Apple has released a security updates for Safari to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to execute arbitrary code or prevent users from discerning a phishing attack on an affected system.

The following updates are available:-

(a) Safari 8.0.4 for OS X Mountain Lion v10.8.5
(b) Safari 7.1.4 for OS X Mavericks v10.9.5
(c) Safari 6.2.4 for OS X Yosemite v10.10.2

Users and administrators are encouraged to review the Apple security update and apply the necessary updates.

For more information click: HT204560

Adobe has released security updates for Flash Player for Windows, Macintosh and Linux. These updates address critical vulnerability that could potentially allow an attacker to take control of the affected system.

Affected software versions are:-

(a) Adobe Flash Player 16.0.0.305 and earlier versions
(b) Adobe Flash Player 13.0.0.269 and earlier 13.x versions
(c)  Adobe Flash Player 11.2.202.442 and earlier 11.x versions

The following updates are available:-

(a) Adobe Flash Player 17.0.0.134 for Adobe Flash Player desktop runtime for Windows and Macintosh should update
(b) Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.277.
(c) Adobe Flash Player 11.2.202.451 for Adobe Flash Player for Linux
(d) Automatically update to version 17.0.0.134 for Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x.

Users and administrators are encouraged to review the Adobe Security Bulletins and apply the necessary updates.

Click here for more information

Apple has released a security updates for OS X, iOS and Apple TV to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to intercept HTTPS connections between vulnerable clients and servers (Kindly make reference of FREAK Attack)

The following updates are available:-

• Xcode 6.2 for OS X Mavericks v10.9.4 or later
• Security Update 2015-002 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2
• Apple TV 7.1 for Apple TV 3rd generation and later
• iOS 8.2 for iPhone 4s and later, iPod touch (5th generation) and later, and iPad 2 and later

Users and administrators are encouraged to review the Apple security updates and apply the necessary updates.

For more information click: HT204427  HT204413  HT204426  HT204423

Microsoft has released a security bulletin summary for March 2015 to address vulnerabilities in Windows. Exploitation of these vulnerabilities could allow elevation of privilege, disclosure of information, remote code execution, spoofing or security feature bypass.

Users and administrators are encouraged to review Microsoft Security Bulletin, MS15-Mar, and apply the necessary updates.

Click here for more information

FREAK (Factoring Attack on RSA-EXPORT Keys) SSL/TLS Vulnerability has been discovered, a weakness in some implementations of SSL/TLS.  It allows an attacker to intercept HTTPS connections between vulnerable clients and servers and force the two to use weakened encryption, which the attacker can break to steal or manipulate sensitive data.

Microsoft has released a Security Advisory that includes a workaround for supported Windows systems.

Users and administrators are encouraged to review the Security advisory released by Microsoft; Vulnerability Note VU#243585 and apply the necessary mitigations.

For more information please visit: Microsoft Security Advisory and VU#243585