Cyber Morning Call - #574 - 01/07/2024

Notas do episódio

[Referências do Episódio] 2024-06: Out-Of-Cycle Security Bulletin: Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed (CVE-2024-2973) - https://supportportal.juniper.net/s/article/2024-06-Out-Of-Cycle-Security-Bulletin-Session-Smart-Router-SSR-On-redundant-router-deployments-API-authentication-can-be-bypassed-CVE-2024-2973?language=en_US June 27, 2024 Advisory: Critical Command Injection Vulnerability in EOL Zyxel NAS Models Exploited by Botnet [CVE-2024-29973] - https://censys.com/cve-2024-29973/ Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator - https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/ Security Update – June 28, 2024, 12:10 PM CEST - https://www.teamviewer.com/en/resources/trust-center/statement/ Sustaining Digital Certificate Security - Entrust Certificate Distrust - https://security.googleblog.com/2024/06/sustaining-digital-certificate-security.html Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia