Adobe Patches Actively Exploited ColdFusion Zero-Day Flaw

Adobe Systems released an emergency update for the ColdFusion application server to fix a critical remote code execution that’s already being exploited by attackers. The vulnerability, tracked as CVE-2019-7816, is located in the upload functiona… Continue reading Adobe Patches Actively Exploited ColdFusion Zero-Day Flaw

ColdFusion, Destroying Logs, & Tracing Meme’s – Application Security Weekly #39

DJI Drone Vulnerability, Hackers are increasingly destroying logs to hide attacks, Adobe ColdFusion servers under attack from APT group, understanding Open Source Code use in your business, and more! News Bugs, Breaches, and More! 1.) No need for Russi… Continue reading ColdFusion, Destroying Logs, & Tracing Meme’s – Application Security Weekly #39

Six Critical Vulnerabilities in Adobe ColdFusion Get Patches

Adobe recently released a series of 11 security patches, including six rated critical, and urged Adobe ColdFusion users to start applying the updates ASAP. The security advisory mentions that the 2018 and 2016 versions of ColdFusion, as well as version… Continue reading Six Critical Vulnerabilities in Adobe ColdFusion Get Patches

Microsoft Fixes 17 Critical Vulnerabilities

Microsoft has released its monthly batch of security patches fixing 61 vulnerabilities across its products, including 17 that are rated critical and four that have been publicly disclosed. Four critical memory corruption vulnerabilities were patched i… Continue reading Microsoft Fixes 17 Critical Vulnerabilities

Tesla S, British Airways, and Equifax – Hack Naked News #188

Stealing your Tesla, British Airways hack, Equifax long list of mistakes, Windows 7 support, oops I forgot to encrypt your chats, I can see your browser history, Tor browsers, VPNs and Coldfusion? Jason Wood from Paladin Security joins us for expert co… Continue reading Tesla S, British Airways, and Equifax – Hack Naked News #188

Adobe Patches Two Critical RCE Vulnerabilities in Flash Player

Adobe may kill Flash Player by the end of 2020, but until then, the company would not stop providing security updates to the buggy software.

As part of its monthly security updates, Adobe has released patches for eight security vulnerabilities in its three products, including two vulnerabilities in Flash Player, four in ColdFusion, and two in RoboHelp—five of these are rated as critical.

Continue reading Adobe Patches Two Critical RCE Vulnerabilities in Flash Player