Critical Vulnerabilities In Adobe Flash Player Poem

There is a new version of Adobe Flash Player that appeared in a total of 17 vulnerabilities were fixed, allowing an attacker in the worst case, the computer could take over completely. Through 16 of the leak, it was possible for an attacker to execute arbitrary code on the computer.

An example is to install malware. Only was visiting a hacked or malicious website is adequately, or viewing an infected ad.The remaining vulnerability allowed an attacker to bypass the security of Flash Player, which made it possible to attribute any data to the file system with the rights of the logged in user.

A researcher named Bilou discovered 11 of the 17 vulnerabilities and sold to HP's Zero Day Initiative, which then briefed Adobe. Users are advised to update within 72 hours to Flash Player version 19.0.0.245. This can be done via the automatic update feature or Adobe.com. In the case of Google Chrome, Internet Explorer 10 and 11 on Windows 8 and 8.1 and Internet Explorer 11 on Windows 10 and Microsoft Edge Embedded Flash Player will be updated via the browser. Through this page Adobe can check which version is installed on the system.

Update Windows 7 And 8.1, Allows Microsoft To Collect Additional Data

Microsoft is again under fire for collecting data from Windows users. Last week, the software giant has published several non-security related updates that add the "telemetry tracking service." Through this service, which also exists in Windows 10, additional system information is sent to Microsoft, reports gHacks.

It's about KB3068708, KB3022345, KB3075249 and KB3080149. The last two updates are optional but KB3068708 is a recommended update. By default Windows install this update whatsoever. Sending the data seems to only happen when users on Microsoft's Customer Experience Improvement Program (CEIP) join in, so let Ars Technica know. However, this is done by default during the installation of Microsoft Office.

What data is accurately collected and sent to Microsoft is unclear. If CEIP is disabled, there appears little data to go to Microsoft's servers. Disabling CEIP requires different actions. Critics say Microsoft should make it easier for users to opt out of this type of data collection programs and clarifies what information is collected.

Emergency Patch For Active Attacked Flash Player Flaw

Adobe has a vulnerability in Flash Player that is actively used to infect computers with malware repaired via an emergency patch. According to the company involves limited, targeted attacks, where IE users on Windows 7 and older and Firefox users on Windows XP are targeted.

Through the leak, which was reported by the US security firm FireEye Adobe, an attacker can execute arbitrary code on the computer. Visiting a malicious or hacked website or see getting an infected ad is sufficient. System administrators and users are strongly advised to within 72 hours to update to Flash Player 18.0.0.194 to install.

Updating via the built-in updater and Adobe.com . In the case of Google Chrome and IE10 and IE11 on Windows 8 and Windows 8.1, the embedded Flash Player will be updated via the browser. This page shows which version is installed on the computer.

Microsoft Allows Users To Download Windows 7 ISO

Microsoft has launched a new website where users with a valid license can download a full version of Windows 7, for example, if they have no CD or want to install the operating system from a USB stick.However, this is only the "retail versions" of Windows 7.

These are versions which are sold in retail stores, among other things. Computers that are supplied as standard with Windows 7 use in most cases, an OEM version and who can not use the " Microsoft Software Recovery download "website. To download users must first give up their license the ISO file, after which the language as well as a 32-bit or 64-bit version can be selected. The ISO is then burn to a CD, but there is also a special Microsoft tool to convert the ISO to a USB stick.

Microsoft points to the site to another page where users ISO files from Windows 8.1 can download without specifying the license key. The difference is that windows 7 without a license key can be installed, after which the operating system 30 days is to be used fully. Windows 8.1, however, install only with a valid license.

Windows 10 Free For Users Of Windows 7 And 8.1

Windows 10, Microsoft will make available free of charge for users of Windows 7, Windows 8.1 and Windows Phone 8.1, so the software giant has tonight during a special event let you know. The upgrade to the operating system a year after launch free download. According to Microsoft, this involves more than a "one-time upgrade." Once a machine has been upgraded to Windows 10, Microsoft will continue to support operating system on the machine free of charge for the lifetime of the device.

Windows 10 will release the software giant new features sooner rather that it will wait for a new version of Windows. "We consider it as a Windows Service," said Microsoft's Terry Myerson. Therefore it would soon no longer make use of the device Windows, which would be good news for developers. Companies and business users, however, will have a choice whether they want to receive these consumer-oriented updates or important business rather shielding systems so that only receive critical patches and security updates.

One of the new additions to Windows 10 is an entirely new browser called "Project Spartan". The browser is specially designed for Windows 10 and should provide better interoperability, reliability and traceability. This would include reading articles should be improved and the voice assistant Cortana will be integrated into the browser, so users can find and do things faster. According to Microsoft's Jim alkove Spartan will be safer than ever.

Microsoft also showed tonight that already 1.7 million people in the pilot program of Windows 10 to participate and the software giant has already received 800,000 comments on the operating system. In addition, Windows 7 users were advised to install Internet Explorer 11 already, so they simply can upgrade to Windows 10 as the operating system is available.

Warning of new vulnerability in Internet Explorer

There is a new and critical vulnerability in Internet Explorer discovers that actively used to infect computers with malware and cyber criminals which no update is available from Microsoft. The vulnerability affects Internet Explorer 6 to Internet Explorer 11.

The attacks that were observed, however, were directed against IE9, IE10 and IE11. According to the U.S. security firm FireEye is the exploit of the vulnerability abuse by an APT (advanced persistent threat) group "used in the past more zero-day vulnerabilities used, including Firefox and Adobe Flash Player.

"We think this is an important zero-day, because the vulnerable versions about a quarter of the browser market decide," said analyst Chen Xiaobo. The exploits that attackers use uses a technique known through Adobe Flash Player, the Windows security bypasses to attack the unknown. Leak in IE

Solution

Microsoft vulnerability has also been confirmed and suggests that it is deployed. in targeted attacks only on a limited scalePending a security IE users to take various measures to protect themselves. Enabling the Enhanced Protected Mode in IE10 and IE11 can prevent the attack. IE users on Windows 7 itself should enable this option. Windows 8 Enhanced Protected Mode is enabled only in the "Metro" version of IE. If the desktop version of the browser on Windows 8 should still enable the measure itself used.

Since the exploit Adobe Flash Player as a springboard to attack the causes browserlek to disable the Flash Player plug-in in Internet Explorer ensure that the attack does not work anymore. Finally IE users can protect themselves by installing the Enhanced Mitigation Experience Toolkit (EMET) version 4.1 or 5.0 Tech Preview .