Threat video1:00
Linux Kernel 59 MDASH Bugs, 33 CVEs: Detection & IOCs
Microsoft's FORGE Lab reports 59 AI-found Linux kernel bugs and 33 CVEs; hunt them with 9 detection rules, 11 IOCs and a free Splunk SPL rule.
Read the full threat intel for MDASH Linux kernel bugs →
Chapters
- 0:00The hookMicrosoft's AI scanner found 59 Linux kernel bugs.
- 0:04The storyThe oldest was at least 21 years old.
- 0:11Attack pathA scanner flagged thousands of findings.
- 0:27AttributionNo threat actor: this was defensive research.
- 0:32Indicators of compromise8 indicators to hunt: 5 hashes, 1 file name and 2 paths.
- 0:38MITRE ATT&CK techniques4 ATT&CK techniques, from resource development to impact.
- 0:43Remediation3 steps now: Update to a kernel containing the upstream stable fixes.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Microsoft's AI scanner found 59 Linux kernel bugs.
0:05The oldest was at least 21 years old.
0:07Microsoft published its lessons.
0:11A scanner flagged thousands of findings.
0:13Filters narrowed them, then researchers reproduced them in a lab.
0:17Experts reported 59 upstream.
0:2033 CVEs were assigned.
0:22No threat actor is attributed.
0:28No threat actor: this was defensive research.
0:328 indicators to hunt: 5 hashes, 1 file name and 2 paths.
0:384 ATT&CK techniques, from resource development to impact.
0:433 steps now: Update to a kernel containing the upstream stable fixes.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.