VGCollect Forum

General and Gaming => General => Topic started by: foxhack on July 07, 2015, 11:04:22 pm

Title: PSA: Huge Flash vulnerability detected, disable Flash until further notice
Post by: foxhack on July 07, 2015, 11:04:22 pm

https://blog.malwarebytes.org/exploits-2/2015/07/neutrino-ek-leverages-latest-flash-0day/

TL;DR -- There's cryptolocker malware right now that's exploiting vulnerabilities in Flash and everyone can be hit by this crap. Turn off Flash right the hell now, or at least change it to "click to play" in your browser until it's patched. Instructions here:

http://www.howtogeek.com/188059/how-to-enable-click-to-play-plugins-in-every-web-browser/

Title: Re: PSA: Huge Flash vulnerability detected, disable Flash until further notice
Post by: Warmsignal on July 07, 2015, 11:35:39 pm

I received a notice of an update for this very kind of thing a few days ago. So, again?

Title: Re: PSA: Huge Flash vulnerability detected, disable Flash until further notice
Post by: foxhack on July 07, 2015, 11:49:12 pm

Yes, again. The current version of Flash is still unpatched and a patch will go live tomorrow.

https://helpx.adobe.com/security/products/flash-player/apsa15-03.html

Title: Re: PSA: Huge Flash vulnerability detected, disable Flash until further notice
Post by: pacpix on July 07, 2015, 11:59:02 pm

Quote from: Warmsignal on July 07, 2015, 11:35:39 pm

I received a notice of an update for this very kind of thing a few days ago. So, again?

Well Flash is kind of always being exploited.

Seriously though turn off Flash and get a free version of Malwarebytes Anti-Exploit; Flash is used less and less online these days anyway.
On a related not I can highly recommend all of the products Malwarebytes has to offer, been using them for years and the CEO even took the time to do an email interview with me for my high school senior research project on malware. 

Title: Re: PSA: Huge Flash vulnerability detected, disable Flash until further notice
Post by: tripredacus on July 08, 2015, 09:48:49 am

Firefox automatically disabled Flash once this vulnerability was reported... Last week sometime.