.

Sophos senior technology consultant Graham Cluley wrote in a blog post that the scam employs a "gaggle of profiles, using avatars of sexy young women, pumping out messages to users" saying they could win the device.

Clicking on any of the links takes the user to a page where they are asked to fill out personal information.

Web authentication firm VeriSign has opened up its Trust Seal scheme to a wider range of companies, offering the opportunity to display compliance with a range of security criteria and improve consumer confidence in their sites.

Launched in February, the Trusted Seal programme was initially targeted at e-commerce firms that do not require SSL certificates of authenticity, but still want to reassure users that their site is safe and reputable.

The seal, which includes the VeriSign Checkmark logo, proves that a site has been scanned for malware and could suit firms that outsource elements like shopping carts to a third party, VeriSign said.