Feeds & Podcasts

Blogs

Meet the Bloggers

Archive

Tags

#SecChat $1 million guarantee 12 Scams of Christmas access to live fraud resolution agents Acquisition Alex Thurber Android antivirus Apple botnet Channel Partners cloud security Compliance Consumer counter identity theft credit card fraud and protection credit fraud alerts credit monitoring credit monitoring and resolution critical infrastructure Cyber Security Mom cyberbullying Cybercrime cybermom data breach data center data center security Data Protection Dave DeWalt DLP Email & Web Security embedded encryption Endpoint Protection enterprise facebook fake anti-virus software Family Safety Friday Security Highlights global threat intelligence google government Hacktivism how to talk to kids how to talk to teens identity fraud identity fraud scams identity protection identity protection $1 million guarantee identity protection fraud identity protection surveillance identity surveillance identity theft identity theft expert identity theft fraud identity theft protection identity theft protection product Identity thieves and cybercriminals intel iphone kids online behavior lost wallet protection malware McAfee McAfee Channel McAfee Family Protection McAfee Identity Protection McAfee Initiative to Fight Cybercrime McAfee Labs McAfee security products Mid-Market Mobile mobile malware mobile security monitor credit and personal information Network Security online personal data protection online safety Operation Aurora PCI personal identity theft fraud personal information loss personal information protection phishing privacy proactive identity protection proactive identity surveillance Public Sector restore credit and personal identity Risk and Compliance scam scams scareware security smartphones social media social networking social networks spam Stuxnet twitter vulnerability Web 2.0 work with victim restore identity

McAfee Labs

Get cutting-edge security as it happens. McAfee Labs Blog delivers the latest research, analysis and insights into the evolving threat landscape, powered by comprehensive, real-time Global Threat Intelligence and a dedicated team of multidisciplinary researchers. Read our experts’ tips and techniques to help you avoid and defeat the latest malware trends, and view portions of the actual research to stay even more informed.

Posts in McAfee Labs

Cracking Open Your (Google) Wallet

Thursday, February 9, 2012 at 9:45am by Jimmy Shah
Jimmy Shah

We suggested earlier that instead of going after the Secure Element chip and the information it keeps safe, attackers would go after the weaker point of the Google Wallet app. Security researcher Joshua Rubin has now created a proof-of-concept app, Google Wallet Cracker, that can recover the Google Wallet PIN on a rooted phone. Once Read more…

Tags: , ,

Security 101: Attack Vectors Take Advantage of User Interaction

Wednesday, February 8, 2012 at 3:02pm by Francisca Moreno
Francisca Moreno

Welcome back to Security 101. Our New Year’s recess is over, and it’s time to offer another lesson. So far we have discussed vulnerabilities and some types of low-interaction attack vectors. In this lesson we shall continue with attack vectors that require medium or high levels of user interaction to succeed. These attack vectors are Read more…

Tags: , , ,

Safer Internet Day 2012 Offers a Lesson for All of Us

Tuesday, February 7, 2012 at 12:17pm by Toralv Dirro
Toralv Dirro

Many of you may have already noted this from Google’s home page, but for those not reading the fine print or not using Google: Today is International Safer Internet Day, which will have its 10th anniversary next year (if I counted right). Started in Europe by Insafe with funding from the European Commission, this day has become Read more…

Tags: , ,

Android Market Gets a Bouncer to Kick Out Malware

Friday, February 3, 2012 at 10:17am by Jimmy Shah
Jimmy Shah

Today Google announced its Bouncer security service for the Android Market. This is a good initial step in protecting Android users. Respect the Bouncer To keep out known troublesome apps, the service performs a malware and spyware scan on all submitted material. It also uses behavioral analysis to determine if a given app is trying Read more…

Tags: , , ,

SchmooCon to Cover Hot Mobile Security Topics

Thursday, January 26, 2012 at 9:32am by Jimmy Shah
Jimmy Shah

The ShmooCon security conference takes place in Washington D.C. this weekend. There will be a good number of mobile and embedded talks, covering attacks on and defense of Bluetooth, Android, NFC, RFID, and more. Disposable computers A number of years ago at DefCon a team of penetration testers showed how to infiltrate a corporate network Read more…

Tags: , , , , , ,

Vulnerabilities Patched in McAfee SaaS for Total Protection

Wednesday, January 18, 2012 at 12:46pm by David Marcus
David Marcus

This week, there has been public interest regarding some issues disclosed in McAfee products. McAfee treats security issues in our products very seriously, and so our Product Security team will explain the details around these issues. They do not affect all McAfee products, both are in a single product: SaaS for Total Protection, our hosted Read more…

What’s Your Medical Data Worth? More Than You Think

Tuesday, January 17, 2012 at 10:32am by Francois Paget
Francois Paget

Two weeks ago, I discussed the difficulties of obtaining relevant data regarding medical identity theft. I started my research in this field after I read some old stories on the Internet: Lind Weaver refused to pay hospital bills she received for the amputation of her right foot. It was in 2006, but the story still Read more…

Tags: ,

Facebook Accounts Compromised by ‘Giveaway’ Scam

Tuesday, January 17, 2012 at 10:06am by Umesh Wanve
Umesh Wanve

A recent social engineering attack that targeted Facebook accounts hit very close to home. One of my friends mentioned to me that his account was no longer accessible and that his password was not working. He even found his primary email address changed to another email. So I went onto Facebook to see his wall Read more…

Tags: , , , ,

Medical Identity Theft Plagued by Confusing Claims

Thursday, January 5, 2012 at 11:03am by Francois Paget
Francois Paget

The topic of medical identity theft makes the headlines one or two time per year. In spite of its rarity, it’s worth delving into this subject. The elements that define private health information in the United States can be found in the Health Insurance Portability and Accountability Act (HIPAA). Medical identity theft is the inappropriate Read more…

Tags: ,

Chaos Congress Peers Into Mobile Security, Protocols

Saturday, December 31, 2011 at 4:20pm by Jimmy Shah
Jimmy Shah

I heard a number of interesting mobile-related talks at the 28th Chaos Communications Congress (28c3) this week. Not every talk at the Congress was about newly discovered bugs or zero-day exploits; sometimes we got the building blocks necessary to better understand systems and increase security. I enjoyed key presentations on reverse-engineering USB 3G data sticks Read more…

Tags: , , ,