x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Morning Call

Tempest Security Intelligence

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

technology

All Episodes

00:03:39

691 - Sophos corrige 3 falhas críticas em seus firewalls

Cyber Morning Call ·

2024/12/23

[Referências do Episódio]Sophos discloses critical Firewall remote code execution flaw - https://www.bleepingcomputer.com/news/security/sophos-discloses-critical-firewall-remote-code-execution-flaw/ Lazarus group evolves its infection chain with old and new malware - https://securelist.com/lazarus-new-malware/115059/ Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript - https://unit42.paloaltonetworks.com/using-llms-obfuscate-malicious-javascript/ Roteiro e

pt-br

00:03:59

690 - Nova campanha do NodeStealer foca no Facebook...

Cyber Morning Call ·

2024/12/19

[Referências do Episódio]Python-Based NodeStealer Version Targets Facebook Ads Manager - ⁠https://www.trendmicro.com/en_us/research/24/l/python-based-nodestealer.html⁠ NotLockBit: A Deep Dive Into the New Ransomware Threat - ⁠https://blog.qualys.com/vulnerabilities-threat-research/2024/12/18/notlockbit-a-deep-dive-into-the-new-ransomware-threat⁠ A new playground: Malicious campaigns proliferate from VSCode to npm -

pt-br

00:06:47

689 - Falha de RCE no Apache Struts 2 está sendo...

Cyber Morning Call ·

2024/12/18

[Referências do Episódio]S2-067 - CVE-2024-53677 - https://cwiki.apache.org/confluence/display/WW/S2-067 New critical Apache Struts flaw exploited to find vulnerable servers - https://www.bleepingcomputer.com/news/security/new-critical-apache-struts-flaw-exploited-to-find-vulnerable-servers/ 2024-12 Reference Advisory: Session Smart Router: Mirai malware found on systems when the default password remains unchanged -

pt-br

00:03:24

688 - Documentado uso de malvertising em diversas...

Cyber Morning Call ·

2024/12/17

[Referências do Episódio]ESET Threat Report H2 2024 - https://www.welivesecurity.com/en/eset-research/eset-threat-report-h2-2024/ “DeceptionAds” - Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising - https://labs.guard.io/deceptionads-fake-captcha-driving-infostealer-infections-and-a-glimpse-to-the-dark-side-of-0c516f4dc0b6 CoinLurker: The Stealer Powering the Next Generation of Fake Updates -

pt-br

00:06:57

687 - Ataques de Password Spraying afetam o Netscaler

Cyber Morning Call ·

2024/12/16

[Referências do Episódio] Password spraying attacks on NetScaler/NetScaler Gateway – December 2024 - https://www.citrix.com/blogs/2024/12/13/password-spraying-attacks-netscaler-december-2024 The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit - https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html NodeLoader Exposed: The Node.js Malware Evading Detection -

pt-br

00:03:29

686 - Pumakit: descoberto novo rootkit para Linux

Cyber Morning Call ·

2024/12/13

[Referências do Episódio]Declawing PUMAKIT - https://www.elastic.co/security-labs/declawing-pumakit#stage-2-memory-resident-executables-overview CVE-2024-49071 - Windows Defender Information Disclosure Vulnerability - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49071 CVE-2024-49147 - Vulnerabilidade de elevação de privilégio do Catálogo do Microsoft Update - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49147 Careto is back: what’s new after 10 years

pt-br

00:06:22

685 - Guerra de APTs: Secret Blizzard se infiltrou em...

Cyber Morning Call ·

2024/12/12

[Referências do Episódio]Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine - https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/ Lookout Discovers New Chinese Surveillance Tool Used by Public Security Bureaus - https://www.lookout.com/threat-intelligence/article/eaglemsgspy-chinese-android-surveillanceware Likely China-based

pt-br

00:04:37

684 - Patch tuesday de dezembro tem zero-day no...

Cyber Morning Call ·

2024/12/11

[Referências do Episódio]Atualizações de Segurança de dezembro de 2024 - https://msrc.microsoft.com/update-guide/releaseNote/2024-Dec December Security Update - https://www.ivanti.com/blog/december-security-update SAP Security Patch Day – December 2024 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news/december-2024.html CISA Releases Seven Industrial Control Systems Advisories -

pt-br

00:03:31

683 - Glutton: novo loader instala backdoor do APT...

Cyber Morning Call ·

2024/12/10

[Referências do Episódio] 黑白通吃：Glutton木马潜伏主流PHP框架，隐秘侵袭长达1年 - https://blog.xlab.qianxin.com/glutton_stealthily_targets_mainstream_php_frameworks/ Threat Advisory: Oh No Cleo! Cleo Software Actively Being Exploited in the Wild - https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild Cleo Product Security Advisory - CVE-2024-50623 - https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory-CVE-2024-50623 MC

pt-br

00:04:01

682 - Vuln no GitHub Actions permite adulterar pacote...

