Cyber Morning Call

Tempest Security Intelligence
Cyber Morning Call

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

  1. 2 DAYS AGO

    690 - Nova campanha do NodeStealer foca no Facebook Ads Manager

    [Referências do Episódio] Python-Based NodeStealer Version Targets Facebook Ads Manager - ⁠https://www.trendmicro.com/en_us/research/24/l/python-based-nodestealer.html⁠  NotLockBit: A Deep Dive Into the New Ransomware Threat - ⁠https://blog.qualys.com/vulnerabilities-threat-research/2024/12/18/notlockbit-a-deep-dive-into-the-new-ransomware-threat⁠  A new playground: Malicious campaigns proliferate from VSCode to npm - ⁠https://www.reversinglabs.com/blog/a-new-playground-malicious-campaigns-proliferate-from-vscode-to-npm⁠  CVE-2023-34990 - [FortiWLM] Unauthenticated limited file read vulnerability - ⁠https://fortiguard.fortinet.com/psirt/FG-IR-23-144⁠  CVE-2024-48889 - OS command injection - ⁠https://fortiguard.fortinet.com/psirt/FG-IR-24-425⁠  CVE-2024-50570 - Credentials can be dumped from memory - ⁠https://fortiguard.fortinet.com/psirt/FG-IR-23-278⁠  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    4 min

  2. 3 DAYS AGO

    689 - Falha de RCE no Apache Struts 2 está sendo explorada

    [Referências do Episódio] S2-067 - CVE-2024-53677 - https://cwiki.apache.org/confluence/display/WW/S2-067  New critical Apache Struts flaw exploited to find vulnerable servers - https://www.bleepingcomputer.com/news/security/new-critical-apache-struts-flaw-exploited-to-find-vulnerable-servers/  2024-12 Reference Advisory: Session Smart Router: Mirai malware found on systems when the default password remains unchanged - https://supportportal.juniper.net/s/article/2024-12-Reference-Advisory-Session-Smart-Router-Mirai-malware-found-on-systems-when-the-default-password-remains-unchanged?language=en_US  Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs - https://www.proofpoint.com/us/blog/threat-insight/hidden-plain-sight-ta397s-new-attack-chain-delivers-espionage-rats  Earth Koshchei Coopts Red Team Tools in Complex RDP Attacks - https://www.trendmicro.com/en_us/research/24/l/earth-koshchei.html  TAG Bulletin: Q4 2024 - https://blog.google/threat-analysis-group/tag-bulletin-q4-2024/  Effective Phishing Campaign Targeting European Companies and Institutions - https://unit42.paloaltonetworks.com/european-phishing-campaign/  BADBOX Botnet Is Back - https://www.bitsight.com/blog/badbox-botnet-back  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    7 min

  3. 4 DAYS AGO

    688 - Documentado uso de malvertising em diversas campanhas

    [Referências do Episódio] ESET Threat Report H2 2024 - https://www.welivesecurity.com/en/eset-research/eset-threat-report-h2-2024/ “DeceptionAds” - Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising - https://labs.guard.io/deceptionads-fake-captcha-driving-infostealer-infections-and-a-glimpse-to-the-dark-side-of-0c516f4dc0b6 CoinLurker: The Stealer Powering the Next Generation of Fake Updates - https://blog.morphisec.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates Technical Analysis of RiseLoader - https://www.zscaler.com/blogs/security-research/technical-analysis-riseloader Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    3 min

  4. 5 DAYS AGO

    687 - Ataques de Password Spraying afetam o Netscaler

    [Referências do Episódio] Password spraying attacks on NetScaler/NetScaler Gateway – December 2024 - https://www.citrix.com/blogs/2024/12/13/password-spraying-attacks-netscaler-december-2024 The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit - https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html  NodeLoader Exposed: The Node.js Malware Evading Detection - https://www.zscaler.com/blogs/security-research/nodeloader-exposed-node-js-malware-evading-detection  Clop ransomware claims responsibility for Cleo data theft attacks - https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-responsibility-for-cleo-data-theft-attacks/  New Yokai Side-loaded Backdoor Targets Thai Officials - https://www.netskope.com/blog/new-yokai-side-loaded-backdoor-targets-thai-officials  Getting a taste of your own medicine: Threat actor MUT-1244 targets offensive actors, leaking hundreds of thousands of credentials - https://securitylabs.datadoghq.com/articles/mut-1244-targeting-offensive-actors/  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    7 min

