Cyber Risks · Krebs on Security

Yet Another Emergency Flash Player Patch

Summary: For the second time in a week, Adobe issued an emergency Flash Player update, pushing version 16.0.0.296 to fix a critical flaw attackers were actively exploiting on Windows and Mac OS X. The prior out-of-band patch from the week before addressed a different zero-day, and Adobe said it was aware of the still-unfixed flaw at that time.

Key Takeaway: Adobe shipped two emergency Flash patches in a week for flaws already being exploited in the wild, and the first patch left a known zero-day open - a reminder that a patch release is not the same as a closed exposure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related