Apple Pushes Fix for 11 Java Bugs in OS X

Apple has released a patch for a number of critical flaws in its Java implementation in Mac OS X, and users are being encouraged to update their machines as soon as possible. The most serious of the 11 vulnerabilities fixed in the Java update can allow an attacker to bypass the sandbox and run...

Anup Ghosh on Targeted Attacks and the Need for Security Innovation

Dennis Fisher talks with Anup Ghosh of Invincea about the current wave of targeted attacks against high-profile companies such as RSA, the IMF and Citigroup and how the lack of innovation on the defensive side of the fence has made life easier for the attackers. Podcast audio courtesy of sykboy65...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

FreeBSD : linux-flashplugin -- remote code execution vulnerability (55a528e8-9787-11e0-b24a-001b2134ef46)

Adobe Product Security Incident Response Team reports : A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption...

flash-player: Update to 10.3.181.26 (critical)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

Adobe Patches Critical Bugs in Flash, Reader, Acrobat

Adobe has released a number of patches for critical vulnerabilities in several of its more popular applications, including Flash, Reader and Acrobat. The most severe of the vulnerabilities that Adobe fixed Tuesday is a flaw in Flash that is being used in targeted attacks right now through...

FreeBSD : linux-flashplugin -- XSS vulnerability (57573136-920e-11e0-bdc9-001b2134ef46)

Adobe Product Security Incident Response Team reports : An important vulnerability has been identified in Adobe Flash Player 10.3.181.16 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.22 and earlier versions for Android. This universal cross-site...

Adobe Ships Emergency Fix for Flash Bug

Adobe has released an out-of-cycle update for Flash that fixes a serious vulnerability in the application on all platforms. The bug is a cross-site scripting flaw that can be used in drive-by download attacks and Adobe said that is being used in some targeted attacks right now. Adobe security...

DHS Cybersecurity Chief Reitinger Stepping Down

Philip Reitinger, the top information security official at the Department of Homeland Security, is going to step down from his post at the beginning of June, just a couple of weeks after the Obama administration laid out the details of its latest strategy to improve the country’s online defenses...

linux-flashplugin -- cross-site scripting vulnerability

Adobe Product Security Incident Response Team reports: An important vulnerability has been identified in Adobe Flash Player 10.3.181.16 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.22 and earlier versions for Android. This universal cross-site...

German software developer Ashampoo Hit by Data Breach !

German software developer Ashampoo Hit by Data Breach ! German software developer Ashampoo has notified its customers about a data breach incident that resulted in the exposure of their names and email addresses. According to an announcement posted on the company's website, unidentified hackers...

Emergency Adobe Flash Player patch coming today !

Emergency Adobe Flash Player patch coming today ! Less than a week after warning that hackers were embedding malicious Flash Player files .swf into Microsoft Word documents to launch targeted malware attacks, Adobe plans to release an emergency Flash Player patch today to fix the underlying...

Adobe to Patch Flash Zero Day on Windows, Mac on Friday

Adobe is planning to patch the recently disclosed Flash Player vulnerability on Friday for users on Windows, Mac OS X and Linux. The vulnerability is being used in targeted attacks right now that use malicious Word documents. Adobe said on Wednesday night that it plans to push out the Flash Playe...

Adobe Flash Bug Being Used in Attacks Via Word Documents

Adobe on Monday warned its customers about a new unpatched vulnerability in its Flash Player application. Officials say that the bug is being used in targeted attacks involving a malicious Flash file embedded in a Microsoft Word document. The Flash vulnerability affects users on Windows, Apple OS...

Adobe Releases Security Advisory for Flash Player, Reader, and Acrobat

Adobe has released a security update for Adobe Flash Player to address the vulnerability previously referenced in Adobe Security Advisory APSA11-02. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Adobe has indicated that...

Expert: Three Quarters of Employees Duped by Phishing Scams

In the wake of the data breach at e-mail marketing firm Epsilon, the specter looms of widespread phishing attacks on hundreds of millions of e-mail users whose information was stolen from the firm. But according to Aaron Higbee, the Chief Technology Officer at Intrepidus Group, organizations had...

FreeBSD : linux-flashplugin -- remote code execution vulnerability (501ee07a-5640-11e0-985a-001b2134ef46)

Adobe Product Security Incident Response Team reports : A critical vulnerability exists in Adobe Flash Player 10.2.152.33 and earlier versions Adobe Flash Player 10.2.154.18 and earlier for Chrome users for Windows, Macintosh, Linux and Solaris operating systems, Adobe Flash Player 10.1.106.16 an...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4190)

The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue : - This vulnerability CVE-2011-0609 could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the...

RSA Warns Customers Of Targeted Attacks In Wake of Hack

RSA, the security division of EMC Corp. has warned customers to be on the lookout for targeted attacks, including suspicious messages and links sent over social media networks in the wake of a sophisticated attack that spilled confidential information about the workings of the company’s SecurID...

Google Fixes Flash Bug in Chrome as Researchers Track Targeted Attacks

Google has reacted very quickly to the news this week of a new vulnerability in Adobe Flash and on Tuesday released a new version of Chrome that includes a fix for the Flash bug. Adobe said it plans to have its own fix ready for the flaw next week. The new version of Chrome that Google released h...