Home >> Sci & Tech

Flash 0day exploits menance: What users can do

This year is fast turning up as one of the toughest years for millions of Adobe Flash users, with active exploits against three separate zero-day vulnerabilities.

In the latest attacks, unsuspecting targets are being hit through drive-by downloads served through ads on dailymotion.com, theblaze.com, nydailynews.com, tagged.com, webmail.earthlink.net, and other sites, according to research from Malwarebytes.

The end users are feeling the fatigue due to the breakneck pace of the exploits and the engineers at Adobe are also feeling the heat. No sooner Adobe rolls out one patch an exploit targeting a new vulnerability becomes available.

Research from Cisco Systems said that the recent Flash exploits were being served on more than 1,800 domains.

Those who are using Flash - whether on machines running Windows, Mac OS X, or Linux - should run the latest version. Many Windows users must run the check twice -once using IE and again with Firefox or other non-Chrome browsers.

The users should consider uninstalling Flash altogether, or they can use one browser for a handful of indispensable sites that require the Adobe plugin and a separate, non-Flash-using browser for everything else.

At present, Chrome is the safest browser for viewing Flash content. The users can configure Chrome to disable the plugin on all but a select number of sites.