Don't miss our upcoming Network Computing virtual event on Connectivity Solutions - Secure Your Complementary Seat Now!
A critical vulnerability in the popular Shockwave player was disclosed Thursday by a bug bounty program, and patched that same day by Adobe.
TippingPoint's Zero Day Initiative -- one of two prominent reward programs that pay researchers for information about software vulnerabilities -- warned users that a malicious Web site could hijack a user's computer if the site convinced the visitor to install Shockwave, a player used on many sites to display multi-media content.
Shockwave's ActiveX installer was at fault, said TippingPoint in its advisory.
Adobe, meanwhile, repaired the defective ActiveX installer, and said "since the vulnerability occurs in the installer, no action needs to be taken by current Macromedia Shockwave Player customers."
In other words, Shockwave users can breathe easy.
With the move to the cloud, CISOs must shift priorities from operating security programs to overseeing (monitoring and auditing) outsourced cybersecurity programs.
2022 was a boon year for IT salaries. 2023 came in like a beast with layoffs, raise freezes, and ChatGPT, but that beast has few teeth.
Age is only a number. Don't let a high number cancel your career.
