x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Morning Call

Tempest Security Intelligence

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

technology

All Episodes

00:07:28

729 - Falhas de AitM e DoS afetam o OpenSSH

Cyber Morning Call ·

2025/02/19

Referências do Episódio Qualys Security Advisory - CVE-2025-26465: MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client | CVE-2025-26466: DoS attack against OpenSSH's client and server An Update on Fake Updates: Two New Actors, and New Mac Malware StaryDobry ruins New Year’s Eve, delivering miner instead of presents Invisible obfuscation technique used in PAC attackRoteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de encerramento: Bianca

pt-br

00:06:29

728 - Mustang Panda abusa de binário do Windows para...

Cyber Morning Call ·

2025/02/18

Referências do EpisódioEarth Preta Mixes Legitimate and Malicious Components to Sidestep DetectionNew Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory CredentialsTweet da Microsoft sobre o XCSSETRoteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de encerramento: Bianca Garcia

pt-br

00:06:59

727 - Grupo russo abusa de códigos de dispositivos em...

Cyber Morning Call ·

2025/02/17

[Referências do Episódio] CVE-2025-1094: PostgreSQL psql SQL injection (FIXED) Telegram Abused as C2 Channel for New Golang Backdoor PirateFi game on Steam caught installing password-stealing malware Ascensão do uso de softwares de monitoramento e gerenciamento remoto em campanhas maliciosasRoteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de encerramento: Bianca Garcia

pt-br

00:02:17

726 - Identificada campanha explorando a plataforma...

Cyber Morning Call ·

2025/02/14

[Referências do Episódio] Analyzing DEEP#DRIVE: North Korean Threat Actors Observed Exploiting Trusted Platforms for Targeted Attacks - https://www.securonix.com/blog/analyzing-deepdrive-north-korean-threat-actors-observed-exploiting-trusted-platforms-for-targeted-attacks/ Astaroth: A New 2FA Phishing Kit Targeting Gmail, Yahoo, AOL, O365, and 3rd-Party Logins - https://slashnext.com/blog/astaroth-a-new-2fa-phishing-kit-targeting-gmail-yahoo-aol-o365-and-3rd-party-logins/ China-linked Espionage

pt-br

00:02:17

725 - Falsos membros da gangue Babuk empregam...

Cyber Morning Call ·

2025/02/13

[Referências do Episódio] Babuk Impersonators Leverage a Brand Name & Previously Stolen Data to Engage in Re-Extortions -https://analyst1.com/babuk-impersonators-leverage-a-brand-name-previously-stolen-data-to-engage-in-re-extortions/BTOMB RAT: Newly Discovered Android Malware Spreading via Phishing Sites -https://cyble.com/blog/btmob-rat-newly-discovered-android-malware/ From South America to Southeast Asia: The Fragile Web of REF7707

pt-br

00:03:13

724 - Patch Tuesday de fevereiro corrige duas...

Cyber Morning Call ·

2025/02/12

[Referências do Episódio] February 2025 Security Updates -https://msrc.microsoft.com/update-guide/releaseNote/2025-FebAuthentication bypass in Node.js websocket module and CSF requests -https://fortiguard.fortinet.com/psirt/FG-IR-24-535 United States, Australia, and the United Kingdom Jointly Sanction Key Infraestructure that Enables Ransomware Attacks -https://home.treasury.gov/news/press-releases/sb0018Roteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de

pt-br

00:02:18

723 - Operação policial derruba DLS do grupo de...

Cyber Morning Call ·

2025/02/11

[Referências do Episódio] Police arrests 4 Phobos ransomware suspects, seizes 8Base sites -https://www.bleepingcomputer.com/news/legal/police-arrests-4-phobos-ransomware-suspects-seizes-8base-sites/ About the security content of iPadOS 17.7.5-https://support.apple.com/en-us/122173About the security content of iOS 18.3.1 and iPadOS 18.3.1 -https://support.apple.com/en-us/122174Small praise for modern compilers - A case of Ubuntu printing vulnerability that

pt-br

00:02:16

722 - Brasil é visado em campanha do BadIIS

Cyber Morning Call ·

2025/02/10

[Referências do Episódio] Chinese-Sepaking Group Manipulates SEO with BadIIS -https://www.trendmicro.com/en_us/research/25/b/chinese-speaking-group-manipulates-seo-with-badiis.html Zyxel HTTP Vulnerability-https://vulncheck.com/blog/zyxel-http-vulnRoteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de encerramento: Bianca Garcia

pt-br

00:02:39

721 - Identificada exploração de falhas...

Cyber Morning Call ·

2025/02/07

[Referências do Episódio]Not-so-SimpleHelp exploits enabling deployment of Sliver backdoor - https://fieldeffect.com/blog/field-effect-mitigates-not-so-simplehelp-exploits-enabling-deployment-of-backdoors Babuk Ransomware: a victim of Indodax hack - https://theravenfile.com/2025/02/06/babuk-ransomware-a-victim-of-indodax-hack/?source=post_page-----eefdf1af2e3c-------------------------------- Code injection attacks using publicly disclosed ASP.NET machine keys -

pt-br

00:01:52

720 - SparkCat é visto na Google Play e na App Store

Cyber Morning Call ·

2025/02/06

[Referências do Episódio]Take my money: OCR crypto stealers in Google Play and App Store - https://securelist.com/sparkcat-stealer-in-app-store-and-google-play/115385/ ThreatMon on X:A New Hannibal Stealer Shared” - https://x.com/MonThreat/status/1887121738229600582 Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

pt-br

00:03:17

719 - Documentadas brechas para ataques Supply Chain...

Cyber Morning Call ·

2025/02/05

[Referências do Episódio]8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur - https://labs.watchtowr.com/8-million-requests-later-we-made-the-solarwinds-supply-chain-attack-look-amateur/ CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks - https://www.trendmicro.com/en_us/research/25/a/cve-2025-0411-ukrainian-organizations-targeted.html Stealers on the Rise: A Closer Look at a Growing macOS Threat -

pt-br

00:02:36

718 - Identificados pacotes maliciosos no PyPI com...

Cyber Morning Call ·

2025/02/04

[Referências do Episódio]Malicious packages deepseek and deepseekai published in Python Package Index - https://www.google.com/url?q=https://global.ptsecurity.com/analytics/pt-esc-threat-intelligence/malicious-packages-deepseeek-and-deepseekai-published-in-python-package-index&sa=D&source=docs&ust=1738667193797493&usg=AOvVaw3E9BNcNdMeT3UO3xeP4Sgr Coral Jasmine on X - https://x.com/Fact_Finder03/status/1885209370868203740 OPA Gatekeeper Bypass Reveals Risks in Kubernetes

pt-br

00:02:00

717 - Meta interrompe campanha de spyware

Cyber Morning Call ·

2025/02/03

[Referências do Episódio] WhatsApp says journalists and civil society members were target of Israeli spyware - https://www.theguardian.com/technology/2025/jan/31/whatsapp-israel-spyware How scammers are exploiting DeepSeek’s rise - https://www.welivesecurity.com/en/cybersecurity/scammers-exploiting-deepseek-hype/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

pt-br

00:02:33

716 - Trojan bancário Coyote visa novamente alvos...

Cyber Morning Call ·

2025/01/31

[Referências do Episódio]Coyote Banking Trojan: A Stealthy Attack via LNK files - https://www.fortinet.com/blog/threat-research/coyote-banking-trojan-a-stealthy-attack-via-lnk-files No need to RSVP: a closer look at the Tria Stealer campaign - https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/ HTTP Client Tools Exploitation for Account Takeover Attacks -

pt-br

00:02:35

715 - Nova campanha do Lazarus Group visando...

Cyber Morning Call ·

2025/01/30

[Referências do Episódio] Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign - https://securityscorecard.com/blog/operation-phantom-circuit-north-koreas-global-data-exfiltration-campaign/ Devil-Traff: A New Bulk SMS Platform Driving Phishing Campaigns - https://slashnext.com/blog/devil-traff-a-new-bulk-sms-platform-driving-phishing-campaigns/ FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent -

pt-br

00:02:14

714 - Documentado surgimento do backdoor TorNet

Cyber Morning Call ·

2025/01/29

[Referências do Episódio] New TorNet backdoor seen in widespread campaign - https://blog.talosintelligence.com/new-tornet-backdoor-campaign/ Security Brief: Threat Actors Take Taxes Into Account - https://www.proofpoint.com/us/blog/threat-insight/security-brief-threat-actors-take-taxes-account Critical Vulnerabilities in Node.js Expose Systems to Remote Attacks - https://cyble.com/blog/critical-vulnerabilities-in-node-js-expose-systems/ Roteiro e apresentação: Carlos Cabral e Bianca

pt-br

00:02:37

713 - Publicada prova de conceito (PoC) para falha...

Cyber Morning Call ·

2025/01/28

para preencher

pt-br

00:02:33

712 - Tempest analisa suposto ataque do grupo GD...

Cyber Morning Call ·

2025/01/27

[Referências do Episódio] Tempest analisa suposto ataque contra AWS Amazon pelo grupo GD LockerSec Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query - https://www.akamai.com/blog/security-research/2025/jan/2024-january-kubernetes-log-query-rce-windows [Security Advisory] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API -

pt-br

00:04:58

711 - O Cyber Morning Call faz 3 anos!

Cyber Morning Call ·

2025/01/24

[Referências do Episódio]TLP Black, minha newsletter - https://tlpblack.substack.com/ Product Notice: Urgent Security Notification - SMA 1000 - https://www.sonicwall.com/support/knowledge-base/product-notice-urgent-security-notification-sma-1000/250120090802840 Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications - https://www.cisa.gov/sites/default/files/2025-01/aa25-022a-threat-actors-chained-vulnerabilities-in-ivanti-cloud-service-applications.pdf Salt

pt-br

00:02:55

710 - Extensões maliciosas do Chrome afetam centenas...

Cyber Morning Call ·

2025/01/23

[Referências do Episódio] Targeted supply chain attack against Chrome browser extensions - https://blog.sekoia.io/targeted-supply-chain-attack-against-chrome-browser-extensions/ ClamAV OLE2 File Format Decryption Denial of Service Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA Cisco BroadWorks SIP Denial of Service Vulnerability -

pt-br

418 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs