[Referências do Episódio]

Chrome Releases - Stable Channel Update for Desktop - Tuesday, November 28, 2023 - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html

CVE-2023-49103: ownCloud Critical Vulnerability Quickly Exploited in the Wild - https://www.greynoise.io/blog/cve-2023-49103-owncloud-critical-vulnerability-quickly-exploited-in-the-wild 

DeleFriend: Severe design flaw in Domain Wide Delegation could leave Google Workspace vulnerable for takeover - https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover 

Prova de conceito do DeleFriend - https://github.com/axon-git/DeleFriend/ 

Exploitation of Unitronics PLCs used in Water and Wastewater Systems - https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads - https://www.sentinelone.com/blog/dprk-crypto-theft-macos-rustbucket-droppers-pivot-to-deliver-kandykorn-payloads/

Elastic catches DPRK passing out KANDYKORN - https://www.elastic.co/security-labs/elastic-catches-dprk-passing-out-kandykorn

BlueNoroff APT group targets macOS with ‘RustBucket’ Malware - https://www.jamf.com/blog/bluenoroff-apt-targets-macos-rustbucket-malware/

BlueNoroff strikes again with new macOS malware - https://www.jamf.com/blog/bluenoroff-strikes-again-with-new-macos-malware/

Police dismantle ransomware group behind attacks in 71 countries - https://www.bleepingcomputer.com/news/security/police-dismantle-ransomware-group-behind-attacks-in-71-countries/

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

DPRK state-linked cyber actors conduct software supply chain attacks - https://www.documentcloud.org/documents/24174869-rok-uk-joint-cyber-security-advisoryeng

Guidelines for secure AI system development - https://www.ncsc.gov.uk/files/Guidelines-for-secure-AI-system-development.pdf 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

$19 Stanley cup deal is a Black Friday scam - https://www.malwarebytes.com/blog/news/2023/11/19-stanley-cup-deal-is-a-black-friday-scam

ISRAEL-HAMAS WAR SPOTLIGHT: SHAKING THE RUST OFF SYSJOKER - https://research.checkpoint.com/2023/israel-hamas-war-spotlight-shaking-the-rust-off-sysjoker/

Telekopye: Chamber of Neanderthals’ secrets - https://www.welivesecurity.com/en/eset-research/telekopye-chamber-neanderthals-secrets/

Roteiro e apresentação: Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Diamond Sleet supply chain compromise distributes a modified CyberLink installer - https://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer/

New botnet malware exploits two zero-days to infect NVRs and routers - https://www.bleepingcomputer.com/news/security/new-botnet-malware-exploits-two-zero-days-to-infect-nvrs-and-routers/

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-325a

New "Agent Tesla" Variant: Unusual "ZPAQ" Archive Format Delivers Malware - https://www.gdatasoftware.com/blog/2023/11/37822-agent-tesla-zpaq

Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors - https://unit42.paloaltonetworks.com/two-campaigns-by-north-korea-bad-actors-target-job-hunters/

Atomic Stealer distributed to Mac users via fake browser updates - https://www.malwarebytes.com/blog/threat-intelligence/2023/11/atomic-stealer-distributed-to-mac-users-via-fake-browser-updates

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Unveiling LummaC2 stealer’s novel Anti-Sandbox technique: Leveraging trigonometry for human behavior detection - https://outpost24.com/blog/lummac2-anti-sandbox-technique-trigonometry-human-detection/

MALWARE SPOTLIGHT – INTO THE TRASH: ANALYZING LITTERDRIFTER - https://research.checkpoint.com/2023/malware-spotlight-into-the-trash-analyzing-litterdrifter/

APT29 attacks embassies using CVE-2023-38831 - https://www.rnbo.gov.ua/files/2023_YEAR/CYBERCENTER/november/APT29%20attacks%20Embassies%20using%20CVE-2023-38831%20-%20report%20en.pdf

CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits - https://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

 Zimbra 0-day used to target international government organizations - https://blog.google/threat-analysis-group/zimbra-0-day-used-to-target-international-government-organizations/

Fortinet warns of critical command injection bug in FortiSIEM - https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-command-injection-bug-in-fortisiem/

Scattered Spider - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a

Protestware taps npm to call out wars in Ukraine, Gaza - https://www.reversinglabs.com/blog/protestware-taps-npm-to-call-out-wars-in-ukraine-gaza

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

November 2023 Security Updates - https://msrc.microsoft.com/update-guide/releaseNote/2023-Nov

Redundant Prefix Issue - ID 793262 - https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/redundant-prefix-issue.html

Citrix Hypervisor Security Bulletin for CVE-2023-23583 and CVE-2023-46835 - https://support.citrix.com/article/CTX583037/citrix-hypervisor-security-bulletin-for-cve202323583-and-cve202346835

VMware - VMSA-2023-0026 - https://www.vmware.com/security/advisories/VMSA-2023-0026.html

SAP Security Patch Day –November 2023 - https://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10

#StopRansomware: Rhysida Ransomware - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-319a

Investigating the New Rhysida Ransomware - https://www.fortinet.com/blog/threat-research/investigating-the-new-rhysida-ransomware

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

CISA Adds Six Known Exploited Vulnerabilities to Catalog - https://www.cisa.gov/news-events/alerts/2023/11/13/cisa-adds-six-known-exploited-vulnerabilities-catalog

#StopRansomware: Royal Ransomware - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a

Ddostf DDoS Bot Malware Attacking MySQL Servers - https://asec.ahnlab.com/en/58878/ 

In-Depth Analysis of July 2023 Exploit Chain Featuring CVE-2023-36884 and CVE-2023-36584 - https://unit42.paloaltonetworks.com/new-cve-2023-36584-discovered-in-attack-chain-used-by-russian-apt/ 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia