Current Activity
Current Activity provides timely information on security risks to
help you better protect your systems from malware campaigns and
mitigate against new software vulnerabilities.
Adobe Releases Security Update for Adobe Flash Player
added Wednesday, February 13, 2013 at 4:05 pm
Adobe has released a security update for Adobe Flash Player to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition or take control of the affected systems.
Adobe has released updates for the following versions:
- Adobe Flash Player 11.5.502.149 and earlier versions for Windows and Macintosh
- Adobe Flash player 11.2.202.262 and earlier versions for Linux
- Adobe Flash player 11.1.115.37 and earlier versions for Android 4.x devices
- Adobe Flash player 11.1.111.32 and earlier versions for Android 3.x devices
- Adobe AIR 3.5.0.1060 and earlier versions
- Adobe AIR 3.5.0.1060 SDK (including AIR for iOS) and earlier versions
US-CERT encourages users and administrators to review Adobe Security Bulletin APSB13-05 and apply any necessary updates to help mitigate the risk.
Adobe Releases Security Update for Adobe Shockwave Player
added Wednesday, February 13, 2013 at 12:18 pm
Adobe has released a security update for Adobe Shockwave Player to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.
Adobe has released updates for the following versions:
- Adobe Shockwave Player 11.6.8.638 and earlier versions for Windows and Macintosh
US-CERT encourages users and administrators to review Adobe Security Bulletin
APSB13-06 and apply any necessary updates to help mitigate the risk.
Microsoft Releases February 2013 Security Bulletin
added Thursday, February 7, 2013 at 04:12 pm | updated Tuesday, February 12, 2013 at 3:43 pm
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Server Software, Office, and .NET Framework as part of the Microsoft Security Bulletin summary for February 2013. These vulnerabilities could allow remote code execution, allow elevation of privilege, or cause a denial-of-service condition.
US-CERT encourages users and administrators to review the bulletin and follow best-practice security policies to determine which update should be applied.
Adobe Releases Security Advisory for Adobe Flash Player
added Friday, February 8, 2013 at 09:29 am
Adobe has released a security advisory for Adobe Flash Player to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition or take control of the affected system.
Adobe has released updates for the following versions:
- Adobe Flash Player 11.5.502.146 and earlier version for Windows and Macintosh
- Adobe Flash Player 11.2.202.261 and earlier versions for Linux
- Adobe Flash Player 11.1.115.36 and earlier versions for Android 4.x
- Adobe Flash Player 11.1.111.31 and earlier versions for Android 3.x and 2.x
US-CERT encourages users and administrators to review Adobe Security Bulletin APSB13-04 and apply any necessary updates to help mitigate the risk.
Apple Releases Security Update for OS X Server
added Tuesday, February 5, 2013 at 03:52 pm
Apple has released a security update for OS X Server v2.2.1 for OS X Mountain Lion v10.8 or later to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code.
US-CERT encourages users and administrators to review Apple Support Article HT5644 and follow best-practice security policies to determine if their organization is affected and the appropriate response.