talos · Crawled Nov 13, 2026

Never be afraid to ask questions

15 IoCs
Read original article ↗

AI Summary

Cisco Talos highlights critical vulnerabilities in Microsoft and Google products currently under active exploitation. The Microsoft Outlook spoofing vulnerability CVE-2026-124194 is being exploited in the wild, allowing attackers to bypass security through malicious emails. Additionally, Google Chrome has a zero-day vulnerability (CVE-2026-125350) involving a use-after-free error in the XML component, enabling remote code execution via crafted HTML pages. Organizations are urged to prioritize patching these flaws and apply Snort rules to mitigate risk during remediation.

AI-extracted · verify before operational use

Indicators of Compromise 15 extracted

Type Value Detail
SHA-256 f4b1f888f29faa7fbec180f42bdc78596e8a8b908c0a6e6c419933703c81df85 Details →
MD5 95a6a4b638cfdfbe3afc883d593a1f87 Details →
Filename f4b1f888f29faa7fbec180f42bdc78596e8a8b908c0a6e6c419933703c81df85.js Details →
SHA-256 7fc50b69b56bfdfa9fc0a3e088ff13904587d6336a51e9edcc7919cba83d4e3f Details →
MD5 cca616647db9370c88998ae25da6997f Details →
Filename cca616647db9370c88998ae25da6997f.exe Details →
SHA-256 ae59aedc4d89d7b22db5dc65cd0b2ff68b20b74863d44f53fd346de739081694 Details →
MD5 1fd9ccecac8794f39d826fdd8a62e6bc Details →
Filename ae59aedc4d89d7b22db5dc65cd0b2ff68b20b74863d44f53fd346de739081694.exe Details →
SHA-256 f0f8ceed9d5db100de257e6c8a4c85b08a30fd9591de754169adcfe0cf627bcb Details →
MD5 57ddcd4384fd595a12df5a6258e5af4d Details →
Filename f_01b5ab.html Details →
SHA-256 985c3972712218c62d2418b41056dba5fe883ca5104d8ec12041f8611db344f9 Details →
MD5 485055033bcddfde56325c0d2feea4f2 Details →
Filename 485055033bcddfde56325c0d2feea4f2.exe Details →