Cyber Morning Call - #575 - 02/07/2024

Notas do episódio

[Referências do Episódio] regreSSHion: Remote Unauthenticated Code Execution Vulnerability in OpenSSH server - https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server China-Nexus Threat Group ‘Velvet Ant’ Exploits Cisco Zero-Day (CVE-2024-20399) to Compromise Nexus Switch Devices – Advisory for Mitigation and Response - https://www.sygnia.co/threat-reports-and-advisories/china-nexus-threat-group-velvet-ant-exploits-cisco-0-day/ CVE-2024-20399 - Cisco NX-OS Software CLI Command Injection Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP Exposing FakeBat loader: distribution methods and adversary infrastructure - https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia