Cyber Morning Call - #160 - 14/09/2022

[Referências do Episódio] Azure Active Directory Pass-Through Authentication Flaw - https://www.secureworks.com/research/azure-active-directory-pass-through-authentication-flaws  Microsoft Patch Tuesday - https://heimdalsecurity.com/blog/patch-tuesday-september-2022/ e https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2022-patch-tuesday-fixes-zero-day-used-in-attacks-63-flaws/ New PsExec spinoff lets hackers bypass network security defenses  - https://www.bleepingcomputer.com/news/security/new-psexec-spinoff-lets-hackers-bypass-network-security-defenses/ Look What You Made Me Do: TA453 Uses Multi-Persona Impersonation to Capitalize on FOMO - https://www.proofpoint.com/us/blog/threat-insight/ta453-uses-multi-persona-impersonation-capitalize-fomo CRITICAL SECURITY BULLETIN: September 2022 Security Bulletin for Trend Micro Apex One  - https://success.trendmicro.com/dcx/s/solution/000291528?language=en_US PSA: Zero-Day Vulnerability in WPGateway Actively Exploited in the Wild  - https://www.wordfence.com/blog/2022/09/psa-zero-day-vulnerability-in-wpgateway-actively-exploited-in-the-wild/ [Ficha técnica] Apresentação: Daniel Venzi Roteiro: Carlos Cabral e Daniel Venzi Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia Projeto gráfico: Julian Prieto