News ArchiveJump To: 2012| 2011| 2010 | 2009 | 2008 | 2007 | 2006 | 2005 | 2004
|
June 26, 2012 - Xerox office printers not impacted by "gibberish" malware
The Trojan.Milicenso malware does not infect the Xerox print device; no actions or changes are needed. This malware can infect a computer if the user opens an e-mail attachment, visits a web site with the malware delivered there or downloads a file that appears to be audio or video codecs (encoders/decoders). This may result in data sent to printers and multi-function devices causing an output of multiple pages of unintelligible characters. Depending on the printer or multifunction device, if this malware prints using a specific paper tray, it may be possible to empty or disable that tray to stop paper waste.
Xerox recommends that users follow industry best practices and vendor recommendations to protect computer operating systems from malware and respond to infections.
February 27, 2012 - Xerox Print and MFD devices can have Software Upgrades restricted
Recent news such as National Cybersecurity and Communications Integration Center Bulletin 1-0012-NCCIC-130020120223 have detailed how uncontrolled software upgrades create security issues for Printers and Multi-Function Devices. A number of Xerox devices can have Software Upgrades restricted to the device Administrator.
| |
August 25, 2011 - Xerox has received more inquiries about “Scanned from a WorkCentre Pro” malware in e-mailed PDF files – Malware Alert
As a variant to the SPAM alert we posted last summer, customers are now receiving e-mails that appear to be notifications that an e-mail containing a PDF file could not be delivered. During last summer, files that had the file extension of .ZIP or .EXE were sent and those formats are not supported by Xerox devices. The danger is that now, the attachments are PDF files which are supported as a valid scan format from Xerox WorkCentre devices. The mail notes may look like a realistic “bounce” message from a Mail Transfer Agent. Being aware of which MTA you or your company uses could help in identifying fake notes.
Users are tempted to open the PDF file with the phrase, “Please open the attached document. It was scanned and sent to you using a XER0X Work Centre Pro.”
Xerox advises all users to only open scan to e-mail files that are sent from a reliable, identifiable, and verifiable source. The other key way to determine if this is a scam e-mail, versus real, is that the “From” field of the spam e-mail will mimic an actual user’s e-mail address, as opposed to a machine name e-mail (i.e. wcp245@xerox.com). These files could contain a number of Oficia Trojan variants or some of the more recent PDF malware code.
Customers with questions should contact their local Xerox sales representative, or call 1-800-ASK-XEROX.
July 21, 2011 - Need Solitary Confinement for your sensitive data? The WorkCentre 5665/5675/5687, WorkCentre 5735/5740/5745/5755/5765/5775/5790, WorkCentre 7425/7428/7435 and the WorkCentre 7525/7530/7535/7545/7556 now have a removable hard drive option. You can read about it in the
WorkCentre Removable Hard Drive Brochure.
June 30, 2011 - The Xerox Color 550/560 Printer receives Common Criteria Certification to EAL Level 3.
The Xerox Color 550/560 Printer devices have been evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408) to EAL Level 3.
May 6, 2011 - ColorQube 9301/9302/9303 MFPs launch with Solid Ink and Solid Security
Pick your protection to keep your documents safe. The Xerox Secure Access Unified ID System to use a swipe card for access, SSL, FIPS 140-2 Compliant Encryption, IP Sec, Secure Print, IP Filtering, 802.1X, Hard Disk Encryption, Image Overwrite and the ability to Enable/Disable USB ports are all there.
February 7, 2011 - ShmooCon To Spotlight Importance of Printer and MFP Security
Larry Kovnat – Xerox Product Security Manager
The seventh annual ShmooCon, a hacker convention in Washington, D.C. that promotes open discussion of information security, was held recently. Media was reporting in advance of the event that a big focus will be on the security of data flowing through your printers and MFPs. We’re glad this issue is continuing to get attention. For further information use the links below to the Real Business at Xerox Blog.
Real Business at Xerox Blog
Printer Industry Called to Action – CBS Follows Up on Copier Security Investigation
CBS Copier Security Investigation & What You Need to Know
January 25, 2011 - WorkCentre 5735/5740/5745/5755 and WorkCentre
5765/5775/5790 MFP devices receive Common
Criteria Certification to EAL Level 3
The WorkCentre 5735/5740/5745/5755/5765/5775/5790 MFP devices have been
evaluated and validated for conformance to the Common Criteria for IT
Security Evaluation (ISO Standard 15408) to EAL Level 3.
| |
December 14, 2010 - WorkCentre 4250/4260 MFP devices receive Common Criteria Certification to EAL Level 3
The WorkCentre 4250/4260 devices have been evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408) to EAL Level 3.
November 30, 2010 - Xerox Color 550/560 Printer enters Common Criteria Certification
The Xerox Color 550/560 Printer has entered Common Criteria Certification. It is to be certified to EAL Level 3.
November 30, 2010 - WorkCentre 5632/5638/5645/5655/5665/5675/5687 MFP devices receive Common Criteria Certification to EAL Level 3
The WorkCentre 5632/5638/5645/5655/5665/5675/5687 devices have been evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408) to EAL Level 3.
November 30, 2010 - WorkCentre 5135/5150 MFP devices receive Common Criteria Certification to EAL Level 3
The WorkCentre 5135/5150 devices have been evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408) to EAL Level 3.
October 5, 2010 - Security is Built In on New Xerox WorkCentre Multifunction Printers
The new WorkCentre 7545 and WorkCentre 7556 MFPs come equipped with security features including hard disk encryption, image overwrite to electronically "shred" data, fax isolation to prevent unauthorized access to data, and network authentication to restrict access to scan, e-mail, and fax features.
August 11, 2010 - Xerox WorkCentre 7120 achieves Common Criteria
Certification
The Xerox WorkCentre 7120 has been awarded Common Criteria
Certification at EAL Level 3. See our "Common Criteria Certified
Products" page for more information.
August 11, 2010 - Xerox Advises Securing Data In Printer Hard Drives
In this article on InformationWeek the Xerox Product Security Manager Larry Kovnat cautions customers to protect their data. Xerox has hosted webinars on the subject and in the article there is a video from Larry with information that will help.
July 20, 2010 - Xerox Alert: WorkCentre Pro Scan to Email Files – Spam Alert
In the past few days we’ve received numerous inquiries regarding suspicious looking e-mails with a subject of “Scan from a Xerox WorkCentre Pro” and containing a single .ZIP file attachment (a new variant contains an .EXE file) tagged with a number, assigned at random. The e-mail is mimicking a scan to e-mail file from a Xerox WorkCentre Pro. Opening the e-mail will reveal an executable file called Xerox_doc.exe, which is a variant of the Oficla Trojan. Depending on the type of antivirus software you have, it may be detected as one of the following: Spam-mailbot.m, W32/Oficla, TROJ_DLOADR.REF or TROJ_FAKEAV.SMZQ.
Xerox advises all users to only open scan to e-mail files that are sent from a reliable, identifiable source. Also, all scan to e-mail files from a Xerox WorkCentre Pro will be delivered as either a file with a tiff or PDF file attachment, NOT a ZIP or EXE file, which accompanies files sent through this spam mail. The other key way to determine if this is a scam e-mail, versus real, is that the “From” field of the spam e-mail will mimic an actual user’s e-mail address, as opposed to a machine name e-mail (i.e. wcp245@xerox.com.)
Customers with questions should contact their local Xerox sales representative, or call 1-800-ASK-XEROX.
June 1, 2010 - New York Times: Why Photocopiers Have Hard Drives
Larry Kovnat, a product security manager for Xerox, provides insights into photocopier security in this New York Times article.
June 1, 2010 - Three more Xerox products are in evaluation for Common Criteria Certification
Xerox has placed the WorkCentre 5735/5745/5755, the WorkCentre 5765/5775/5790, and the WorkCentre 7755/7765/7775 in evaluation for
Common Criteria Certification at EAL Level 3. See our "Common Criteria Certified Products" page for more information.
May 18, 2010 - Multi-function Printer (MFP) Security: What You Need to Know to Protect Your Data & Network
Customers are worried about the dangers of sensitive information being left behind on the disk drives of multifunction devices. Xerox has recognized this problem for over 10 years and has built effective security controls into our devices to address the issue. Office managers and IT support staff are learning they must play an active role in ensuring the security of data on their office equipment. This involves understanding how document technology being placed in the office interacts with a network as well as developing procedures to ensure information is protected where appropriate. The webinars and customer seminars will address topics such as: office Information that needs to be protected, relevant legislation, multi-function systems and data interaction, data encryption, data erase/overwrite, multi-function systems and independent certification, multi-function systems and good security practices, and safe disposal. Xerox is hosting a series of seminars in selected locations on these topics. Contact your local Xerox sales representatives for information on a seminar near you.
You may also read the blog entry submitted by Rick Dastin, President of the Xerox Global Products Delivery Group.
April 20, 2010 – Xerox 4112/4127 receives Common Criteria Certification at EAL Level 3
The Xerox 4112/4127 Copier/Printer was evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408).
February 28, 2010 – Security Featured in New WorkCentre 7700 Series
Xerox launched the new WorkCentre 7700 Series that includes the
following security features: full support for the IPv6 network security
standard, an Image Overwrite feature that shreds data stored on the hard
drive, a Secure Print feature that holds files in the print queue until
a PIN is entered to release the documents to print, and Network
Authentication that restricts access to scan, email, and network fax
features by validating user names and passwords prior to use.
| |
October 23, 2009 – ColorQube 9201/9202/9203 in Common Criteria Evaluation for EAL Level 3
Xerox has placed the ColorQube 9201/9202/9203 products in Common Criteria certification at EAL Level 3 to conform with the new Security Standards for Office Printing Products.
August 25, 2009 – Xerox Drives New Security Standards for Office Printing Products
Xerox has teamed with the IEEE to develop consistent security standards across the print industry. The ColorQube 9201/9202/9203 is being certified and expected to be the first product to achieve this certification.
August 20, 2009 – CSC Completes Tenth Successful IT Security Evaluation for Xerox
The evaluation, also known as ISO 15408, is an international standard for computer security certification. Xerox’s WorkCentre 5600 series multifunction printers (MFPs) were among the latest products to receive Common Criteria certification. The series includes seven MFPs, which have security features to protect confidential information as it is printed, copied, faxed or scanned.
July 22, 2009 – Xerox WorkCentre 7425/7428/7435 Receives Common Criteria Certification
The Xerox WorkCentre 7425/7428/7435 color multifunction device was evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408).
June 11, 2009 - Xerox WorkCentre 4150 Receives Common Criteria Certification
The Xerox WorkCentre 4150 multifunction printer was
evaluated and validated for conformance to the Common Criteria for IT
Security Evaluation (ISO Standard 15408).
May 7, 2009
Xerox launches the world’s first high-speed solid ink
multifunction printer, the ColorQube 9201/9202, which has an array of security
features including 802.1x, audit log, fax security, HTTPS (secure scan
and network server), hard disk encryption, IP filtering, IPSec, image
overwrite security, lock printing of received faxes, network
authentication, password protected device access, SNMPv3, secure print,
IPSec, and user authentication (optional Xerox Secure Access Unified ID
System).
| |
Dr. Peter Crean, Senior Fellow in the Xerox Innovation Group, discussed digital print advantages at the Annual Security Printing Conference.
December 12, 2008
Xerox is one of a number of organizations endorsing the CSSLP (Certified Secure Software Lifecycle Professional) certification from (ISC)2 that is designed to validate secure software development knowledge and best practices.
November 11, 2008
Xerox presented on Managing Security Through Services Process Leadership at the SSPA (Service & Support Professional Association) Conference.
October 21, 2008
Xerox WorkCentre 7328/7335/7345 Receives Common Criteria Certification
The Xerox WorkCentre 7328/7335/7345 color multifunction device was evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408).
January 25, 2008
|
|
Xerox Unveils Technology That Blocks Access to Sensitive Data in Documents to Prevent Security Leaks
Xerox and PARC have developed technologies that control access to sensitive information and make it possible to remove data for readers who don't have a "need to know."
October 15, 2007
Xerox Technology Tricks Counterfeiters; Personalized Information on Printed Page is Only Visible Under Infrared Light
An invention by Xerox scientists makes it possible to print variable text that is visible only under infrared light. Infrared printing is a low-cost way to secure or authenticate documents.
October 4, 2007
Xerox Strengthens Multifunction Systems to Support Department of Defense ID Initiative
Xerox is adding to the WorkCentre™ and WorkCentre Pro™ 200 Series a new card reader and software that supports the Department of Defense's Common Access Card (CAC) user-authentication system.
August 8, 2007
Xerox WorkCentre 7655/7665 Receives Common Criteria Certification
The Xerox WorkCentre 7655/7665 advanced multifunction device was evaluated and validated for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408).
July 11, 2007
Watch this ~8 minute video that is part of an IT Week Vendor Video Q&A series. Larry Kovnat, Xerox Product Security Manager, discusses Xerox device security, risk management, and device certification.
Watch this ~8 minute video that is part of an IT Week Vendor Video Q&A series. Larry Kovnat, Xerox Product Security Manager, discusses Xerox device security, risk management, and device certification.
July 8, 2007
Xerox Develops Fluorescent Writing to Deter Counterfeiting
A new Xerox technology can print fluorescent words and letters without fluorescent ink. Fluorescent stripes are an effective way to authenticate currency; now digital printers have an easy method of creating personalized fluorescent marks on documents.
May 30, 2007
Xerox Secure Access Unified ID System™
Xerox Secure Access Unified ID System integrates your Xerox multifunction systems with your existing employee/student ID badge solution to provide a flexible and convenient authentication system.
April 19, 2007
|
|
Xerox Makes It Easier to Customize Multifunction Products, Adds Security Features to Meet Customer Needs
Xerox Corporation is expanding the productivity and security of its office multifunction printers with a new software platform tailored to meet document management needs in areas such as legal, finance and healthcare.
October 17, 2006
Xerox Scientists Develop MicroText™ Font; Digitally Printing Tiny Words and Numbers Will Help Make Documents More Secure
Xerox Corporation scientists have developed a font so small that you need a magnifying glass to read the words. The new MicroText™ Specialty Imaging Font, just 1/100th of an inch high, is designed to help make valuable documents with personal information such as birth certificates, personal identification papers, and checks even harder to forge.
September 14, 2006
Xerox Multifunction Systems and Network Security: What You Should Know
Xerox is committed to helping customers maintain a secure network environment, particularly as it relates to the use of multifunction products, which print, copy, fax and scan. Since all Multifunction Products (MFPs) -- regardless of vendor -- contain hard drives and software, MFPs require the security precautions associated with other network peripherals.
August 18, 2006
Xerox Imaging and Repository Operations Earn ISO/IEC 27001 Accreditation for Security
Xerox Corporation has achieved ISO/IEC 27001 certification for its document imaging and hosted repository operations, resulting from the company's continuing efforts to secure the integrity of business-critical information for customers such as Enterprise Rent-A-Car and other major companies.
ISO/IEC 27001, a global industry standard created by the International Organization for Standardization and the International Electrotechnical Commission, validates service organizations that maintain a sound and secure information management system.
June 13, 2006
Xerox Offers Broadest Range of Office Printers, Copiers That Meet International Standard for Security
Xerox has earned the international standard in information security for 12 more of its mid- and high-speed office multifunction products. These systems join 18 other Xerox digital color and black-and-white office products, giving Xerox the broadest array of printers and copiers certified to meet customers’ strictest security requirements.
Unlike other document services vendors, Xerox has the entire multifunction system evaluated, rather than just a security kit or an individual security feature.
April 26, 2006
Xerox Launches Two New Versions of DocuShare Content Management Software
CPX and DocuShare 5.0, two new enterprise content management software products built on a single technology platform. Businesses can use one or both applications to handle their content and document management needs, such as financial record-keeping or disclosure-related government regulations.
March 20, 2006
InfoWorld Magazine Honors Xerox Docushare Software as a '2006 Technology of the Year'
DocuShare™ 4.0.1 software - a secure, Web-based enterprise content management system - has been named "Best Document Manager" in InfoWorld magazine's "2006 Technology of the Year Awards." DocuShare helps document-intensive organizations boost business efficiency and manage stringent requirements for regulatory compliance.
Jan. 30, 2006
|
|
Common Criteria Evaluation - Q&A (Sharp) (PDF, 235 KB)
Products from Xerox and Sharp have received Common Criteria Certification. What's the difference? Xerox certified the entire product. Read this backgrounder to understand the differences in approach to certification adopted by the two companies.
December 12, 2005
Common Criteria Evaluation - Q&A (Ricoh) (PDF, 273 KB)
Products from Xerox and Ricoh have received Common Criteria Certification. What's the difference? Xerox certified the entire product. Read this backgrounder to understand the differences in approach to certification adopted by the two companies.
December 12, 2005
Common Criteria Evaluation - Q&A (Canon Inc.) (PDF, 211 KB)
Products from Xerox and Canon Inc. have received Common Criteria Certification. What's the difference? Xerox certified the entire product. Read this backgrounder to understand the differences in approach to certification adopted by the two companies.
December 12, 2005
Xerox digital security solutions lock down mission-critical digital information to make sure it doesn’t fall into the wrong hands.
See the Security Features offered by the Xerox CopyCentre® C2128/C2636/C3545 and the Xerox WorkCentre® Pro C2128/C2636/C3545.
October 21, 2005
Xerox Office Systems Become Industry's First Color Devices to Earn Internationally Recognized Standard for Security
Xerox Corporation has earned the international standard in information security for six of its color copiers and advanced multifunction systems, making it the only document services company that can give offices both high-quality color documents and high-level security validated by independent experts.
Oct. 11, 2005
Xerox Collaborates with Creo and EFI To Equip Entry-level Xerox Color Systems for High-end Printing
Xerox FreeFlow DocuSP DXP250 Color Server offers an easy-to-use interface with advanced color management and security features...The Creo Spire CX250 supports imposition, secured remote scan options, production workflow tools, and variable data printing in all leading file formats...The EFI Fiery EXP250 provides a suite of color precision and control tools, variable-data print support, and advanced workflow and security features.
Sept. 09, 2005
Xerox Identified by Gartner as an Industry Leader
Independent Report Lists Xerox in Leaders Quadrant of Multifunction Products Magic Quadrant
According to Gartner, "Leaders" are vendors that are performing well today, have a clear vision of market direction and are actively building competencies to sustain their leadership position in the market. The evaluation criteria included global scale of service operations, scope of training and support offerings, availability of security features...
July 26, 2005
New Xerox Webcasts Help I-T Professionals Control Document Costs, Improve Productivity
Responding to the complex challenges facing IT professionals, Xerox Corporation is offering "IT XChange" - a series of free educational webcasts designed to provide practical solutions to specific IT and business problems, as well as Xerox and third-party perspective on trends in document management.
Upcoming webcasts will focus on document security, document management, digital workflow, content management, and how multifunction systems are changing the way people work in offices small to large.
June 20, 2005
Xerox Document Imaging and Hosting Centers Get Audit Boost to Better Assist Clients
Imaging Services Center in Hot Springs, Ark., and the Document Services Hosting and Repository Center in Rochester have successfully completed independent process control audits for SAS 70 (Statement on Auditing Standards No. 70) Type 1 designation.
"Given the critical nature of the business processes we've outsourced to Xerox, the SAS 70 audit gave us further comfort that our business was in the hands of professionals who take security and the safeguarding of information very seriously,"...
March 18, 2005
Six High-Speed Xerox Multifunction Systems and Copiers Earn Internationally Recognized Standard For Security
Xerox office systems are the highest-speed devices in the industry to receive Common Criteria Certification.
The Xerox CopyCentreTM C65, C75 and C90 digital copiers and WorkCentre® Pro 65, 75 and 90 advanced multifunction systems - operating at speeds of 65, 75 and 90 pages per minute - received the National Information Assurance Partnership’s Common Criteria Certification...
March 7, 2005
|
| |
RSS Feed: Get Xerox Security Bulletins
