Windows 10: Second Flash Player zero-day exploit found in Hacking Team's data

Borg 386 · Jul 12, 2015

Even though they fixed an exploit last week, guess what we'll be patching, once again, this week? *Rolleyes

Second Flash Player zero-day exploit found in Hacking Team's data | PCWorld

:)

Taffy087 · Jul 12, 2015

W10 automatic silent updates after W10 upgrade.

KUDOS Project Zero

Google Finds 16 Bugs, 2 Zero-Days, in Windows Kernel Font Handling

KUDOS Aavanan

Massive Ransomware Attack Hits Millions of Microsoft Office 365 Users

I'll run Sandboxie and Shadow Defender, ......Insiders can run Microsoft fully patched.
Click to expand...

Most of the report is way over my 'pay grade' but this comment hit me between the eyes:

"A month after Google reported this issue to Microsoft, a hacker by the name of Phineas Fisher would breach the Hacking Team's servers and leak their entire database, including this zero-day exploit."

Have I read this right? Microsoft have a (presumably top secret highly specialist) team looking at hackers. But their server has been hacked by a hacker? And their reports have been made public?

quietman7 - MVP · Jul 12, 2015

adobe flash is an open door way for spyware,virus,ect..

It is not just Adobe...other popular software such as Java,
Windows Media Player, Web Browsers are vulnerable to exploits and should be kept updated.
There are serious security issues especially with older versions which can increase the risk of system infection. Infections spread by malware writers and attackers
exploiting unpatched

security holes or vulnerabilities in older versions. Software applications are a favored target of malware writers who continue to exploit coding and design vulnerabilities with increasing aggressiveness.

Related Resources:

Kaspersky Lab report:
Evaluating the threat level of software vulnerabilities

Flash has surpassed the no longer popular Java as the most exploited plugin

Microsoft: Unprecedented Wave of Java Exploitation

Java malware cross platform targets Windows, Mac, Linux, Android, Blackberry and IPhone

Guess which two pieces of unpatched software provide points of entry
for most security breaches

Time to Update Your Adobe Reader

Malware exploits Windows Media Player vulnerabilities

Borg 386 · Jul 13, 2015

Adobe has patched two zero-day vulnerabilities in Flash Player, which were released last week as part of the Hacking Team data breach.

In a brief security notice, the company confirmed Tuesday that it had patched the two critical-rated flaws, which could allow an attacker to take control of an affected computer.
Click to expand...

Earlier on Tuesday, Firefox browser maker Mozilla said it would block the Flash plugin until the flaw was fixed.

Meanwhile, angered by the release of the flaw, Facebook chief security officer Alex Stamos called for the plugin to be put out to pasture. In a series of tweets over the weekend, he called for a date to be set to sunset the browser plugin, following a series of high-profile hacks involving Flash software.
Click to expand...

Adobe fixes two Flash zero-day flaws found in Hacking Team cache | ZDNet

Windows 10: Second Flash Player zero-day exploit found in Hacking Team's data

Second Flash Player zero-day exploit found in Hacking Team's data

Second Flash Player zero-day exploit found in Hacking Team's data

Second Flash Player zero-day exploit found in Hacking Team's data

Second Flash Player zero-day exploit found in Hacking Team's data - Similar Threads - Second Flash Player

Windows 10 zero-day exploit code released online

Temporary micropatch available for zero-day Windows exploit

Cisco zero-day exploited in the wild to crash and reload devices

Adobe readies emergency patch for Flash zero-day bug exploited in the

Emergency Flash Player patch fixes zero-day critical flaw

Hackers are exploiting an unpatched Flash Player vulnerability

Java zero-day security flaw exploited in the wild

Shadow Brokers Release Zero Day Exploit Tools

New Flash Player Zero-Day in The Wild