Flash Hack/Exploit: Update Chrome and Flash (must be newer than version 18.0.0.194)
https://krebsonsecurity.com/2015/07/...lash-zero-day/
Critical Flash exploit emerges from Hacking Team breach
Major Adobe Flash security flaw discovered in Hacking Team leak | The Verge
Hacking Team Leak Includes Multiple Exploits
Hacking Team leak releases potent Flash 0day into the wild | Ars Technica
http://www.securityweek.com/surveill...rs-data-breach
Flash update with fix is 18.0.0.203:
http://www.securityweek.com/adobe-pa...layer-zero-day
Can install in Firefox this fix 18.0.0.203, but not yet explorer on win 8. Chrome got a flash itself so if you update to chrome 43.0.2357.132 m of today it got Flash 18.0.0.203 and all good. No solution yet for IE on win 8 as of writing (it updates from microsoft instead of from adobe servers and I checked right now, got old flash still).
The hack it is being used, added to exploit kids i.e. script kiddies tools anyone can download and use by clicking a button, so the media suggests to disable flash (and never use it again - like it happened to java plugin years before):
http://malware.dontneedcoffee.com/20...-xxxx-and.html
http://en.hackdig.com/07/25312.htm
http://www.theregister.co.uk/2015/07...w_in_the_wild/
http://www.computerworld.com/article...king-team.html
There are some political implications in story (governments hiring offensive hackers to inject malware into citizens pc and phones):
http://www.marietjeschaake.eu/2015/0...-eu-sanctions/
https://krebsonsecurity.com/2015/07/...lash-zero-day/
Critical Flash exploit emerges from Hacking Team breach
Major Adobe Flash security flaw discovered in Hacking Team leak | The Verge
Hacking Team Leak Includes Multiple Exploits
Hacking Team leak releases potent Flash 0day into the wild | Ars Technica
http://www.securityweek.com/surveill...rs-data-breach
Flash update with fix is 18.0.0.203:
http://www.securityweek.com/adobe-pa...layer-zero-day
Can install in Firefox this fix 18.0.0.203, but not yet explorer on win 8. Chrome got a flash itself so if you update to chrome 43.0.2357.132 m of today it got Flash 18.0.0.203 and all good. No solution yet for IE on win 8 as of writing (it updates from microsoft instead of from adobe servers and I checked right now, got old flash still).
The hack it is being used, added to exploit kids i.e. script kiddies tools anyone can download and use by clicking a button, so the media suggests to disable flash (and never use it again - like it happened to java plugin years before):
http://malware.dontneedcoffee.com/20...-xxxx-and.html
http://en.hackdig.com/07/25312.htm
http://www.theregister.co.uk/2015/07...w_in_the_wild/
http://www.computerworld.com/article...king-team.html
There are some political implications in story (governments hiring offensive hackers to inject malware into citizens pc and phones):
http://www.marietjeschaake.eu/2015/0...-eu-sanctions/
Comment