Cyber Risks · Krebs on Security

Adobe Update Plugs Flash Player Zero-Day

Summary: Adobe released a critical Flash Player update to version 22.0.0.192 for Windows and Mac that fixes three dozen security holes, including at least one vulnerability already being exploited in targeted attacks. Adobe also announced it will decommission direct download links on June 30, 2016, pushing users toward built-in automatic updates that can take days to notice a new security release.

What's compelling: A zero-day under active attack is patched only if users actually install the fix, and Adobe's move to remove direct download links leaves auto-update, which the article says can lag several days, as the main path for many machines.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related