Support Wars

From Dark Reading: Adobe’s Reader and Acrobat PDF applications have been hit by a new attack exploiting an unpatched vulnerability in the pervasive tools. So far the exploit has been used mostly in targeted attacks, but researchers say it could soon spread now that the cat is out of the bag. Adobe late yesterday issued [...]

A new zero day exploit has been reported for IE 6 and 7.  From Symantec: A new exploit targeting Internet Explorer was published to the BugTraq mailing list yesterday. Symantec has conducted further tests and confirmed that it affects Internet Explorer versions 6 and 7 as well. The exploit currently exhibits signs of poor reliability, [...]

From ISC SANS: As pointed out by several folks writing in to the ISC Handlers group, Microsoft has updated its Security Advisory 975497 – Vulnerabilities in SMB Could Allow Remote Code Execution – to include a “Fix it” workaround that makes it rather easy to disable SMBv2. The “Fix it” links can be found in two locations: – Microsoft [...]