Adobe Patches Two Dozen Critical Flaws in Acrobat, Reader

Updates released on Monday by Adobe for its Acrobat, Reader and Photoshop products patch nearly 50 vulnerabilities, including critical flaws that allow arbitrary code execution.

http://feedproxy.google.com/~r/Securityweek/~3/xWRHSvdT6Vg/adobe-patches-two-dozen-critical-flaws-acrobat-reader

Security Gaps Remain as OT, IT Converge

The accelerating digitization of business, driven by compelling commercial arguments, is driving the integration of new information technology (IT) networks with older operational technology (OT) networks. This is introducing new security risks to old technology and old technology practices — and where the OT is driving a critical manufacturing plant, the new risk is from nation-state actors as well as traditional cyber criminals.

http://feedproxy.google.com/~r/Securityweek/~3/_aEwgHvCJ78/security-gaps-remain-ot-it-converge

Cyber War and the Compromise of Reliable Full Disclosure

We Can’t Rely on Our Own Governments to Practice Responsible Full Disclosure. Full Disclosure is Compromised.

http://feedproxy.google.com/~r/Securityweek/~3/QnCNQkaz8DE/cyber-war-and-compromise-reliable-full-disclosure

Emails Encrypted With OpenPGP, S/MIME Vulnerable to New Attacks

Researchers from three universities in Germany and Belgium say they have discovered attack methods that can be used by malicious actors to read emails encrypted with OpenPGP and S/MIME, but some believe the claims are overblown.

http://feedproxy.google.com/~r/Securityweek/~3/WEBClYeo4yo/emails-encrypted-openpgp-smime-vulnerable-new-attacks

Code Execution Flaw in Electron Framework Could Affect Many Apps

GitHub’s open source development framework Electron is affected by a vulnerability that can allow remote code execution. Technical details and proof-of-concept (PoC) code were made public last week by the researcher who discovered the issue.

http://feedproxy.google.com/~r/Securityweek/~3/r46GZJEelHw/code-execution-flaw-electron-framework-could-affect-many-apps

One Year After WannaCry Outbreak, EternalBlue Exploit Still a Threat

One year after the WannaCry ransomware outbreak, the NSA-linked exploit used for propagation is still threatening unpatched and unprotected systems, security researchers say.

http://feedproxy.google.com/~r/Securityweek/~3/LchEEPnK_VE/one-year-after-wannacry-outbreak-eternalblue-exploit-still-threat

Chrome 66 Update Patches Critical Security Flaw

An updated version of Chrome 66 is now available, which addresses a Critical security vulnerability that could allow an attacker to take over a system.

http://feedproxy.google.com/~r/Securityweek/~3/9cQMSEJt5rA/chrome-66-update-patches-critical-security-flaw

Rockwell Automation Patches Flaws in Simulation, Licensing Tools

Rockwell Automation has released updates for its Arena and FactoryTalk Activation Manager products to address various types of vulnerabilities, including a critical flaw that can allow remote code execution.

http://feedproxy.google.com/~r/Securityweek/~3/RsThiC41524/rockwell-automation-patches-flaws-simulation-licensing-tools

Many Vulnerabilities Found in OPC UA Industrial Protocol

Researchers at Kaspersky Lab have identified a significant number of vulnerabilities in the OPC UA protocol, including flaws that could, in theory, be exploited to cause physical damage in industrial environments.

http://feedproxy.google.com/~r/Securityweek/~3/-QaakaIbdbE/many-vulnerabilities-found-opc-ua-industrial-protocol

Firefox 60 Brings Support for Enterprise Deployments

Released on Wednesday, Firefox 60 allows IT administrators to customize the browser for employees, and is also the first browser to feature support for <a href="https://www.securityweek.com/new-authentication-standard-coming-major-w

http://feedproxy.google.com/~r/Securityweek/~3/Mr9maXsZ33o/firefox-60-brings-support-enterprise-deployments