Feross Aboukhadijeh a computer science student at the Stanford University has uncovered a security exploit in Adobe Flash which allows an intruder to turn on your Mac’s webcam and mic and save that video feed locally to his computer.
This is a huge issue as this exploit can be use by websites to spy on your activities(which some of them are already been accused of doing) and this video can also be used by hacker to blackmail you if you were doing something illegal during your time of browsing.
This exploit is based on webpage that Adobe has which allows you to determine which sites can have access to your webcam and mic. The code for this information can be ripped the from that site, made invisible, and then be embedded into a webpage. Users visiting that page are then tricked into making a series of seemingly innocuous clicks using various methods like games etc, and when the user is thinking they are clicking the game they actually are clicking though the process in Adobe’s code that opens up your computer to the website. Hence your video and audio starts to stream and you have no clue if its happening.(Gizmodo)