James "Jimmy" Blake is the Manager of Hewlett-Packard Enterprise Security's Security Intelligence & Operations Consulting (SOC) Practice in EMEA.  HP's SIOC Practice helps enterprise customers build and maintain effective Security Operation Centres.

Prior to joining HP, Jimmy was Chief Information Security Officer for the UK's largest Software-as-a-Service vendor.  There he helped protect the data of millions of subscriber's across three continents in a dozen data centres.  Jimmy has over two decades Information Security and Business Continuity Management experience gained both in consultancy and working for leading security vendors.

Jimmy is a GIAC Certified Incident Handler (GCIH) Certified Information Security Systems Professional (CISSP), a Certified Information Security Manager (CISM), a Certified ISO 27001 Lead Auditor, a Certified Ethical Hacker for EC Council (C|EH) and holds a Certificate in Cloud Computing Security Knowledge (CCSK) from the Cloud Security Alliance.  Jimmy is also one one of the co-founders of the Security B-Sides London conference.

« App and Add-on culture - the breeding ground for a new type of malware? | Main | Preparing for my CISM exam tomorrow »

Adobe patches critical vulerabilities in Flash

Adobe Systems has released a patch today for all platforms to plug over 30 vulnerabilities, including a critical one that hackers were actively exploiting to install malware on user's machines.

This vulnerability let attackers to take complete control of vulnerable machines after viewing websites that contained specially crafted Flash content - you can start to see why Steve Jobs doesn't like it. We've had been seeing a lot of emails recenty being sent out attempting to direct users to sites containing such content.

Adobe also announced that a patch for a related vulnerability in Acrobat won't be available until June 29, but has published some interim workarounds, including deleting the autoplay.dll (Windows), AuthPlayLib.bundle (Mac OS X) or libauthplay.so.0.0.0 (Linux) files or disabling JavaScript within Acrobat.

The patch can be downloaded from the Adobe site.

Reader Comments

There are no comments for this journal entry. To create a new comment, use the form below.

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>