Bharat Bhise On Adobe’s Fix Of Serious Flaws In Adobe’s ColdFusion, After Effects and Digital Editions

Bharat Bhise HNA reports that Adobe has issued security patches for flaws in its Digital Edition, After Effects, and ColdFusion applications. If attacked, the vulnerabilities could allow black hat hackers to obtain confidential data, launch denial-of-service attacks, and gain escalated privileges. Each bug was rated as important in severity based upon the Common Vulnerability Scoring System. It marks a tremendously low-volume period for Adobe flaw fixes.

In all, Adobe patched vulnerabilities connected to five CVEs in its scheduled Tuesday security updates. That number is insignificant compared to March when Adobe fixed bugs in an out-of-band patch related to 41 CVEs throughout its products. Bharat Bhise HNA notes that 29 of those were rated critical in severity. In February, Adobe patched updates connected to 42 CVEs wherein 35 bugs were rated critical.

Good cyber hygiene Adobe seems to be given a break after many months of highly critical and heavy patches, remarks Jay Goodman, a product marketing manager at Automox. Even if the CVEs are only rated as important, it’s still good cyber practice to get your Adobe applications patched to lower your risk of infection.

Three of the flaws revealed this week were found in Adobe’s rapid application development program, ColdFusion. These vulnerabilities included improper access control, which could result in a system file structure leak, a DLL search-order hijacking glitch that could allow privilege escalation. Bharat Bhise HNA says that it is an insufficient input validation flaw that could allow denial of service on an application level.

Among those affected are ColdFusion 2016’s Update 14 and ColdFusion 2018’s Update 8 and earlier. These bugs have rated a Priority 2, which means that the bugs were discovered in a product that has been at an elevated risk historically but have currently no known attacks.

For Bharat Bhise HNA, Adobe’s efforts to continually address CVEs indicate the brand is on the right track. After all, users can enjoy its apps with the assurance that CVEs that hound is consistently being addressed. This makes for secure and reliable user experience.

Comments

Post a Comment

Popular posts from this blog

Bharat Bhise HNA Talks about Airport Cybersecurity: 97% Failure

Bharat Bhise HNA joins the rest of the world in reveling in the shocking news: 97% of the world’s airports soundly failed a cybersecurity test from ImmuniWeb. In the 2020 annual meeting of the World Economic Forum in Davos-Klosters, the WEF had expressed concern in the cybersecurity found in the world’s airports. After all, millions of travelers pass through these airports every year, traveling across the globe. Their most sensitive personal information and data get processed through the airports—for immigration purposes, visas, and more. Their addresses, social security numbers, personal information, and other vital information are all referred back to in these airports. So it goes without saying that it’s merely a reasonable expectation for airports to have foolproof security. Sadly, from what Bharat Bhise HNA understands from the results of the study, that is not the case. The Gaping Holes In a sweep of the 100 most prominent international airports in the world, ImmuniW
Read more

Bharat Bhise HNA Observes Continuous Legislative Efforts on Cybersecurity

Bharat Bhise HNA and other experts are keen on renewed efforts, especially on the legislature, of beefing up the cybersecurity landscape on both federal agencies and private infrastructure. The latest bill to be filed exclusively dealing with cybersecurity is the Advancing Cybersecurity Diagnostics and Mitigation Act. Filed by Rep. John Ratcliffe (R-Texas) and Ro Khanna (D-Calif), the new bill hopes to strengthen the already-in-place digital protection programs under the Department of Homeland Security (DHS). The main project under the DHS is the Continuous Diagnostics Mitigation (CDM) program, the agency’s approach to cybersecurity for federal agencies. Under the new bill, the DHS is directed to codify the CDM project, and also gives policy development powers under the DHS Secretary. According to Bharat Bhise HNA, one unique feature of the new bill is its all-encompassing setup. If the bill becomes law, the DHS is mandated to make cybersecurity programs and policies avai
Read more

Bharat Bhise HNA on Mobile Cybersecurity Tips

Bharat Bhise HNA finds that many people don’t realize how vulnerable their mobile phones are to malicious attacks. Often, people only rely on built-in security functions within their mobile phone’s operating systems. Regardless of whether it’s iOS or Android, there are still risks and vulnerabilities in the operating system. And there are even more ways that a user may unintentionally put their mobile at risk that the OS can’t do anything about. It always pays to remember that your phone holds a significant amount of personal data, along with access to all your accounts and photos. To ensure that data doesn’t fall into the wrong hands, Bharat Bhise HNA recommends the following: 1. Install an antivirus app Just as in a PC, a phone will also need its  specialized antivirus app . This is vital for people who do a lot of web browsing on their phone or rely on it a lot during travel. Malware could stand to glean a great deal of personal information out of your phone as you use i
Read more