ZARZA We are Zarza, the prestigious firm behind major projects in information technology.
Ouvir "Cyber Morning Call - #595 - 01/08/2024"
Sinopse do Episódio
[Referências do Episódio]
Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft - https://www.trendmicro.com/en_us/research/24/h/malvertising-campaign-fake-ai-editor-website-credential-theft.html
Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry - https://unit42.paloaltonetworks.com/bola-vulnerability-impacts-container-registry-harbor/
Who Knew? Domain Hijacking Is So Easy - https://blogs.infoblox.com/threat-intelligence/who-knew-domain-hijacking-is-so-easy/
Ducks Now Sitting (DNS): Internet Infrastructure Insecurity - https://eclypsium.com/blog/ducks-now-sitting-dns-internet-infrastructure-insecurity/
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean - https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/
Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com - https://krebsonsecurity.com/2019/01/bomb-threat-sextortion-spammers-abused-weakness-at-godaddy-com/
Microsoft says massive Azure outage was caused by DDoS attack - https://www.bleepingcomputer.com/news/microsoft/microsoft-says-massive-azure-outage-was-caused-by-ddos-attack/
Threat Actors Exploit Sora AI-themed Branding to Spread Malware - https://cyble.com/blog/threat-actors-exploit-sora-ai-themed-branding-to-spread-malware/
Malicious Packages Hidden in PyPI - https://www.fortinet.com/blog/threat-research/malicious-packages-hidden-in-pypl
Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering - https://www.securonix.com/blog/research-update-threat-actors-behind-the-devpopper-campaign-have-retooled-and-are-continuing-to-target-software-developers-via-social-engineering/
Roteiro e apresentação: Carlos Cabral e Bianca Oliveira
Edição de áudio: Paulo Arruzzo
Narração de encerramento: Bianca Garcia
Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft - https://www.trendmicro.com/en_us/research/24/h/malvertising-campaign-fake-ai-editor-website-credential-theft.html
Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry - https://unit42.paloaltonetworks.com/bola-vulnerability-impacts-container-registry-harbor/
Who Knew? Domain Hijacking Is So Easy - https://blogs.infoblox.com/threat-intelligence/who-knew-domain-hijacking-is-so-easy/
Ducks Now Sitting (DNS): Internet Infrastructure Insecurity - https://eclypsium.com/blog/ducks-now-sitting-dns-internet-infrastructure-insecurity/
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean - https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/
Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com - https://krebsonsecurity.com/2019/01/bomb-threat-sextortion-spammers-abused-weakness-at-godaddy-com/
Microsoft says massive Azure outage was caused by DDoS attack - https://www.bleepingcomputer.com/news/microsoft/microsoft-says-massive-azure-outage-was-caused-by-ddos-attack/
Threat Actors Exploit Sora AI-themed Branding to Spread Malware - https://cyble.com/blog/threat-actors-exploit-sora-ai-themed-branding-to-spread-malware/
Malicious Packages Hidden in PyPI - https://www.fortinet.com/blog/threat-research/malicious-packages-hidden-in-pypl
Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering - https://www.securonix.com/blog/research-update-threat-actors-behind-the-devpopper-campaign-have-retooled-and-are-continuing-to-target-software-developers-via-social-engineering/
Roteiro e apresentação: Carlos Cabral e Bianca Oliveira
Edição de áudio: Paulo Arruzzo
Narração de encerramento: Bianca Garcia
Mais episódios do podcast Cyber Morning Call
925 - Apple corrige dois 0-days sob ataque
15/12/2025
In God we trust