CIO Today

CIO Today Network Sites:   Top Tech News  |   CIO Today   |   Mobile Tech Today   |   Data Storage Today
Daily Briefing for Technology's Top Decision-Makers
Thursday, April 24th 
Real-time info services with Neustar
This ad will display for the next 20 seconds. Please click for more information, or scroll down to pass the ad, or Close Ad.
Trending Topics:   Security Heartbleed Big Data Cloud Computing Windows XP Data Centers OS X Mavericks
Home
Enterprise Software
Enterprise Hardware
Big Data
Network Security
Cloud Computing
CRM Systems
Data Storage
Operating Systems
Communications
CIO Issues
Mobile Tech
Chips & Processors
World Wide Web
Business Briefing
After Hours
Press Releases
 
Free Newsletters
Top CIO News
 
Mobile Tech Today
 

Network Security

PR Newswire Hack Linked To Adobe Breach

PR Newswire Hack Linked To Adobe Breach
October 17, 2013 10:53AM

Bookmark and Share
The latest victim of an Adobe-related hack, PR Newswire was concerned that a malicious third party could use the stolen information to impersonate its customers, maybe causing official-looking but fraudulent press releases to be sent in the name of customers. Corporate identity fraud can be devastating to businesses and markets, said one analyst.

Neustar, Inc. (NYSE: NSR) is a trusted, neutral provider of real-time information and analysis to the Internet, telecommunications, information services, financial services, retail, media and advertising sectors. Neustar applies its advanced, secure technologies in location, identification, and evaluation to help its customers promote and protect their businesses. More information is available at www.neustar.biz.

The fallout from an Adobe breach is spreading a little wider. Security researchers are reporting that the same cybercriminals who hacked into LexisNexis have also hijacked data from the wire service PR Newswire.

According to information security firm Hold Security, partial Web site source code and configuration data, along with a database of PR Newswire customers, was found on the same server where Adobe Systems’ source code was located. And that spells trouble.

“Cleverly disguised as an image, an archive of PR Newswire was found on hackers’ repository server,” Hold reports. “The database date appears to be from March 8, 2013 but it is unclear yet if the breach had happened at the same time or at a later date as the archive was created on April 22, 2013.”

What’s the Damage?

PR Newswire has confirmed the attack. PR Newswire is reportedly investigating the issue, which appears to be limited to customers from Europe, the Middle East, Africa and India. The company was not immediately available for comment, but KrebsOnSecurity reports it will begin the process of alerting affected customers and asking them to change their account passwords later today.

In a written statement to KrebsOnSecurity, PR Newswire said that at this point there is no evidence to suggest that the intrusion into its networks was in any way related to what happened with Sweden-based press release distributor Cision AB last week. At that time, the company said it was conducting an investigation into an erroneous press release that it published. The release stated that Samsung Electronics Co. would be purchasing Fingerprint Cards, a Swedish technology firm, for $650 million -- information that was inaccurate.

“PR Newswire has protocols and redundancies in place that are designed to minimize the risk of distributing fraudulent press releases, including both technological and human safeguards prior to issuing any release," the statement reads.

“The database contains approximately 10,000 records; however, there is only a minority of active users on this database. Those users represent an even smaller number of customers, as each customer generally has multiple usernames. PR Newswire decided to implemented a mandatory password reset for all customers with accounts on this database as a precautionary measure,” according to the statement.

The Broader Impacts

We turned to Aaron Titus, CPO at Identity Finder, a security and privacy firm, to get his reaction to the latest Adobe-related breach. He told us while we often think of identity fraud as a consumer problem, corporate identity fraud can have devastating effects on businesses, markets, and even public health.

“In this case, PR Newswire was concerned that a malicious third party could use the stolen information to impersonate their customers, potentially causing official-looking -- but fraudulent -- press releases to be sent in the name of customers like Chevron, Procter & Gamble, General Motors, and the World Health Organization,” he said. “It is easy to imagine the havoc that could be caused by such corporate identity fraud. PR Newswire forced a password reset for all of their customers, as a precaution."

Tell Us What You Think
Comment:

Name:

Ilias Ismanalijev:

Posted: 2013-11-10 @ 2:15am PT
I've made a little tool that lets you check for your e-mail in the list: http://adobe.breach.il.ly/



 Network Security
1. Fund Seeks To Head Off Heartbleeds
2. Lessons from Verizon's Threat Report
3. Verizon Report Exposes Cyberthreats
4. How Are Web Sites Post-Heartbleed?
5. White House Updating Privacy Policy




 Most Popular Articles
1. BlackBerry Drops T-Mobile After Nasty Spat
2. Cisco, IBM Launch Internet of Things Consortium
3. Salesforce CRM Gets Industry Specific for Internet of Customers
4. Intel Bets on Cloudera for Big Data Analytics
5. SAP HANA Data Warehouse App Gets Faster Analytics

Have an informed opinion on this story?
Send a Letter to the Editor.
We want to know what you think.
Send us your Feedback.

 Related Topics  Latest News & Special Reports

  Fund Seeks To Head Off Heartbleeds
  Salesforce Developing App SOS Button
  Google Maps, Now with Time Travel
  Lessons from Verizon's Threat Report
  NYPD Twitter Campaign Backfires

 Technology Marketplace
Business Intelligence
Get real-time, cloud-based information services with Neustar.
 
Cloud Computing
Next Generation Data Center Is Here! Vblock™ Systems from VCE
 
Contact Centers
HP delivers the future of the contact center with HP Qfiniti 10.
 
Data Storage
Next Generation Data Center Is Here! Vblock™ Systems from VCE
Barium Ferrite (BaFe) is the future of tape.
2.5" Enterprise-class SATA & SAS SSDs for server & storage applications
 
Enterprise Hardware
Barium Ferrite (BaFe) is the future of tape.
2.5" Enterprise-class SATA & SAS SSDs for server & storage applications
 
Hardware
Protect your network with APC Smart-UPS battery backup
 
Network Security
Protect your network with APC Smart-UPS battery backup
 

Network Security Spotlight
Tech Giants Fund Initiative To Prevent Future Heartbleeds
Can more funding prevent Heartbleed vulnerabilities in future open-source software? A new Core Infrastructure Initiative at the Linux Foundation is attempting to find out.
 
What Verizon's Data Breach Report Can Teach Enterprises
It’s probably not a jaw-dropper, but cyberespionage is officially on the rise. And the use of stolen or misused credentials is still the leading way the bad guys gain access to corporate information.
 
Top Cyberthreats Exposed by Verizon Report
Beyond Heartbleed, there are cyberthreats vying to take down enterprise networks, corrupt smartphones, and wreak havoc on businesses. Verizon is exposing these threats in a new report.
 
Navigation
CIO Today
Home/Top News | Enterprise Software | Enterprise Hardware | Big Data | Network Security | Cloud Computing | CRM Systems
Data Storage | Operating Systems | Communications | CIO Issues | Mobile Tech | Chips & Processors | World Wide Web
Business Briefing | After Hours | Press Releases
Also visit these Enterprise Technology Sites
Top Tech News | CIO Today | Mobile Tech Today | Data Storage Today

Services:
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About CIO Today Network | How To Contact Us | Article Reprints | Services for PR Pros (In partnership with NewsFactor) | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 CIO Today. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.