Something scary has popped up in the malware world today. There is a new exploit in Adobe's Flash that not only has been found, but has already been used as a vector for attack.
The attack was found by Symantec and is very concerning in that it was not targeted directly through the browser (as it usual) instead it used Acrobat Reader to access Flash.
The malicious file was a toxic PDF that accessed Flash to execute its binaries.
The reason this Flash Exploit is so serous is due to Flash's pervasive system integration. Flash covers all manner of browsers, acrobat, Photoshop, operating systems etc. This means that by using a single attack vector a malware developer can attack multiple platforms.
Adobe has been notified of the exploit but in the meantime people are advised to ensure their malware prevention applications are up to date, including OSX and Linux users.