Cyber Morning Call - #334 - 14/06/2023

Notas do episódio

[Referências do Episódio] - Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs - https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2023-patch-tuesday-fixes-78-flaws-38-rce-bugs/ - VMware ESXi Zero-Day Used by Chinese Espionage Actor to Perform Privileged Guest Operations on Compromised Hypervisors - https://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypass - VMSA-2023-0013 - VMware Tools update addresses Authentication Bypass vulnerability (CVE-2023-20867) - https://www.vmware.com/security/advisories/VMSA-2023-0013.html - ".Zip" top-level domains draw potential for information leaks - https://blog.talosintelligence.com/zip-tld-information-leak/ - Unauthenticated IDOR to PII Disclosure in WooCommerce Stripe Gateway Plugin - https://patchstack.com/articles/unauthenticated-idor-to-pii-disclosure-vulnerability-in-woocommerce-stripe-gateway-plugin/ - Widespread Brand Impersonation Scam Campaign Targeting Hundreds of the Most Popular Apparel Brands - https://bolster.ai/blog/brand-impersonation-sca [Ficha técnica] Apresentação: Carlos Cabral Roteiro: Carlos Cabral e Daniel Venzi Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia Projeto gráfico: Julian Prieto