CVE-2018-5002 – Adobe Flash Player Stack Buffer Overflow Vulnerability Alert!

The recent zero-day vulnerability CVE-2018-5002 in Adobe Flash Player enables attackers to perform a Remote Code Execution on targeted machines. Adobe has released a security advisory APSB18-19 on June 7, 2018 to address this issue. According to Adobe, the in-wild exploit is being used in limited, targeted attacks and it impacts limited Windows users. Vulnerable […]

CVE-2018-4878 – Adobe Flash Player use after free (Zero Day) vulnerability Alert!

The recent zero-day vulnerability CVE-2018-4878 in Adobe Flash Player enables attackers to perform a Remote Code Execution on targeted machines. Adobe has released a security advisory APSA18-01 on February 2, 2018 to address this issue. According to Adobe, the in-wild attack is targeted and it impacts limited Windows users. Vulnerable versions Adobe Flash Player 28.0.0.137 […]

Potentially Unwanted Applications (PUAs) in Disguise of Software Updates

It has been observed that cyber criminals are using genuine names to enter into their targeted victim’s system. They are doing this by displaying random pop-up ads on Internet Explorer, Firefox, or Google Chrome that prompts the user to update Adobe Flash Player, Java, media players, etc. These pop-up ads are not from the developers […]

This Week’s Latest IT Security News and Updates

Beware of Emails Containing Free FIFA Tickets Malware artists sure are opportunistic. News are up that they are using the FIFA bait to lure their victims. Reportedly, users are receiving emails notifying them that they have won free tickets to 20th FIFA World Cup. The emails contain links to a website where users can avail […]

This Week’s Bytes of the Latest IT Security News and Updates

Adobe Hacked – Data of 2.9 million Customers Compromised! Adobe has announced in its blog of a major security breach that compromised the data of 2.9 million of its customers. According to the company’s chief security officer, the hacked data mainly included customer IDs, encrypted passwords, encrypted credit and debit numbers and their expiration dates. […]

Security update available for Adobe Flash Player

These updates address critical vulnerabilities in Adobe Flash Player 11.1.102.62 and earlier versions for Windows, Macintosh, Linux and Solaris, Adobe Flash Player 11.1.115.6 and earlier versions for Android 4.x and Adobe Flash Player 11.1.111.6 and earlier versions for Android 3.x and 2.x. These vulnerabilities could cause a crash and potentially allow an attacker to take […]

Security updates available for Adobe Reader and Acrobat

A critical vulnerability has been identified in Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh and in Adobe Acrobat X (10.1.1) and earlier versions for Windows and Macintosh. These vulnerabilities could cause the application to crash and potentially allow an attacker to gain control of the affected system. These updates include fixes […]

Security Advisory for Adobe Reader and Acrobat!

A critical vulnerability has been identified in Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh, Adobe Reader 9.4.6 and earlier 9.x versions for UNIX and Adobe Acrobat X (10.1.1) and earlier versions for Windows and Macintosh. This vulnerability (CVE-2011-2462) could cause a crash and potentially allow an attacker to take control of […]

Fake emails – Adobe Critical Upgrade

A new fake email which pretends to be from Adobe is in the wild and spreading on the Internet. The email has an attachment which contains an executable file having PDF icon. If the user gets convinced by this email and executes the file the computer gets infected. The sample I came across installs a […]

Surfing the Internet the secure way with browser sandbox

PC’s today are mostly victims of infections caused by visiting infected websites that drop malware codes. Even though we have website reputation checks implemented by all anti-malware software, there is always a slight chance that the user may visit a newly infected website that has not yet been classified as ‘infected’ in the reputation database. […]

  • 1
  • 2