Security News

Data-tracking Chrome flaw triggered by viewing PDFs
2019-03-01 12:33

Researchers have spotted an unusual ‘trackware’ attack triggered by a viewing a PDF inside the Chrome browser.

Chrome Zero-Day Exploited to Harvest User Data via PDF Files
2019-02-27 15:37

Exploit detection service EdgeSpot says it has spotted several PDF documents that exploit a zero-day vulnerability in Chrome to collect information on users who open the files through Google’s web...

Researchers break e-signatures in 22 common PDF viewers
2019-02-27 12:01

Researchers have discovered a flaw in some PDF document viewers that allows new content to be added to documents without breaking the electronic signatures.

New Attacks Show Signed PDF Documents Cannot Be Trusted
2019-02-26 18:48

Many popular PDF viewers and online validation services contain vulnerabilities that can be exploited to make unauthorized changes to signed PDF documents without invalidating their signature,...

PDF viewers, online validation services vulnerable to digital signature spoofing attacks
2019-02-26 14:46

Academics from Ruhr University Bochum have proven that the majority of popular PDF viewer apps and online digital signature validation services can be tricked into validating invalid signatures or...

WTF PDF: If at first you don't succeed, you may be Adobe re-patching its Acrobat, Reader patches
2019-02-21 21:51

Plus: How Microsoft Edge helps Facebook Flash files dodge click-to-play rules in Edge Adobe is taking a second crack at patching security bugs in its Acrobat and Reader PDF apps.…

World's favourite open-source PDF interpreter needs patching (again)
2019-01-24 13:32

Still afraid of no ghost? You didn't read the script Google Project Zero bug-hunter Tavis Ormandy took a "random look at the new release" of Ghostscript, and turned up a vulnerability that works...

Attackers Use Steganography to Obfuscate PDF Exploits
2019-01-24 11:40

A recently discovered PDF exploit used steganography to hide malicious JavaScript code in images embedded in PDF files, according to exploit analysis firm EdgeSpot. read more

Hope you're over that New Year's hangover – there's an Adobe PDF app patch to install
2019-01-03 20:20

Pair of critical flaws cleaned up in Acrobat, Reader Adobe has issued its first patch of the year, emitting fixes for a pair of high-risk vulnerabilities in Acrobat and Reader.…

Phishing gets more complex as decoy PDF pops up with Microsoft-issued SSL certificate
2018-10-03 16:01

A PDF decoy was found to be linked to an Office 365 phishing page hosted in Azure blob storage, according to Netskope Threat Protection.