Cyber Morning Call - #70 - 05/05/2022

Cyber Morning Call · May 5, 2022 · 5m

[Referências do Episódio]

- CVE-2022-1388 No BIG-IP - https://support.f5.com/csp/article/K23605346

- Operation CuckooBees - https://www.cybereason.com/blog/operation-cuckoobees-a-winnti-malware-arsenal-deep-dive

- Outra campanha que abusava do CLFS - https://www.mandiant.com/resources/unknown-actor-using-clfs-log-files-for-stealth

- Relatório do FBI sobre BEC - https://www.ic3.gov/Media/Y2022/PSA220504

- CVE-2022-26352 no dotCMS - https://blog.assetnote.io/2022/05/03/hacking-a-bank-using-dotcms-rce/

- Shellcode escondido em registros de log -…