Many people have questioned the reason why Google released the Proof of Concept and other details before a patch for the zero-day was released. Responses from Google team members have stated that the vulnerability is being used as part of an exploit chain and the entry point attack in Google Chrome has been fixed. Researchers from the Project Zero Team stated that Microsoft is expected to have a patch released on their next patch Tuesday, November 10th. When the patch is released, it must be downloaded by all. This should be a common practice within all organizations to update and patch systems quickly and often. Another Google researcher also stated that now that details about the attack have been released, it is easier for companies to detect if they are being targeted. Monitoring services should be in a place, such as Binary Defense’s Managed Detection and Response, which will detect behaviors such as when an attacker escalates privileges to administrator.

More can be read here: https://threatpost.com/unpatched-windows-zero-day-exploited-sandbox-escape/160828/