J1 ​​Rapid Response: Another Google Chrome Zero-Day exploit and How to Determine if You're Affected

By

Last week, we published an article on a recent Chrome zero-day exploit (worth reading if you want see the history of the issue). There was a new announcement this Saturday, announcing another Chrome exploit, with the recommendation that everyone update their browser.

We have updated the J1 Query that will help you determine if anyone in your company is running an older version of the browser, prior to version 94.0.4606.61.

How to determine the potential impact of the Chrome Zero-Day exploit

For existing JupiterOne users who have enabled an endpoint integration, you can verify the status of company wide updates by running the following J1 query. Not a current JupiterOne user? You can run the query immediately when you register for our free, lifetime license. You'll get immediate visibility to Chrome users in your company who have not updated to the latest version.

The return results will show all users who have not updated their browser and help accelerate your company's response to the exploit.

FIND Person as person
THAT OWNS Device
(THAT (MANAGES|MONITORS) HostAgent)?
THAT (IDENTIFIED|INSTALLED) as i Application as app
WHERE
app.name ~= ('Chrome' or 'Chromium') AND
i.version != "94.0.4606.61"
RETURN
person.displayName,
person.email,
i.version as chromeVersion

 

Stay safe. Know more, fear less. Reach out if you have any questions.

Sounil Yu
Sounil Yu

Before Sounil Yu joined JupiterOne as CISO and Head of Research, he was the CISO-in-Residence for YL Ventures, where he worked closely with aspiring entrepreneurs to validate their startup ideas and develop approaches for hard problems in cybersecurity. Prior to that role, Yu served at Bank of America as their Chief Security Scientist and at Booz Allen Hamilton where he helped improve security at several Fortune 100 companies and government agencies.

To hear more from Sounil, get our newsletter. No spam, just the good stuff once or twice a month. Sign up below.

Keep Reading

Identify compromised versions of Github using JupiterOne
January 31, 2023
Blog
Identify compromised versions of GitHub apps using JupiterOne

As a preventative measure, Github will be deprecating the Mac and Windows signing certificates used to sign Desktop app versions 3.0.2-3.1.2 and Atom versions 1.63.0-

The top 11 questions that every CISO should be able to answer
January 30, 2023
Blog
The top 11 questions that every CISO should be able to answer

In part one of this two-part series, we polled some of our top security experts to see what it takes to succeed secure and manage resources effectively.

Best of Cyber Therapy, Season 1
January 25, 2023
Blog
Best of Cyber Therapy, Season 1

Take a look at the top 5 episodes from Season 1 of Cyber Therapy, a video podcast featuring the humans of cybersecurity!

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.