sdtimes.com sdtimes.com

SD Times new digest: Windows 10 Fall Creators Update, Adobe Flash vulnerability, MapR’s Managed Services, and Talend Integration Cloud

The Windows 10 Fall Creators Update is now available. The update includes several new features such as inking directly on PDFs, a Find my Pen feature, switching between your phone and computer, enhanced security and privacy features, and improvements in accessibility. Microsoft has also introduced the first Windows Mixed Reality headsets. These headsets provide a mixed reality experience without the need to mount cameras in the room,...

Traps Spies FINSPY With Its Eye … and Prevents It

FINSPY (a.k.a. FinFisher), a highly criticized spyware, has been observed being deployed following the exploit of a newly discovered, recently patched vulnerability (CVE-2017-8759). How Does It Work? Attackers employ social engineering, using spear phishing in a highly targeted attack, to convince victims to open an email and then a malicious document that takes advantage of CVE-2017-8759, a remote code execution vulnerability...

cyberscoop.com cyberscoop.com

New Microsoft Word zero day used to spread 'lawful intercept' malware, analysts say

A well-funded spy group appears to have acquired a highly sophisticated zero day vulnerability and used it to deploy a remote access trojan against a Russian-speaking “entity,” according to evidence discovered by U.S. cybersecurity firm FireEye. Researchers with FireEye found the disruptive software vulnerability, which affects recent versions of Microsoft Word, in July. The trojan, known as FinSpy, is made by infamous...