26 Jun 2010
This week in the security space has been dominated by new security concerns over Google Android apps.
The web giant was forced to respond to allegations made in a report from mobile security firm SMobile Systems that one in five applications available for Android handsets could expose user data to third-party hackers.
The report said that the openness of the Android Market benefits developers but may present enterprise users with problems if they download a vulnerable application.
Google said in its defence that it controls what applications are made available, but said nothing about the accusations concerning spyware. And in an apparently unrelated incident, the company revealed that it has remotely removed two suspect applications from Android users' devices.
Rich Cannings, Android security lead, said in a blog post that the remote application removal feature is "one of many security controls" the firm has in its arsenal to protect Android users from malicious applications.
Also this week, security researchers warned of a rapidly growing number of web sites infected by the Asprox spam botnet. Asprox is capable of launching SQL injection attacks, and has more than doubled its appearance on application service provider (ASP) sites from 5,000 to 11,000 overnight, according to M86 Security.
On the other side of the fence, the Metropolitan Police has arrested two London youths for their alleged roles in an international cyber crime forum. The teenagers were picked up on suspicion of encouraging or assisting crime, unauthorised access under the Computer Misuse Act and conspiracy to commit fraud.
The arrests were made with the aid of the Police Central e-Crime Unit (PCeU).
Finally, the chief executive of the Internet Corporation for Assigned Names and Numbers (Icann) has asked for greater co-operation between international internet bodies to ensure the safety and stability of the Domain Name System (DNS).
Rod Beckstrom argued at the opening session of the organisation's 38th international meeting in Brussels that Icann "cannot resolve these issues alone ".
Latest stories from Security
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
Orange and Intel talk us through the ins and outs of their San Diego smartphone
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Are you looking for a new positing within the Testing...
A leading global provider of critical information to...
Want to work for one of the most dynamic, creative environments...
Want to work for one of the most dynamic, creative environments...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
typical media fearmongering
way to misrepresent a bunch of news articles. * 1 in 5 apps was said to USE private data. eg. apps might need access to your contacts list for example - does this mean the app is malware? no it doesn't. The security firm who published this report was only trying to sell its own software. There are actually NO identified malware apps for android at this point. Also, all apps tell you what access they need. If you dont like it, dont install the app. * the 2 apps google pulled from users phones were both from the same developer and were not pulled for security concerns. the developer worked for a security firm and openly stated the apps were for research purposes and were pulled because the developer pulled the app from the market and requested it. * the botnet mentioned had nothing to do with android at all....why was it even mentioned in this article?! * if/when a user's android phone is actually compromised by an app that is available from android market, then it will be news, but until then - try doing some research first...
Posted by: SP 26 Jun 2010