Researchers show how Adobe Flash can be exploited in browsers when victim visits sites that accept user-generated content.
Article link
A new zero-day bug affecting Adobe Reader and Acrobat is being exploited in the wild. Though the vulnerability affects the products on Unix, Mac and Windows systems, the exploit observed in the wild is focused on Microsoft Windows for the moment.
Article link
Mozilla has expanded on the plans they acknowledged yesterday to check the version of Flash you are running to make sure that it's not outdated.
Article link
Most users haven't fixed their Acrobat Reader apps two weeks after Adobe issued critical patch, Trusteer says.
Article link
Attack surface is a term used to convey the amount of code available to attackers in a program. As a general matter, the more features added to a program, the greater the attack surface. For example, adding a web server to your web browser? You increase the attack surface.
Article link
A confusing but disturbing advisory from Adobe describes a highly critical vulnerability in the Shockwave Player. A new version of the player, 11.5.0.600, has been issued to address the problem.
Article link
First quarterly patch fixes 13 critical bugs in Reader and Acrobat.
Article link
Popular PDF plug-in becoming favorite target for attackers, prompting some security experts to recommend open-source alternatives