601 - 0.0.0.0 Day flaw, Earth Baku e PoC público pra vuln crítica no Cisco SSM ON-PREM
[Referências do Episódio]
0.0.0.0 Day: Exploiting Localhost APIs From the Browser - https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser
A Dive into Earth Baku’s Latest Campaign - https://www.trendmicro.com/en_us/research/24/h/earth-baku-latest-campaign.html
CVE-2024-20419 - Cisco Smart Software Manager On-Prem Password Change Vulnerability - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy
Best Practices for Cisco Device Configuration -…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.