866 - Um pacote infectado, centenas comprometidos: entenda o ataque Shai-Hulud ao ecossistema npm

Notas do episódio

Referências do Episódio WEBINAR Black Friday: Cibersegurança pra além do básico, sem esquecer o básico Self-propagating supply chain attack hits 187 npm packages Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages ctrl/tinycolor and 40+ NPM Packages Compromised S1ngularity/nx attackers strike again FileFix in the wild! New FileFix campaign goes beyond POC and leverages steganography RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT Apple backports zero-day patches to older iPhones and iPads Under the Pure Curtain: From RAT to Builder to Coder Chaotic Deputy: Critical vulnerabilities in Chaos Mesh lead to Kubernetes cluster takeover Mapping the Infrastructure and Malware Ecosystem of MuddyWater Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia