The US-CERT Current Activity web page is a regularly updated summary of the most frequent, high-impact types of security incidents currently being reported to the US-CERT.
Google has released Google Chrome 19 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition.
US-CERT encourages users and administrators to review the Google Chrome Release blog entry and update to Chrome 19.
Apple has released security updates to address Flashback malware in the following products:
Apple has released a malware removal tool for the most common variant of the Flashback malware. If the malware is discovered, the tool will notify the user and remove it automatically. If the malware is not discovered, no indication will be given.
Update: On May 14, 2012 Apple has released security updates to address Flashback malware in the following product:
US-CERT encourages users and administrators to review articles HT5247, HT5254, and HT5273 and apply any necessary updates to help mitigate the risk.
Apple has released security updates for Apple OS X and Safari to address multiple vulnerabilities for the following products:
Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, operate with elevated privileges, cause a denial-of-service condition, or perform a cross-site scripting attack.
US-CERT encourages users and administrators to review Apple articles HT5281 and HT5282 and apply any necessary updates to help mitigate the risks.
Adobe has released security bulletins to alert users of critical vulnerabilities in multiple products. The following products are affected:
Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or take control of an affected system.
US-CERT encourages users and administrators to review the Adobe security bulletin and apply any necessary updates to help mitigate the risk.
Apple has released iOS 5.1.1 for iPhone, iPod, iPad, and iPad 2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, perform a cross-site-scripting attack, or spoof a website address.
US-CERT encourages users and administrators to review Apple Support Article HT5278 and apply any necessary updates to help mitigate the risk.