Cyber Morning Call ·

2024/12/09

[Referências do Episódio] Compromised ultralytics PyPI package delivers crypto coinminer - https://www.reversinglabs.com/blog/compromised-ultralytics-pypi-package-delivers-crypto-coinminer Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection - https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/ URL File NTLM Hash Disclosure Vulnerability (0day) - and Free Micropatches for it -

pt-br

00:04:56

681 - BlueAlpha abusa de Cloudflare em ataques na...

Cyber Morning Call ·

2024/12/06

[Referências do Episódio]BlueAlpha Abuses Cloudflare Tunneling Service for GammaDrop Staging Infrastructure - https://go.recordedfuture.com/hubfs/reports/cta-ru-2024-1205.pdf Mitel Product Security Advisory MISA-2024-0029 MiCollab Path Traversal Vulnerability - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day -

pt-br

00:06:11

680 - Guerra de APTs envolvendo russos e...

Cyber Morning Call ·

2024/12/05

[

pt-br

00:03:39

679 - Vuln de 2014 no Cisco ASA passa a ser explorada

Cyber Morning Call ·

2024/12/04

[Referências do Episódio]Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 Exploit released for critical WhatsUp Gold RCE flaw, patch now - https://www.bleepingcomputer.com/news/security/exploit-released-for-critical-whatsup-gold-rce-flaw-patch-now/ Veeam Service Provider Console Vulnerabilities (CVE-2024-42448 | CVE-2024-42449) -

pt-br

00:03:47

678 - O SmokeLoader ressurge

Cyber Morning Call ·

2024/12/03

[Referências do Episódio]SmokeLoader Attack Targets Companies in Taiwan - https://www.fortinet.com/blog/threat-research/sophisticated-attack-targets-taiwan-with-smokeloader Unveiling RevC2 and Venom Loader - https://www.zscaler.com/blogs/security-research/unveiling-revc2-and-venom-loader Gafgyt Malware Targeting Docker Remote API Servers - https://www.trendmicro.com/en_us/research/24/l/gafgyt-malware-targeting-docker-remote-api-servers.html Roteiro e apresentação: Carlos Cabral e Bianca

pt-br

00:03:37

677 - Cresce o número de anúncios de jogos de apostas...

Cyber Morning Call ·

2024/12/02

[Referências do Episódio] Shady Bets: How to Protect Yourself from Gambling Fraud Online - https://www.group-ib.com/blog/shady-bets/ IT threat evolution in Q3 2024. Non-obile statistics - https://securelist.com/malware-report-q3-2024-non-mobile-statistics/114695/ Ransomware Roundup - Interlock - https://www.fortinet.com/blog/threat-research/ransomware-roundup-interlock Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca

pt-br

00:02:25

676 - 20 vulns são descobertas em wifi industrial

Cyber Morning Call ·

2024/11/29

[Referências do Episódio]Over Two Dozen Flaws Identified in Advantech Industrial Wi-Fi Access Points – Patch ASAP - https://thehackernews.com/2024/11/over-two-dozen-flaws-identified-in.html Malicious PyPI crypto pay package aiocpa implants infostealer code - https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code Malicious NPM Package Exploits React Native Documentation Example -

pt-br

00:05:05

675 - UEFI bootkit para Linux é detectado

Cyber Morning Call ·

2024/11/28

[Referências do Episódio]Bootkitty: Analyzing the first UEFI bootkit for Linux - https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers - https://thehackernews.com/2024/11/critical-flaw-in-projectsend-under.html VMware fixed five vulnerabilities in Aria Operations product -

pt-br

00:04:17

674 - Zero-days no Firefox e no Windows instalam...

Cyber Morning Call ·

2024/11/27

[Referências do Episódio]TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ RomCom exploits Firefox and Windows zero days in the wild - https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ Analysis of Elpaco: a Mimic variant - https://securelist.com/elpaco-ransomware-a-mimic-variant/114635/ Matrix Unleashes A New Widespread DDoS Campaign -

pt-br

00:05:29

673 - Grupo hacktivista russo agora opera ransomware

Cyber Morning Call ·

2024/11/26

[Referências do Episódio] TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks - https://www.sentinelone.com/labs/cybervolk-a-deep-dive-into-the-hacktivists-tools-and-ransomware-fueling-pro-russian-cyber-attacks/ Guess Who’s Back - The Return of ANEL in the Recent Earth Kasha Spear-phishing Campaign in 2024 -

pt-br

00:05:05

672 - Trend detalha os recentes ataques do Salt Typhoon

Cyber Morning Call ·

2024/11/25

[Referências do Episódio] TEMPEST TALKS - https://www.even3.com.br/tempest-talks-2024-497677/ Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - https://www.trendmicro.com/en_us/research/24/k/earth-estries.html The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access - https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ Microsoft shares latest

pt-br

420 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs