Cyber Morning Call - #393 - 14/09/2023

[Referências do Episódio] - TEMPEST TALKS 2023 - https://www.tempest.com.br/tempest_talk/tempest-talks-2023/ - Can't Be Contained: Finding a Command Injection Vulnerability in Kubernetes - https://www.akamai.com/blog/security-research/kubernetes-critical-vulnerability-command-injection - [Security Advisory] CVE-2023-3676: Insufficient input sanitization on Windows nodes leads to privilege escalation - https://discuss.kubernetes.io/t/security-advisory-cve-2023-3676-insufficient-input-sanitization-on-windows-nodes-leads-to-privilege-escalation/25204 - 3AM: New Ransomware Family Used As Fallback in Failed LockBit Attack - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/3am-ransomware-lockbit - Azure HDInsight Riddled With XSS Vulnerabilities via Apache Services - https://orca.security/resources/blog/cross-site-scripting-vulnerabilities-in-apache-services-azure-hd-insight/ - SMB NTLM blocking now supported in Windows Insider - https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-ntlm-blocking-now-supported-in-windows-insider/ba-p/3916206  Roteiro e apresentação: Carlos Cabral  Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia