Threat Source newsletter (Oct. 14, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-40461+1 related CVE | Windows Hyper-V Remote Code Execution Vulnerability | 8.0 | 1% | ||
| CVE-2021-41733 | Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them | 6.1 | <1% | ||
| CVE-2021-42013 | Path Traversal and RCE in Apache HTTP Server (follow-up to CVE-2021-41773) | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAntivirusService.exe Claimed Product: A |
| md5 | 84452e3633c40030e72c9375c8a3cacb | 6c4ccff520365ebc143f09ccf233e642bf540b5b90a2bbdb43d5b4 MD5: 84452e3633c40030e72c9375c8a3cacb Typical Filename: sqhost.exe Claimed Product: sqhost.exe De |
| md5 | 9f4303d51b3ceffb74c5cc9c887fc05e | d7822aa29325e41546138db99c7002d776c510ac3bd620e75c801f MD5: 9f4303d51b3ceffb74c5cc9c887fc05e Typical Filename: 9f4303d51b3ceffb74c5cc9c887fc05e.file Cla |
| md5 | af581caf268f7ad9def31b477f8349a3 | 4355875f88723419b44dc543ba07b83c8a339036f79e39364493c6 MD5: af581caf268f7ad9def31b477f8349a3 Typical Filename: NNV.exe Claimed Product: WindowsApp8 Dete |
| md5 | fe3659119e683e1aa07b2346c1f215af | d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: SqlBase.exe Claimed Product: SqlServerWor |
| sha256 | 50604f47e8d7822aa29325e41546138db99c7002d776c510ac3bd620e75c801f | c e Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: 50604f47e8d7822aa29325e41546138db99c7002d776c510ac3bd620e75c801f MD5: 9f4303d51b3ceffb74c5cc9c887fc05e Typical Filename: 9f4 |
| sha256 | 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 | duct: N/A Detection Name: W32.50604F47E8-95.SBX.TG SHA 256: 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: Sql |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | SID 300053) Most prevalent malware files this week SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAn |
| sha256 | bec65782844355875f88723419b44dc543ba07b83c8a339036f79e39364493c6 | ks.Runner Detection Name: W32.8639FD3EF8-95.SBX.TG SHA 256: bec65782844355875f88723419b44dc543ba07b83c8a339036f79e39364493c6 MD5: af581caf268f7ad9def31b477f8349a3 Typical Filename: NNV |
| sha256 | f0a5b257f16c4ccff520365ebc143f09ccf233e642bf540b5b90a2bbdb43d5b4 | ndowsApp8 Detection Name: W32.BEC6578284-95.SBX.TG SHA 256: f0a5b257f16c4ccff520365ebc143f09ccf233e642bf540b5b90a2bbdb43d5b4 MD5: 84452e3633c40030e72c9375c8a3cacb Typical Filename: sqh |
From the original article
5 min read at blog.talosintelligence.com
It's still Cybersecurity Awareness Month, and what better way to celebrate by patching and then patching some more? This week was Microsoft Patch Tuesday , which only included two critical vulnerabilities, but still requires patching diligence. Here's our full breakdown of this month's security updates for Microsoft products, and some additional details on a code execution vulnerability we discovered in Excel .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.