Adobe: ‘Patch your Flash software immeditely’

[jos]

Less than a week ago, FireEye said the vulnerability enables hackers to remotely hijack the victim’s computer by using a specially created video file. Adobe has since released an urgent update to rectify the issue. It can be downloaded using the auto-update included with Flash.

 

According to reports, a Chinese hacking collective known as APT3 is already exploiting the vulnerability by sending phishing emails to companies in the engineering, telecommunication and aerospace industries.

 

“This group is one of the more sophisticated threat groups that FireEye Threat Intelligence tracks,” explained FireEye.

 

“After successfully exploiting a target host, this group will quickly dump credentials, move laterally to additional hosts and install custom backdoors.”

 

As well as the threat from APT3, the malware has also made its way into a popular exploit kit known as Magnitude. Exploit kits enable attackers to install malware without having to write their own exploits. The Guardian reports that this has already been used to install ransomware on victims’ computers.

 

Flash users should ensure that they have the latest version downloaded from the Adobe website in order to protect themselves from cyberattacks.

 

 

Source: http://www.itproportal.com/2015/06/30/adobe-urges-users-to-patch-flash/

[Tech_Dreamer]

[Nexxus]

I wish flash would just die already.

[Psykomantis00]

What's really awesome is that large companies cannot just update flash on the fly. Bugs like this can be real issues for companies. 

[qwertywarrior]

haven't updated windows 7 in years

i dont really care anymore

come at me bro

[dalekphalm]

What's really awesome is that large companies cannot just update flash on the fly. Bugs like this can be real issues for companies. 

Yep, I now have ~75 Public Internet Access PC's to update flash ASAP on because of this stupid friggin exploit - and that's not even counting all the Staff PC's that will need to be updated too. Flash is almost as bad as Java for security issues.

[Nexxus]

Yep, I now have ~75 Public Internet Access PC's to update flash ASAP on because of this stupid friggin exploit - and that's not even counting all the Staff PC's that will need to be updated too. Flash is almost as bad as Java for security issues.

ive pretty much come to the conclusion adobe is bad at everything assuming its not part of their CS/CC suite of software.

[Psykomantis00]

Yep, I now have ~75 Public Internet Access PC's to update flash ASAP on because of this stupid friggin exploit - and that's not even counting all the Staff PC's that will need to be updated too. Flash is almost as bad as Java for security issues.

 

I'm not even talking about that. You can push updates pretty easily. The real issue is that some programs are dependent on certain versions and an update like this would seriously cause problems. 

[dalekphalm]

I'm not even talking about that. You can push updates pretty easily. The real issue is that some programs are dependent on certain versions and an update like this would seriously cause problems. 

Quite true. Though we don't have any instances of that with Adobe Flash, we do have several pieces of software that require very old versions of Java, and do not work (or even install, in a few cases) with a newer version of Java installed.

[juretrn]

Quite true. Though we don't have any instances of that with Adobe Flash, we do have several pieces of software that require very old versions of Java, and do not work (or even install, in a few cases) with a newer version of Java installed.

I can't imagine the amount of whining you get from users after updates. 

[dalekphalm]

I can't imagine the amount of whining you get from users after updates. 

For most users, not that much actually.

 

For those that have software that needs older versions - well, they simply don't get updated. Not great for security, but what can you do? Some of these software packages are so old that the original vendor doesn't even exist anymore to provide updated versions or patches.

[Rekx]

[jos]

I tink google chrome comes with flashplayer inbuilt.. not sure

[dalekphalm]

I tink google chrome comes with flashplayer inbuilt.. not sure

 

 

It does, but it updates itself.

 

Yes, those who use Chrome will not have to update Flash. As long as they keep Chrome up-to-date anyway.

[DEDRICK]

At my work we have to use a Citrix Virtual Desktop, IE6 and a super out of date version of Java to run our WMS software

[Memphaestus]

And things like this are why I use ScriptBlock.  I don't enable any flash unless I actually want to see it.

[Dabombinable]

Lol, why can't flash just die? The amount of problems that have come from it are getting beyond a joke.

[captain cactus]

Fckin die already, Flash. Nobody like you.

 

Oh hi, HTML5, how're you doing? Nice to see you.

[Techhog]

haven't updated windows 7 in years

i dont really care anymore

come at me bro

Good ol' LTT quality posting.

[Master Disaster]

Until DRM is added to HTML5 flash & silverlight are not going anywhere. Video streaming sites require DRM for obvious reasons.

I don't understand why Adobe don't write an auto update utility where they can push updates as required.

Afaik EME (Encypted Media Extensions) is in the works, unfortunately it's being made with help from Adobe

Edit

Seems EME is already here but because Firefox is open source Mozilla won't add support for it, only IE, Safari & Chrome support it.

https://en.m.wikipedia.org/wiki/Encrypted_Media_Extensions

[thexzenon]

So how long 'til HTML5 replaces this piece of junk? Seriously now, people need to stop relying on flash.

[BuckGup]

Jos once again coming with those new articles

[euniqe]

Dont even have flash installed and this is the first time I have even thought about it since installing.

 

The reasons I uninstalled was an article on this forum about how vulnerable it is. 

 

http://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-6761/Adobe-Flash-Player.html

 

Yes, that's 473 vulnerabilities. 

[Dabombinable]

Dont even have flash installed and this is the first time I have even thought about it since installing.

 

The reasons I uninstalled was an article on this forum about how vulnerable it is. 

 

http://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-6761/Adobe-Flash-Player.html

 

Yes, that's 473 vulnerabilities. 

Well.....LTT needs to get a better method for uploading multiple images. And sites that still use Flash for buttons etc should switch to fully HTML 5.

[Kamina]

Flash is just a backdoor for trojans.