Cyber Risks · Krebs on Security

Adobe To Fix Another Hacking Team Zero-Day

Summary: Adobe said it plans to patch a second Flash Player zero-day the week of July 13, 2015, a flaw reported after hackers posted hundreds of gigabytes of data stolen from Hacking Team, the Italian surveillance vendor. Adobe said the flaw affects the latest Flash versions on Windows, Mac and Linux and that exploit code is already online, one week after it patched a different Flash vulnerability exposed in the same breach.

Key Takeaway: The prior Flash fix landed only after attack code had already been folded into the Angler and Nuclear exploit kits, and this new flaw's exploit code is already public - meaning the window between disclosure and drive-by attacks on booby-trapped sites is measured in days.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related