x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Morning Call

Tempest Security Intelligence

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

technology

All Episodes

00:07:33

671 - Mais de 2000 firewalls da Palo Alto já foram...

Cyber Morning Call ·

2024/11/22

[Referências do Episódio] ⁠Post da Fundação Shadowserver sobre a exploração das falhas no PAN-OS - https://bsky.app/profile/shadowserver.bsky.social/post/3lbh6k7p7pc27 CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) - https://security.paloaltonetworks.com/CVE-2024-0012 ⁠CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface - https://security.paloaltonetworks.com/CVE-2024-9474 Forti-fied? Logging blind

pt-br

00:05:27

670 - Apple corrige 2 zero-days

Cyber Morning Call ·

2024/11/21

[Referências do Episódio]⁠About the security content of iOS 18.1.1 and iPadOS 18.1.1⁠⁠About the security content of iOS 17.7.2 and iPadOS 17.7.2⁠⁠About the security content of macOS Sequoia 15.1.1⁠⁠About the security content of visionOS 2.1.1⁠⁠About the security content of Safari 18.1.1⁠⁠Qualys Security Advisory - LPEs in needrestart (CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003)⁠⁠Python NodeStealer Targets Facebook Ads Manager with New Techniques⁠⁠Spot the

pt-br

00:03:25

669 - Palo Alto identifica nova vulnerabilidade no...

Cyber Morning Call ·

2024/11/19

[Referências do Episódio]Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 - https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/ VMSA-2024-0019:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813) - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 CVE-2024-10524 Wget Zero Day Vulnerability -

pt-br

00:07:38

668 - Zero-days em Firewalls Palo Alto Networks e...

Cyber Morning Call ·

2024/11/18

[Referências do Episódio] PAN-SA-2024-0015 Critical Security Bulletin: Ensure Access to Management Interface is Secured - https://security.paloaltonetworks.com/PAN-SA-2024-0015 BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA - https://www.volexity.com/blog/2024/11/15/brazenbamboo-weaponizes-forticlient-vulnerability-to-steal-vpn-credentials-via-deepdata/ FG-IR-24-423 - Missing authentication in fgfmsd -

pt-br

00:05:13

667 - Google publica suas previsões sobre cyber em 2025

Cyber Morning Call ·

2024/11/14

[Referências do Episódio]Emerging Threats: Cybersecurity Forecast 2025 - https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2025/ The Problem with IoT Cloud-Connectivity and How it Exposed All OvrC Devices to Hijacking - https://claroty.com/team82/research/the-problem-with-iot-cloud-connectivity-and-how-it-exposed-all-ovrc-devices-to-hijacking Global Companies Are Unknowingly Paying North Koreans: Here’s How to Catch Them -

pt-br

00:05:58

666 - Patch Tuesday: Microsoft corrige 4 zero-days

Cyber Morning Call ·

2024/11/13

[Referências do Episódio]November 2024 Security Updates - https://msrc.microsoft.com/update-guide/releaseNote/2024-Nov APSB24-77 : Security update available for Adobe Bridge - https://helpx.adobe.com/security/products/bridge/apsb24-77.html APSB24-83 : Security update available for Adobe Audition - https://helpx.adobe.com/security/products/audition/apsb24-83.html APSB24-85 : Security update available for Adobe After Effects -

pt-br

00:03:49

665 - Ymir: Novo ransomware é identificado na Colômbia

Cyber Morning Call ·

2024/11/12

[Referências do Episódio]Ymir: new stealthy ransomware in the wild - https://securelist.com/new-ymir-ransomware-found-in-colombia/114493/ 0检测的Melofee 木马新变种曝光，专攻RHEL 7.9系统 - https://blog.xlab.qianxin.com/analysis_of_new_melofee_variant/ Trend Micro and Japanese Partners Reveal Hidden Connections Among SEO Malware Operations - https://www.trendmicro.com/en_us/research/24/k/seo-malware.html Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de

pt-br

00:04:28

664 - Vuln no Veeam é explorada por novo ransomware

Cyber Morning Call ·

2024/11/11

[Referências do Episódio] VEEAM exploit seen used again with a new ransomware: “Frag” - https://news.sophos.com/en-us/2024/11/08/veeam-exploit-seen-used-again-with-a-new-ransomware-frag/ PAN-SA-2024-0015 Important Informational Bulletin: Ensure Access to Management Interface is Secured - https://security.paloaltonetworks.com/PAN-SA-2024-0015 Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns -

pt-br

00:05:55

663 - Novo ataque da Coreia do Norte afeta o macOS

Cyber Morning Call ·

2024/11/08

[Referências do Episódio] BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence - https://www.sentinelone.com/labs/bluenoroff-hidden-risk-threat-actor-targets-macs-with-fake-crypto-news-and-novel-persistence/ The Lazarus Heist - https://www.bbc.co.uk/programmes/w13xtvg9/episodes/downloads GuLoader: Evolving Tactics in Latest Campaign Targeting European Industry - https://www.cadosecurity.com/blog/guloader-targeting-european-industrial-companies

pt-br

00:04:43

662 - Cisco: falha crítica afeta dispositivos...

Cyber Morning Call ·

2024/11/07

[Referências do Episódio]Tempest Academy Conference 2024 - https://www.tempest.com.br/tempest_talk/tempest-academy-conference/ CVE-2024-20418 - Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-backhaul-ap-cmdinj-R7E28Ecs Threat Campaign Spreads Winos4.0 Through Game Application -

pt-br

00:02:42

661 - Interpol conduz operação com 22 mil takedowns e...

