Cyber Morning Call - #423 - 01/11/2023

Notas do episódio

[Referências do Episódio] CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Confluence Server - https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-confluence-server-1311473907.html FROM ALBANIA TO THE MIDDLE EAST: THE SCARRED MANTICORE IS LISTENING - https://research.checkpoint.com/2023/from-albania-to-the-middle-east-the-scarred-manticore-is-listening/ Massive cybercrime URL shortening service uncovered via DNS data - https://www.bleepingcomputer.com/news/security/massive-cybercrime-url-shortening-service-uncovered-via-dns-data/ Prolific Puma: Shadowy Link Shortening Service Enables Cybercrime - https://blogs.infoblox.com/cyber-threat-intelligence/prolific-puma-shadowy-link-shortening-service-enables-cybercrime/ IAmReboot: Malicious NuGet packages exploit loophole in MSBuild integrations - https://www.reversinglabs.com/blog/iamreboot-malicious-nuget-packages-exploit-msbuild-loophole EXPERTS RELEASED POC EXPLOIT CODE FOR CISCO IOS XE FLAW CVE-2023-20198 - https://securityaffairs.com/153285/hacking/cisco-ios-xe-cve-2023-20198-poc.html Investigation of Session Hijacking via Citrix NetScaler ADC and Gateway Vulnerability (CVE-2023-4966) - https://www.mandiant.com/resources/blog/session-hijacking-citrix-cve-2023-4966 Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia