Nieuw beveiligingsprobleem Java wordt mogelijk al misbruikt.

Adobe heeft een tussentijdse patch uitgebracht voor zijn Flash Player-software, vanwege twee beveiligingsproblemen die in de software waren ontdekt. De bugs werden in het wild misbruikt, en daarom is de patch vijf dagen eerder dan gepland naar buiten gebracht.

Maar nog beter is natuurlijk om helemaal geen Flash of Java te gebruiken...

Adobe issues emergency Flash update for attacks on Windows, Mac users
Company also issues patches for users of Linux and Android.

Adobe Systems has released a patch for two Flash player vulnerabilities that are being actively exploited online to surreptitiously install malware, one in attacks that target users of Apple's Macintosh platform.

While Flash versions for OS X and Windows are the only ones reported to be under attack, Thursday's unscheduled release is available for Linux and Android devices as well. Users of all affected operating systems should install the update as soon as possible.

@ Pieterr: Het is vast waar dat er mensen zijn die die 'vervelende updates' niet uitvoeren. Maar daar kan ik me niet om bekommeren, dat is tenslotte hun eigen keuze...

Lijkt me essentieel dus.

http://www.adobe.com/software/flash/about/

Momenteel staat de teller op: 11.6.602.167

http://www.macworld.com/article/2028740/apple-confirms-cyber-attack-will-release-security-tool.html

Apple has identified malware which infected a limited number of Mac systems through a vulnerability in the Java plug-in for browsers. The malware was employed in an attack against Apple and other companies, and was spread through a website for software developers. We identified a small number of systems within Apple that were infected and isolated them from our network. There is no evidence that any data left Apple. We are working closely with law enforcement to find the source of the malware.

Since OS X Lion, Macs have shipped without Java installed, and as an added security measure OS X automatically disables Java if it has been unused for 35 days. To protect Mac users that have installed Java, today we are releasing an updated Java malware removal tool that will check Mac systems and remove this malware if found.

(Bewerkt door Pieterr om 21:29, 19-02-2013)

The latest patches bring Java's version numbers up to Java 6 Update 43 and Java 7 Update 17.

(Bewerkt door Pieterr om 7:44, 5-03-2013)

Doen ze dat expres, die grootte van de update?

edit: yes, eindelijk gelukt met dat plaatje plaatsen..

(Bewerkt door Viool om 14:41, 5-03-2013)

Thursday was another grim day for Internet security as contestants at the Pwn2Own hacker competition exploited flaws in Adobe's Reader and Flash programs, allowing them to take full control of the computers they ran on. Oracle's Java was also, once again, felled.

The exploits, which fetched more than $160,000 in prizes, were impressive because they pierced a wall of defenses erected by some of the brightest minds in the field of software engineering. Those defenses included an anti-exploit "sandbox," which Adobe engineers added to Reader in 2010 and have been improving ever since. The mechanism isolates Web content in a restricted container that's sealed off from sensitive operating-system functions, such as writing files to disk or making system changes.

more...

Chrome OS overleeft Pwnium 3-aanvallen

Ondanks de prijzenpot van 3,14159 miljoen dollar, wisten deelnemers van de Pwnium 3-wedstrijd geen nieuwe exploits in Chrome OS te vinden. Bij de gelijktijdig gehouden Pwn2own-competitie werden Firefox, Chrome, Internet Explorer 10, Java en Adobe Flash en Adobe Reader gekraakt.

meer...