703 - Campanha de extorsão abusa da criptografia da AWS contra buckets S3

Cyber Morning Call · Jan 14, 2025 · 5m

[Referências do Episódio]

TLP Black - https://tlpblack.substack.com/p/n-1-tufoes-na-america-do-norte

Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C - https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c

Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions - https://www.microsoft.com/en-us/security/blog/2025/01/13/analyzing-cve-2024-44243-a-macos-system-integrity-protection-bypass-through-kernel-extensions/

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks -…