x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Morning Call

Tempest Security Intelligence

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido para que você possa ajustar o curso do seu dia de modo a tomar as melhores decisões de cibersegurança para sua empresa.

technology

All Episodes

00:02:34

611 - Switches da Cisco são explorados pelo grupo...

Cyber Morning Call ·

2024/08/23

[Referências do Episódio]China-Nexus Threat Group ‘Velvet Ant’ Leverages a Zero-Day to Deploy Malware on Cisco Nexus Switches - https://www.sygnia.co/blog/china-threat-group-velvet-ant-cisco-zero-day/ Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites - https://patchstack.com/articles/critical-privilege-escalation-in-litespeed-cache-plugin-affecting-5-million-sites Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987) -

pt-br

00:05:09

610 - Um curioso uso do comando COPY…FROM

Cyber Morning Call ·

2024/08/22

[Referências do Episódio]Stable Channel Update for Desktop, Wednesday, August 21, 2024 - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html MoonPeak malware from North Korean actors unveils new details on attacker infrastructure - https://blog.talosintelligence.com/moonpeak-malware-infrastructure-north-korea/ Enterprise Server 3.13.3 - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes PG_MEM: A Malware Hidden in the Postgres

pt-br

00:05:25

609 - PWAs permitem ataques contra iOS e Android

Cyber Morning Call ·

2024/08/21

[Referências do Episódio]Be careful what you pwish for – Phishing in PWA applications - https://www.welivesecurity.com/en/eset-research/be-careful-what-you-pwish-for-phishing-in-pwa-applications/ New Backdoor Targeting Taiwan Employs Stealthy Communications - https://symantec-enterprise-blogs.security.com/threat-intelligence/taiwan-malware-dns GreenCharlie Infrastructure Targeting US Political Entities with Advanced Phishing and Malware -

pt-br

00:05:29

608 - Falhas sérias afetam MS Office e Teams para MacOS

Cyber Morning Call ·

2024/08/20

[Referências do Episódio]How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions - https://blog.talosintelligence.com/how-multiple-vulnerabilities-in-microsoft-apps-for-macos-pave-the-way-to-stealing-permissions/ CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks - https://thehackernews.com/2024/08/cisa-warns-of-critical-jenkins.html Experts warn of exploit attempt for Ivanti vTM bug -

pt-br

00:05:04

607 - Irã usou ChatGPT contra eleição dos EUA

Cyber Morning Call ·

2024/08/19

[Referências do Episódio] Disrupting a covert Iranian influence operation - https://openai.com/index/disrupting-a-covert-iranian-influence-operation/ Iran steps into US election 2024 with cyber-enabled influence operations - https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-brand/documents/5bc57431-a7a9-49ad-944d-b93b7d35d0fc.pdf Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove -

pt-br

00:05:10

606 - 90 mil ambientes expostos à extorsão

Cyber Morning Call ·

2024/08/16

[Referências do Episódio] Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments - https://unit42.paloaltonetworks.com/large-scale-cloud-extortion-operation/ Ransomware attackers introduce new EDR killer to their arsenal - https://news.sophos.com/en-us/2024/08/14/edr-kill-shifter/ A Deep Dive into a New ValleyRAT Campaign Targeting Chinese Speakers - https://www.fortinet.com/blog/threat-research/valleyrat-campaign-targeting-chinese-speakers Tusk:

pt-br

00:04:08

605 - Quadrilha FIN7 tem infra revelada

Cyber Morning Call ·

2024/08/15

[Referências do Episódio]FIN7: The Truth Doesn't Need to be so STARK - https://www.team-cymru.com/post/fin7-the-truth-doesn-t-need-to-be-so-stark WHD 12.8.3 Hotfix 1 - https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1 Cryptocurrency Lures and Pupy RAT: Analysing the UTG-Q-010 Campaign - https://cyble.com/blog/analysing-the-utg-q-010-campaign/ EastWind campaign: new CloudSorcerer attacks on government organizations in Russia -

pt-br

00:06:44

604 - Microsoft corrige 9 zero-days, ataques afetam 6.

Cyber Morning Call ·

2024/08/14

[Referências do Episódio]Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited - https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2024-patch-tuesday-fixes-9-zero-days-6-exploited/ SAP Security Patch Day – August 2024 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2024.html Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593) -

pt-br

00:03:36

603 - Falha zero-click no Outlook é dissecada

Cyber Morning Call ·

2024/08/13

[Referências do Episódio] Technical Analysis: CVE-2024-30103 - https://blog.morphisec.com/cve-2024-30103-technical-analysis FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability - https://thehackernews.com/2024/08/freebsd-releases-urgent-patch-for-high.html FBI disrupts the Dispossessor ransomware operation, seizes servers - https://www.bleepingcomputer.com/news/security/fbi-disrupts-the-dispossessor-ransomware-operation-seizes-servers/ Roteiro e apresentação: Carlos

pt-br

00:04:34

602 - Golpes contra call centers resultam em fraudes

Cyber Morning Call ·

2024/08/12

[Referências do Episódio] Ligação a cobrar: como criminosos estão atacando atendentes de call centers usando engenharia social - https://sidechannel.blog/ligacao-a-cobrar-como-criminosos-estao-atacando-atendentes-de-call-centers/ QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share - https://www.safebreach.com/blog/rce-attack-chain-on-quick-share Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share -

pt-br

00:05:41

601 - 0.0.0.0 Day flaw, Earth Baku e PoC público pra...

Cyber Morning Call ·

2024/08/09

[Referências do Episódio]0.0.0.0 Day: Exploiting Localhost APIs From the Browser - https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser A Dive into Earth Baku’s Latest Campaign - https://www.trendmicro.com/en_us/research/24/h/earth-baku-latest-campaign.html CVE-2024-20419 - Cisco Smart Software Manager On-Prem Password Change Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy Best

pt-br

00:04:46

... e chegamos aos 600 episódios

Cyber Morning Call ·

2024/08/08

[Referências do Episódio]Windows Downdate: Downgrade Attacks Using Windows Updates - https://www.blackhat.com/us-24/briefings/schedule/index.html#windows-downdate-downgrade-attacks-using-windows-updates-38963 Windows Update downgrade attack "unpatches" fully-updated systems - https://www.bleepingcomputer.com/news/microsoft/windows-update-downgrade-attack-unpatches-fully-updated-systems/ Windows Update Stack Elevation of Privilege Vulnerability -

pt-br

00:04:27

Cyber Morning Call - #599 - 07/08/2024

Cyber Morning Call ·

2024/08/07

[Referências do Episódio]External Technical Root Cause Analysis — Channel File 291 - https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf France's Grand Palais discloses cyberattack during Olympic games - https://www.bleepingcomputer.com/news/security/frances-grand-palais-discloses-cyberattack-during-olympic-games/ Turning the screws: The pressure tactics of ransomware gangs -

pt-br

00:04:37

Cyber Morning Call - #598 - 06/08/2024

Cyber Morning Call ·

2024/08/06

[Referências do Episódio]SonicWall Discovers Second Critical Apache OFBiz Zero-Day Vulnerability: Details and analysis on CVE-2024-38856, a pre-auth RCE in Apache OFBiz. - https://blog.sonicwall.com/en-us/2024/08/sonicwall-discovers-second-critical-apache-ofbiz-zero-day-vulnerability/ Dismantling Smart App Control - https://www.elastic.co/security-labs/dismantling-smart-app-control Gh0st RAT: malware ativo há 15 anos ainda é usado por agentes de ameaças -

pt-br

00:03:25

Cyber Morning Call - #597 - 05/08/2024

Cyber Morning Call ·

2024/08/05

[Referências do Episódio] StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms - https://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/ Panamorfi: A New Discord DDoS Campaign - https://www.aquasec.com/blog/panamorfi-a-new-discord-ddos-campaign/ SLUBStick: Arbitrary Memory Writes through Practical Software Cross-Cache Attacks within the Linux Kernel - https://www.stefangast.eu/papers/slubstick.pdf SLUBStick:

pt-br

00:05:06

Cyber Morning Call - #596 - 02/08/2024

Cyber Morning Call ·

2024/08/02

[Referências do Episódio]Quartet of Trouble: XWorm, AsyncRAT, VenomRAT, and PureLogs Stealer Leverage TryCloudflare - https://www.esentire.com/blog/quartet-of-trouble-xworm-asyncrat-venomrat-and-purelogs-stealer-leverage-trycloudflare Threat Actor Abuses Cloudflare Tunnels to Deliver RATs - https://www.proofpoint.com/us/blog/threat-insight/threat-actor-abuses-cloudflare-tunnels-deliver-rats BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor -

pt-br

00:05:22

Cyber Morning Call - #595 - 01/08/2024

Cyber Morning Call ·

2024/08/01

[Referências do Episódio]Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft - https://www.trendmicro.com/en_us/research/24/h/malvertising-campaign-fake-ai-editor-website-credential-theft.html Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry - https://unit42.paloaltonetworks.com/bola-vulnerability-impacts-container-registry-harbor/ Who Knew? Domain Hijacking Is So Easy -

pt-br

00:04:33

Cyber Morning Call - #594 - 31/07/2024

Cyber Morning Call ·

2024/07/31

[Referências do Episódio]Beware the RAT: Android Remote Access malware strikes in Malaysia - https://www.group-ib.com/blog/craxs-rat-malaysia/ Mint Stealer: A Comprehensive Study of a Python-Based Information Stealer - https://www.cyfirma.com/research/mint-stealer-a-comprehensive-study-of-a-python-based-information-stealer/ Critical ServiceNow vulnerabilities being targeted by hackers, cyber agency warns - https://therecord.media/critical-servicenow-vulnerabilities-hackers-cisa

pt-br

00:06:16

Cyber Morning Call - #593 - 30/07/2024

Cyber Morning Call ·

2024/07/30

[Referências do Episódio] - Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption - https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/ - VMSA-2024-0013:VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087) -

pt-br

00:03:48

Cyber Morning Call - #592 - 29/07/2024

Cyber Morning Call ·

2024/07/29

[Referências do Episódio] Malicious Python Package Targets macOS Developers To Access Their GCP Accounts - https://checkmarx.com/blog/malicious-python-package-targets-macos-developers-to-access-their-gcp-accounts/ Rafel RAT: A Pest Invading Droid Systems - https://www.bitdefender.com/blog/businessinsights/rafel-rat-a-pest-invading-droid-systems/ SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining -

pt-br

420 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs