You would be forgiven for thinking that encrypting PDFs, before they are stored or sent via email, keeps their contents away from prying eyes. But according to researchers in Germany, it might be time to revisit that assumption after they discovered weaknesses in PDF encryption which could be exploited to reveal the contents of a file to an attacker. Learn more: . Dubbed ‘PDFex’ (PDF exfiltration), the weaknesses documented in Practical Decryption exFiltration: Breaking PDF Encryption by researchers from Ruhr University Bochum and the Münster University of Applied Sciences, offer two attack methods, each with three variants that depend on which PDF viewer is used to open a target document. The link for this article located at Naked Security is no longer available. . Vulnerabilities highlighted by analysts in PDF encryption may jeopardize file integrity via various attack techniques.. PDF Security Flaws, Document Encryption Risks, PDFex Research Insights. . LinuxSecurity.com Team
Have you heard about the new attack that German academics have developed that can extract and steal data from encrypted PDF files, sometimes without user interaction? Learn more: . Named PDFex, the new attack comes in two variations and was successfully tested against 27 desktop and web PDF viewers, including popular software such as Adobe Acrobat, Foxit Reader, Evince, Nitro, and Chrome and Firefox's built-in PDF viewers. The attack doesn't target the encryption applied to a PDF document by external software, but the encryption schemes supported by the Portable Document Format (PDF) standard, itself. The link for this article located at ZDNet is no longer available. . Uncover the techniques behind the PDFex vulnerability, which takes advantage of the encryption features in PDF documents, impacting leading systems and posing risks to sensitive information.. PDFex Attack, Data Extraction, PDF Encryption, Document Security. . LinuxSecurity.com Team
It happens every day -- a sensitive document lies in the copier room, forgotten by the person who left it on the scanner. No big deal, right? Nobody else was able to read it.. Wrong, says Michael Sutton, a lab researcher at security vendor Zscaler. In fact, that document could easily be captured by an insider or an external hacker, without ever moving the paper from the scanner. In a blog posted yesterday, Sutton offered some hard evidence to suggest that networked scanners equipped with remote operations capabilities can easily be tapped to collect data from the sensitive documents that are run through them each day. The link for this article located at Dark Reading is no longer available. . Wrong, says Michael Sutton, a lab researcher at security vendor Zscaler. In fact, that document coul. happens, every, sensitive, document, copier, forgotten, person. . LinuxSecurity.com Team
Malware targeting OpenOffice documents is spreading through multiple operating systems including Mac OS, Windows and Linux, according to Symantec. . According to the Symantec Security Response website, the worm is capable of infecting multiple operating system platforms and is spreading. The link for this article located at ZDNet is no longer available. . A recent malware strain is attacking LibreOffice files on Linux, Mac, and Windows platforms, representing a significant risk.. OpenOffice Malware,Cross-Platform Threats,Document Security. . LinuxSecurity.com Team
Office workers looking to protect their documents may want to select a higher grade of encryption. Swiss information-technology firm Objectif S. The link for this article located at Security Focus is no longer available. . Delve into sophisticated encryption methodologies that can proficiently protect your corporate documents from illicit entry.. Document Security, Encryption Techniques, Data Protection. . LinuxSecurity.com Team
Security is more than just passwords on your desktop. Every agency knows physical security is just as important. However, within a department there is normally not much to protect documents from users already in the building. And that can cause trouble. . The most obvious problem comes when a document is printed on a shared printer. Even a document that originated on a secure desktop within a locked office becomes vulnerable when it is sent to a printer down the hall. Just because someone works with you doesn’t mean they have the same need or right to read a document. Moreover, there could be cleaners or other visitors in the area. By the time you get to the printer, someone might have read or taken your sensitive document. The link for this article located at Government Computer News is no longer available. . Shared printers in workplaces offer convenience but also pose risks to document security. Unauthorized access and network vulnerabilities require robust measures for protection.. Document Security, Shared Printer Risks, Privacy Control, Access Protection. . Brittany Day
A security researcher has issued an alert for a "serious security flaw" in the way document encryption is implemented in Microsoft's Word and Excel products, warning that a widely-used encryption algorithm is being misused by the software giant. . However, Microsoft officials are downplaying the threat, insisting that the reported flaw poses a very low threat for users of the two popular word processing programs. Hongjun Wu, a researcher at the Institute for Infocomm Research in Singapore, said Microsoft is misusing the RC4 (Rivest Cipher 4) algorithm that is licensed from RSA Data Security. "[W]hen an encrypted document gets modified and saved, the initialization vector remains the same and thus the same keystream generated from RC4 is applied to encrypt the different versions of that document. The consequence is disastrous since a lot of information of the document could be recovered easily," Wu said in an advisory. The link for this article located at Ryan Naraine is no longer available. . However, Microsoft officials are downplaying the threat, insisting that the reported flaw poses a ve. security, researcher, issued, alert, 'serious, flaw', document, encrypti. . LinuxSecurity.com Team
The ability to govern access to emails and other documents might create more problems than solutions. Microsoft technology designed to allow greater control over documents and emails could create security and privacy headaches for IT managers.. . .. The ability to govern access to emails and other documents might create more problems than solutions. Microsoft technology designed to allow greater control over documents and emails could create security and privacy headaches for IT managers. Under Microsoft's Information Rights Management (IRM) system, users will be able to set restrictions on email messages to selectively prevent recipients from forwarding, copying or printing content. An email expiration feature also lets users set a deadline after which messages cannot be viewed. John Barker, an IT specialist at law firm Last Cawthra Feather, warned that the technology could encourage users to become more blasé about the content of emails. "If people think the rude email they sent would be de-activated, and therefore 'undiscoverable', they might be more inclined to send it in the first place," he said. "However, they are not going to get away with it, as the technology means the email will be recorded on the Exchange Server, or equivalent." The link for this article located at vnunet is no longer available. . Managing access to email systems could pose greater challenges than anticipated for IT administrators dealing with cybersecurity concerns.. Email Control, IRM Problems, Security Governance, Document Management, IT Challenges. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.