Cyber Risks · Krebs on Security

Flash Update Plugs 18 Security Holes

Summary: Adobe released a Flash Player update on Thursday that fixes at least 18 security vulnerabilities, including one being exploited in targeted attacks, bringing the latest version to 10.1.102.64. The update is available for Windows, Macintosh, Linux, and Solaris, and Internet Explorer users must apply it twice to cover both the ActiveX plugin and other browsers.

Why it matters: One of the 18 holes is already being exploited in targeted attacks, and the update path itself carries risk: default settings may bundle a toolbar or antivirus scanner, and users who skip the ActiveX update because they don't use IE remain exposed through other Windows applications such as MS Office.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related