What NIST’s latest password standards mean, and why the old ones weren’t working
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-43573+1 related CVE | Spoofing Vulnerability in Microsoft Windows MSHTML Platform Exploited in the Wild | 8.1 group max | 46% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 0d849044612667362bc88780baa1c1b7 | 5db162332418747ba4987027b8a746b24c919a24235ff3b70d25e3 MD5: 0d849044612667362bc88780baa1c1b7 Typical Filename: CryptX.dll Claimed Product: N/A Detection |
| md5 | 3bc6d86fc4b3262137d8d33713ed6082 | 0d745ec5ff7022c282a6fe969c6e6c7d77b7cfac34e6c19367cf9a MD5: 3bc6d86fc4b3262137d8d33713ed6082 Typical Filename: 8c556f0a.dll Claimed Product: N/A Detecti |
| md5 | 71fea034b422e4a17ebb06022532fdde | 6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8ca MD5: 71fea034b422e4a17ebb06022532fdde Typical Filename: VID001.exe Claimed Product: N/A Detection |
| md5 | b209df2951e29ab5eab4009579b10b8d | 26019139ac11117cd21bf5d0257a5ebd3d67837f558c8c9c3483d8 MD5: b209df2951e29ab5eab4009579b10b8d Typical Filename: FileZilla_3.67.1_win64_sponsored2-setup.e |
| md5 | f23b90fc9bc301baf3e399e189b6d2dc | 5679a6f6bb0baee8518058aba8081ef8f96e57fa3b74291fcbb814 MD5: f23b90fc9bc301baf3e399e189b6d2dc Typical Filename: B.dll Claimed Product: N/A Detection Name |
| sha256 | 331fdf5f1f5679a6f6bb0baee8518058aba8081ef8f96e57fa3b74291fcbb814 | oduct: N/A Detection Name: Gen:Variant.Lazy.605353 SHA 256: 331fdf5f1f5679a6f6bb0baee8518058aba8081ef8f96e57fa3b74291fcbb814 MD5: f23b90fc9bc301baf3e399e189b6d2dc Typical Filename: B.d |
| sha256 | 47ecaab5cd6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8ca | ware files from Talos telemetry over the past week SHA 256: 47ecaab5cd6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8ca MD5: 71fea034b422e4a17ebb06022532fdde Typical Filename: VID |
| sha256 | 76491df69a26019139ac11117cd21bf5d0257a5ebd3d67837f558c8c9c3483d8 | e Claimed Product: N/A Detection Name: RF.Talos.80 SHA 256: 76491df69a26019139ac11117cd21bf5d0257a5ebd3d67837f558c8c9c3483d8 MD5: b209df2951e29ab5eab4009579b10b8d Typical Filename: Fil |
| sha256 | c20fbc33680d745ec5ff7022c282a6fe969c6e6c7d77b7cfac34e6c19367cf9a | FileZilla Detection Name: W32.76491DF69A-95.SBX.TG SHA 256: c20fbc33680d745ec5ff7022c282a6fe969c6e6c7d77b7cfac34e6c19367cf9a MD5: 3bc6d86fc4b3262137d8d33713ed6082 Typical Filename: 8c5 |
| sha256 | f0d7a2bb0c5db162332418747ba4987027b8a746b24c919a24235ff3b70d25e3 | oduct: N/A Detection Name: Gen:Variant.Lazy.605353 SHA 256: f0d7a2bb0c5db162332418747ba4987027b8a746b24c919a24235ff3b70d25e3 MD5: 0d849044612667362bc88780baa1c1b7 Typical Filename: Cry |
From the original article
6 min read at blog.talosintelligence.com
Say goodbye to the days of using the “@” symbol to mean “a” in your password or replacing an “S” with a “$.” The U. S.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.