  5. 13 DEC

    686 - Pumakit: descoberto novo rootkit para Linux

    [Referências do Episódio] Declawing PUMAKIT - https://www.elastic.co/security-labs/declawing-pumakit#stage-2-memory-resident-executables-overview  CVE-2024-49071 - Windows Defender Information Disclosure Vulnerability - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49071  CVE-2024-49147 - Vulnerabilidade de elevação de privilégio do Catálogo do Microsoft Update - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49147  Careto is back: what’s new after 10 years of silence? - https://securelist.com/careto-is-back/114942/  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    3 min

  6. 12 DEC

    685 - Guerra de APTs: Secret Blizzard se infiltrou em outros dois grupos

    [Referências do Episódio] Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine - https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/  Lookout Discovers New Chinese Surveillance Tool Used by Public Security Bureaus - https://www.lookout.com/threat-intelligence/article/eaglemsgspy-chinese-android-surveillanceware  Likely China-based Attackers Target High-profile Organizations in Southeast Asia - https://www.security.com/threat-intelligence/china-southeast-asia-espionage  Teaching an Old Framework New Tricks: The Dangers of Windows UI Automation - https://www.akamai.com/blog/security-research/2024-december-windows-ui-automation-attack-technique-evades-edr  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    6 min

  7. 11 DEC

    684 - Patch tuesday de dezembro tem zero-day no Windows sendo explorado em ataques

    [Referências do Episódio] Atualizações de Segurança de dezembro de 2024 - https://msrc.microsoft.com/update-guide/releaseNote/2024-Dec  December Security Update - https://www.ivanti.com/blog/december-security-update  SAP Security Patch Day – December 2024 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news/december-2024.html  CISA Releases Seven Industrial Control Systems Advisories - https://www.cisa.gov/news-events/alerts/2024/12/10/cisa-releases-seven-industrial-control-systems-advisories  AppLite: A New AntiDot Variant Targeting Mobile Employee Devices - https://www.zimperium.com/blog/applite-a-new-antidot-variant-targeting-mobile-employee-devices/  Inside Zloader’s Latest Trick: DNS Tunneling - https://www.zscaler.com/blogs/security-research/inside-zloader-s-latest-trick-dns-tunneling  Silent Push Unwraps the AIZ—Aggressive Inventory Zombies—Retail & Crypto Phishing Network Campaign - https://www.silentpush.com/blog/aiz-retail-crypto-phishing/  Inside a New OT/IoT Cyberweapon: IOCONTROL - https://claroty.com/team82/research/inside-a-new-ot-iot-cyber-weapon-iocontrol  Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels - https://www.sentinelone.com/labs/operation-digital-eye-chinese-apt-compromises-critical-digital-infrastructure-via-visual-studio-code-tunnels/  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    5 min

  8. 10 DEC

    683 - Glutton: novo loader instala backdoor do APT Winnti

    [Referências do Episódio] 黑白通吃：Glutton木马潜伏主流PHP框架，隐秘侵袭长达1年 - https://blog.xlab.qianxin.com/glutton_stealthily_targets_mainstream_php_frameworks/  Threat Advisory: Oh No Cleo! Cleo Software Actively Being Exploited in the Wild - https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild Cleo Product Security Advisory - CVE-2024-50623 - https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory-CVE-2024-50623  MC LR Router and GoCast unpatched vulnerabilities - https://blog.talosintelligence.com/mc-lr-router-and-gocast-zero-day-vulnerabilities-2/  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

    4 min
See All (692)

Trailer

5
out of 5
21 Ratings

About

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

Information

  • Creator
    Tempest Security Intelligence
  • Years Active
    2022 - 2024
  • Episodes
    692
  • Rating
    Clean
  • Copyright
    © Tempest Security Intelligence
  • Show Website
    Cyber Morning Call

You Might Also Like

To listen to explicit episodes, sign in.

Stay up to date with this show

Sign in or sign up to follow shows, save episodes and get the latest updates.
Select a country or region

Africa, Middle East, and India

Asia Pacific

Europe

Latin America and the Caribbean

The United States and Canada