922 - Microsoft corrige 3 zero-days em Patch Tuesday de dezembro

Notas do episódio

Referencias do episodio Webinar Tendencias em Cyber 2026 https://www.even3.com.br/tendencias-em-cyber-2026-661705/ Microsoft December 2025 Patch Tuesday fixes 3 zero-days, 57 flaws https://www.bleepingcomputer.com/news/microsoft/microsoft-december-2025-patch-tuesday-fixes-3-zero-days-57-flaws/ Microsofts December 2025 Patch Tuesday Addresses 56 CVEs (CVE-2025-62221) https://www.tenable.com/blog/microsofts-december-2025-patch-tuesday-addresses-56-cves-cve-2025-62221 Microsoft and Adobe Patch Tuesday, December 2025 – Security Update Review https://blog.qualys.com/vulnerabilities-threat-research/2025/12/09/microsoft-patch-tuesday-december-2025-security-update-review Fortinet warns of critical FortiCloud SSO login auth bypass flaws https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-forticloud-sso-login-auth-bypass-flaws/ Multiple Fortinet Products FortiCloud SSO Login Authentication Bypass https://www.fortiguard.com/psirt/FG-IR-25-647 Security Advisory EPM December 2025 for EPM 2024 https://forums.ivanti.com/s/article/Security-Advisory-EPM-December-2025-for-EPM-2024 CVE-2025-10573: Ivanti EPM Unauthenticated Stored Cross-Site Scripting (Fixed) https://www.rapid7.com/blog/post/cve-2025-10573-ivanti-epm-unauthenticated-stored-cross-site-scripting-fixed/ PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182 https://www.huntress.com/blog/peerblight-linux-backdoor-exploits-react2shell EtherRAT: DPRK uses novel Ethereum implant in React2Shell attacks https://www.sysdig.com/blog/etherrat-dprk-uses-novel-ethereum-implant-in-react2shell-attacks China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/ CVE-2025-55182: React2Shell Critical Vulnerability — what it is and what to do https://www.dynatrace.com/news/blog/cve-2025-55182-react2shell-critical-vulnerability-what-it-is-and-what-to-do/ Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia