Adobe warns users to update in wake of ‘critical vulnerability’

By Brad Jones Updated June 24, 2015

Adobe Flash Player is a piece of software that’s used by countless people every single day — and that makes it a clear-cut target for hackers. Yesterday, the company released a statement outlining an update released to counteract what it describes as a ‘critical vulnerability’.

Windows, Mac and Linux users who have Flash Player or related software installed on their computer are all thought to be at risk, although Adobe states that systems running Internet Explorer on Windows 7 and below and Firefox on Windows XP are thought to be the most likely to be affected.

The breach takes advantage of a vulnerability that Adobe is classifying as CVE-2015-3113. The company states that it is being ‘actively exploited’ at present, although the attacks are ‘limited’ in scope and have so far proven to be targeted rather than widespread.

It’s thought that hackers can use the CVE-2015-3113 vulnerability to take control of a user’s system for their own interests. It’s not yet clear what this is being used to accomplish, but anything from hijacking your webcam and microphone to installing a keylogger in an attempt to track personal information is very possible.

Adobe is encouraging all Windows and Mac users to upgrade to Adobe Flash Player 18.0.0.194, which has been released as a direct response to the issue, according to a report from 9to5Mac. Linux users should update the version 11.2.202.468.

Breaches like this can be very serious for users who are targeted, but typically following instructions from the developer and making sure you keep up with the latest software updates will ensure your system’s safety. For more information on how to make sure that you don’t fall victim to this vulnerability, check out Adobe’s Security Bulletin covering CVE-2015-3113.

Topics

Contributor

Brad is an English-born writer currently splitting his time between Edinburgh and Pennsylvania. You can find him on Twitter…

Computing

Adobe Firefly brings text-to-image AI to the masses, with artist ethics in mind

AI-generated imagery in Nvidia's press photo for AI Foundations.

Adobe Firefly was announced today by Adobe, as the company attempts to capitalize on the surge in interest in generative AI. The text-to-image model is only in beta, but will be coming first to Adobe Express, the company's simplest and most user-friendly application.

The set of tools will function a lot like many of the other popular text-to-image models, such as Stable Diffusion or Midjourney. The difference here, however, is that Firefly is built from the ground up by Adobe to be used within its creative applications. That means Firefly will be both highly accessible to beginners and include important ethical considerations for artists.

Computing

This critical macOS flaw may leave your Mac defenseless

A close-up of a MacBook illuminated under neon lights.

Apple’s macOS operating system has such a strong reputation for security that many people mistakenly believe Macs simply aren’t affected by malware. Well, Microsoft has served up a reminder that that’s not true, as the company has identified a serious vulnerability that affects one of macOS’s most important lines of defense.

According to Bleeping Computer, the bug was first reported by Jonathan Bar Or, Microsoft’s principal security researcher, who named the flaw Achilles. It is now tracked as CVE-2022-42821.

Computing

DuckDuckGo’s new browser could help keep Mac users safe on the web

DuckDuckGo is a privacy-first web browser.

DuckDuckGo is a relatively well-known alternative to the dominant Google search engine but it also makes a DuckDuckGo web browser for iPhone and Android phones that places your privacy and security first. Now the DuckDuckGo browser is available for your Mac computer as a public beta.

The top feature of DuckDuckGo's browser has always been a convenient Fire button in the upper right corner of every window that burns up browser history, cookies, web caches, and visited URLs keeping your privacy safe with a single click, even on a shared computer. Many more features than that have been added. Duck Player is included and prevents YouTube from using ad tracking, cookies, and recommended videos. DuckDuckGo email is similar to Apple's Hide My Email, providing an @duck.com address that redirects to your actual account and which can easily be switched off if overrun with spam.