Chinese Cyberattacks Exploited Adobe And Microsoft Software
A paper prepared for the U.S.-China Economic and Security Review Commission by Northrop Grummon has some disturbing details on how Chinese hackers exploited "zero-day" flaws -- meaning flaws for which the manufacturer has no patch -- in Adobe's Acrobat Reader and Microsoft's WordPad, which just about everybody with a computer has, to steal information from U.S. corporate and government computers. The flaws were so serious that U.S. CERT (the U.S. Computer Emergency Response Team) issued warnings on them. Apparently Adobe's took a month to fix. I raise this because even though there are several venture-backed companies selling protection against inevitable and all-too-common software flaws, the problem keeps getting worse.
23 October 2009•1 min read
