[Referências do Episódio]

- BREAKING DOWN THE CASBANEIRO INFECTION CHAIN – PART II - https://blog.sygnia.co/breaking-down-casbaneiro-infection-chain-part2

- How User Account Control works - https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/how-it-works

- UAC Bypass – Fodhelper - https://pentestlab.blog/2017/06/07/uac-bypass-fodhelper/

- Advisory: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability - https://www.mnemonic.io/resources/blog/ivanti-endpoint-manager-mobile-epmm-authentication-bypass-vulnerability/

- CVE-2023-35078 - Remote Unauthenticated API Access Vulnerability - https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US

- DECOY DOG IS NO ORDINARY PUPY: Separating a Sly DNS Malware from the Pack - https://insights.infoblox.com/resources-whitepaper/infoblox-whitepaper-decoy-dog-is-no-ordinary-pupy-distinguishing-malware-via-dns

- Researchers uncover a malware network possibly linked to nation-state cyberattacks - https://www.axios.com/2023/07/25/hidden-network-nation-state-cyberattacks 

- 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

- About the security content of iOS 16.6 and iPadOS 16.6 - https://support.apple.com/en-ca/HT213841

- About the security content of macOS Ventura 13.5 - https://support.apple.com/en-us/HT213843

- FortiGuard Labs Discovers Multiple Vulnerabilities in Microsoft Message Queuing Service - https://www.fortinet.com/blog/threat-research/microsoft-message-queuing-service-vulnerabilities

- Pro-PRC HaiEnergy Campaign Exploits U.S. News Outlets via Newswire Services to Target U.S. Audiences; Evidence of Commissioned Protests in Washington, D.C. - https://www.mandiant.com/resources/blog/pro-prc-haienergy-us-news

- North Korea Leverages SaaS Provider in a Targeted Supply Chain Attack - https://www.mandiant.com/resources/blog/north-korea-supply-chain

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Thread da Shadowserver sobre o volume de máquinas vulneráveis à CVE-2023-3519 - https://twitter.com/Shadowserver/status/1682355280317919233?s=20

- Ransom Monetization Rates Fall to Record Low Despite Jump In Average Ransom Payments - https://www.coveware.com/blog/2023/7/21/ransom-monetization-rates-fall-to-record-low-despite-jump-in-average-ransom-payments

- Threat Group Assessment: Mallox Ransomware - https://unit42.paloaltonetworks.com/mallox-ransomware/

- PurpleFox Being Distributed via MS-SQL Servers - https://asec.ahnlab.com/en/55492/

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Bad ad fad leads to IcedID, Gozi infections - https://news.sophos.com/en-us/2023/07/20/bad-ad-fad-leads-to-icedid-gozi-infections/

- Qualys Security Advisory - CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent - https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt

- OpenSSH Security - July 19, 2023 - https://www.openssh.com/security.html

- BMC&C: LIGHTS OUT FOREVER - https://eclypsium.com/research/bmcc-lights-out-forever/ 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- P2PInfect: The Rusty Peer-to-Peer Self-Replicating Worm - https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/

- Lookout Attributes Advanced Android Surveillanceware to Chinese Espionage Group APT41 - https://www.lookout.com/threat-intelligence/article/wyrmspy-dragonegg-surveillanceware-apt41

- Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability - https://securelist.com/analysis-of-attack-samples-exploiting-cve-2023-23397/110202/  

- OBITUARY: Kevin David Mitnick - https://www.dignitymemorial.com/obituaries/las-vegas-nv/kevin-mitnick-11371668 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467 - https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467

- Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack - https://orca.security/resources/blog/bad-build-google-cloud-build-potential-supply-chain-attack-vulnerability/

- FakeSG enters the 'FakeUpdates' arena to deliver NetSupport RAT - https://www.malwarebytes.com/blog/threat-intelligence/2023/07/socgholish-copycat-delivers-netsupport-rat 

- FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/syssphinx-fin8-backdoor

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Massive Targeted Exploit Campaign Against WooCommerce Payments Underway - https://www.wordfence.com/blog/2023/07/massive-targeted-exploit-campaign-against-woocommerce-payments-underway/

- Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities - https://www.rapid7.com/blog/post/2023/07/17/etr-active-exploitation-of-multiple-adobe-coldfusion-vulnerabilities/

- Critical ColdFusion flaws exploited in attacks to drop webshells - https://www.bleepingcomputer.com/news/security/critical-coldfusion-flaws-exploited-in-attacks-to-drop-webshells/

- Adobe ColdFusion 2021 Lockdown Guide - https://www.adobe.com/content/dam/cc/us/en/products/coldfusion/pdfs/cf-starter-kits/coldfusion-2021-lockdown-guide-1.1.pdf

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Vm2 Security Advisories - https://github.com/patriksimek/vm2/security/advisories

- vm2 - Project Discontinued - https://github.com/patriksimek/vm2

- isolated-vm -- Access to multiple isolates in nodejs - https://www.npmjs.com/package/isolated-vm

- Analysis of Storm-0558 techniques for unauthorized email access - https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/

- Зведена інформація щодо діяльності угрупування UAC-0010 станом на липень 2023 року - https://cert.gov.ua/article/5160737

- Security Update for Zimbra Collaboration Suite Version 8.8.15 - https://info.zimbra.com/security-update-zimbra-collaboration-suite-version-8.8.15-important 

- Zimbra urges admins to manually fix zero-day exploited in attacks - https://www.bleepingcomputer.com/news/security/zimbra-urges-admins-to-manually-fix-zero-day-exploited-in-attacks/?utm_source=pocket_saves 

- Thousands of images on Docker Hub leak auth secrets, private keys - https://www.bleepingcomputer.com/news/security/thousands-of-images-on-docker-hub-leak-auth-secrets-private-keys/

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Urgent Security Notice: SonicWall GMS/Analytics Impacted by suite of vulnerabilities - https://www.sonicwall.com/support/product-notification/urgent-security-notice-sonicwall-gms-analytics-impacted-by-suite-of-vulnerabilities/230710150218060/ 

- PoC Exploit: Fake Proof of Concept with Backdoor Malware - https://www.uptycs.com/blog/new-poc-exploit-backdoor-malware

- Diplomats Beware: Cloaked Ursa Phishing With a Twist - https://unit42.paloaltonetworks.com/cloaked-ursa-phishing/#post-129063-_mya0jyex1fns

- Apple re-releases zero-day patch after fixing browsing issue - https://www.bleepingcomputer.com/news/apple/apple-re-releases-zero-day-patch-after-fixing-browsing-issue/ 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Microsoft July 2023 Patch Tuesday warns of 6 zero-days, 132 flaws - https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2023-patch-tuesday-warns-of-6-zero-days-132-flaws/

- Storm-0978 attacks reveal financial and espionage motives - https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/

- Fortinet - FG-IR-23-183 - https://www.fortiguard.com/psirt/FG-IR-23-183 

- Six Malicious Python Packages in the PyPI Targeting Windows Users - https://unit42.paloaltonetworks.com/malicious-packages-in-pypi/

- SCARLETEEL 2.0: Fargate, Kubernetes, and Crypto - https://sysdig.com/blog/scarleteel-2-0/

- SCARLETEEL Cryptojacking Campaign Exploiting AWS Fargate in Ongoing Campaign - https://thehackernews.com/2023/07/scarleteel-cryptojacking-campaign.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto