Malware

Chrome adds a Flash sandbox for all operating systems

Google announced Tuesday that the Adobe Flash Player, which comes built in to its Chrome browser, is also now "sandboxed" for all major platforms, including Windows, Mac, Linux and Chrome OS. The sandbox functionality for Flash is as strong as Chrome's native sandbox. It forces operations to be run inside a confined environment, in which certain functions are prohibited. "Ultimately, this is a safer experience for you as you browse the web," Scott Hess, a Google software engineer, wrote in a blog post. Flash is a common vector for malware spread, sometimes of the targeted nature.

Related

Rootkit capabilities likely with Windows bugs

Several rootkit-like capabilities could be obtained by threat actors through the exploitation of vulnerabilities in Windows' DOS-to-NT path conversion process, including file and process concealment and compromised prefetch file analysis, reports The Hacker News.

Abusing GitHub flaw could compromise GitLab

Open-source DevOps software project GitLab has also been impacted by the same security issue in GitHub comments that has been exploited by threat actors through Microsoft repository-linked URLs to facilitate the distribution of malware that was made to seem to originate from credible entities' official source code repositories, according to BleepingComputer.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.