PawnStorm has a new Adobe zero-day exploit
On Tuesday Adobe released a mega-patch covering almost seventy known vulnerabilities across Adobe Flash, Reader and Acrobat, announcing that its prize products were now fully protected.  Their bravado lasted just 24 hours; a new campaign by the Russian PawnStorm hacking group, targeting foreign ministries, carries a new Adobe zero-day exploit that is certainly not covered by the recent patches. This shows yet again that specifically Abobe Flash is a favoured means of access for hackers. Brian Krebs of Krebs on Security has a simple but highly effective cure: "I would recommend that if you use Flash, you should strongly consider removing it, or at least hobbling it until and unless you need it." 

Adobe recommends users of the Adobe Flash Player Desktop Runtime for Windows and Macintosh update to Adobe Flash Player 19.0.0.207 by visiting the Adobe Flash Player Download Center or via the update mechanism within the product when prompted [1].

Adobe recommends users of the Adobe Flash Player Extended Support Release update to version 18.0.0.252 by visiting http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html.

Adobe recommends users of the Adobe Flash Player for Linux update to Adobe Flash Player 11.2.202.535 by visiting the Adobe Flash Player Download Center.

Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 19.0.0.207 on Windows, Macintosh, Linux and Chrome OS.

Adobe Flash Player installed with Microsoft Edge for Windows 10 will be automatically updated to the latest version, which will include Adobe Flash Player 19.0.0.207.

Adobe Flash Player installed with Internet Explorer 10 and 11 for Windows 8.0 and 8.1 will be automatically updated to the latest version, which will include Adobe Flash Player 19.0.0.207.



Adobe recommends users of the AIR desktop runtime, AIR SDK and AIR SDK & Compiler update to version 19.0.0.213 by visiting the AIR download center or the AIR developer center.

Please visit the Flash Player Help page for assistance in installing Flash Player.

[1] Users of Flash Player 11.2.x or later for Windows, or Flash Player 11.3.x or later for Macintosh, who have selected the option to 'Allow Adobe to install updates' will receive the update automatically. Users who do not have the 'Allow Adobe to install updates' option enabled can install the update via the update mechanism within the product when prompted.