Security firm RSA attacked using Excel-Flash one-two sucker punch
It has emerged that the underlying cause of RSA's SecurID gaffe was the recently-reported zero-day vulnerability found in Adobe's Flash Player.
The exploit, which used specially-crafted Flash embedding in Excel spreadsheets, was first reported on March 15 and has since been fixed. RSA was hacked sometime in the first half of March when an employee was successfully spear phished and opened an ...
In case you weren't in attendance at this year's RSA conference in San Francisco, F-Secure's Mikko Hypponen has a pro tip for you: stop using Adobe Reader.
Hypponen doesn't place all the blame on Adobe. Part of the reason for suggesting the switch is the nearly twenty-fold increase in drive-by downloads that target Reader specifically. It's now become the most popular target for this type of ...





