system flaw

Experts found a new bug in Facebook login system that allowed attackers to match random email addresses with users’ first and last names in spite of members’ actions taken to protect their privacy. Such a bug could have been exploited by social-engineering scammers, phishers, or anyone who has ever been curious about the person behind an anonymous email message. If the address belongs to any one of the 500 million active users on Facebook, the social-networking site will return the full name and picture associated with the account.

Three security firms warned that a vulnerability recently discovered in the operating system run by Apple iPad and iPhone could allow hackers to get the full control of the devices.

The bug in the Apple iOS which is also run by iPod touch could enable hackers to enslave a vulnerable device, as reported by Symantec Corp as well as privately held Lookout and Vupen.

Apple spokeswoman Natalie Harrison said the company was aware of the report and is investigating.

This week a new tool was released to address the vulnerability in Windows shortcut files. The security company Sophos announced a free application that allegedly blocks any attacks trying to exploit the critical unpatched bug in Windows machines.

According to Chet Wisniewski, a senior security advisor at Sophos, the tool called "Sophos Windows Shortcut Exploit Protection Tool," will protect users until Microsoft releases a permanent patch for the problem