Adobe

Microsoft postpones Patch Tuesday

February 15, 2017

Patch Tuesday is the day when most system administrators sit down and perform critical patching of the systems under their control – or at least begin testing the …

Adobe quietly bundles data-collecting Chrome extension with latest Reader update

January 13, 2017

Chrome users who have installed the latest Adobe security updates have also been unknowingly saddled with a browser extension (“Adobe Acrobat”) that can collect some of their …

Post-pumpkin Patch Tuesday: What’s in store for November

November 3, 2016

There has been a lot of activity since October’s Patch Tuesday. During that short period of time, Oracle released its quarterly CPU, including an update for Java JRE; Adobe …

Google warns of actively exploited Windows zero-day

November 1, 2016

Google has disclosed to the public the existence of a Windows zero-day vulnerability (CVE-2016-7255) that is being actively exploited in the wild. According to Neel Mehta and …

Android apps based on Adobe AIR SDK send out unencrypted data

September 15, 2016

Developers using the Adobe AIR SDK should update to the latest version of the software development kit and rebuild the apps as soon as possible if they don’t want their …

Building a new open standard for cloud-based digital signatures

June 28, 2016

On July 1, 2016, a new European Union signature regulation (eIDAS) will go into effect, helping pave the way for global adoption of secure digital signatures. Aligned with …

Fix for actively exploited Flash Player 0day is out, patch ASAP!

June 16, 2016

Adobe has issued a patch for the Plash Player zero-day vulnerability (CVE-2016-4171) that is actively exploited by the ScarCruft APT group. The bug, discovered by Anton Ivanov …

Adobe patches Flash 0day exploited in attacks

May 13, 2016

The Adobe Flash Player update announced earlier this week is here, and it fixes more than just the zero-day flaw exploited in attacks in the wild. All in all, the latest …

Credential manager system used by Cisco, IBM, F5 has been breached

November 24, 2015

Pearson VUE, a provider of computer-based assessment testing for regulatory and certification boards, has announced that its Credential Manager system (PMC) has been …

Google helps Adobe improve Flash security

July 22, 2015

Adobe has been dealt a heavy blow after the Hacking Team data dump produced three Flash Player zero-day exploits and they begun being exploited in the wild.While Adobe was …

Old Adobe Flex SDK bug still threatens users of many high-profile sites

March 24, 2015

An old vulnerability affecting old releases of the Adobe Flex SDK compiler can be exploited to compromise user data of visitors to many popular sites, including three of most …

Adobe launches bug disclosure program, skimps on bounties

March 6, 2015

Adobe has launched its own web application vulnerability disclosure program. Set up through the bug bounty platform HackerOne, the program is limited to vulnerabilities …