601 - 0.0.0.0 Day flaw, Earth Baku e PoC público pra vuln crítica no Cisco SSM ON-PREM

Notas do episódio

[Referências do Episódio] 0.0.0.0 Day: Exploiting Localhost APIs From the Browser - https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser A Dive into Earth Baku’s Latest Campaign - https://www.trendmicro.com/en_us/research/24/h/earth-baku-latest-campaign.html CVE-2024-20419 - Cisco Smart Software Manager On-Prem Password Change Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy Best Practices for Cisco Device Configuration - https://www.cisa.gov/news-events/alerts/2024/08/08/best-practices-cisco-device-configuration REPLAY: Revisiting Play Ransomware Anti-Analysis Techniques - https://www.netskope.com/blog/replay-revisiting-play-ransomware-anti-analysis-techniques Unmasking the Overlap Between Golddigger and Gigabud Android Malware - https://cyble.com/blog/unmasking-the-overlap-between-golddigger-and-gigabud-android-malware/ Double Trouble: Latrodectus and ACR Stealer observed spreading via Google Authenticator Phishing Site - https://cyble.com/blog/double-trouble-latrodectus-and-acr-stealer-observed-spreading-via-google-authenticator-phishing-site/ Black Hat USA 2024: AWS ‘Bucket Monopoly’ Flaw Led to Account Takeover - https://hackread.com/black-hat-usa-2024-aws-bucket-monopoly-account-takeover/ Black Hat USA 2024: Chip Flaw ‘GhostWrite’ Steals Data from CPU Memory - https://hackread.com/black-hat-usa-2024-chip-flaw-ghostwrite-data-cpu-memory/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia