Adobe today confirmed that the Flash Player bug it patched Sunday is being used to steal login credentials. The vulnerability was patched yesterday in an “out-of-band,” or emergency update. The fix was the second in less than four weeks for Flash, and the fifth this year. Adobe rated the bug as “important,” the second-highest ranking in its four-step threat scoring system. Google accused Chinese hackers of targeting senior U.S. government officials and others in a long-running campaign to pilfer Gmail usernames and passwords.”]

