Adobe confirms third zero-day Flash exploit
Adobe is taking heat after Trend Micro discovered a third unpatched zero-day vulnerability in Flash in as many weeks.
In a blog post, Trend Micro Global Threat Communications Manager Christopher Budd said the vulnerability puts all users of the current version of Adobe Flash at risk.
Researchers have discovered an attack that dates back to at least 14 January which involves compromised online advertisements. Initial analysis suggests that the exploit has been executed through the use of the Angler Exploit Kit.
A known compromised site has received 3294 hits, primarily from internet users in the US. The attack involves redirecting visitors to the popular online video site dailymotion.com to a series of sites that eventually leads to the exploit itself.
Adobe has confirmed the exploit and revealed that it is working on a patch to be released this week.
This marks the third unpatched zero-day exploit discovered in Flash since the company's most recent Patch Tuesday in January.
Trend Micro recommends that Australian customers wishing to mitigate the risk disable Flash until a patch is issued. Security tools including application control and deep discovery products can also help to ward off attacks.
Emergency onboarding: what to do before and after a data breach
Organisations that have an emergency onboarding plan are better positioned to have their business...
Savvy directors are demanding more points of proof when cyber incidents occur
Pre-agreement on what a post-incident forensics effort should produce — and testing it out...
Cyber-attack prevention is better than a cure
Corporate and political decision-makers need to invest in areas that do a better job of...
