Severity: High Summary: These vulnerabilities affect: Reader and Acrobat, Flash Player, and Illustrator (CS6) How an attacker exploits them: Multiple vectors of attack, including enticing your users to open malicious files or visit specially crafted web sites Impact: Various results; in the worst case, an attacker can gain complete control of your computer What to … [Read more...]
Adobe Patch Day: Flash and Reader Updates Fix Five Flaws
Severity: High Summary: These vulnerabilities affect: Flash Player, Reader XI, and Acrobat XI (and Adobe Air) How an attacker exploits them: Multiple vectors of attack, including enticing your users to open malicious files or visit specially crafted web sites Impact: Various results; in the worst case, an attacker can gain complete control of your computer What to … [Read more...]
WatchGuard Security Week in Review: Episode 49 – Expelled Hacker
Red October, Cisco WLAN Updates, and Expelled Hacker Welcome to another "on the road" edition of WatchGuard Security Week in Review, the video podcast dedicated to summarizing the biggest InfoSec stories each week. This week's episodes covers a Cisco wireless controller security update, Kaspersky's investigation into the Red October cyber-espionage campaign, and the … [Read more...]
WatchGuard Security Week in Review: Episode 48 – 0day Updates
0Day Updates, Oracle Patches, and Mobile Botnets Better late than never, right? This week's security video summary comes a tad late due to my travel schedule this week. It covers updates on the two latest zero day exploits, Oracle's critical patch update, and stories about a mobile phone botnet and US power plant breach. Click play below to watch the short episode, or check … [Read more...]
WatchGuard Security Week in Review: Episode 47 – Piles of Patches
Critical Java 0Day, Piles of Patches, and More Ready for a weekly dose of InfoSec? This episode has a strong "patch" theme, with many vendors releasing some big security updates this week. Besides the patches, I also cover a few new 0day exploits, including a serious Java one getting leveraged quite a bit in the wild, and a couple crazy sounding security-related news items. If … [Read more...]