Articles about Adobe

More VC dosh, vicar? Moneymen hand Slack-a-like biz Domo $131m

Venture capitalists have poured $131m of fresh funding into a Slack-like collaboration startup, Domo. Domo, founded in 2010, secured the money in a top-up to an existing Series D funding round from a tranche of its existing backers plus newbie Credit Suisse. That existing round was for $200m and took place in April 2015. …
Gavin Clarke, 23 Mar 2016
Adobe announced cross-device user tracking at its Summit event in Las Vegas

Adobe will track you across all your devices with new co-op project

Adobe has announced what it calls "cross-device co-operation" at its Summit digital marketing event under way in Las Vegas. The goal, said Adobe Target Director Kevin Lindsay, is to "provide the ability, through all our marketing solutions, for marketers to be able to market to their consumers as people rather than as separate …
Tim Anderson, 22 Mar 2016

Hackers crack OS X, Windows, web browsers' security to net $460,000

Pwn2Own Researchers pulled off multiple OS X, Windows and web browser exploits at the latest Pwn2Own competition. White hat hackers earned $460,000 in prizes for finding and exploiting 21 security vulnerabilities in widely used software. Details of the flaws were privately shared with vendors so that their code that can be fixed and …
John Leyden, 18 Mar 2016

Your 30 second guide to the past three months on Planet Adobe: Talk about sitting on cloud 9

Adobe is crediting a surge in cloud services with helping to drive its best financial Q1 take ever. The Silicon Valley software giant said that its Creative Cloud and Marketing Cloud services recorded strong growth on the quarter and spurred the company to increase its revenue target for the year. For the three months [PDF] …
Shaun Nichols, 17 Mar 2016

Flash – aaah-aarrgh! Patch now as hackers exploit fresh holes

Adobe has urged users to patch their Windows, OS X and Linux editions of Flash Player to address 23 security vulnerabilities, including one that is actively being targeted in the wild. The March update includes a number of fixes for vulnerabilities that could, if exploited, allow an attacker to remotely execute code on a …
Shaun Nichols, 10 Mar 2016

2016: Bad USB sticks, evil webpages, booby-trapped font files still menace Windows PCs

Patch Tuesday Microsoft has published the March edition of its monthly security updates, addressing security flaws in Internet Explorer, Edge and Windows, while Adobe has issued updates for Digital Editions, Acrobat and Reader. Microsoft released 13 sets of patches for you to install as soon as possible: MS16-023 A cumulative update for …
Shaun Nichols, 08 Mar 2016
dumb_and_dumber_648

Docker may be the dumbest thing you do today

It’s clear that Docker is on a tear as it ushers in a brave new world of DevOps. What’s less clear is whether this is a good idea. At least, today. After all, for most enterprises, most of the time, Docker and its container peers are simply not ready for primetime, assuming “primetime” means “standard enterprise apps.” While …
Matt Asay, 04 Mar 2016
Clint Eastwood bounty hunter

HackerOne boss on why the future's bright for bug bounties

RSA 2016 Three months ago HackerOne, the group that pays a bounty to security researchers for bugs, appointed Mårten Mickos as its new CEO, and the tech-savvy Finn has clear ideas about the future of hacking for pay. Mickos was a surprise hire. At the turn of the century he was the CEO of MySQL, and remained there for eight years …
Iain Thomson, 01 Mar 2016
LaCie_eye_950

LaCie bigs up 5big array: Desktop hot storage box gets fatter drives

LaCie has upped the capacity of its 5big storage for professional workstation users to 40TB by moving from 6TB to 8TB disk drives. This Seagate subsidiary positions the desktop, 5-slot 5big with dual Thunderbolt 2 connectivity and hardware RAID as capable of supporting 4K video workflows. It has a bandwidth of up to 1,050MB/ …
Chris Mellor, 26 Feb 2016

Police forces start shifting their data centre tin to Crown Hosting

At least two police forces have signed contracts to shift their tin to the the government's Crown Hosting shared data centre and close their existing server farms, the head of the Police ICT Company, Martin Wyke, has said. Wyke estimates that almost every force currently has its own dedicated data centre. However, he said …
Kat Hall, 23 Feb 2016
Tommy Lee Jones delivers implied facepalm. From No Country for Old Men  Copyright Miramax Pictures. 2007.

Remember WordPress' Pingbacks? The W3C wants us to use them across the whole web

Something called Webmentions – which looks remarkably like the old WordPress pingbacks, once popular in the late 2000s – is grinding through the machinery of the mighty, and slow-moving, World Wide Web Consortium (W3C). But don’t be deceived. Lurking behind that unassuming name lies something that might eventually offer users …
fail_parking_meter_648

Adobe issues patch to nix its Mac-killing Creative Cloud update

Adobe has re-issued a software a Creative Cloud update that had gobbled users' storage data. The firm Monday said it had removed the Creative Cloud Desktop update, which it admitted “incorrectly removed” files from the Mac’s system root directory. “We have removed the update from distribution, and are in the process of …
Gavin Clarke, 15 Feb 2016
Adobe Photoshop

'Adobe Creative Cloud update ate my backup!'

How about this for bizarre bug of the week: the latest version of Adobe Creative Cloud deletes the first hidden directory in root directories on Macs. That's bad news for users of BackBlaze: the backup software stores a .bzvol folder in the top level of every drive it backs up, and uses these folders to store information about …
Chris Williams, 13 Feb 2016
shutterstock_gold

Hack VMware, score US$75K. Hack Flash, get much less

CanSecWest There's US$75,000 up for grabs to hackers who compromise VMware's hypervisor software in an upgraded Pwn2Own contest next month. The next challenge represents a significant boost to the difficulty of the hacking competition in which popular hardware and software products are publicly flayed by cyber-security gurus. The …
Darren Pauli, 12 Feb 2016

Flash flushed as Google orders almost all ads to adopt HTML5

Google's getting serious about hastening the oh-so-timely demise of Adobe Flash, telling advertisers they've just under a year to move to HTML 5. The ad giant has given advertisers notice that from June 30th, 2016, AdWords and DoubleClick won't accept upload of Flash ads. Come January 2nd, 2017, display ads won't run on the …
Simon Sharwood, 10 Feb 2016

Don't touch that PDF or webpage until your Windows PC is patched

Microsoft has patched 41 CVE-listed security vulnerabilities in its software this month. The second Patch Tuesday monthly update of the year brings with it fixes for security flaws in both Internet Explorer and Edge that could allow remote-code-execution attacks simply by visiting a webpage. Also fixed are remote-code- …
Shaun Nichols, 09 Feb 2016
Adobe Animate CC replaces Flash Professional

Don't mention the F word: Adobe releases Animate CC

Adobe has released Animate CC, formerly known as Flash Professional, as part of its effort to move away from its proprietary plug-in and runtime in favour of HTML5 Canvas and WebGL. The company announced its intentions at the end of November 2015, explaining that “we completely rewrote the tool over the past few years to …
Tim Anderson, 09 Feb 2016
Apple iMac 27-inch 2013

Fake Flash update malware targets gullible Apple users

Security watchers have spotted a shareware scam targeting Apple users that features malicious code signed with a legitimate Apple developer certificate. The dodgy software poses as an Adobe Flash update, typically presented to potential marks as a pop-up reminder. Those who fall for the ruse will end up unwittingly …
John Leyden, 08 Feb 2016
management cloud4

Autodesk vapourises ten per cent of jobs to go completely cloudy

Autodesk, which is getting close to phasing out physical product sales, has announced it's also going to farewell 925 jobs, about ten per cent of its global workforce. The move comes less than two months after the company woke to find not one, but two “activist” investor funds on its share register: Eminence Capital and Sachem …

US government's $6bn super firewall doesn't even monitor web traffic

The US government's firewall, named Einstein, is not as smart as its name would suggest. A report [PDF] by the General Accounting Office (GAO) into the National Cybersecurity Protection System (NCPS) has concluded that it is only "partially meeting its stated system objectives." Which is a polite way of saying it sucks. Among …
Kieren McCarthy, 01 Feb 2016

OpenSSL patch quashes rare HTTPS nasty, shores up crypto chops

OpenSSL maintainers have pushed a pair of patches, crushing a dangerous but uncommon bug that allows HTTPS to be unravelled while also hardening servers against downgrade attacks. Affected servers are open to key recovery attacks only if it runs certain Digital Signature Algorithm and static Diffie-Hellman key exchange …
Team Register, 29 Jan 2016
A person measuring her waistline

Reg readers speak out on Thin Client technology

Survey Results Managing PC estates is a time-consuming, expensive and thankless task. Better provisioning and management tools can obviously help, but implementing one or more of the various forms of desktop virtualisation available nowadays may also be beneficial. The virtualisation option, and particularly the use of hardware-based thin …
Dale Vile, 28 Jan 2016

Angler exploit kit now hooking execs with Xmas Flash hole

The Angler exploit kit is again sailing the cyber seas and pillaging with impunity, adding one of the more recent machine-hijacking Flash holes to its arsenal. The integration of Adobe Flash vulnerability (CVE-2015-8651) patched last month solidifies Angler's position as the most popular and effective exploit kit on …
Darren Pauli, 28 Jan 2016
Mobile banking, image via Shutterstock

SlemBunk slamdunk: Mobile banking Trojans found worldwide

Cybercrooks have put together a dynasty of Android Trojan apps in a bid to imitate the legitimate apps of 33 financial management institutions across the globe. The SlemBunk apps (which commonly masquerade as popular applications, such as social media, utility, etc) have spread across three major continents: North America, …
John Leyden, 14 Jan 2016
Windows 10 Aero

Windows 10 shattered Remote Desktop's security defaults – so get patching

Microsoft has issued its January batch of security updates – including what will be the final round of patches for many versions of Internet Explorer. The first Patch Tuesday monthly security release of the year includes fixes for 25 CVE-listed flaws in Windows, Internet Explorer, Edge, and Office. Among the patched bugs are …
Shaun Nichols, 12 Jan 2016

Wikimedia Foundation bins community-elected trustee

The Wikimedia Foundation has ousted a community-elected board trustee, whose seat now lies empty. At the same time, it has also appointed two hand-picked trustees for two other vacant spots: a former Google executive with a controversial record and a Mountain View CFO. These are just two changes that were announced quietly over …
Andrew Orlowski, 12 Jan 2016

Exploit kits throw Flash bash party, invite Crypt0l0cker, spam bots

Criminals behind some of the most potent exploit kits, Neutrino and RIG, are ramping up attacks slinging the latest ransomware and hosing users who have not applied recent Adobe Flash patches. The patched vulnerabilities permit code execution and allow the dangerous hacking kits to compromise user machines. The two above- …
Darren Pauli, 11 Jan 2016
Lego builders, photo by Simone Mescolini, via Shutterstock

Microservices are not the same thing as components

Mention cloud, mention DevOps and it won’t be long before microservices enters the discussion. But what is, or are, microservices? The name implies something small – but what? Is it a part of a bigger thing or a piece of discrete functionality? And how are microservices different to application components? And why should we …

Bash, smash, trash Flash – earn $100k cash

Hackers can score US$100,000 from exploit arbitrage outfit Zerodium if they bypass Adobe's latest Flash heap isolation defence. Hackers will have to craft an exploit that escapes the sandbox to hit the jackpot, because that's more complex than a non-sandbox break which attracts a $65,000 reward. It comes less than a month …
Darren Pauli, 06 Jan 2016
woman binoculars photo via Shutterstock

Missed our Christmas crackers? Top stories from the break were...

Things might have slowed down for Christmas and New Year in your workplace but the news did not take a break. Whether you were away for the Christmas and New Year period or logged on but not exactly present, here are the biggest stories you may have missed from The Reg. The death of Debian GNU/Linux daddy Ian Murdock aged …
Gavin Clarke, 04 Jan 2016
Scary Skeleton Samba

Apple had more CVEs than any single MS product in 2015, but it doesn't really matter

A count of the number of CVEs (Common Vulnerabilities and Exposures) issued on different platforms in 2015 has concluded that Apple was the most-advisoried operating system of the year, leading to gloating headlines that OS X is the “most vulnerable” of the lot. According to CVE Details, Mac OS X (all versions) apparently had …

Patch now! Flash-exploitin' PC-hijackin' attack spotted in the wild by Huawei bods

Adobe has issued new versions of Flash to patch a load of security flaws – one of which is being exploited in the wild. Curiously, that particular vulnerability (CVE-2015-8651) was reported to the Photoshop giant by Kai Wang and Hunter Gao of Huawei's IT security department. Could the Chinese tech goliath have caught …
Chris Williams, 28 Dec 2015
Penguin with video photo via Shutterstock

Feeling abandoned by Adobe? Check out the video editing suites for penguins

When it comes to video editing, Windows and Mac rule the screen. Professional apps by the likes of Adobe, Avid and Apple only run in the Win/Mac world and Apple even throws in a pretty sophisticated video editor (iMovie) for free. No matter how much you love Linux and open source software, you're never going to get Adobe …
Broken CD with wrench

Security sweep firm links botnet infestation and file sharing

Updated There’s high degree of correlation between organisations with P2P activity and system compromises via malware infections, according to a new study by BitSight Technologies. Correlation is, of course, different from causation. However, the booby-trapping of Torrents to tricks freetards into sucking down on malicious code is a …
John Leyden, 21 Dec 2015

Facebook hammers another nail into Flash's coffin

Facebook has hammered another nail in to the coffin of Adobe Flash, by switching from the bug-ridden plug-in to HTML5 for all videos on the site. The Social NetworkTM explained the move by saying “Moving to HTML5 best enables us to continue to innovate quickly and at scale, given Facebook’s large size and complex needs.” …
Simon Sharwood, 21 Dec 2015

Firefox-on-Windows users, rejoice: Game of Thrones now in HTML5

Firefox has joined the Netflix community on Windows with the addition of HTML5 video extensions. The box set streaming giant’s HTML5 video player now works with Mozilla’s browser and digital-rights management software from Adobe to police content – Primetime CDM. It means you can stream Netflix to Firefox on a Windows PC …
Gavin Clarke, 18 Dec 2015
Sydney Harbour Bridge in the cloud

Adobe: We locked our customers in the cloud and out poured money

Reassuringly expensive software maker Adobe is laughing all the way to the bank after shunting more of its customers into the cloud - like they had any choice in the matter. The company closed off fiscal ’15 ended 27 November with Q4 revenue of $1.31bn, up 22 per cent year-on-year, driven by a 44 per cent hike in subscriptions …
Paul Kunert, 11 Dec 2015
shutterstock_222258445-roadblock

Predictable: How AV flaw hit Microsoft's Windows defences

Could it be that time spent by Microsoft on software security counts for naught? Possibly - based on the findings of an investigation by enSilo that found some of the best-known AV names are susceptible to new vulnerabilities. The results are alarming, suggesting an entire of ecosystem unwittingly opening a back door into …
John Leyden, 11 Dec 2015
Apple logo. Pic: Blake Patterson

Think you're all done patching? Not if you have any Apple gear

Apple has joined the likes of Microsoft and Adobe in releasing patches for dozens of security holes in its products. The Cupertino design studio has posted updates for nearly all of its product lines, fixing security holes in iOS, OS X, watchOS, tvOS, Safari, and Xcode. For OS X users, the update is packaged as El Capitan 10. …
Shaun Nichols, 09 Dec 2015

It's nearly 2016, and Windows DNS servers can be pwned remotely

Patch Tuesday Microsoft is closing out the year with a fix for 71 security vulnerabilities in Windows Server, client-side Windows, Office, Internet Explorer, and Edge. Among the patches are two vulnerabilities that are already being exploited in the wild for elevation of privilege and remote code execution. The December Patch Tuesday load …
Shaun Nichols, 08 Dec 2015

Kill Flash Now: 78 bugs patched in latest update

Adobe has released another update to address dozens of flaws in its Flash Player browser plug-in. The December update fixes 78 CVE-classified security vulnerabilities in Flash Player for OS X, Windows, Linux, and Android. The patch includes 75 separate vulnerabilities that could be exploited by an attacker to remotely execute …
Shaun Nichols, 08 Dec 2015

Dailymotion hit by malvertising attack as perpetrators ‘up their game'

Malicious adverts spreading malware managed to make their way onto popular French video streaming site Dailymotion. The infection involved a rogue ad and JavaScript that ultimately directs surfers to sites harbouring the Angler Exploit Kit (EK). The practical upshot was that Windows users running out-of-date software, such as …
John Leyden, 08 Dec 2015

Adobe's Flash tools now embrace HTML 5. Sadly Flash is still alive

Adobe’s long road to open standards has been freshly re-paved with an HTML5-friendly suite of tools. The firm recently announced Animate CC as its “premier” web animation tool for developing HTML5. In its previous incarnation, Animate CC had been called Flash Professional CC – being built for the firm’s once flagship, and …
Gavin Clarke, 07 Dec 2015

Russian "Pawn Storm" expands, rains hell on NATO, air-gapped PCs

One of the most prolific and capable Russian malware groups is using a rare module to infect USB sticks and hose air-gapped machines in defence industry organisations. The group, known as "Sofacy" or "Pawn Storm" has been ripping into air gap defence organisations since at least August, demonstrating its skills using zero day …
Darren Pauli, 07 Dec 2015
steve_jobs_index_648

Oh em gee – Adobe kills Flash Professional (it's called Animate now)

Adobe has released updates to its Creative Cloud application suite, including Photoshop, Illustrator, InDesign and Premiere Pro. Crucially, it has announced a change of direction for its Flash Professional design tool, which will be called Adobe Animate in the next version, due in early 2016. Ten years ago, Adobe's Flash plug …
Tim Anderson, 01 Dec 2015
EVerest_crevasse

Ice cold: How hard man of storage made Everest climb look easy

Feature It’s terrifyingly real, so true to life you are convinced the climbers are there, actually crossing the aluminium ladder bridge, poised above the terrifying drop of a Khumbu Glacier’s ice-fall crevasse in Everest’s Western Cwm. Yet the actors actually clambered across a ladder bridge poised above rubber matting in the UK’s …
Chris Mellor, 30 Nov 2015
The Fontdeck web font serivce is to close

A font farewell to Fontdeck as website service closes

Fontdeck, a service which provided fonts to websites, is to close. Fonts can no longer be purchased, and existing fonts will no longer be served after 1 December 2016. Fontdeck was founded in 2009 by Jon Tan and Richard Rutter, and was a joint venture between two design companies, the Brighton-based ClearLeft and OmniTi in the …
Tim Anderson, 24 Nov 2015

Dum dum dum - another cloud bites the dust (Adobe's photo cloud)

Adobe's announced it will close Revel, its Flickr-like cloudy photo storage service. The company's announced that the service will close its doors on February 23rd, 2016. Users are being herded towards encouraged to instead adopt Adobe's US$9.99/£8.57 a month Creative Cloud Photography offering. Adobe's telling Revel users …
Darren Pauli, 24 Nov 2015
Closeup of new US secret service security training 'ware. Credit: DHS

Who's running dozens of top-secret unpatched databases? The Dept of Homeland Security

The US Department of Homeland Security is running dozens of unpatched databases, some of which are rated "secret" and even "top secret," according to an audit. An inspection [PDF] of the department's IT infrastructure found huge security gaps, including the fact that 136 systems had expired "authorities to operate" – meaning …
Kieren McCarthy, 20 Nov 2015

VMware warns of info leaks flowing from Apache-Adobe mess

VMware has warned users of its vCenter, vCloud Director and Horizon products that they need to patch a flaw in Flex BlazeDS. The flaw, CVE-2015-3269, means Apache Flex BlazeDS “allows remote attackers to read arbitrary files via an AMF message containing an XML external entity declaration in conjunction with an entity …
Simon Sharwood, 19 Nov 2015