Security News > 2021 > March > Metadata Left in Security Agency PDFs

Abstract: Organizations publish and share more and more electronic documents like PDF files.

We gathered a corpus of 39664 PDF files published by 75 security agencies from 47 countries.

We have been able to measure the quality and quantity of information exposed in these PDF files.

We have also measured the adoption of PDF files sanitization by security agencies.

We identified only 7 security agencies which sanitize few of their PDF files before publishing.

We were still able to find sensitive information within 65% of these sanitized PDF files.

News URL

https://www.schneier.com/blog/archives/2021/03/metadata-left-in-security-agency-pdfs.html