Flash Hack/Exploit: Update Chrome and Flash
 

Flash Hack/Exploit: Update Chrome and Flash (must be newer than version 18.0.0.194)

https://krebsonsecurity.com/2015/07/...lash-zero-day/
Critical Flash exploit emerges from Hacking Team breach
Major Adobe Flash security flaw discovered in Hacking Team leak | The Verge
Hacking Team Leak Includes Multiple Exploits
Hacking Team leak releases potent Flash 0day into the wild | Ars Technica
http://www.securityweek.com/surveill...rs-data-breach

Flash update with fix is 18.0.0.203:
http://www.securityweek.com/adobe-pa...layer-zero-day

Can install in Firefox this fix 18.0.0.203, but not yet explorer on win 8. Chrome got a flash itself so if you update to chrome 43.0.2357.132 m of today it got Flash 18.0.0.203 and all good. No solution yet for IE on win 8 as of writing (it updates from microsoft instead of from adobe servers and I checked right now, got old flash still).

The hack it is being used, added to exploit kids i.e. script kiddies tools anyone can download and use by clicking a button, so the media suggests to disable flash (and never use it again - like it happened to java plugin years before):
http://malware.dontneedcoffee.com/20...-xxxx-and.html
http://en.hackdig.com/07/25312.htm
http://www.theregister.co.uk/2015/07...w_in_the_wild/
http://www.computerworld.com/article...king-team.html


There are some political implications in story (governments hiring offensive hackers to inject malware into citizens pc and phones):

http://www.marietjeschaake.eu/2015/0...-eu-sanctions/

thanks for the valuable info

Thanks :thumbsup

I knew I disabled Flash for a reason on this browser :thumbsup

More here:
https://helpx.adobe.com/security/pro...apsb15-16.html

If you go with explorer to adobe get flash it links to old version still...

Seems also win 8 (IE10+) got an update from microsoft today:
https://support.microsoft.com/en-us/kb/3065823

But it requires an OPTIONAL update to be installed first, so should go in windows update, go show the optional ones, install them, and only after this, may update the flash thing?... I would have put all mandatory, no?

So what you have to do is to to windows update, show "optional updates", select them and install, it reboots. Then re run windows update and only then, will show 2 important updates, one of which is 3065823 which fixes flash.