By now, I should be used to the fact that Adobe Patch Day falls on the same Tuesday as Microsoft Patch Day, and yet Adobe still seems to sneak a few by me. During the rigmarole of Microsoft Patch Day last Tuesday, Adobe released a security advisory describing an update that fixes a security flaw in the ColdFusion web application server. For those that don't know, ColdFusion, … [Read more...]
Unanticipated Flash Player Update Mends Two Critical Flaws
Summary: This vulnerability affects: Adobe Flash Player 11.1.102.62 and earlier, running on all platforms (including Android) How an attacker exploits it: By enticing users to visit a website containing malicious Flash content Impact: In the worst case, an attacker can execute code on the user's computer, potentially gaining control of it What to do: Download and install … [Read more...]