Adobe Patches Third Flash Player Vulnerability

KRSP - Occupy Flash

Adobe has release a patch for the third zero-day vulnerability discovered in its Flash Player browser plugin this week. Similar to the last two finding, the trifecta was courtesy of hackers who stole data from the Italian security firm Hacking Team.

The press Adobe has received as result of these zero-day exploits has brought even more attention to movements like Occupy Flash who have made it their goal “…to rid the world of the Flash Player plugin”.

If you have yet to update your users Flash Player plugin(s) we advise that you do so, and fast. Malicious actors have been running with this exploit like Usain Bolt in the 2012 Summer Olympics.

Share this post

Surveillance cameras on wall

Russia Accuses US of Widespread Apple iPhone Hacking

Russia’s Federal Security Service (FSB) claims to have discovered an elaborate American espionage operation that compromised thousands of iPhones using sophisticated surveillance software. Moscow-based Kaspersky Lab confirmed that several of its employees’ devices were compromised during the operation.

Abstract powerlines

Mandiant Unearths New Malware That Can Sabotage Power Grids

A new strain of malware, dubbed COSMICENERGY, has been discovered that is designed to penetrate and disrupt critical systems in industrial environments. The malware is capable of exploiting an industrial communication protocol called IEC-104 to issue commands to RTUs, which could potentially cause power disruption. There is no evidence that the malware has been used in attacks, but its discovery is a reminder of the threat posed by malicious software to critical infrastructure.