Threat video1:00
Chrome 157 Patches 83 Flaws, 5 UAF: Detection & IOCs
Chrome 157.0.8103.78 fixes 83 flaws, five of them use-after-free bugs in ServiceWorker and Skia. Get 9 detection rules, 9 IOCs and a free Splunk SPL rule.
Read the full threat intel for Chrome 157.0.8103.78 patch batch →
Chapters
- 0:00The hookChrome fixed 83 flaws, five critical.
- 0:04The storyGoogle shipped the fix November 11.
- 0:11Attack pathResearchers report five critical bugs.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromise5 indicators to hunt: 2 URLs and 3 package names.
- 0:38MITRE ATT&CK techniques2 ATT&CK techniques, in execution.
- 0:43Remediation3 steps now: Update Google Chrome.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Chrome fixed 83 flaws, five critical.
0:05Google shipped the fix November 11.
0:07No source states exploitation in the wild.
0:11Researchers report five critical bugs.
0:14One is a ServiceWorker flaw.
0:16Builds before the fix are affected.
0:18Google says rollout takes days and weeks.
0:21Verify the version on managed endpoints.
0:27No threat actor is attributed. Confidence: low.
0:325 indicators to hunt: 2 URLs and 3 package names.
0:382 ATT&CK techniques, in execution.
0:433 steps now: Update Google Chrome.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.