Resumo da Semana - 55

Mais um Resumo da Semana, com os links e notícias recomendadas dos últimos dias. Ainda temos desdobramentos da guerra na Ucrânia, que completou 2 meses, governo autoriza Serpro a vender dados pessoais, dados sobre ataques à tribunais no Brasil,lançamento do Ubuntu 22.04 LTS, novo alvo do grupo Lapsus$, fim do macOS Server, vulnerabilidade em diversos provedores de VPN, falso atualizador para Windows 11 instalando malware, vulnerabilidade em laptops Lenovo, vazamento de dados no MacDonald’s e LinkedIn sendo a marca mais utilizada em ataques de phishing. Vale também dar uma olhada em alguns eventos programados para este ano!

Artigos

  • Richard Stallman - “The state of the Free Software movement” - April 13, 2022
  • C# 11 Preview Updates – Raw string literals, UTF-8 and more!
  • How to Write More Clearly, Think More Clearly, and Learn Complex Material More Easily
  • Java on Visual Studio Code Supports Java 18
  • The Modern Software Supply Chain: How It’s Evolved and What to Prepare For
  • Internet spring cleaning: How to delete Instagram, Facebook and other accounts

Notícias

  • Web scraping is legal, US appeals court reaffirms
  • Fundador da Tron entra na briga pelo Twitter e cobre oferta de Elon Musk
  • Changes introduced in macOS Server 5.7.1
  • AWS expands its serverless offerings
  • Ubuntu 22.04 LTS – what’s new for the world’s most popular Linux desktop?
  • Apple may have begun a new push to remove outdated software from the App Store
  • Ubuntu Brings Back Its Iconic Developer Summit

Segurança

  • New Hacking Campaign Targeting Ukrainian Government with IcedID Malware
  • Cibercrime abre marketplace de segredos industriais
  • GitHub suspends accounts of Russian devs at sanctioned companies
  • A Windows 11 tool to enable the Google Play Store was actually malware
  • Em 18 meses, hackers violaram sistemas de tribunais no Brasil a cada 41 dias
  • Benchmarking Linux Security – Latest Research Findings
  • DuckDuckGo removes search results for major pirate websites
  • Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru
  • 76% das organizações globais acham que serão atacadas
  • McDonald’s Brasil enfrenta vazamento de dados
  • Github Notifies Victims Whose Private Data Was Stolen Using OAuth Tokens
  • Atualização falsa do Windows 11 instala malware ‘ladrão’
  • Beware of Fake Windows 11 Update Delivering Malware
  • LinkedIn Becomes the Most Impersonated Brand for Phishing Attacks
  • Cybercriminals do their homework for latest banking scam
  • Millions of Lenovo Laptops Contain Firmware-Level Vulnerabilities
  • Hackers Exploiting Recently Reported Windows Print Spooler Vulnerability in the Wild
  • Começou exercício cibernético da OTAN na Estônia
  • Five Eyes Nations Warn of Russian Cyber Attacks Against Critical Infrastructure
  • Surfshark, TurboVPN and more are secretly undermining security
  • Critical Chipset Bugs Open Millions of Android Devices to Remote Spying
  • REvil reborn? Notorious gang’s dark web site redirects to new ransomware operation
  • Malicious ‘Windows.exe’ file poses threat to unpatched Microsoft Exchange servers
  • Crypto-Mining Botnet Goes After Misconfigured Docker APIs
  • Governo autoriza Serpro a vender dados pessoais de empresas e cidadãos
  • T-Mobile Admits Lapsus$ Hackers Gained Access to its Internal Tools and Source Code
  • Lapsus$ stole T-Mobile’s source code before member arrests in March
  • European Union limits targeted advertising and content algorithms under new law

Eventos

  • Microsoft Build – Join us May 24-26 2022
  • HackerSec Conference - 27 de agosto de 2022
  • JDConf 2022

Compartilhe: Twitter - Facebook - LinkedIn