Cyber Morning Call

Referências do EpisódioAnatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestinoFG-IR-26-175: Improper limitation of a pathname to a restricted directoryTeenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak sitePolice disrupt KillSec ransomware, arrest suspected teenage leader16-year-old suspected leader of KillSec ransomware group arrestedRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Catalyst SD-WAN Manager API Authentication Bypass VulnerabilityCritical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Vulnerability Discovery and Exploitation Trends in the AI EraUnauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570Disrupting a coordinated model-distillation campaignCVE-2026-86950: The Great Glyph GriftChina-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoorTV-2026-1010: Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related ServicesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioHere We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway AppliancesCitrix, Check Point, F5 e Arista: mais uma semana com falhas críticas sob ataque na borda das empresasStar Blizzard refines phishing and malware delivery with the RedFlick techniqueAlleged ShinyHunters leader arrested in the NetherlandsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAbout the security content of iOS 26.7.1 and iPadOS 26.7.1Apple patches CoreGraphics zero-day flaw exploited in attacksFrom BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHatAttackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFixNeedyMantis: Unpacking a post-compromise malware family used in targeted operationsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active ExploitationNetScaler ADC and NetScaler Gateway Security Bulletin (CTX697096)Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilitiesShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoftStorm-3168: Agentic-driven cloud attacks using compromised service principalsKiteworks urges 6-hour server shutdown over potential zero-day attacksImminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down ServersRoundcube Pre-Auth SQL Injection Flaw Actively Exploited in the WildRoundcube security advisory (AV26-503) – Update 1Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe Psychedelic Stealer: When a CAPTCHA Becomes an InstallerMacSync under the microscope: new delivery methods and a new payloadUncovering a SectopRAT Variant Embedded in Legitimate SoftwareBeyond the ransomware: Tracking Storm-2570's consistent tradecraft across deploymentsDiscovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalogOpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public FilesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio3a Edição da Human Risk ConferenceNovel supplychain.local Go worm appearsMemTensor npm and PyPI Packages Hit by a Go WormMemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain AttackSckit Supply Chain Worm Hits MemTensor npm & PyPi scopesMeet AvisLoader: A Windows Loader Built to Outlast a TakedownRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSecurity Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-DayThe Closed Quorum: Inside the first reported autonomous AI C2 implantD-Link warns of max severity zero-day bug in DIR-822A routersArista Security Advisory 0183SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324)SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability (CVE-2026-28326)WordPress 7.1.2 ReleaseK000162605: BIG-IP APM vulnerability CVE-2026-94127CISA Adds Four Known Exploited Vulnerabilities to CatalogBIG-IP APMs expostos por continenteDisrupting EvilTokens: The AI Chatbot Built for CybercrimeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWe got a cybersecurity expert to hack this BYD. It was too easyTASK#STOMP: PowerShell Backdoor for Document Theft and Remote AccessVidar Adds Virtual Machine and Custom Stream Ciphers For String ObfuscationShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion paymentRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioPublic Exploits Released for Four Linux Kernel Flaws That Enable Local RootA quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpillDon't Call Us, We'll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto TiesNorth Korean "WaterPlum," commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and EuropeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioBeware the SparroWock: The backdoor that bites, the commands that catchThe Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrentsVídeo sobre DDR em blockchainsHEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala HackStable Channel Update for Desktop - Thursday, September 17, 2026Check Point Fixes Critical CVE-2026-91843 Allowing Root Code ExecutionRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Identity Services Engine Authentication Bypass VulnerabilityCisco Secure Firewall Management Center Software Authentication Bypass VulnerabilityBoletim de atualizações do Pixel: setembro de 2026TrustSink: How a Rogue External MFA Provider Steals PasswordsOracle Critical Security Patch Update, September 2026 ReviewOracle September 2026 Critical Security Patch Update addresses 672 CVEsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe banana stand: brokering and managing infections across Asia using MQTTParaShells: Parallels Desktop Turns Appliance Install Into a Root ShellRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Secure Email Gateway SQL Injection VulnerabilityCisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord ServersRed Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkitLiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerMicrosoft confirms KB5002914 Excel update breaks copy and pasteRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSmish. Click. Drained: Inside the Smishing Triad's Phishing CockpitThe Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented EnvironmentDutch NCSC: Critical Check Point VPN flaws exploitation is imminentGitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours“Eye” spy: Cyclops Blink returns with extended capabilitiesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDetecting and countering misuse of AI: September 2026Casbaneiro: A Banking Trojan with Distributed Data-Receiving ServersArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329PuzzleMask: Abusing Plain Prose as a Covert AI Attack VectorSloppyRAT: A New Tool For Ransomware AttacksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioOnce in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-DaysActive exploitation of Cisco Secure Firewall Management Center vulnerabilitiesAgents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MFUntracked Nightmares: The Threats Hiding Behind Commodity InfrastructureThe Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPTNew cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as RootRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMicrosoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-daysMicrosoft discloses two actively exploited zero-days among 974 vulnerabilitiesChaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-DayStable Channel Update for Desktop - Tuesday, September 8, 2026SAP Security Patch Day - September 2026Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive InformationJWT used for authentication in web GUI signed with static keyImproper Authentication of FortiPAM ServerSlim Spider Steals Crypto Custody Secrets From Brazilian Financial InstitutionRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioKrytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacjaConnectWise warns of new ScreenConnect flaw without patchUnpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online StoresStyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attackUrgent Action Required: Critical Security Update Available for Adobe Commerce (APSB26-146)Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioASCII smuggling crosses over from AI prompt injection to phishing evasionThe Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement ActionOne Blank Field Bypasses Direct Send ControlSNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple VulnerabilitiesResearcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike FalconRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioGaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weaponCisco Nexus 9000 Series Switches Silicon One Remote Code Execution VulnerabilityCisco IOS XR Software Security Hardening Release: September 2026Uncovering StreamRat: From Meta Ads to Full Device TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSonicWall Advisory SNWLID-2026-0016SonicWall warns of actively exploited SMA1000 zero-day flawsWhat Comes After Cards: A Brazilian Magecart Operation Moves into Instant Payments (PIX)Post de Caitlin Condon da VulnCheck sobre exploração da CVE-2026-0768 no LangflowPost da WatchTowr sobre exploração da CVE-2026-82329 no JFrog Artifactory.Stable Channel Update for Desktop - Tuesday, September 1, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioFinancially Motivated Threat Actor BREEZE COMET Targets BrazilSistema de Transferência de Reservas (STR)Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware setSpring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft TeamsBreaking the Seal: Static Deobfuscation of JSCeal's Compiled V8 BytecodeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAnatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLFire Ant Evolves: From Hypervisors to Trusted InfrastructureTerminalFix campaign deploys a reverse tunnel through multistage intrusionPaperCut releases second emergency patch for exploited flawsURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth RangeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)PaperCut warns of NG, MF flaw exploited in zero-day attacksPaperCut Actively Exploited: A Pre-Auth RCE ChainBlueDelta Targets Defense and Diplomacy with HOOKEDGEAustralia charges two men for TeamPCP supply-chain hacking spreeOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging FaceSecurity: CVE-2026-65643 Vulnerability in cPanel's Domain Parking Functionality - August 27, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioEdge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeterDark Caracal Reloaded: New Malware, Same Hunting GroundsUbiquiti patches three max severity security vulnerabilitiesNovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of OrganizationsJustice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical InfrastructureCISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers DoA Reported Log4j RCE Is More Complicated Than It LooksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioExposing AnonyMousKIT: AI-Powered PhaaS Supply ChainTortoiseshell: New Toolset and Operational Infrastructure ExposedClickFix Phishing Pages Discovered in 24 npm PackagesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadStable Channel Update for Desktop - Tuesday, August 25, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataOracle Critical Patch Update Advisory - January 2026Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE ChainHackers infecting Android car systems to build proxy botnetRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioUAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operationsUAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilitiesGoing with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaBTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation PrimitiveSilkParasite: Tracking a China-Nexus APT Across Central AsiaCVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability NewU.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalogGitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureFrequently asked questions about the active threat to Siemens S7 Series PLCsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio/bin/live: Proteção infantojuvenil Online com Karina Queiroz e Amanda YumiGrandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaignBalonx Sistema: The Face Behind the PhaaS Affecting Mexican BankingCisco Crosswork Security Hardening Release: August 2026Cisco Secure Workload Software Security Hardening Release: August 2026Hunting MacSync Stealer infrastructure through behavioral pivotsOperation CameraSwarm:  Over 14,000 Dahua cameras compromised across Ukraine and RussiaOracle Critical Security Patch Update Advisory - August 2026NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490Stable Channel Update for Desktop - Tuesday, August 18, 2026Windows 11 24H2 Home and Pro reach end of support in 2 monthsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCoSnitch: When Your AI Assistant Becomes Its Own WhistleblowerPurpleDelta's Fraudulent Employment Operations StubMaker RubyGems Campaign Delivers a Windows InfostealerThousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtectRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWiz Red Agent Finds Its Way Into Snowflake's Internal Jira Through a Flaw in a GitHub Copilot–Assisted PROperation ASTERIX: Anatomy of a Crypto Fraud PipelineC2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11Microsoft starts removing WMIC tool used by cybercriminalsApple Patches 122 Flaws including macOS Screen Sharing Flaw (CVE-2026-65400)Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAPT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkitSAP Commerce Cloud CVE-2026-58231 Exploited in the WildRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMulti-Functional Linux Botnet “Evooo1Bot”Dissecting the JWR phishing frameworkJewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by SideAdobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public DisclosureSecurity update available for Adobe Commerce | APSB26-92Attackers Exploit SharePoint Authentication Bypass After Public PoC ReleaseYou're Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))Trezor Says ShipMonk Breach Exposed 13,689 CustomersAmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsersMalware Crypting Services and the Threat Actors Who Sell ThemRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActive exploitation of CVE-2026–59310: 361 victim IPs across 47 countriesVMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessAdobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic FlawsAbuse of alternative runtime environments Deno-tes defender headachesKimwolf v7: An Evolution of the Kimwolf BotnetCATAnA: On the Dangers of SIM-Originating AT CommandsArmored Likho expands its cyber-espionage toolkitRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioZOOMSDAY - How A Security Found a Nation-State Vulnerability in Zoom in One DayAugust 2026 Security Updates Patch Tuesday - August 2026Microsoft and Adobe Patch Tuesday, August 2026 Security Update ReviewMicrosoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)Shattering the Dream – When a Job Offer Becomes a Zero-Day AttackMicrosoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-daysShieldBreak: New Windows Zero-Day Bypasses Microsoft's RoguePlanet PatchSAP Security Patch Day - August 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilitySonicWall Email Security Affected By Multiple VulnerabilitiesSonicWall GMS Security Affected By Multiple VulnerabilitiesMozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private RepoRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructureAbyssos: Technical Analysis of a New Modular RATCritical Progress LoadMaster flaw now actively exploited in attacksFollow-Up Analysis of the 29 December 2025 Energy Sector Incident Six npm Packages Use Ethereum Transactions to Retrieve Malicious PayloadsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMetabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataSecurity update available for Metabase - Please upgrade nownatjack - A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICESBring Your Own EDR: How to Turn a Commercial EDR into a Trojan HorseXSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)RovoBlast: How One Click Triggered Atlassian's AI Assistant to Leak DataSCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-FreeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioBehind the Panels: Validating ShinyHunters Cluster A Infrastructure Through Network TelemetryWe infiltrated a criminal phishing panel: here's what we foundUNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud EnvironmentsToken Jacking: Cybercriminals Could Be Stealing Your AI ResourcesZapscape KVM Flaw Lets Guest VMs Seize Host RootApple libera macOS Tahoe 26.6.1, com correções de segurançaChrome Stable Channel Update for Desktop - Thursday, August 6, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioENDLESSDOORS Is Phoning Home. Pick Up.Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026Cisco IOS XE Software Security Hardening Release: August 2026OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become RootBreaking the PaperclipRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioKeyv and friends compromised in active Shai-Hulud supply chain attackkeyv and cacheable npm Package Hijacked in Supply Chain AttackAnalyzing SMOKE#SCREEN: ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software LuresIntroducing DOUBLECUP, a ClickFix Loader Delivering CountLoader and DeviceManager RATsInterlock ransomware gang creates volatile situationcPanel Bug Hands Database Root to Any Hosting CustomerRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioPass the Passkey: A Novel Attack Surface in Passwordless AuthenticationDarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator ClusterFrom WSProxy to Root: INC ransomware and SonicWall SMA Exploit ChainRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioN-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577N-able Says Attackers Take Over N-central Servers After Initial Fix Proves IncompleteCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftAdobe fixed a maximum-severity vulnerability flaw in Campaign ClassicSecurity update available for Adobe Campaign Classic | APSB26-114Série de posts da Galaxy Research sobre ataque contra carteiras da ColdcardThe Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET VersionToy Ghouls' new toy: the GenieLocker ransomwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio-North Korean hackers behind major open-source supply chain attacks, Amazon says-Amazon identifies North Korean hacker group behind open-source supply chain attacks-ClickFix, EtherHiding & a DPRK Wallet Trail-Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts-(합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공격 주의 권고-Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks-OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia-Investigating three real-world incidents in our cybersecurity evaluationsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco warns of FMC static credential flaw exploited in zero-day attacksVMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code ExecutionInside Astaroth's New Spambot ComponentStable Channel Update for Desktop - Wednesday, July 29, 2026KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't EnoughCheck Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)Coordinated “cyberattack” on Minnesota water utilities: What you need to knowClaude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES AttackRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCritical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as RootFast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security FindingsCritical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 NowRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCISA Adds Two Known Exploited Vulnerabilities to CatalogCVE-2025-68686 - SSL-VPN Symlink Persistence Patch BypassCVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityMirage Kitten targets Middle East and Africa region with new malwareExpanding the Castle: New Campaigns, New Tooling, and the NeedleStealer ConnectionHelpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC BackdoorBreaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 PatchApple security releasesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca GarciaX6LO8GntgGb95egmmOCZ

Referências do EpisódioCertighost (CVE-2026-54121)僵尸网络新秀：Dysphoria 演进与深度技术分析Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe Signs Were There: What the First Autonomous Ransomware Case ConfirmsChaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat ActivityTAG-195 Upgrades MaaS Ecosystem with Modular ToolsKimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confineRefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeLampion's Portugal-focused phishing campaign delivers multistage malwareAttack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient)Security Advisory – Action Required – July 2026 Security UpdateHermeticReader: The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioA new extortion cocktail: office printers, small ransoms, and BitLockerSolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28307)SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311)SolarWinds Serv-U Broken Access Control Vulnerability (CVE-2026-28321)Oracle Critical Patch Update Advisory - July 2026OpenAI admits it was the source of the agent swarm that attacked Hugging FacePublic PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia