I wont be surprised if Apple blocks the current version of Shockwave, as they have done with vulnerable versions of Flash and Java in the past, but dont wait for that to happen remove Shockwave today Read the rest of this entry.

_Flash_Player_Osx-6.Dmg Mac OS X

There is no indication that this was being exploited on Mac OS X, but since the vulnerability was present in Flash for Mac OS X as well, all Mac users who have Adobe Flash Player installed should immediately update.

Never install Flash by clicking a pop-up on a website that tells you Flash is outdated and needs to be updated.

Users of Chrome should have their Flash plugin updated automatically.

Users of other browsers, with Flash installed in the system, may have Flash updated automatically or may need to install an update manually, depending on the settings.

It now appears that the problem is affecting users of the Brazilian internet service provider (ISP) NET Virtua.

Apparently, this was done through poisoning of their domain name servers (DNS).

Such DNS poisoning attacks allow a hacker to direct requests for certain sites to a fake lookalike site, usually with the intent to harvest usernames and passwords.

_Flash_Player_Osx-6.Dmg Software To Block

Fortunately, theres no Mac malware known to be taking advantage of this, and Apple will probably use their XProtect software to block vulnerable versions of Flash soon.

Those running Chrome will have its built-in copy of Flash updated automatically, and need not have Flash installed separately.

Although no Mac malware is yet being installed through this hole, to my knowledge, it would still be wise to update as soon as possible.

If you have not set Flash to update itself automatically, you can update it through the Flash pane of System Preferences, or can download the latest version from Adobes site.

Adobe has issued a Flash update, saying that the vulnerabilities fixed are currently being exploited in the wild.

To cite an important portion of Adobes announcement, Adobe is aware of reports that CVE-2013-0634 is being exploited in the wild in attacks delivered via malicious Flash (SWF) content hosted on websites that target Flash Player in Firefox or Safari on the Macintosh platform.

Although these vulnerabilities have not yet been exploited in the wild, to anyones knowledge, they could easily be at any time now.

In addition, Apple has changed the minimum allowed version of Flash.

Many Mac users will be seeing notices that their version of Flash is outdated and that the plug-in will be blocked until it is updated.

Unfortunately, there are a number of reports that the self-updating features of Flash are not working properly.

To update to the latest version of Flash, download and install it from Adobes site.

That malware, apparently, can install as a drive-by download, thanks to a Flash Player vulnerability, in Internet Explorer on Windows.

Although that malware cannot affect a Mac in any way, Mac users should install the update as soon as possible, to protect against the possibility of a future attack.

Remember, once a vulnerability is publicized, hackers know exactly where to strike to affect machines that have not been updated.

Install_Flash_Player_Osx-6.Dmg