[Referências do Episódio]

- About the security content of Safari 16.5.2 - https://support.apple.com/en-us/HT213826

- About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 - https://support.apple.com/en-us/HT213823

- VMware - VMSA-2023-0007.1 - https://www.vmware.com/security/advisories/VMSA-2023-0007.html

- RomCom hackers target NATO Summit attendees in phishing attacks - https://www.bleepingcomputer.com/news/security/romcom-hackers-target-nato-summit-attendees-in-phishing-attacks/

- Analysis of the Rekoobe Backdoor Being Used In Attacks Against Linux Systems in Korea - https://asec.ahnlab.com/en/55229/

- Zirconium - https://www.cfr.org/cyber-operations/zirconium 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Tailing Big Head Ransomware’s Variants, Tactics, and Impact - https://www.trendmicro.com/en_us/research/23/g/tailing-big-head-ransomware-variants-tactics-and-impact.html

- Three new MOVEit bugs spur CISA warning as more victims report breaches - https://therecord.media/three-new-moveit-bugs-spur-cisa-warning

- Distribution of NetSupport Malware Using Email - https://asec.ahnlab.com/en/55146/

- Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing - https://thehackernews.com/2023/07/vishing-goes-high-tech-new-letscall.html

- Welcome to New York: Exploring TA453's Foray into LNKs and Mac Malware - https://www.proofpoint.com/us/blog/threat-insight/welcome-new-york-exploring-ta453s-foray-lnks-and-mac-malware

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Boletim de segurança do Android - julho de 2023 - https://source.android.com/docs/security/bulletin/2023-07-01?hl=pt-br

- Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-cloudsec-enc-Vs5Wn2sX

- Threat Alert: Anatomy of Silentbob’s Cloud Attack - https://blog.aquasec.com/threat-alert-anatomy-of-silentbobs-cloud-attack

- The five-day job: A BlackByte ransomware intrusion case study - https://www.microsoft.com/en-us/security/blog/2023/07/06/the-five-day-job-a-blackbyte-ransomware-intrusion-case-study/

- Increased Truebot Activity Infects U.S. and Canada Based Networks - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-187a 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- StackRot (CVE-2023-3269): Linux kernel privilege escalation vulnerability - https://github.com/lrh2000/StackRot

- Merge branch 'expand-stack' - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9471f1f2f50282b9e8f59198ec6bb738b4ccc009 

- New tool exploits Microsoft Teams bug to send malware to users - https://www.bleepingcomputer.com/news/security/new-tool-exploits-microsoft-teams-bug-to-send-malware-to-users/

- Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware - https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/

- Suspected key figure of notorious cybercrime group arrested in joint operation - https://www.interpol.int/en/News-and-Events/News/2023/Suspected-key-figure-of-notorious-cybercrime-group-arrested-in-joint-operation

- MOVEit hack victim list - Progress Software MOVEit Transfer global cyber incident - https://konbriefing.com/en-topics/cyber-attacks-moveit-victim-list.html 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- CHINESE THREAT ACTORS TARGETING EUROPE IN SMUGX CAMPAIGN - https://research.checkpoint.com/2023/chinese-threat-actors-targeting-europe-in-smugx-campaign/

- Neo_Net | The Kingpin of Spanish eCrime - https://www.sentinelone.com/blog/neo_net-the-kingpin-of-spanish-ecrime/

- 69% Fortigate Firewalls Vulnerable CVE-2023-27997 Exploitable - https://bishopfox.com/blog/cve-2023-27997-exploitable-and-fortigate-firewalls-vulnerable 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator - https://www.trendmicro.com/en_us/research/23/f/malvertising-used-as-entry-vector-for-blackcat-actors-also-lever.html

- PhonyC2: Revealing a New Malicious Command & Control Framework by MuddyWater - https://www.deepinstinct.com/blog/phonyc2-revealing-a-new-malicious-command-control-framework-by-muddywater 

- Proxyjacking: The Latest Cybercriminal Side Hustle - https://www.akamai.com/blog/security-research/proxyjacking-new-campaign-cybercriminal-side-hustle

- Businesses’ proxyware headache - https://www.kaspersky.com/blog/proxyware/42947/ 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- The DPRK strikes using a new variant of RUSTBUCKET - https://www.elastic.co/pt/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket

- The Lazarus Hei$t Podcast - https://www.bbc.co.uk/programmes/w13xtvg9/episodes/downloads

- The Lazarus Heist: From Hollywood to High Finance: Inside North Korea's Global Cyber War - https://www.amazon.com/Lazarus-Heist-Hollywood-Finance-Inside/dp/0241554268

- Lazarus Group - https://malpedia.caad.fkie.fraunhofer.de/actor/lazarus_group

- CVE-2023-26258 – Remote Code Execution in ArcServe UDP Backup - https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/

- Microsoft Outlook and some apps might not open - https://learn.microsoft.com/en-us/windows/release-health/resolved-issues-windows-11-22h2#3121msgdesc

- Decrypted: Akira Ransomware - https://decoded.avast.io/threatresearch/decrypted-akira-ransomware/ 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- 8Base Ransomware: A Heavy Hitting Player - https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html

- 8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses - https://thehackernews.com/2023/06/8base-ransomware-spikes-in-activity.html

- Manic Menagerie 2.0: The Evolution of a Highly Motivated Threat Actor - https://unit42.paloaltonetworks.com/manic-menagerie-targets-web-hosting-and-it/

- Manic Menagerie: Malicious activity targeting web hosting providers - https://www.cyber.gov.au/sites/default/files/2023-03/report_manic_menagerie.pdf

- New Fast-Developing ThirdEye Infostealer Pries Open System Information - https://www.fortinet.com/blog/threat-research/new-fast-developing-thirdeye-infostealer-pries-open-system-information

- Akira Ransomware Extends Reach to Linux Platform - https://blog.cyble.com/2023/06/28/akira-ransomware-extends-reach-to-linux-platform/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution - https://www.securityjoes.com/post/process-mockingjay-echoing-rwx-in-userland-to-achieve-code-execution

- 81% concerned about ChatGPT security and safety risks, Malwarebytes survey shows - https://www.malwarebytes.com/blog/news/2023/06/chatgpt 

- Process Injection - https://attack.mitre.org/techniques/T1055/

- The massive bug at the heart of the npm ecosystem - https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem

- Warning: JavaScript registry npm vulnerable to 'manifest confusion' abuse - https://www.theregister.com/2023/06/27/javascript_registry_npm_vulnerable/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Anatsa banking Trojan hits UK, US and DACH with new campaign - https://www.threatfabric.com/blogs/anatsa-hits-uk-and-dach-with-new-campaign

- Malicious Actors Utilizing QR Codes to Deploy Phishing Pages to Mobile Devices - https://cofense.com/blog/malicious-actors-utilizing-qr-codes-to-deploy-phishing-pages-to-mobile-devices/ 

- Grafana security release: New versions of Grafana with a critical security fix for CVE-2023-3128 - https://grafana.com/blog/2023/06/22/grafana-security-release-for-cve-2023-3128/

- Junk websites filled with AI-generated text are pulling in money from programmatic ads - https://www.technologyreview.com/2023/06/26/1075504/junk-websites-filled-with-ai-generated-text-are-pulling-in-money-from-programmatic-ads/ 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto