Hacking Team leak releases potent Flash 0day into the wild

[Chiefcrowe]

http://arstechnica.com/security/2015/07/hacking-team-leak-releases-potent-flash-0day-into-the-wild

 

[PliotronX]

I've already uninstalled Flash on the systems I use. Eff Flash.

 

[MustISO]

No problem here. I'm sure I'll get a few calls this week to recover some systems.

 

[Elixer]

Yeah! Go flash, go!
Just ban it from Firefox, chrome, and IE, and be done with this BS.

 

[Red Squirrel]

Haha not surprising. I don't understand how a huge megacorporation can manage to make such crappy software.

I'm currently downloading the entire thing from a mirror. Going to figure out a safe place to host it. Lot of info in there that could help various companies fix security holes. These hackers were helping the government spy on people so it's awesome karma that they got hacked.

 

[Chiefcrowe]

http://www.pcworld.com/article/2945...zeroday-exploit-leaked-from-hacking-team.html

 

[PliotronX]

 

[Red Squirrel]

LOL I don't know why, but that picture made me jarr out.

 

[Kaido]

Already had a client get hit with a drive-by. Nuked half their network share because it was mapped. Yay for backups, but what an annoyance. And unfortunately Flash is required on a lot of their business websites (Flashed-based logins, oddly enough). Go go Adobe updates go!

 

[John Connor]

SCREW FLASH! HTML 5 already. Sick of this crap!

Hacking team are being little babies because they got hacked themselves.

 

[mmntech]

Hacking Team are the worst kind of scum. I'd probably put them even lower on the list than the ransomware dirt bags and Lizard Squad. Reports show they were actively using this exploit to spy for despotic and rogue states. Journalist and activist got thrown around a lot in the articles I read.

Releasing the exploit into the wild did screw a lot of people, but it also forced people to patch a known security hole that governments were actively abusing. I do have to commend Adobe for fixing the problem fairly quickly.

 

[seepy83]

Releasing the exploit into the wild did screw a lot of people, but it also forced people to patch a known security hole that governments were actively abusing. I do have to commend Adobe for fixing the problem fairly quickly.

Not quite out of a weeds yet. A second Flash 0-day was found in the HackingTeam data dump after Adobe patched the first one. No patch for number 2 yet.

 

[John Connor]

OMFG. It just gets better.

 

[mmntech]

Heat's being turned up against Adobe. Firefox is now blacklisting Flash in the latest release and Facebook's security chief is calling for them to retire the plugin.
http://arstechnica.com/security/201...layer-due-to-unpatched-0-day-vulnerabilities/

 

[Red Squirrel]

I got 12GB so far from one of the mirrors..... lol. This is sloowwwww. I really want to get the whole thing so I can setup a couple mirrors myself. This needs to stay public for as long as possible. Most of the mirrors out there use some kind of javascript that does not allow wget.

 

[Red Squirrel]

Heat's being turned up against Adobe. Firefox is now blacklisting Flash in the latest release and Facebook's security chief is calling for them to retire the plugin.
http://arstechnica.com/security/201...layer-due-to-unpatched-0-day-vulnerabilities/

Good, more browsers need to do this. Make flash really annoying to users it might push devs to stop using it.