New signature for polarbearrepo ( new zero-day from SandboxEscaper)?

[matthewroberson]

As far as I can tell there isn't a CVE for this yet, but I would guess there will be one pretty soon. Hoping that Palo Alto is working on a signature as I write this, since SandboxExcaper released a POC...

[fmopiy]

Hello Matthew, 

Thanks for reaching out. 

Palo Alto Networks is aware of the polarbearrepo vulnerability and has the POC from SandboxExcaper. We are currently researching potential coverage signatures.

Regards, 

Faith.