A new alert system from CISA seems to be effective — now we just need companies to sign up
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-49606 | A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0 | 9.8 | 63% | PoC ×2 |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 0e4c49327e3be816022a233f844a5731 | 77c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 MD5: 0e4c49327e3be816022a233f844a5731 Typical Filename: aact.exe Claimed Product: AAct x86 Detect |
| md5 | 22ae85259273bc4ea419584293eda886 | a9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 MD5: 22ae85259273bc4ea419584293eda886 Typical Filename: KMSAuto++ x64.exe Claimed Product: KMSAut |
| md5 | 8c69830a50fb85d8a794fa46643493b2 | 1eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAct.exe Claimed Product: N/A Detection N |
| md5 | df11b3105df8d7c70e7b501e210e3cc3 | de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC001.exe Claimed Product: N/A Detection |
| md5 | fb9e0617489f517dc47452e204572b4e | 4e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 MD5: fb9e0617489f517dc47452e204572b4e Typical Filename: KMSAuto++.exe Claimed Product: KMSAuto++ |
| sha256 | 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa | 6 Detection Name: PUA.Win.Tool.Kmsauto::in03.talos SHA 256: 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC |
| sha256 | 8664e2f59077c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 | duct: KMSAuto++ Detection Name: W32.File.MalParent SHA 256: 8664e2f59077c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 MD5: 0e4c49327e3be816022a233f844a5731 Typical Filename: aac |
| sha256 | abaa1b89dca9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 | duct: KMSAuto++ Detection Name: W32.File.MalParent SHA 256: abaa1b89dca9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 MD5: 22ae85259273bc4ea419584293eda886 Typical Filename: KMS |
| sha256 | c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 | ware files from Talos telemetry over the past week SHA 256: c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAc |
| sha256 | d529b406724e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 | ed Product: N/A Detection Name: W32.File.MalParent SHA 256: d529b406724e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 MD5: fb9e0617489f517dc47452e204572b4e Typical Filename: KMS |
From the original article
7 min read at blog.talosintelligence.com
One of the great cybersecurity challenges organizations currently face, especially smaller ones, is that they don’t know what they don’t know. It’s tough to have your eyes on everything all the time, especially with so many pieces of software running and IoT devices extending the reach of networks broader than ever. One potential (and free!)
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.