Cyber Morning Call - #574 - 01/07/2024

Cyber Morning Call · Jul 1, 2024 · 4m

[Referências do Episódio]

2024-06: Out-Of-Cycle Security Bulletin: Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed (CVE-2024-2973) - https://supportportal.juniper.net/s/article/2024-06-Out-Of-Cycle-Security-Bulletin-Session-Smart-Router-SSR-On-redundant-router-deployments-API-authentication-can-be-bypassed-CVE-2024-2973?language=en_US

June 27, 2024 Advisory: Critical Command Injection Vulnerability in EOL Zyxel NAS Models Exploited by Botnet [CVE-2024-29973] - https://censys.com/cve-2024-29973/

Polyfill.io, BootCDN, Bootcss, Staticfile attack…