Sunday, January 19, 2025
HomeCyber Security NewsUS Government to Remove Adobe Flash Contents From Federal Agency Sites and...

US Government to Remove Adobe Flash Contents From Federal Agency Sites and Computers

Published on

SIEM as a Service

Follow Us on Google News

US Government agencies to remove Adobe Flash contents from websites and computers by August 1, 2019.

The United States Senator Ron Wyden asks three government agencies to end use of Adobe’s Flash as Adobe already announced to stop supporting Adobe Flash Media Player in 2020 and it will no longer receive updates or technical support.

As the three agencies that provide the majority of cybersecurity guidance to government agencies, the National Security Agency, National Institute of Science and Technology, and the Department of Homeland Security (DHS) must take every opportunity to ensure that federal workers are protected from cyber threats, and that the government is not unintentionally supporting risky online behavior. reads Wyden letter.

Flash player suffered from the number of security flaws with high severity rate that allows an attacker to execute arbitrary code and to take complete control over the system.

Failed XP Transition – Remove Adobe Flash

Senator highlighted the transition failure with Windows XP at its end-of-life in 2014, which forced agencies to pay millions of dollars for premium support. So now the U.S. government transitioning fast to take away the flash immediately as it to be abandoned in 2020.

“A critical deadline is looming, the government must act to prevent the security risk posed by Flash from reaching catastrophic levels.” reads Senator letter.

Wyden Request to three agencies National Institute of Standards and Technology, National Security Agency and Department of Homeland Security.

Mandated government agencies shall not deploy new, Flash-based content on any federal website, effective within 60 days.

Require federal agencies to remove flash based content from federal websites by August 1, 2019, and form employee desktop computers by March 1, 2019.

Adobe Flash Player often suffers from a number of Zero-day vulnerabilities, recently Adobe Issues Patch for Critical Flash Player Zero-day Vulnerability that exploited by attackers in wild.

Also Read

Beware!! New Zero-day Vulnerability Found in Adobe Flash Player – Still No Patches Available

Adobe Flash Player Bug that can Leak Windows User Credentials

Adobe Issues Patch for Critical Flash Player Zero-day Vulnerability: Its Time to Update

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Hackers Easily Bypass Active Directory Group Policy to Allow Vulnerable NTLMv1 Auth Protocol

Researchers have discovered a critical flaw in Active Directory’s NTLMv1 mitigation strategy, where misconfigured...

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific...

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms....

New Tool Unveiled to Scan Hacking Content on Telegram

A Russian software developer, aided by the National Technology Initiative, has introduced a groundbreaking...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Hackers Easily Bypass Active Directory Group Policy to Allow Vulnerable NTLMv1 Auth Protocol

Researchers have discovered a critical flaw in Active Directory’s NTLMv1 mitigation strategy, where misconfigured...

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific...

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms....