Threat video1:00
Edge 157 Fixes 27 Chromium Flaws: Detection & IOCs
Edge 157.0.4341.42 fixes 27 Chromium flaws, including a use-after-free in Frames; 9 detection rules, 6 IOCs and a free Splunk SPL rule.
Read the full threat intel for Edge 157 Fixes 27 Chromium Flaws: Detection & IOCs →
Chapters
- 0:00The hookMicrosoft Edge flaws, rated CVSS 8.8.
- 0:05The storyHK GovCERT published Security Alert.
- 0:13Attack pathDeliver link to crafted web page.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromise4 indicators to hunt: 4 package names.
- 0:37MITRE ATT&CK techniques3 ATT&CK techniques, from initial access to execution.
- 0:42Remediation2 steps now: Update Microsoft Edge.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Microsoft Edge flaws, rated CVSS 8.8.
0:05HK GovCERT published Security Alert.
0:08Five of the 27 CVEs were checked in NVD.
0:13Deliver link to crafted web page.
0:16Victim opens page in Edge.
0:18Null.
0:26No threat actor is attributed. Confidence: low.
0:314 indicators to hunt: 4 package names.
0:383 ATT&CK techniques, from initial access to execution.
0:432 steps now: Update Microsoft Edge.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.