Threat video1:00
Chrome 156.0.8078.79 Flaws: Exploitation Status & Fix
Chrome 156.0.8078.79 fixes 21 memory-corruption bugs; no in-the-wild use reported. Includes 9 detection rules, 9 IOCs and a free Splunk SPL rule.
Read the full threat intel for Multiple Vulnerabilities in Google Chrome (prior to 156.0.8078.79)… →
Chapters
- 0:00The hookChrome patches 21 memory-safety bugs.
- 0:04The storyResearchers found 21 memory flaws in Chrome; version 156 patches them all.
- 0:11Attack pathA crafted webpage triggers memory-safety flaws in Chrome.
- 0:26AttributionNo threat actor: this was defensive research.
- 0:31Indicators of compromise7 indicators to hunt: 2 URLs, 1 file name and 3 package names, and more.
- 0:38MITRE ATT&CK techniques3 ATT&CK techniques, from execution to collection.
- 0:43Remediation2 steps now: Update Google Chrome.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Chrome patches 21 memory-safety bugs.
0:05Researchers found 21 memory flaws in Chrome; version 156 patches them all.
0:12A crafted webpage triggers memory-safety flaws in Chrome.
0:16These flaws could lead to code execution or data theft.
0:19Chrome 156 patches all 21 vulnerabilities.
0:27No threat actor: this was defensive research.
0:317 indicators to hunt: 2 URLs, 1 file name and 3 package names, and more.
0:383 ATT&CK techniques, from execution to collection.
0:432 steps now: Update Google Chrome.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.