x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Morning Call

Tempest Security Intelligence

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

technology

All Episodes

00:04:58

711 - O Cyber Morning Call faz 3 anos!

Cyber Morning Call ·

2025/01/24

[Referências do Episódio]TLP Black, minha newsletter - https://tlpblack.substack.com/ Product Notice: Urgent Security Notification - SMA 1000 - https://www.sonicwall.com/support/knowledge-base/product-notice-urgent-security-notification-sma-1000/250120090802840 Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications - https://www.cisa.gov/sites/default/files/2025-01/aa25-022a-threat-actors-chained-vulnerabilities-in-ivanti-cloud-service-applications.pdf Salt

pt-br

00:02:55

710 - Extensões maliciosas do Chrome afetam centenas...

Cyber Morning Call ·

2025/01/23

[Referências do Episódio] Targeted supply chain attack against Chrome browser extensions - https://blog.sekoia.io/targeted-supply-chain-attack-against-chrome-browser-extensions/ ClamAV OLE2 File Format Decryption Denial of Service Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA Cisco BroadWorks SIP Denial of Service Vulnerability -

pt-br

00:05:23

709 - Quadrilhas usam MS Teams para disseminar...

Cyber Morning Call ·

2025/01/22

[Referências do Episódio]Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing” - https://news.sophos.com/en-us/2025/01/21/sophos-mdr-tracks-two-ransomware-campaigns-using-email-bombing-microsoft-teams-vishing/ Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai - https://blog.qualys.com/vulnerabilities-threat-research/2025/01/21/mass-campaign-of-murdoc-botnet-mirai-a-new-variant-of-corona-mirai Record-breaking 5.6 Tbps DDoS attack and global DDoS

pt-br

00:02:15

708 - GamaCopy imita Gamaredom em ataques com...

Cyber Morning Call ·

2025/01/21

[Referências do Episódio]Love and hate under war: The GamaCopy organization, which imitates the Russian Gamaredon, uses military — related bait to launch attacks on Russia - https://medium.com/@knownsec404team/love-and-hate-under-war-the-gamacopy-organization-which-imitates-the-russian-gamaredon-uses-560ba5e633fa Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

pt-br

00:03:51

707 - EUA sanciona envolvidos nos ataques do Silk...

Cyber Morning Call ·

2025/01/20

[Referências do Episódio] Treasury Sanctions Company Associated with Salt Typhoon and Hacker Associated with Treasury Compromise - https://home.treasury.gov/news/press-releases/jy2792 ANDROID MALWARE IN DONOT APT OPERATIONS - https://www.cyfirma.com/research/android-malware-in-donot-apt-operations/ Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation - https://thehackernews.com/2025/01/critical-flaws-in-wgs-804hpt-switches.html Hack The Emulated Planet:

pt-br

00:05:32

706 - Nova campanha de phishing da Rússia afeta...

Cyber Morning Call ·

2025/01/17

[Referências do Episódio]New Star Blizzard spear-phishing campaign targets WhatsApp accounts - https://www.microsoft.com/en-us/security/blog/2025/01/16/new-star-blizzard-spear-phishing-campaign-targets-whatsapp-accounts/ Under the cloak of UEFI Secure Boot: Introducing CVE-2024-7344 - https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/ Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service -

pt-br

00:04:35

705 - Leak afeta 15 mil firewalls Fortinet

Cyber Morning Call ·

2025/01/16

[Referências do Episódio]Hackers leak configs and VPN credentials for 15,000 FortiGate devices - https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/ 2022 zero day was used to raid Fortigate firewall configs. Somebody just released them. - https://doublepulsar.com/2022-zero-day-was-used-to-raid-fortigate-firewall-configs-somebody-just-released-them-a7a74e0b0c7f The great Google Ads heist: criminals ransack advertiser accounts

pt-br

00:06:07

704 - Patch Tuesday: Zero-days sob exploração em...

Cyber Morning Call ·

2025/01/15

[Referências do Episódio]Atualizações de Segurança de janeiro de 2025 - https://msrc.microsoft.com/update-guide/releaseNote/2025-Jan Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws - https://www.bleepingcomputer.com/news/microsoft/microsoft-january-2025-patch-tuesday-fixes-8-zero-days-159-flaws/ January 14, 2025—KB5049981 (OS Builds 19044.5371 and 19045.5371) -

pt-br

00:05:55

703 - Campanha de extorsão abusa da criptografia da...

Cyber Morning Call ·

2025/01/14

[Referências do Episódio] TLP Black - https://tlpblack.substack.com/p/n-1-tufoes-na-america-do-norte Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C - https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions -

pt-br

00:05:09

702 - Novo ransomware usa código gerado por IA

Cyber Morning Call ·

2025/01/13

[Referências do Episódio] FunkSec – Alleged Top Ransomware Group Powered by AI - https://research.checkpoint.com/2025/funksec-alleged-top-ransomware-group-powered-by-ai/ Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices - https://thehackernews.com/2025/01/google-project-zero-researcher-uncovers.html Transaction Simulation Spoofing: A New Threat in Web3 - https://drops.scamsniffer.io/transaction-simulation-spoofing-a-new-threat-in-web3/ Double-Tap

pt-br

00:05:20

701 - APT RedDelta inclui alvos no Brasil

Cyber Morning Call ·

2025/01/10

[Referências do Episódio]Chinese State-Sponsored RedDelta Targeted Taiwan, Mongolia, and Southeast Asia with Adapted PlugX Infection Chain - https://www.recordedfuture.com/research/reddelta-chinese-state-sponsored-group-targets-mongolia-taiwan-southeast-asia Banshee: The Stealer That “Stole Code” From MacOS XProtect - https://research.checkpoint.com/2025/banshee-macos-stealer-that-stole-code-from-macos-xprotect/ The Hunt for RedCurl - https://www.huntress.com/blog/the-hunt-for-redcurl-2

pt-br

00:05:47

700 - CHEGAMOS AOS 700 EPISÓDIOS!!!!

Cyber Morning Call ·

2025/01/09

[Referências do Episódio]Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-0282, CVE-2025-0283) - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en_US Security Update: Ivanti Connect Secure, Policy Secure and Neurons for ZTA Gateways - https://www.ivanti.com/blog/security-update-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways SonicWall warns of an

pt-br

00:04:41

699 - Android solta primeiro pacote de patches de 2025

Cyber Morning Call ·

2025/01/08

[Referências do Episódio]Android Security Bulletin January 2025 - https://source.android.com/docs/security/bulletin/2025-01-01 MediaTek reveals host of security vulnerabilities, so patch now - https://www.techradar.com/pro/security/mediatek-reveals-host-of-security-vulnerabilities-so-patch-now Genetic Engineering Meets Reverse Engineering: DNA Sequencer's Vulnerable BIOS - https://eclypsium.com/blog/genetic-engineering-meets-reverse-engineering-dna-sequencers-vulnerable-bios/ Tracking Deployment

pt-br

00:03:52

698 - Botnet Gayfemboy abusa de zero-days

Cyber Morning Call ·

2025/01/07

[Referências do Episódio] Gayfemboy：一个利用四信工业路由0DAY传播的僵尸网络 - https://blog.xlab.qianxin.com/gayfemboy/ Moxa Alerts Users to High-Severity Vulnerabilities in Cellular and Secure Routers - https://thehackernews.com/2025/01/moxa-alerts-users-to-high-severity.html CISA Update on Treasury Breach - https://www.cisa.gov/news-events/news/cisa-update-treasury-breach Nota de falecimento: Danton Nunes, pioneiro da Internet no Brasil -

pt-br

00:04:15

697 - Publicado PoC para falha que derruba o Active...

Cyber Morning Call ·

2025/01/06

[Referências do Episódio] LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49113 - https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49113/ Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405) - https://www.wiz.io/blog/nuclei-signature-verification-bypass EAGERBEE, with updated and novel components, targets the Middle

pt-br

00:02:25

696 - Estudo revela a ameaça NonEuclid RAT

Cyber Morning Call ·

2025/01/03

[Referências do Episódio] NonEuclid Remote Access Trojan - https://www.cyfirma.com/research/noneclid-rat/ HIGH: Vulnerable POP3 Report - https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-pop3-report/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

pt-br

00:04:05

695 - Ataque afeta Departamento do Tesouro dos EUA

Cyber Morning Call ·

2025/01/02

[Referências do Episódio] Treasury says Chinese hackers remotely accessed documents in 'major' cyber incident - https://www.npr.org/2024/12/31/nx-s1-5243850/china-hacking-treasury-cyber-security Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents - https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html Beijing denies involvement in US treasury cyber-attack -

pt-br

00:04:45

694 - Ataque afeta, pelo menos, 16 extensões para o...

Cyber Morning Call ·

2024/12/30

[Referências do Episódio]Cyberhaven’s Chrome extension security incident and what we’re doing about it - https://www.cyberhaven.com/blog/cyberhavens-chrome-extension-security-incident-and-what-were-doing-about-it 16 Chrome Extensions Hacked, Exposing Over 600,000 Users to Data Theft - https://thehackernews.com/2024/12/16-chrome-extensions-hacked-exposing.html Inside FireScam : An Information Stealer with Spyware Capabilities -

pt-br

00:04:05

693 - Fortinet detecta pico em ataques contra...

Cyber Morning Call ·

2024/12/27

[Referências do Episódio] Botnets Continue to Target Aging D-Link Vulnerabilities - https://www.fortinet.com/blog/threat-research/botnets-continue-to-target-aging-d-link-vulnerabilities Contagious Interviewが使用する新たなマルウェアOtterCookieについて - https://polite-sea-077fba000.1.azurestaticapps.net/tech_blog/contagious-interview-ottercookie CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet -

pt-br

00:04:20

692 - Novas falhas em tecnologias da Adobe e Apache

Cyber Morning Call ·

2024/12/26

[Referências do Episódio] Security updates available for Adobe ColdFusion | APSB24-107 - https://helpx.adobe.com/security/products/coldfusion/apsb24-107.html [SECURITY] CVE-2024-56337 Apache Tomcat - RCE via write-enabled default servlet - CVE-2024-50379 mitigation was incomplete - https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp CVE-2024-45387: Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments -

pt-br

420 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs