Cyber Morning Call

[Referências do Episódio] - iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices - https://ileakage.com/files/ileakage.pdf - DDoS threat report for 2023 Q3 - https://blog.cloudflare.com/ddos-threat-report-2023-q3/ - StripedFly worming miner hides sophisticated code and espionage-ready capabilities - https://usa.kaspersky.com/about/press-releases/2023_stripedfly-a-wormin...

[Referências do Episódio] - Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers - https://www.welivesecurity.com/en/eset-research/winter-vivern-exploits-zero-day-vulnerability-roundcube-webmail-servers/  - Roundcube - Security update 1.6.4 released - https://roundcube.net/news/2023/10/16/security-update-1.6.4-released  - VMware - VMSA-2023-0023 - https://www.vmware.com/secur...

[Referências do Episódio] - Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware - https://securelist.com/crimeware-report-gopix-lumar-rhysida/110871/  - VMware - VMSA-2023-0021 - https://www.vmware.com/security/advisories/VMSA-2023-0021.html - VMware Aria Operations for Logs CVE-2023-34051 Technical Deep Dive and IOCs - https://www.horizon3.ai/vmware-aria-operations-for-logs-c...

[Referências do Episódio] - Ada Lovelace Day 2023 - https://www.even3.com.br/ada-lovelace-day-2023  - Scammers use India’s real-time payment system to siphon off money, send it to China - https://www.theregister.com/2023/10/24/scammers_use_indias_realtime_payment/  - Chinese Scammers Launder Money via Fraud Payment Gateways: A New Threat to India's Digital Payment Ecosystem - https://assets-gl...

[Referências do Episódio] - Ada Lovelace Day 2023 - https://www.even3.com.br/ada-lovelace-day-2023  - Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z - Ragnar Locker ransomware gang taken down by international police swoop - https://www.europol.europa.eu/media-pres...

[Referências do Episódio] - Crambus: New Campaign Targets Middle Eastern Government - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/crambus-middle-east-government  Roteiro e apresentação: Carlos Cabral  Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

[Referências do Episódio] - Ada Lovelace Day 2023 - https://www.even3.com.br/ada-lovelace-day-2023/ - Government-backed actors exploiting WinRAR vulnerability - https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ - Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability - https://www.microsoft.com/en-us/security/blog/...

[Referências do Episódio] - Malware veicolato tramite falso sito di IT-Alert - https://www.d3lab.net/malware-veicolato-tramite-falso-sito-di-it-alert/ - Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products - https://www.cisa.gov/news-events/ics-advisories/icsa-23-290-01 - Rockwell Automation FactoryTalk Linx - https://www.cisa.gov/news-events/ics-advisories/icsa-23-2...

[Referências do Episódio] - Cisco IOS XE Software Web UI Privilege Escalation Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z - Особливості деструктивних кібератак у відношенні українських провайдерів (CERT-UA#7627) - https://cert.gov.ua/article/6123309 - Malicious “RedAlert - Rocket Alerts” Application Targets Isr...

[Referências do Episódio] - “EtherHiding” — Hiding Web2 Malicious Code in Web3 Smart Contracts - https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16 - ToddyCat: Keep calm and check logs - https://securelist.com/toddycat-keep-calm-and-check-logs/110696/ - Thread da Sophos sobre a exploração da CVE-2023-40044 - https://infosec.exchange/@SophosXOps/111222...

[Referências do Episódio] - Atualizações de Segurança de outubro de 2023 - https://msrc.microsoft.com/update-guide/releaseNote/2023-Oct - Citrix Hypervisor Multiple Security Updates - https://support.citrix.com/article/CTX575089/citrix-hypervisor-multiple-security-updates - NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967 - https://support.citrix.com/articl...

[Referências do Episódio] - The Israel-Hamas War Erupts in Digital Chaos - https://www.wired.com/story/israel-hamas-war-hacktivism/ - Hackers Send Fake Rocket Alerts to Israelis via Hacked Red Alert App - https://www.hackread.com/hackers-fake-rocket-alerts-red-alert-app-israel/  - Gaza-Linked Cyber Threat Actor Targets Israeli Energy and Defense Sectors - https://thehackernews.com/2023/10/gaza-lin...

[Referências do Episódio] - Microsoft Digital Defense Report 2023 - https://www.microsoft.com/en-us/security/security-insider/microsoft-digital-defense-report-2023 - ANDROID DEVICES SHIPPED WITH BACKDOORED FIRMWARE AS PART OF THE BADBOX NETWORK - https://securityaffairs.com/152124/malware/badbox-network-backdoored-firmware.html - Record $7 billion in crypto laundered through cross-chain services -...

[Referências do Episódio] - CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server - https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html - About the security content of iOS 17.0.3 and iPadOS 17.0.3 - https://support.apple.com/en-us/HT213961 - Qakbot-affiliated actors dist...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Looney Tunables: Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911) - https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt - EvilProxy Phishing Attack Strikes Indeed - https://www.menlosecurity.com/blog/evilproxy-phish...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Critical Vulnerabilities in WS_FTP Server - https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/ - Malicious Packages Hidden in NPM - https://www.fortinet.com/blog/threat-research/malicious-packages-hiddin-in-npm  - Mali GPU Kernel Driver allows impro...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company - https://www.welivesecurity.com/en/eset-research/lazarus-luring-employees-trojanized-coding-challenges-case-spanish-aerospace-company/ - BunnyLoader, the newest Malware-as-a-Service - http...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Budworm: APT Group Uses Updated Custom Tool in Attacks on Government and Telecoms Org - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/budworm-tool-update-telecoms-govt  - Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts - https...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Critical libwebp Vulnerability Under Active Exploitation - Gets Maximum CVSS Score - https://thehackernews.com/2023/09/new-libwebp-vulnerability-under-active.html - CISA, NSA, FBI and Japan Release Advisory Warning of BlackTech, PRC-Linked Cyber Activity  - https://content.govdelivery.com...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Luxury Hotels Remain Major Target of Ongoing Social Engineering Attack - https://cofense.com/blog/luxury-hotels-remain-target-of-social-engineering-attack/ - A new spin on the ZeroFont phishing technique - https://isc.sans.edu/diary/A+new+spin+on+the+ZeroFont+phishing+technique/30248/  -...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Xenomorph Malware Strikes Again: Over 30+ US Banks Now Targeted - https://www.threatfabric.com/blogs/xenomorph  - Securonix Threat Labs Security Advisory: New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads - https://www.securonix.com/blo...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - PREDATOR IN THE WIRESAhmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions - https://citizenlab.ca/2023/09/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-after-announcing-presidential-ambitions/ - It’s a trap: Detecting a cryptominer...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - About the security content of iOS 17.0.1 and iPadOS 17.0.1 - https://support.apple.com/en-us/HT213926 - About the security content of macOS Ventura 13.6 - https://support.apple.com/en-us/HT213931 - Sandman APT | A Mystery Group Targeting Telcos with a LuaJIT Toolkit - https://www.sentinel...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Check Point Research exposes new versions of the BBTok banking malware, which targets clients of over 40 Mexican and Brazilian banks - https://blog.checkpoint.com/security/check-point-research-exposes-new-versions-of-the-bbtok-banking-malware-which-targets-clients-of-over-40-mexican-and-b...

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants - https://blog.talosintelligence.com/introducing-shrouded-snooper/  - CRITICAL SECURITY BULLETIN: 3rd Party AV Uninstaller Module for Trend Micro Apex One and Worry-Free Business Security Arb...