SANS Stormcast Friday Mar 7th: Chrome vs Extensions; Kibana Update; PrePw0n3d Android TV Sticks; Identifying APTs (@sans_edu, Eric LeBlanc)


Episode Artwork
1.0x
0% played 00:00 00:00
Mar 06 2025 13 mins   479 1 0


Latest Google Chrome Update Encourages UBlock Origin Removal

The latest update to Google Chrome not only disabled the UBlock Origin ad blocker, but also guides users to uninstall the extension instead of re-enabling it.

https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html

https://www.reddit.com/r/youtube/comments/1j2ec76/ublock_origin_is_gone/

Critical Kibana Update

Elastic published a critical Kibana update patching a prototype polution vulnerability that would allow arbitrary code execution for users with the "Viewer" role.

https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441

Certified PrePw0n3d Android TV Sticks

Wired is reporting of over a million Android TV sticks that were found to be pre-infected with adware

https://www.wired.com/story/android-tv-streaming-boxes-china-backdoor/

SANS.edu Research Paper

Advanced Persistent Threats (APTs) are among the most challenging to detect in enterprise environments, often mimicking authorized privileged access prior to their actions on objectives.

https://www.sans.edu/cyber-research/identifying-advanced-persistent-threat-activity-through-threat-informed-detection-engineering-enhancing-alert-visibility-enterprises/