Ransomwarecritical
The security pitfalls of social media sites offering ID
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-3421 | Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page | 8.8 | 1% | ||
| CVE-2023-4863 | Out-of-Bounds Write in Google Chromium WebP Image Codec Actively Exploited | 8.8 | 100% | KEVPoC ×4 | KEV |
| CVE-2023-5129 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | — | — |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 7bdbd180c081fa63ca94f9c22c457376 | 83227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0dwjdi6a.dll Claimed Product: N/A Detect |
| md5 | bbcf7a68f4164a9f5f5cb2d9f30d9790 | 39a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647 MD5: bbcf7a68f4164a9f5f5cb2d9f30d9790 Typical Filename: bbcf7a68f4164a9f5f5cb2d9f30d9790.vir Clai |
| md5 | e9a6b1346d1a2447cabb980f3cc5dd27 | 71e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa MD5: e9a6b1346d1a2447cabb980f3cc5dd27 Typical Filename: профиль 10 класс.exe Claimed Product: N/A |
| md5 | eba4ad9540713d5956ab0b6a566c1487 | 741afd7aba54d7c0b30401d2d6dd06138979ca73f3167915bf22b3 MD5: eba4ad9540713d5956ab0b6a566c1487 Typical Filename: webnavigatorbrowser.exe Claimed Product: |
| sha256 | 0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647 | ser Detection Name: Win64:WebNav.26k0.rlsync.Talos SHA 256: 0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647 MD5: bbcf7a68f4164a9f5f5cb2d9f30d9790 Typical Filename: bbc |
| sha256 | 7f66d4580871e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa | roduct: N/A Detection Name: Win.Dropper.Scar::1201 SHA 256: 7f66d4580871e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa MD5: e9a6b1346d1a2447cabb980f3cc5dd27 Typical Filename: про |
| sha256 | a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 | d Product: N/A Detection Name: Application_Blocker SHA 256: a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0d |
| sha256 | e2cdf48bc6741afd7aba54d7c0b30401d2d6dd06138979ca73f3167915bf22b3 | ware files from Talos telemetry over the past week SHA 256: e2cdf48bc6741afd7aba54d7c0b30401d2d6dd06138979ca73f3167915bf22b3 MD5: eba4ad9540713d5956ab0b6a566c1487 Typical Filename: web |
From the original article
7 min read at blog.talosintelligence.com
The security pitfalls of social media sites offering ID-based authentication Welcome to this week’s edition of the Threat Source newsletter. Since Elon Musk first started talking about purchasing Twitter/X around this time last year, one of his main sticking points has been how many bot accounts are on the platform and how that potentially affects advertising revenue and user counts.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.