The Flash team has posted a

security bulletin

noting that an already fixed bug (exploit CVE-2015-8651) is being used in limited, targeted attacks, and recommends making sure you're running the latest player.