Cyber Risks · Krebs on Security

Adobe, Microsoft Push Critical Security Fixes

Summary: Adobe and Microsoft each released security updates on August 12, 2014: Adobe patched Reader/Acrobat, Flash Player and AIR, while Microsoft issued nine updates addressing at least 37 holes in Windows and related software. Two of Microsoft's nine bundles carried its "critical" label, and a critical Internet Explorer update covered the bulk of the flaws, including one already being exploited by attackers and another already publicly disclosed.

What you should know: One of the Internet Explorer flaws was under active attack before the patch existed, and Adobe said attackers were already targeting the single bug fixed in its Reader and Acrobat update for Windows - so the gap between disclosure and deployment is the exposure window that matters here.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Related