Cyber Morning Call ·

2024/11/06

[Referências do Episódio]INTERPOL cyber operation takes down 22,000 malicious IP addresses - https://www.interpol.int/News-and-Events/News/2024/INTERPOL-cyber-operation-takes-down-22-000-malicious-IP-addresses Stable Channel Update for Desktop - Tuesday, November 5, 2024 - https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html Joint ODNI, FBI, and CISA Statement - https://www.cisa.gov/news-events/news/joint-odni-fbi-and-cisa-statement-1 So far, no

pt-br

00:05:55

660 - Novo ataque usa VM com backdoor

Cyber Morning Call ·

2024/11/05

[Referências do Episódio] Tempest Academy Conference 2024 - https://www.tempest.com.br/tempest_talk/tempest-academy-conference/ CRON#TRAP: Emulated Linux Environments as the Latest Tactic in Malware Staging - https://www.securonix.com/blog/crontrap-emulated-linux-environments-as-the-latest-tactic-in-malware-staging/ Android Security Bulletin November 2024 - https://source.android.com/docs/security/bulletin/2024-11-01 Malware Analysis Report - Pygmy Goat -

pt-br

00:05:17

659 - 1ª vuln encontrada por IA é documentada

Cyber Morning Call ·

2024/11/04

[Referências do Episódio] [TREND MICRO NO FORRESTER] - https://www.trendmicro.com/explore/forrester-wave-xdr/01054-v1-en-www From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code - https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html G700 : The Next Generation of Craxs RAT - https://www.cyfirma.com/research/g700-the-next-generation-of-craxs-rat/ The curious case of the 7777-Botnet -

pt-br

00:04:18

658 - Pacote popular no npm é trojanizado

Cyber Morning Call ·

2024/11/01

[Referências do Episódio]Tweet da LottieFiles sobre o comprometimento do Lottie-Player - https://x.com/LottieFiles/status/1851848602093777273 Hackers target critical zero-day vulnerability in PTZ cameras - https://www.bleepingcomputer.com/news/security/hackers-target-critical-zero-day-vulnerability-in-ptz-cameras/ Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files -

pt-br

00:06:07

657 - Coreia do Norte colaborou com ransomware Play,...

Cyber Morning Call ·

2024/10/31

[Referências do Episódio]Jumpy Pisces Engages in Play Ransomware - https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/ Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware - https://www.zimperium.com/blog/mishing-in-motion-uncovering-the-evolving-functionality-of-fakecall-malware/ EMERALDWHALE: 15k Cloud Credentials Stolen in Operation Targeting Exposed Git Config Files - https://sysdig.com/blog/emeraldwhale/ Крысиный король: как

pt-br

00:04:49

656 - Servidores Confluence têm sido maliciosamente...

Cyber Morning Call ·

2024/10/30

[Referências do Episódio]Attacker Abuses Victim Resources to Reap Rewards from Titan Network - https://www.trendmicro.com/en_us/research/24/j/titan-network.html CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server - https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html CISA Releases Three Industrial Control Systems Advisories -

pt-br

00:04:30

655 - O jogo de gato e rato entre infostealers e o...

Cyber Morning Call ·

2024/10/29

[Referências do Episódio] Katz and Mouse Game: MaaS Infostealers Adapt to Patched Chrome Defenses - https://www.elastic.co/security-labs/katz-and-mouse-game Redline, Meta infostealer malware operations seized by police - https://www.bleepingcomputer.com/news/legal/redline-meta-infostealer-malware-operations-seized-by-police/ Hybrid Russian Espionage and Influence Campaign Aims to Compromise Ukrainian Military Recruits and Deliver Anti-Mobilization Narratives -

pt-br

00:05:09

654 - Técnica é adaptada para abusar de mecanismo do...

Cyber Morning Call ·

2024/10/28

[Referências do Episódio] An Update on Windows Downdate - https://www.safebreach.com/blog/update-on-windows-downdate-downgrade-attacks/ Introducing a New Vulnerability Class: False File Immutability - https://www.elastic.co/security-labs/false-file-immutability Joint Statement by FBI and CISA on PRC Activity Targeting Telecommunications - https://www.cisa.gov/news-events/news/joint-statement-fbi-and-cisa-prc-activity-targeting-telecommunications Chinese Hackers Are Said to Have Targeted

pt-br

00:04:23

653 - Nova variante do ransomware Qilin é documentada

Cyber Morning Call ·

2024/10/25

[Referências do Episódio] New Qilin.B Ransomware Variant Boasts Enhanced Encryption and Defense Evasion - https://www.halcyon.ai/blog/new-qilin-b-ransomware-variant-boasts-enhanced-encryption-and-defense-evasion CISA Adds Two Known Exploited Vulnerabilities to Catalog - https://www.cisa.gov/news-events/alerts/2024/10/24/cisa-adds-two-known-exploited-vulnerabilities-catalog AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover -

pt-br

00:06:49

652 - Zero-Day no FortiManager está sob ataque

Cyber Morning Call ·

2024/10/24

[Referências do Episódio]Ada Lovelace Day 2024 - https://www.even3.com.br/ada-lovelace-day-2024-tempest/ FG-IR-24-423 - CVE-2024-47575 - Missing authentication in fgfmsd - https://fortiguard.fortinet.com/psirt/FG-IR-24-423 CVE-2024-47575: Frequently Asked Questions About FortiJump Zero-Day in FortiManager and FortiManager Cloud - https://www.tenable.com/blog/cve-2024-47575-faq-about-fortijump-zero-day-in-fortimanager-fortimanager-cloud Investigating FortiManager Zero-Day Exploitation

pt-br

420 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs