Cyber Morning Call - #218 - 14/12/2022

[Referências do Episódio] -Critical security update now available for Citrix ADC, Citrix Gateway - https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/ -APT5: Citrix ADC Threat Hunting Guidance - https://media.defense.gov/2022/Dec/13/2003131586/-1/-1/0/CSA-APT5-CITRIXADC-V1.PDF -Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518 - https://support.citrix.com/article/CTX474995/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202227518 -AWS ECR Public Vulnerability - https://blog.lightspin.io/aws-ecr-public-vulnerability -Reported ECR Public Gallery Issue - https://aws.amazon.com/pt/security/security-bulletins/AWS-2022-010/ -Security Flaw in Atlassian Products (Jira, Confluence,Trello, BitBucket) Affecting Multiple Companies - https://cloudsek.com/security-flaw-in-atlassian-products-jira-confluencetrello-bitbucket-affecting-multiple-companies/ -Critical Remote Code Execution Vulnerability in SPNEGO Extended Negotiation Security Mechanism - https://securityintelligence.com/posts/critical-remote-code-execution-vulnerability-spnego-extended-negotiation-security-mechanism/ -I Solemnly Swear My Driver Is Up to No Good: Hunting for Attestation Signed Malware - https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware -Driving Through Defenses | Targeted Attacks Leverage Signed Malicious Microsoft Drivers - https://www.sentinelone.com/labs/driving-through-defenses-targeted-attacks-leverage-signed-malicious-microsoft-drivers/ -December 2022 Security Updates - https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec -Apple security update fixes new iOS zero-day used to hack iPhones - https://www.bleepingcomputer.com/news/apple/apple-security-update-fixes-new-ios-zero-day-used-to-hack-iphones/ [Ficha técnica] Apresentação: Carlos Cabral Roteiro: Carlos Cabral e Daniel Venzi Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia Projeto gráfico: Julian Prieto

There are no comments yet.

Please log in to write the first comment.