Cyber Morning Call - #369 - 07/08/2023

Notas do episódio

[Referências do Episódio] - CVE-2023-39143: PaperCut Path Traversal/File Upload RCE Vulnerability - https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/ - Reptile Malware Targeting Linux Systems - https://asec.ahnlab.com/en/55785/ - ICMP Shell (ISH) - https://icmpshell.sourceforge.net/#:~:text=ICMP%20Shell%20(ISH)%20is%20a,C%20for%20the%20UNIX%20environment. - The LOLBAS Odyssey: Finding New LOLBAS, and How You Can, Too - https://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/ - Microsoft mitigates Power Platform Custom Code information disclosure vulnerability - https://msrc.microsoft.com/blog/2023/08/microsoft-mitigates-power-platform-custom-code-information-disclosure-vulnerability/ - Microsoft…The Truth Is Even Worse Than You Think - https://www.linkedin.com/pulse/microsoftthe-truth-even-worse-than-you-think-amit-yoran/. - Unauthorized Access to Cross-Tenant Applications in Microsoft Power Platform - https://www.tenable.com/security/research/tra-2023-25 Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia