This time it was the Israeli Blogger Aviv Raff, who disclosed a new vulnerability in Adobes Download Manager. According to his post it is possible to install any software via malicious websites. The vulnerability has been confirmed by Adobes PSIRT-Blog . A Security Bulletin isn’t available yet.
Two Chinese schools have become implicated as suspects in the Aurora attacks against Google and at least 33 other companies. The schools have links to the armed forces, The Register reports. According to New York Times some NSA experts and others know about the attacks from April last year on. Google called in the NSA [...]
My blog “Klipper on Security” is bilingual now: German and English. I will try to offer all posts in both languages. Chose the language via the language selector at the top right corner of the site. Until all elements of the site will be shown in English, there is still some time to go. Until [...]
Adobe provides the new updates for Adobe Reader 9.3 for Windows, Mac and UNIX. Adobe Acrobat 9.3 is available only for Windows and Mac. Updates for Adobe Reader 8.2 and Acrobat 8.2 are available for Windows and Mac. The installation packages are available for download. For further details see the Security-Bulletin. The update fixes several [...]
The problem is a vulnerability in the new trash function in Version 2.9 where logged in users can peek at trashed posts belonging to other authors. If you have untrusted users signed up on your blog and sensitive posts in the trash, the wordpress guys recommend to upgrade to 2.9.2. Overall, the update fixes 8 [...]

