<http://schema.org/articleBody>
"Updated below.\r\n\r\nWith the recent spate of Mac malware\u00A0occurrences, including two variations which leveraged vulnerabilities in Java, it's become a matter of necessity for Apple to be more proactive about OS X security. The company has decided to do so by enlisting the help of security company Kaspersky Labs, reports Computing.\r\n\r\nAfter the Flashback malware was found to be affecting some 700,000 Macs, and fixes released by Apple have only slowly chipped away at the infections.\r\n\r\nKaspersky CTO Nikolai Grebennikov says that\u00A0&amp;quot;Mac OS is really vulnerable and Apple recently invited us to improve its security,&amp;quot; adding, &amp;quot;we've begun an analysis of its vulnerabilities, and the malware targeting it.&amp;quot;\r\n\r\nGrebennikov says that Apple's lack of 'seriousness' when it comes to security opened a way for the flashback vulnerability to spread, by blocking Oracle updates to Java and patching the browser plugin itself. By lagging on fixing a vulnerability, the systems opened themselves to attack.\r\n\r\nHe also makes an\u00A0interesting\u00A0statement about Apple's mobile OS, saying &amp;quot;&amp;quot;Our experience tells us that in the near future, perhaps in a year or so, we will see the first malware targeting iOS.&amp;quot;\r\n\r\nSince iOS is far more heavily protected by sandboxing and application silos than Mac OS X is, any malware affecting it would have to be extremely innovative in its construction.\r\n\r\nApple has said that it is\u00A0working to attack the botnet\u00A0that is spreading the infection. It has already\u00A0released a patch to Java\u00A0and a\u00A0standalone removal tool\u00A0to address the issue.\r\n\r\nThe fact that the numbers are not dropping as dramatically as it first seemed isn\u2019t anything crazy to\u00A0worry\u00A0about, but it does show that Apple still has a lot of work to do to contain Flashback. All of this even as a new threat, in the\u00A0SabPub backdoor infection, rears its head.\r\n\r\nIn late April, Kaspersky CEO\u00A0Eugene Kaspersky\u00A0said that Apple was '10 years behind Microsoft in security.'\r\n\r\nHopefully, with the help of Kaspersky, Apple can be more proactive about addressing malware. Perhaps it can even come up with a native anti-malware (and anti-virus) solution that ships with OS X, providing an Apple-supported way to combat malware as Macs get more popular and become larger targets for hackers and exploits.\r\n\r\nUpdate:\u00A0Jim Dalrymple of The Loop\u00A0points to a statement given to\u00A0Engadget\u00A0by Kaspersky, which says that a quote from the company's CTO was taken out of context:\r\nThe article reports that Kaspersky Lab had &amp;quot;begun the process of analyzing the Mac OS platform at Apple's request&amp;quot; to identify vulnerabilities. This statement was taken out of context by the magazine \u2013 Apple did not invite or solicit Kaspersky Lab's assistance in analyzing the Mac OS X platform. Kaspersky Lab has contacted computing.co.uk to correct its article.\r\nThe full quote from Grebennikov was provided as well:\r\n&amp;quot;As Mac OS X market share continues to increase, we expect cyber-criminals to continue to develop new types of malware and attack methods. In order to meet these new threats, Kaspersky Lab has been conducting an in-depth analysis of Mac OS X vulnerabilities and new forms of malware.\r\n\r\nThis security analysis of Mac OS X was conducted independently of Apple; however, Apple is open to collaborating with us regarding new Mac OS X vulnerabilities and malware that we identify during our analysis. Kaspersky Lab is committed to providing the highest level of security for all of our customers, including Mac OS X, and we will continue to enhance our technologies in order to meet the ever-changing threat landscape. &amp;quot;\r\nSo, Kaspersky continues to investigate Mac OS X malware, something that it stands to directly profit from by the way, but it does so on its own initiative, not Apple's."^^<http://www.w3.org/2001/XMLSchema#string>
<http://thenextweb.com/apple/2012/05/14/apple-asks-internet-security-company-kaspersky-lab-to-advise-it-on-os-x-security/>