Cyber Morning Call - #548 - 22/05/2024

[Referências do Episódio] Fórum da Internet do Brasil - MAIS UMA VÍTIMA NÃO: Tecnologias digitais como forma de promoção e proteção de defensores de direitos humanos no Brasil - https://forumdainternet.cgi.br/agenda/3056 Critical GitHub Enterprise Server Flaw Allows Authentication Bypass - https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html Enabling encrypted assertions - https://docs.github.com/en/[email protected]/admin/identity-and-access-management/using-saml-for-enterprise-iam/enabling-encrypted-assertions Veeam Backup Enterprise Manager Vulnerabilities (CVE-2024-29849, CVE-2024-29850, CVE-2024-29851, CVE-2024-29852) - https://www.veeam.com/kb4581 SD1672 | IMPORTANT NOTICE: Rockwell Automation Reiterates Customer Guidance to Disconnect Devices from the Internet to Protect from Cyber Threats - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1672.html Invisible miners: unveiling GHOSTENGINE’s crypto mining operations - https://www.elastic.co/security-labs/invisible-miners-unveiling-ghostengine ANALYSIS AND DETECTION OF CLOUD#REVERSER: AN ATTACK INVOLVING THREAT ACTORS COMPROMISING SYSTEMS USING A SOPHISTICATED CLOUD-BASED MALWARE - https://www.securonix.com/blog/analysis-and-detection-of-cloudreverser-an-attack-involving-threat-actors-compromising-systems-using-a-sophisticated-cloud-based-malware/ RIGHT-TO-LEFT OVERRIDE - https://unicode-explorer.com/c/202E Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia