Adobe Comes Up With New Emergency Patch For Flash Player Flaw

Adobe next week will release an emergency patch for a serious vulnerability in Flash Player that asset is used by attackers to infect computers with malware. The newest vulnerability in the software this week was discovered during attacks in various ministries.

The attacks took place via e-mails containing a link. The link pointed to a website with an exploit that used the vulnerability in Flash Player in order to infect the computer of the target. Adobe has now confirmed that the latest version of Flash Player, version 19.0.0.207, which is indeed a critical vulnerability has been used in a limited number of targeted attacks.

During the week of October 19 will Adobe therefore with an emergency patch to come. The zero-day vulnerability was reported on the very day that Adobe released version 19.0.0.207, where 13 vulnerabilities were fixed. According to anti-malware company Malwarebytes Now is the time to seriously consider switching from Flash Player in the browser or to remove completely from the computer.

Zero-Day Vulnerability In Latest Flash Player Active Attacked

In the latest version of Adobe Flash Player that came out yesterday is a zero-day vulnerability for which no update is available and actively attacked. Reported that the Japanese anti-virus company Trend Micro. Several foreign ministries would be attacked by the leak.

Victims receive a spear phishing email containing a link to a website. This website loads an exploit of the Flash Player flaw uses to install malware on the computer. The emails have subjects like: "Suicide car bomb targets NATO troop convoy in Kabul," "Syrian troops make gains as Putin defends air strikes", "Israel launches airstrikes on targets in Gaza", "Russia warns of response to Reported US nuke buildup in Turkey, Europe "and" US military reports 75 US-trained rebels return Syria ". Visiting such a malicious page with a vulnerable Flash Player is enough to get infected. There is no further interaction is required.

According to Trend Micro, the group behind the attack is also responsible for an attack in which a zero-day vulnerability was used in Java. Also, the group behind attacks on NATO, the White House, the German parliament and foreign ministries sit. The message of the anti-virus company coincides with the Tuesday patch from Adobe. Yesterday released a new version of Adobe Flash Player that 13 vulnerabilities were patched. Yet even Flash Player 19.0.0.207, the latest version now vulnerable to the observed attacks. Adobe would be informed of the new leak, but he has not yet written warning.

Microsoft Patches Critical Holes In IE And Windows Media Player

During the June Patch Tuesday, Microsoft has eight updates released that fix 45 vulnerabilities in total, including critical vulnerabilities in Internet Explorer and Windows Media Player. Through these vulnerabilities, an attacker in the worst case, the underlying system can take over completely.

The update for IE fixes a total of 24 vulnerabilities. Just visiting a malicious or hacked page would have been sufficient to allow an attacker to execute arbitrary code on the computer. Microsoft expects that cyber criminals have developed exploits within 30 days that will use these vulnerabilities to infect computers with malware.

In the case of Windows Media Player , an attacker remote computer completely take if malicious content opens in the media player. The impact of a strike may be limited, depending on the rights which the user is logged in. Despite the severity of the leak is not Microsoft expects cyber criminals are using the short-term.

The other six security updates that Microsoft released as "Important" labeled and repair vulnerabilities in the Windows kernel, Exchange Server, Active Directory Federation Services, Windows Kernel-Mode Drivers, Common Controls and Microsoft Office. Through the leak an attacker could increase his rights or run arbitrary code. Unlike the leaks in IE and Media Player would be here more interaction from the user is required, making Microsoft the impact is not as criticism but as judges important. All updates via Windows Update to download.

BitTorrent Sync Resolves Wing Btsync Link

The creators of BitTorrent Sync, a program that allows users to set up their own private cloud, a patched vulnerability could allow an attacker through malicious attacks could btsync links users. The software contained a vulnerability that was created in the processing of btsync-links. By enticing a user to lure a malicious page or open a malicious file could allow an attacker to execute arbitrary code with the privileges of the logged in user.

The vulnerability was discovered by security researcher Andrea Micalizzi, who reported it to the Zero Day Initiative (ZDI). This rewards program from HP TippingPoint researchers pay for bug reports. HP then warned on November 6 last year, BitTorrent.Which version is the vulnerability is not reported present, except that an update has been released that fixes the problem, according to the advisory from ZDI.

BitTorrent Sync allows users to set up a personal cloud, which can be synchronized across multiple devices and platforms of the user files. Thus, it is possible, for example on a smart phone, laptop and desktop to synchronize files. Once one of the devices, a new file it will automatically appear on the other devices are synchronized, which the program uses P2P technology.