Cyber Morning Call - #579 - 10/07/2024

Notas do episódio

[Referências do Episódio] Microsoft and Adobe Patch Tuesday, July 2024 Security Update Review - https://blog.qualys.com/vulnerabilities-threat-research/2024/07/09/microsoft-patch-tuesday-july-2024-security-update-review RESURRECTING INTERNET EXPLORER: THREAT ACTORS USING ZERO-DAY TRICKS IN INTERNET SHORTCUT FILE TO LURE VICTIMS (CVE-2024-38112) - https://research.checkpoint.com/2024/resurrecting-internet-explorer-threat-actors-using-zero-day-tricks-in-internet-shortcut-file-to-lure-victims-cve-2024-38112/ CVE-2024-37985 - FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers - https://publications.cispa.saarland/3991/1/ccs23-fetchbench.pdf CVE-2024-38021: Moniker RCE Vulnerability Uncovered in Microsoft Outlook - https://blog.morphisec.com/cve-2024-38021-microsoft-outlook-moniker-rce-vulnerability Blast-RADIUS - https://www.blastradius.fail/ Patch or Peril: A Veeam vulnerability incident - https://www.group-ib.com/blog/estate-ransomware/ PHP CGI Argument Injection (CVE-2024-4577)- Vulnerability Analysis and Exploitation - https://www.cyfirma.com/research/php-cgi-argument-injection-cve-2024-4577-vulnerability-analysis-and-exploitation/ The Mechanics of ViperSoftX: Exploiting AutoIt and CLR for Stealthy PowerShell Execution - https://www.trellix.com/blogs/research/the-mechanics-of-vipersofts-exploiting-autoit-and-clr-for-stealthy-powershell-execution/ Justice Department Leads Efforts Among Federal, International, and Private Sector Partners to Disrupt Covert Russian Government-Operated Social Media Bot Farm - https://www.justice.gov/opa/pr/justice-department-leads-efforts-among-federal-international-and-private-sector-partners People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action - https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-190a Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia