Adobe
Systems reported Jan. 12 that it has uncovered a "coordinated attack
against corporate network systems managed by Adobe and other companies."
Adobe
became aware of the attack Jan. 2, according to a post by Adobe employee Pooja
Prasad on a company blog. Other companies were affected by the attack as well,
and Adobe is in communication with them as the investigation
continues.
"At
this time, we have no evidence to indicate that any sensitive information—including
customer, financial, employee or any other sensitive data—has been
compromised," Prasad wrote. "We anticipate [that] the full
investigation will take quite some time to complete. We have and will continue
to use information gained from this attack to make infrastructure improvements
to enhance security for Adobe, our customers and our partners."
The
announcement came the same day Google
announced it had uncovered a cyber-attack targeting not only its
infrastructure but also 20 other companies as well. It is not clear
whether the incidents are related.
As
part of January's Patch Tuesday, Microsoft
warned Windows XP users to be wary of vulnerabilities affecting Adobe Flash
Player 6, which shipped with XP. The most current version of Flash is 10, and
users are urged to update.
Adobe,
which in the past 12 months has sought to more aggressively address
security vulnerabilities in its software, also released patches Jan. 12 for
critical vulnerabilities in Adobe Reader and Acrobat. Information about the
update can
be found here.