Adobe Flash

(get it in RSS or Atom)

May Patch Tuesday critical for users of Internet Explorer and web-based services

Patch Tuesday

Microsoft has just released its monthly updates for May 2013. The zero-day IE flaw used on the Dept of Labor website was fixed, as well as an IE 10 hole used at PWN2OWN.

Critical fixes for Adobe Reader, Flash Player and ColdFusion also hit the streets today.

Microsoft fixes 9 flaws, Adobe 3 in April's Tuesday update

Patch Tuesday

As expected Microsoft released seven important and two critical fixes for Windows, Internet Explorer and other Microsoft products. Adobe followed suite releasing fixes for ColdFusion, Flash and Shockwave. Patch now!

Adobe tells Windows and Mac users to install critical security updates for Flash and AIR

Adobe tells Windows and Mac users to install critical security updates for Adobe Flash and Air

Computer users should be getting used to security updates for Adobe Flash by now - after all, this is the fourth in as many weeks.

Make sure your computers are protected as soon as possible.

PWN2OWN results Day Two - Adobe Reader and Flash owned, Java felled yet again

PWN2OWN 2013 finished off today.

A second scheduled attack on IE 10 didn't happen, so IE 10 didn't get owned again, but Flash and Reader fell once each, and Java was exploited for the fourth time in two days...

PWN2OWN results Day One - Java, Chrome, IE 10 and Firefox owned

Of the Big Four browsers, only Apple's Safari has so far survived the onslaught of the browser-breakers at PWN2OWN 2013.

Java fell three times today; Adobe's Flash and Reader meet their attackers tomorrow...

Apple bans outdated Adobe Flash plugins from Safari

apple-and-flash-250

Last week, Apple showed that it is getting more serious about security by getting strict about the version of Flash you're allowed to use in Safari.

Paul Ducklin explains the what and the why...

Monday review - the hot 22 stories of the week

dow-250

In case you missed anything, here's everything we wrote in the past seven days.

SSCC 103 - Mandiant report, iOS coders owned, Twitter accounts hacked, and more...

chet-chat-feat

Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?

Here's the latest Naked Security podcast, Sophos Security Chet Chat 103, discussing a range of recent and newsworthy topics from the world of computer security.

Microsoft and Adobe issue first Patch Tuesday of 2013

Patch Tuesday critical fixes for July 2012

The first Patch Tuesday of 2013 is here and there are plenty of important fixes to download including two critical Windows flaws and critical updates to Adobe Reader and Adobe Flash Player.

Patch Tuesday - even Android and Windows RT get a look in

Patch Tuesday

This month's Patch Tuesday includes bulletins from both Microsoft and Adobe, and covers a range of platforms and products.

There are updates in the mix for everything from Android to Windows RT, and from the Word Viewer to Exchange.

Fake Apple invoices lead to Blackhole exploit kit that drains your bank account

Fake Apple invoices lead to Black Hole that drains your bank account

A new round of spams proclaims you have been charged for a large purchase from Apple.

All links lead to webpages infected with the Blackhole exploit kit. Be cautious with your online shopping this holiday season.

Monday review - the hot 22 stories of the week

Monday review - the hot 22 stories of the week

Here you go. All the stories we wrote in the past seven days, in case you missed anything (or just want to read them again).

Blackhole exploit kit confusion. Custom builds or copycats?

Blackhole exploit kit confusion. Custom builds or copycats?

Are some of the different variants of Blackhole exploit kit that SophosLabs are seeing actually new versions of this popular Exploit kit? Or simply copycats created by other groups?

Monday review: the hot 20 stories of the week

Monday review: the hot 20 stories of the week

It's weekly roundup time - here's everything we published in the last seven days.

Critical Flash updates delivered early, be sure to update now

flash-logo

Adobe have released a critical update for Flash Player that fixes seven remote code execution vulnerabilities. Set phasers to patch!

Adobe fixes 25 critical security holes in its software

flash-logo

Adobe released an important update for its software on Monday, fixing 25 security holes. The updates affect Flash running on Windows, Apple Mac and Linux systems.

In addition, Adobe AIR users on Windows, Mac OS X, Android and iOS are also advised to install an update.

Monday review: the hot 26 stories of the week

Monday review: the hot 26 stories of the week

Here's a list of all the stories we've written in the last week, in case you missed any (or if you just want to read them again).

Microsoft warns of Flash vulnerability on IE 10 and Windows 8

Microsoft warns of Flash vulnerability on IE 10, Windows 8

They’re not even available yet, but Windows 8 and Internet Explorer 10 are already the subjects of a Microsoft Security Advisory concerning - you guessed it - Adobe Flash vulnerability.

Adobe Flash security update *is* coming to IE 10 (reportedly)

plugs_250

Exploit kits typically target plug-ins, using vulnerabilities within them to infect the machine. Disabling plug-ins by default is therefore a good thing as far as keeping your system secure. But it isn't always easy...

Patch Tuesday for September 2012 - All about Adobe

flash-250

Patch Tuesday for September 2012 is here and fortunately there isn't a lot to talk about. Microsoft released two fixes, while Adobe patched critical vulnerabilities in Flash and Photoshop CS6.