BlackBerry says TIFF vulnerability exposes enterprise servers to malware

BlackBerry has always prided itself on its top-notch security features, so it's a little worrying to see the company release a "high severity" advisory today warning of a potential exploit. According to the Waterloo-based operation:

Vulnerabilities exist in how the BlackBerry MDS Connection Service and the BlackBerry Messaging Agent process TIFF images for rendering on the BlackBerry smartphone.

Essentially, hackers could rig a TIFF file with malware and then trick a BlackBerry user into loading it via webpage, email or an embedded message, thus allowing the bad guys into their company's Enterprise Server. BlackBerry hasn't received any reports of attacks just yet, but urges IT administrators to update their BES software all the same. The update is available at the source, as are several temporary workarounds for those that can't update their installations just yet.

Via: Naked Security

Source: BlackBerry Knowledge Base

Source

By: Unknown On 6:15 PM

Continue Reading

BlackBerry gets help from Trend Micro in the fight against malware

BlackBerry Works with Trend Micro to Expand Protection for Customers Against Malware, Privacy Issues in Third-Party Applications

BlackBerry to Use Trend Micro's App Scanning Service to Further Analyze Apps Submitted to BlackBerry World

Feb 4, 2013

Waterloo, ON – BlackBerry® (NASDAQ: BBRY; TSX: BB) today announced that it is working with Trend Micro Incorporated, a global leader in cloud security, to expand the protection it already provides to BlackBerry customers against malware and privacy issues related to third-party applications.

As part of a multi-level and phased approach for addressing privacy implications and security concerns, BlackBerry will incorporate the Trend Micro™ Mobile Application Reputation Service with its current internal, proprietary system for analyzing applications. With the cloud-based Trend Micro Mobile Application Reputation Service, both current and new applications submitted to the BlackBerry® World™ storefront will be scanned for potential malicious behavior.

"BlackBerry is working with Trend Micro to implement a more robust approach for addressing privacy and security concerns related to third-party applications," said Adrian Stone, Director, BlackBerry Security Response and Threat Analysis at BlackBerry. "By incorporating Trend Micro's advanced mobile scanning and detection capabilities with our own internal, proprietary application analyzing system, we can provide another layer of protection and assurance for BlackBerry customers. Together, BlackBerry and Trend Micro are developing an innovative and comprehensive solution for protecting BlackBerry customers against emerging mobile security concerns."

"The volume of malicious and high-risk mobile apps are on the rise across the industry, which is why we applaud BlackBerry's commitment to protecting their customers against these emerging mobile threats," said Kevin Simzer, Vice President of Corporate Development and Alliances, Trend Micro. "With the speed that cybercriminals are targeting new platforms and applications, Trend Micro and BlackBerry's strategic collaboration is natural and timely for the security of end users. Together, the two companies can further secure and enhance BlackBerry customers' mobile experience."

Trend Micro has scanned and evaluated over 2 million mobile applications. Mobile Application Reputation Service is Trend Micro's next generation cloud-based technology for mobile operating systems that analyzes application code and behavior to identify risks from malware and data leaks. It also detects the abuse of battery, memory, and data resources. This service leverages the Trend Micro™ Smart Protection Network™ infrastructure to provide meaningful mobile app reputation ratings. The Smart Protection Network is built upon unique "in-the-cloud," technologies that naturally fit with cloud-based security services like the Mobile Application Reputation Service. By checking URLs, emails, files, and applications against continuously updated and correlated threat databases, customers always have immediate access to the latest protection.

Source

By: Unknown On 9:26 PM

Continue Reading

AVG and Yahoo enter into agreement to protect you from malware

There used to be a time where one would only run the risk of contracting malware by installing questionable software on their computer. Those days are of course long behind us as it’s now possible to pick up an infection simply by clicking the wrong link and visiting a booby trapped website.

Fortunately there are an increasing number of measures to protect web users, much like the agreement recently announced between Amsterdam-based Internet and mobile security provider AVG and search provider Yahoo. The two companies are calling it a Search and Distribution relationship but essentially, Yahoo will now use AVG Secure Search which is powered by their LinkScanner technology.

As the name implies, Secure Search is designed to warn surfers about potentially dangerous websites. The goal is to protect your personal information, identity and your computer in general.

It seems that the deal couldn’t have come at a more critical time as Search Engine Land recently reported that infected search results jumped 80 percent since August as we’re now in the thick of the holiday season. Some of the more popular holiday-related searches that led to malware include crafts for Christmas, Christmas office party games and Christmas scavenger list for adults.

AVG CEO JR Smith said his company was excited to team up with Yahoo to help provide Internet users with peace of mind when searching the web or accessing their favorite online properties. He noted that it was a shift from their previous strategy of entering into exclusive agreements. Yahoo representative Shashi Seth echoed those sentiments, adding that the search company is committed to providing a rich search experience and they believe the partnership will broaden their search footprint moving forward.

View the original article here

By: Dilusha On 1:26 PM

Continue Reading