A Month Without Adobe Flash Player
Summary: Krebs spent nearly a month running without Adobe Flash Player and found only two sites he needed it for: a home gym instructional video and a live-streamed legislative hearing. He notes Flash requires monthly patching, that Adobe shipped emergency fixes in February 2015 and twice the month prior, and that the Angler exploit kit bundled a Flash exploit just three days after Adobe fixed a flaw in April 2015.
What you should know: A popular exploit kit weaponized a Flash vulnerability three days after the patch shipped, so the window between Adobe's fix and active exploitation was measured in days, not weeks.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026