Threat video1:00
Zoom Workplace & ASUS Router Patches: Detection & IOCs
Zoom fixed two Windows privilege escalation flaws and ASUS four router file-access bugs: 9 detection rules, 8 IOCs and a free Splunk SPL rule.
Read the full threat intel for Zoom Workplace & ASUS Router Patches: Detection & IOCs →
Chapters
- 0:00The hookZoom and ASUS patched privilege escalation flaws.
- 0:05The storyZoom's Windows client had a privilege flaw.
- 0:11Attack pathFour techniques are mapped to these flaws.
- 0:26AttributionNo threat actor: this was defensive research.
- 0:31Indicators of compromise2 indicators to hunt: 2 package names.
- 0:37MITRE ATT&CK techniques4 ATT&CK techniques, from initial access to impact.
- 0:42Remediation3 steps now: Update Zoom Workplace for Windows.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Zoom and ASUS patched privilege escalation flaws.
0:05Zoom's Windows client had a privilege flaw.
0:08ASUS patched four router flaws.
0:11Four techniques are mapped to these flaws.
0:14Neither vendor reports exploitation in the wild.
0:17No root cause or exploit details are published.
0:20Update Zoom and ASUS router firmware.
0:26No threat actor: this was defensive research.
0:312 indicators to hunt: 2 package names.
0:384 ATT&CK techniques, from initial access to impact.
0:433 steps now: Update Zoom Workplace for Windows.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.