Menu
Bayou Technologies | Lake Charles, Louisiana | Technology | Cybersecurity | Communication | Marketing
Computer IT Services & Marketing
  • Technology
    • Managed Services
    • Computer Repair
    • Consulting
  • Cybersecurity
    • BDR
    • Network Security
    • Computer Security
    • Data Recovery
  • Communication
    • Cabling
    • Wireless Networking
    • Phones
  • Marketing
    • Website Development
    • Search Engine Optimization
    • Social Media & Online Presence
    • Location Scan
    • Website & Email Management
    • Online Advertising
    • Multimedia Design
    • Newsletter
  • CALL: 337-214-1172

HOME  |  BLOG  |  REMOTE SUPPORT

Home
Support
Blog
Contact
Close Menu
Hackers Now Can Access Data In Secure PDF Files
October 10 2019

Hackers Now Can Access Data In Secure PDF Files

wukovits Blog, Business Advice, General Interest, Recent News, Security, Technology News

A team of six researchers from Ruhr-University Bouchum and Munster University, in Germany have discovered a critical flaw in the way that popular PDF viewers display data.

This makes it possible for an attacker to exfiltrate data from encrypted PDF files.

The researchers tested twenty-seven different desktop and web-based PDF viewer apps ranging from the ubiquitous Adobe Reader, to Foxit, and even the viewers built into both Chrome and Firefox. They found that every single one of them were vulnerable to the new attacks they engineered. The researchers developed two major lines of attacks with a few variants based on each type.

They had this to say about their findings:

“Our attacks allow the recovery of the entire plaintext of encrypted documents by using exfiltration channels, which are based on standard-compliant PDF properties…our evaluation shows that among 27 widely used PDF viewers, all of them are vulnerable to at least one of these attacks. These alarming results naturally raise the question of the root causes for practical decryption exfiltration attacks.  We identified two of them.

First, many data formats allow to encrypt only parts of the content.  This encryption flexibility is difficult to handle and allows an attacker to include their own content, which can lead to exfiltration channels.

Second, when it comes to encryption, AES-CBC–or encryption without integrity protection in general–is still widely supported.  Even the latest PDF 2.0 specification released in 2017 still relies on it.  This must be fixed in future PDF specifications.”

This is an alarming discovery although these attacks have not yet been seen in the wild. Now that the word is out, it’s just a matter of time.  Worse, there’s no fix on the horizon, which means that the PDFs you may be relying on to help keep your data secure, simply aren’t.

Used with permission from Article Aggregator

Google Is Searching For Unauthorized Gambling Apps On Play Store Google Adds Several New Password Features To Help Users

Related Posts

Big Changes Coming To Microsoft Outlook In Coming Years

Blog, General Interest, Microsoft, Recent News, Technology News

Big Changes Coming To Microsoft Outlook In Coming Years

Hacker Attacks On Healthcare Industry Are On The Rise

Blog, General Interest, Recent News, Security, Technology News

Hacker Attacks On Healthcare Industry Are On The Rise

Adobe Flash Has Reached End of Life Status

Blog, General Interest, Recent News, Security, Technology News

Adobe Flash Has Reached End of Life Status

Recent Posts

  • Big Changes Coming To Microsoft Outlook In Coming Years
  • Hacker Attacks On Healthcare Industry Are On The Rise
  • Adobe Flash Has Reached End of Life Status

Archives

Categories

Get a Domain Registered


$.99* .COM Domain! Get going with GoDaddy!

Back To Top
Bayou Technologies | Lake Charles, Louisiana | Technology | Cybersecurity | Communication | Marketing
  • Home
  • Technology
  • Cybersecurity
  • Communication
  • Marketing
  • Newsletter
  • Blog
  • Support
  • Contact

BBB Logo

Bayou Technologies, LLC
✖
Bayou Technologies is a BBB Accredited Busines
A+
On a scale of A+ to F

Reviewed, Evaluated and Accredited

Meets All 26 Standards of Accreditation

BBB Accredited since 1/1/2012

Click here for BBB Business Report on Bayou Technologies, LLC

BBB Accredited:

BBB Rating as of:

Verify Bayou Technologies, LLC
Bayou Technologies, LLC © 2019
Website Development and Marketing in Lake Charles, Louisiana
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Cookie settingsACCEPT
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are as essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled

Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

Non-necessary

Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.