Cyber Morning Call - #396 - 19/09/2023

Notas do episódio

[Referências do Episódio] - Fileless Remote Code Execution on Juniper Firewalls - https://vulncheck.com/blog/juniper-cve-2023-36845 - 38TB of data accidentally exposed by Microsoft AI researchers - https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers - Microsoft mitigated exposure of internal information in a storage account due to overly-permissive SAS token - https://msrc.microsoft.com/blog/2023/09/microsoft-mitigated-exposure-of-internal-information-in-a-storage-account-due-to-overly-permissive-sas-token/ - Bumblebee Loader Resurfaces in New Campaign - https://intel471.com/blog/bumblebee-loader-resurfaces-in-new-campaign - URL files and WebDAV used for IcedID (Bokbot) infection - https://isc.sans.edu/diary/URL+files+and+WebDAV+used+for+IcedID+Bokbot+infection/29578 - Earth Lusca Employs New Linux Backdoor, Uses Cobalt Strike for Lateral Movement - https://www.trendmicro.com/en_us/research/23/i/earth-lusca-employs-new-linux-backdoor.html Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia