Privacy and data protection

Adobe confirms targeted attacks due to security hole in Reader

A zero-day security flaw in Adobe Reader and Acrobat is being exploited through a series of targeted attacks against vulnerable computers, Adobe Systems said yesterday.

In a security bulletin, Adobe confirmed that the vulnerabilities could cause Reader and Acrobat to crash, potentially opening the door for an attacker to gain control of the system.

"Adobe is aware of reports that these vulnerabilities are being exploited in the wild in targeted attacks designed to trick Windows users into clicking on a malicious PDF file delivered in an email message," the company revealed in the bulletin.

Adobe said it's … Read more

Android a growing target for mobile malware -- report

The Android platform is becoming a key mobile target for cybercriminals, who are getting much more efficient with their malware, according to a report from Web-security company Blue Coat Systems.

In a mobile malware report, Blue Coat notes that Android is a popular target. Here's a look at the volume of Android malware:

Blue Coat noted:

The Android-based malware blocked by WebPulse included an Android root exploit and a variety of rogue Android software. Forty percent of Android malware was delivered via malnets, demonstrating how cybercriminals can successfully utilize embedded infrastructures to attack mobile users. In the most recent … Read more

Gmail of journalists in Myanmar said to be hacked

A handful of journalists who cover Myanmar received warnings from Google over the past week. The Web giant told them that their Gmail accounts might have been hacked by "state actors" or "state-sponsored attackers" and that they should change their passwords and tighten their security settings, according to the Wall Street Journal.

Google said that it has systems in place to detect possible state-sponsored malware or hacking but would not give the Wall Street Journal further information on how these systems work.

The Myanmar government has now responded to these allegations and denies any involvement in … Read more

Cyberattacks reanimate CISPA, spark move by Obama -- reports

Recent reports of cyberespionage and hacking against important U.S. targets have triggered cybersecurity rumblings in Washington, with the leaders of the House Intelligence Committee reportedly planning to bring back the controversial CISPA -- Cyber Intelligence Sharing and Protection Act -- and President Obama reportedly readying his own executive order on the issue.

House Intelligence Committee Chairman Mike Rogers (R-Mich.) and ranking member Rep. Dutch Ruppersberger (D-Md.) say they plan to re-introduce CISPA -- unaltered -- next week during a speech at the Center for Strategic and International Studies in Washington, according to Beltway tech blog The Hill.

"American … Read more

McAfee survey:12 percent have personal data leaked by angry ex

We need to talk about love.

It is a wonderful thing. It makes the world go around. But sometimes it doesn't live here anymore.

It is then that bad things can happen.

You might get cut off by your ex, your gym membership suddenly inactive. You might hear from friends that you did none of the work in the relationship. You might hear that you were mean and cruel.

On the other hand, your ex might actually be the mean and cruel one.

For you might suddenly find that your passwords, bank account numbers, and even that photo of you wearing nothing but a caring grin on a remote Indian beach will suddenly see the light of more days than are comfortable. … Read more

BlackBerry taps Trend Micro to scan apps for malware

BlackBerry is counting on Trend Micro to help ensure the security of its third-party apps.

Like other app store owners, BlackBerry already scans apps for malware to protect BlackBerry World customers. But the company will add Trend Micro's Mobile Application Reputation Service to take that protection a few steps further.

Both current and new apps submitted to BlackBerry World will be scanned by Trend Micro's cloud-based service to hunt for malware.

"BlackBerry is working with Trend Micro to implement a more robust approach for addressing privacy and security concerns related to third-party applications," Adrian Stone, director … Read more

Privacy groups tell U.S. to stop lobbying EU on data law changes

A coalition of privacy groups has written to leading U.S. politicians to seek assurances that policymakers "advance the aim of privacy" in Europe, rather than hinder the development of new European data protection and privacy laws.

The Electronic Frontier Foundation (EFF), the American Civil Liberties Union (ACLU), the Electronic Privacy Information Center (EPIC), and more than a dozen other groups are seeking to meet with U.S. Attorney General Eric Holder, U.S. Secretary of State John Kerry, and U.S. Acting Secretary of Commerce Rebecca Blank, to ensure that new European data law proposals are bolstered … Read more

China cyberspies highlighted by Schmidt book, Post report

Hot on the heels of reports from The New York Times and The Wall Street Journal, another storied U.S. newspaper -- The Washington Post -- has confirmed that it too was attacked by what it suspects were Chinese hackers. And a new book from Google's Eric Schmidt reportedly calls the Asian country "the most sophisticated and prolific" hacker of foreign companies.

In an article published today, the Post says attackers gained access to the paper's computer systems as early as 2008 or 2009 and that malware installed on the systems was neutralized in 2011 by … Read more

Privacy at risk as Path app lets location data slip

While on assignment for business recently, Jeffrey Paul posted a photo to the social network Path.

For business reasons, he didn't want to tell his contacts where he was at the time. He had already disabled Path's access to his location in iOS settings. After he took his photo, he had carefully cropped it to obscure anything that might have identified his location.

But when he hit publish, there it was: the name of the city he was in. He deleted the post immediately, but the disclosure shook him. In a subsequent post on his company's blog, … Read more

Internet, social media least trusted industries for privacy

Internet and social media ranked at the bottom on a list of the most trusted industries for privacy, according to the Ponemon Institute.

Released yesterday, Ponemon's "2012 Most Trusted Companies for Privacy" was compiled from a survey of U.S. adults asked to name the five companies they trust the most to protect the privacy of their personal information.

Based on more than 6,700 responses, the Top 20 list did not include several tech players that had been on it in past years.

Apple failed to make the list for the first time in four years. … Read more