Threat video1:00
Chrome 157 Security Update Fixes 213 Bugs: Detection & IOCs
Chrome 157 patches 213 bugs, including buffer overflows in Dawn and use-after-free in WebGL: 9 detection rules, 6 IOCs and a free Splunk SPL rule.
Read the full threat intel for Chrome 157 Security Update Fixes 213 Bugs: Detection & IOCs →
Chapters
- 0:00The hook7 critical bugs patched in Chrome 157.
- 0:04The storyCritical flaws were reported to Google.
- 0:11Attack pathReportedly, exploitation of graphics flaws allows code execution.
- 0:28AttributionNo threat actor: this was defensive research.
- 0:32Indicators of compromise3 indicators to hunt: 2 URLs and 1 package name.
- 0:38MITRE ATT&CK techniques2 ATT&CK techniques, in execution.
- 0:43Remediation2 steps now: Update Google Chrome.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:007 critical bugs patched in Chrome 157.
0:05Critical flaws were reported to Google.
0:07Chrome 157 was released.
0:11Reportedly, exploitation of graphics flaws allows code execution.
0:16User interaction with crafted pages triggers exploitation.
0:20Remote code runs outside the browser sandbox.
0:24Update Chrome immediately.
0:28No threat actor: this was defensive research.
0:333 indicators to hunt: 2 URLs and 1 package name.
0:382 ATT&CK techniques, in execution.
0:432 steps now: Update Google Chrome.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.