Bring your software up to date with free tools or you may be invaded by ransomware

16 August 2019 rmedcalf SCIENCE 0

Graphic: The Inquirer

Keeping software up to date is a first line of defence against malware and viruses, HONG KONG BUZZ’s Science Editor writes.

HKCERT issued a security bulletin on “Microsoft Monthly Security Update” two days ago. HKCERT, which stands for Hong Kong Computer Emergency Response Team, is the Productivity Council-managed centre for coordinating security incident responses for local enterprises and internet users. The bulletin said companies and individuals should install the latest security patch for their Microsoft products.

This security alert applies to:

Microsoft Office
Browser
Developer Tools
Microsoft Dynamics
Windows
Adobe After Effects CC 2019 16 and earlier versions
Adobe Character Animator CC 2019 2.1 and earlier versions
Adobe Premiere Pro CC 2019 13.1.2 and earlier versions
Adobe Prelude CC 2019 8.1 and earlier versions
Adobe Creative Cloud Desktop Application 4.6.1 and earlier versions
(MacOS) Acrobat DC 2019.012.20034 and earlier versions
(MacOS) Acrobat Reader DC 2019.012.20034 and earlier versions
(MacOS) Acrobat DC 2017.011.30142 and earlier versions
(MacOS) Acrobat Reader DC 2017.011.30142 and earlier versions
(MacOS) Acrobat DC 2015.006.30497 and earlier versions
(MacOS) Acrobat Reader DC 2015.006.30497 and earlier versions
(Windows) Acrobat DC 2019.012.20035 and earlier versions
(Windows) Acrobat Reader DC 2019.012.20035 and earlier versions
(Windows) Acrobat DC 2017.011.30143 and earlier versions
(Windows) Acrobat Reader DC 2017.011.30143 and earlier versions
(Windows) Acrobat DC 2015.006.30498 and earlier versions
(Windows) Acrobat Reader DC 2015.006.30498 and earlier versions
Adobe Experience Manager 6.4 and 6.5
Photoshop CC 19.1.8 and earlier versions
Photoshop CC 20.0.5 and earlier versions

The vulnerabilities could be exploited by attackers to conduct denial of service, elevation of privilege, remote code execution, security restriction bypass, information disclosure and tampering.

Please read the following URL for more details. https://www.hkcert.org/my_url/en/alert/19081401

Ransomware is a curse that is spreading in Hong Kong, our Science Editor says. Usually you are invaded when your device (and it can be your phone) opens an attachment from an unknown source or one you think you know. Right now there is a heightened risk due to social media and messaging regarding the demonstrations. It may well be that a state actor is behind this spike. See

https://thecyberwire.com/issues/issues2019/June/CyberWire_2019_06_13.html

In July, Europol celebrated the third anniversary of its No More Ransom initiative, announcing that the public-private partnership had helped more than 200,000 ransomware victims recover their files using its library of freely available online tools instead of giving in to hackers’ demands to pay a cryptocurrency ransom.