Patch/Configuration Management, Vulnerability Management

New Flash, AIR released

December 9, 2009

Adobe on Tuesday released an updated version of its Flash Player to close seven vulnerabilities, according to a bulletin. Version 10.0.42.34 addresses the flaws, which could be exploited to crash the software or possibly allow an attacker to take control of a targeted system. In addition, Adobe released a new version of AIR, 1.5.3, a development tool to create web applications that run on a user's desktop. The new version of Flash can be downloaded here, while AIR can be installed here. — DK

Dan Kaplan

Vulnerability Management

Apple patches TCC bypass vulnerability

SC StaffDecember 19, 2024

The vulnerability, tracked as CVE-2024-44131, was discovered in the FileProvider component and has been fixed in iOS 18, iPadOS 18, and macOS Sequoia 15 through improved validation of symbolic links.

concept of leaky software, data with a tap sticking out.3d illustration

Data Security

Misconfiguration exposes Virtavo security cam user data

SC StaffDecember 18, 2024

Over 8.7 million records, many of which are duplicates, were discovered within the server, including user phone numbers, network information, device identifiers, performance metrics, and other personal details, according to Cybernews researchers.