682 - Vuln no GitHub Actions permite adulterar pacote no PyPI
[Referências do Episódio]
Compromised ultralytics PyPI package delivers crypto coinminer - https://www.reversinglabs.com/blog/compromised-ultralytics-pypi-package-delivers-crypto-coinminer
Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection - https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/
URL File NTLM Hash Disclosure Vulnerability (0day) - and Free Micropatches for it - https://blog.0patch.com/2024/12/url-file-ntlm-hash-disclosure.html
New Windows zero-day exposes NTLM credentials, gets unofficial patch -…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.