Threat video1:00
Project Glasswing Patch Gap for SOCs: Detection & IOCs
AI-found flaws under Project Glasswing outpace patching, so expect exploitation before fixes land: 9 detection rules, 11 IOCs and a free Splunk SPL rule.
Read the full threat intel for Project Glasswing Patch Gap for SOCs: Detection & IOCs →
Chapters
- 0:00The hookAbout ~17 seconds per vulnerable asset.
- 0:05The storyAI found thousands of flaws in open-source projects.
- 0:12Attack pathAI discovered thousands; public advisories followed.
- 0:25AttributionNo threat actor is attributed.
- 0:30Indicators of compromise4 indicators to hunt: 4 package names.
- 0:36MITRE ATT&CK techniques5 ATT&CK techniques, from reconnaissance to execution.
- 0:42Remediation4 steps now: Inventory internet-facing and unpatched assets and rank them by exposure.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00About ~17 seconds per vulnerable asset.
0:05AI found thousands of flaws in open-source projects.
0:09Patches take weeks to arrive.
0:12AI discovered thousands; public advisories followed.
0:16Patches take weeks, but exploits work in two days.
0:19Unpatched systems stay exposed during the race.
0:26No threat actor is attributed. Confidence: low.
0:314 indicators to hunt: 4 package names.
0:375 ATT&CK techniques, from reconnaissance to execution.
0:424 steps now: Inventory internet-facing and unpatched assets and rank them by exposure.
0:509 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.