Security threats Toolkit

Story: Adobe patches zero-day bugs in Reader, Acrobat

• 
• 

Best Practice for achieving Risk Reduction in the overall IT environment

It is important to recognise that historically, popular applications and files like Adobe PDF files or even Word, Excel or PowerPoint files have been great vehicles for targeted attacks because those attachments are so socially acceptable and are simply expected attachments within corporate email. We now live in an environment where compromised applications have become a delivery mechanism for additional downloaded and executed malware such as key-loggers and rootkits. The most effective risk mitigation, therefore, continues to be lumension application control to prevent a compromised application from downloading and running any unauthorised software (including malware) on a user’s PC.

It is easy to get lulled into a false sense of security until you dig into the details and look at the bigger picture. In order to avoid zero-day attacks and exploits, it is critical to gain awareness and do a full inventory and assessment of your IT assets (applications & operating systems). In doing so, you can check on the latest security vulnerabilities that need to get addressed within your IT environment and apply remediation as soon as they are released by the vendor. In order to stay current and secure, always keep your eye on the latest fixes that are being released by ALL the security vendors that are applicable to your environment.

• 
• 

• 
• 
• 

Full Talkback thread