[Referências do Episódio]

Details on Apple’s Shortcuts Vulnerability: A Deep Dive into CVE-2024-23204 - https://www.bitdefender.com/blog/labs/details-on-apples-shortcuts-vulnerability-a-deep-dive-into-cve-2024-23204/ 

VOLTZITE Threat Group’s Under the Radar Cyber Espionage on U.S. Critical Systems  - https://www.dragos.com/blog/voltzite-threat-group-under-the-radar-cyber-espionage-on-us-critical-systems/ 

TinyTurla-NG in-depth tooling and command and control analysis - https://blog.talosintelligence.com/tinyturla-ng-tooling-and-c2/ 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

ConnectWise ScreenConnect 23.9.8 security fix - https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 

A Catastrophe For Control: Understanding the ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708) - https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass 

Live sobre as vulns CVE-2024-1709 e CVE-2024-1708 - https://www.crowdcast.io/c/cybercall/LfKiT 

Rouba PIX: Polícia Civil prende criminoso que desenvolveu malware GoatRAT - https://www.tecmundo.com.br/seguranca/280115-rouba-pix-policia-civil-prende-criminoso-desenvolveu-malware-goatrat.htm 

Lucifer DDoS botnet Malware is Targeting Apache Big-Data Stack - https://www.aquasec.com/blog/lucifer-ddos-botnet-malware-is-targeting-apache-big-data-stack/ 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

International investigation disrupts the world’s most harmful cyber crime group - https://www.nationalcrimeagency.gov.uk/news/nca-leads-international-investigation-targeting-worlds-most-harmful-ransomware-group 

Cops turn LockBit's ransomware gang's countdown timers against them - https://www.theregister.com/2024/02/20/nca_lockbit_takedown/ 

Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns - https://blog.talosintelligence.com/google-cloud-run-abuse/ 

Migo - a Redis Miner with Novel System Weakening Techniques - https://www.cadosecurity.com/migo-a-redis-miner-with-novel-system-weakening-techniques/ 

VMware VMSA-2024-0003 - https://www.vmware.com/security/advisories/VMSA-2024-0003.html 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Anatsa Trojan Returns: Targeting Europe and Expanding Its Reach - https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reach 

Adversarial Threat Report: Countering the

Surveillance-for-Hire Industry & Influence

Operations - https://z-p3-scontent.fcgh11-1.fna.fbcdn.net/v/t39.8562-6/428391559_3726563917669737_441724410168993669_n.pdf?_nc_cat=102&ccb=1-7&_nc_sid=b8d81d&_nc_ohc=VMqBwrW0rMsAX8B85BN&_nc_ht=z-p3-scontent.fcgh11-1.fna&oh=00_AfBdL5QsGhb_06PCwpXr0tGS8ti0mgmwk9WOvsRV8xRvZg&oe=65D7EB37 

Warning of North Korean cyber threats

targeting the Defense Sector - https://www.verfassungsschutz.de/SharedDocs/publikationen/DE/cyberabwehr/2024-02-19-joint-cyber-security-advisory-englisch.pdf?__blob=publicationFile&v=2 

Hacker group's site taken over by law enforcement - https://www.bbc.com/news/technology-68344987  

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign - https://go.recordedfuture.com/hubfs/reports/cta-2024-0217.pdf 

Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers - https://www.welivesecurity.com/en/eset-research/winter-vivern-exploits-zero-day-vulnerability-roundcube-webmail-servers/ 

SolarWinds fixes critical RCE bugs in access rights audit solution - https://www.bleepingcomputer.com/news/security/solarwinds-fixes-critical-rce-bugs-in-access-rights-audit-solution/ 

Alpha Ransomware Emerges From NetWalker Ashes - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/alpha-netwalker-ransomware 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Over 13,000 Ivanti gateways vulnerable to actively exploited bugs - https://www.bleepingcomputer.com/news/security/over-13-000-ivanti-gateways-vulnerable-to-actively-exploited-bugs/ 

Observed Scanning Activity for CVE-2024-22024 - XXE Vulnerability in Ivanti Products - https://www.akamai.com/blog/security-research/2024/feb/scanning-activity-ivanti-cve-february-2024 

FLATLINED: ANALYZING PULSE SECURE FIRMWARE AND BYPASSING INTEGRITY CHECKING - https://eclypsium.com/blog/flatlined-analyzing-pulse-secure-firmware-and-bypassing-integrity-checking/  

RansomHouse am See - https://www.trellix.com/blogs/research/ransomhouse-am-see/ 

Face Off - https://www.group-ib.com/blog/goldfactory-ios-trojan/ 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

February 2024 Security Updates - https://msrc.microsoft.com/update-guide/releaseNote/2024-Feb

CVE-2024-21412: Water Hydra Targets Traders With Microsoft Defender SmartScreen Zero-Day - https://www.trendmicro.com/en_us/research/24/b/cve202421412-water-hydra-targets-traders-with-windows-defender-s.html 

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation - https://thehackernews.com/2024/02/critical-exchange-server-flaw-cve-2024.html 

Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation - https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/ 

Bumblebee Buzzes Back in Black - https://www.proofpoint.com/us/blog/threat-insight/bumblebee-buzzes-back-black 

Snap Trap: The Hidden Dangers Within Ubuntu’s Package Suggestion System - https://www.aquasec.com/blog/snap-trap-the-hidden-dangers-within-ubuntus-package-suggestion-system/ 

Staying ahead of threat actors in the age of AI - https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/ 

Disrupting malicious uses of AI by state-affiliated threat actors - https://openai.com/blog/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

New Zardoor backdoor targeting an Islamic organization -

https://blog.talosintelligence.com/new-zardoor-backdoor/

CVE-2024-22024 (XXE) for Ivanti Connect Secure and Ivanti Policy Secure - https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US

FortiOS - Out-of-bound Write in sslvpnd - https://fortiguard.fortinet.com/psirt/FG-IR-24-015

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

RASPBERRY ROBIN KEEPS RIDING THE WAVE OF ENDLESS 1-DAYS -

https://research.checkpoint.com/2024/raspberry-robin-keeps-riding-the-wave-of-endless-1-days/

Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer - https://medium.com/s2wblog/kimsuky-disguised-as-a-korean-company-signed-with-a-valid-certificate-to-distribute-troll-stealer-cfa5d54314e2

No, 3 million electric toothbrushes were not used in a DDoS attack - https://www.bleepingcomputer.com/news/security/no-3-million-electric-toothbrushes-were-not-used-in-a-ddos-attack/

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

ResumeLooters gang infects websites with XSS scripts and SQL injections to vacuum up job seekers’ personal data and CVs -

https://www.group-ib.com/blog/resumelooters/

Critical Security Issue Affecting TeamCity On-Premises (CVE-2024-23917) - https://blog.jetbrains.com/teamcity/2024/02/critical-security-issue-affecting-teamcity-on-premises-cve-2024-23917/

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia