Adobe has released out-of-band security updates to fix 18 critical flaws in Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition on Windows and macOS devices. The flaws allowed attackers to execute arbitrary code on systems running the vulnerable versions of the software. Adobe typically sends security updates every Tuesday but releases an out-of-band security update to patch critical security flaws or flaws that are known to be publicly exploited. All 18 of the flaws were rated critical and were caused by out of bounds read and write, heap overflow, and memory corruption bugs. Adobe Campaign Classic also had a bug that could result in information disclosure. Adobe has advised all its users to update the apps immediately.

Honda paused production and shut down some of its production facilities and closed its customer and financial operations following a ransomware attack. The Snake Ransomware is believed to have targeted Honda’s operations specifically. Honda said in a statement to The Verge, “There is no current loss of personally identifiable information.” An employee at one of the company’s most prominent North American Customers and Financial Service office says that temporary workers are not being paid while the office is shut. Even with the data being backed up, many of the employees don’t have the ability to work remotely, raising concerns about the company’s measures to help stop the spread do COVID-19.

Ten vulnerabilities in HP Support Assistant, a utility pre-installed on all HP computers sold after October 2012, were found by a security researcher. Computers running Windows 7, Windows 8, and Windows 10, were affected, which included five local privilege escalation flaws, two arbitrary file deletion bugs, and three remote code execution bugs.  

Vulnerabilities

Recent News

More of MIST

About MIST