Cyber Morning Call - #548 - 22/05/2024
Listen now
Description
[Referências do Episódio] Fórum da Internet do Brasil - MAIS UMA VÍTIMA NÃO: Tecnologias digitais como forma de promoção e proteção de defensores de direitos humanos no Brasil - https://forumdainternet.cgi.br/agenda/3056 Critical GitHub Enterprise Server Flaw Allows Authentication Bypass - https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html Enabling encrypted assertions - https://docs.github.com/en/[email protected]/admin/identity-and-access-management/using-saml-for-enterprise-iam/enabling-encrypted-assertions Veeam Backup Enterprise Manager Vulnerabilities (CVE-2024-29849, CVE-2024-29850, CVE-2024-29851, CVE-2024-29852) - https://www.veeam.com/kb4581 SD1672 | IMPORTANT NOTICE: Rockwell Automation Reiterates Customer Guidance to Disconnect Devices from the Internet to Protect from Cyber Threats - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1672.html Invisible miners: unveiling GHOSTENGINE’s crypto mining operations - https://www.elastic.co/security-labs/invisible-miners-unveiling-ghostengine ANALYSIS AND DETECTION OF CLOUD#REVERSER: AN ATTACK INVOLVING THREAT ACTORS COMPROMISING SYSTEMS USING A SOPHISTICATED CLOUD-BASED MALWARE - https://www.securonix.com/blog/analysis-and-detection-of-cloudreverser-an-attack-involving-threat-actors-compromising-systems-using-a-sophisticated-cloud-based-malware/ RIGHT-TO-LEFT OVERRIDE - https://unicode-explorer.com/c/202E Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
More Episodes
[Referências do Episódio] TURING DAY 2024 - https://www.even3.com.br/tempest-turing-day-2024/ China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence - https://www.sygnia.co/blog/china-nexus-threat-group-velvet-ant/  VMSA-2024-0012:VMware vCenter Server updates...
Published 06/18/24
Published 06/18/24
[Referências do Episódio] TURING DAY 2024 - https://www.even3.com.br/tempest-turing-day-2024/ From Clipboard to Compromise: A PowerShell Self-Pwn - https://www.proofpoint.com/us/blog/threat-insight/clipboard-compromise-powershell-self-pwn  CVE-2024-3080 - ASUS 路由器 - Improper...
Published 06/17/24