High-risk Flash 0-day vulnerabilities are being exploited to launch attacks

High-risk Flash 0-day vulnerabilities are being exploited to launch attacks

Adobe and Kaspersky reported a high-risk Flash Vulnerability CVE-2016-4171 being exploited, which has not yet been fixed and Adobe plans to release fixes on November 16. According to Kaspersky security researcher, the APT organization named sccruft is exploiting the vulnerability to launch an attack. Two attack actions, Operation Daybreak and Operation Erebus, are being launched by ScarCruft. Two Flash vulnerabilities and one IE vulnerability are exploited. Operation Daybreak exploits the 0-day Flash Vulnerability to attack important targets, while Operation Erebus exploits two old vulnerabilities that have been fixed. Kaspersky will release patches in Adobe to release vulnerability details.

This article permanently updates the link address: