Podcast appearances and mentions of bianca garcia

Referências do EpisódioBeware the SparroWock: The backdoor that bites, the commands that catchThe Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrentsVídeo sobre DDR em blockchainsHEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala HackStable Channel Update for Desktop - Thursday, September 17, 2026Check Point Fixes Critical CVE-2026-91843 Allowing Root Code ExecutionRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Identity Services Engine Authentication Bypass VulnerabilityCisco Secure Firewall Management Center Software Authentication Bypass VulnerabilityBoletim de atualizações do Pixel: setembro de 2026TrustSink: How a Rogue External MFA Provider Steals PasswordsOracle Critical Security Patch Update, September 2026 ReviewOracle September 2026 Critical Security Patch Update addresses 672 CVEsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe banana stand: brokering and managing infections across Asia using MQTTParaShells: Parallels Desktop Turns Appliance Install Into a Root ShellRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Secure Email Gateway SQL Injection VulnerabilityCisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord ServersRed Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkitLiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerMicrosoft confirms KB5002914 Excel update breaks copy and pasteRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSmish. Click. Drained: Inside the Smishing Triad's Phishing CockpitThe Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented EnvironmentDutch NCSC: Critical Check Point VPN flaws exploitation is imminentGitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours“Eye” spy: Cyclops Blink returns with extended capabilitiesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDetecting and countering misuse of AI: September 2026Casbaneiro: A Banking Trojan with Distributed Data-Receiving ServersArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329PuzzleMask: Abusing Plain Prose as a Covert AI Attack VectorSloppyRAT: A New Tool For Ransomware AttacksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioOnce in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-DaysActive exploitation of Cisco Secure Firewall Management Center vulnerabilitiesAgents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MFUntracked Nightmares: The Threats Hiding Behind Commodity InfrastructureThe Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPTNew cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as RootRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Hours after an Amazon cargo plane overran the runway in Miami and killed five people on the ground, content creators showed up to take selfies in front of the smoldering wreckage. Kick streamer Bianca Garcia — turquoise hair, booty pose, “hurry take a picture” — crossed a perimeter barrier while NTSB was still working the scene. Five families lost people sitting in a van and a Corolla. Zero of them were on the plane. Clay's had it with clout culture. An active disaster site isn't a backdrop. There's a time and a place. This wasn't it.

Referências do EpisódioMicrosoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-daysMicrosoft discloses two actively exploited zero-days among 974 vulnerabilitiesChaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-DayStable Channel Update for Desktop - Tuesday, September 8, 2026SAP Security Patch Day - September 2026Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive InformationJWT used for authentication in web GUI signed with static keyImproper Authentication of FortiPAM ServerSlim Spider Steals Crypto Custody Secrets From Brazilian Financial InstitutionRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioKrytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacjaConnectWise warns of new ScreenConnect flaw without patchUnpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online StoresStyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attackUrgent Action Required: Critical Security Update Available for Adobe Commerce (APSB26-146)Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioASCII smuggling crosses over from AI prompt injection to phishing evasionThe Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement ActionOne Blank Field Bypasses Direct Send ControlSNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple VulnerabilitiesResearcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike FalconRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioGaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weaponCisco Nexus 9000 Series Switches Silicon One Remote Code Execution VulnerabilityCisco IOS XR Software Security Hardening Release: September 2026Uncovering StreamRat: From Meta Ads to Full Device TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSonicWall Advisory SNWLID-2026-0016SonicWall warns of actively exploited SMA1000 zero-day flawsWhat Comes After Cards: A Brazilian Magecart Operation Moves into Instant Payments (PIX)Post de Caitlin Condon da VulnCheck sobre exploração da CVE-2026-0768 no LangflowPost da WatchTowr sobre exploração da CVE-2026-82329 no JFrog Artifactory.Stable Channel Update for Desktop - Tuesday, September 1, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioFinancially