If you're worried about spear phishing attacks (and if you're not, you should be), grab Microsoft's emergency FixIt to mitigate a zero day vulnerability attackers are exploiting in the wild. In a security advisory released yesterday, Microsoft warned of a zero day vulnerability in Word, which attackers are exploiting in what Microsoft describes as limited, targeted attacks. … [Read more...]

Let's start with the short version. Yesterday, both Microsoft and Adobe released out-of-cycle updates to fix zero day security vulnerabilities that advanced attackers are exploiting in the wild via "watering hole" campaigns. If you use these products and haven't installed the updates, go get the Flash and Internet Explorer (IE) fixes now! The slightly longer story is early … [Read more...]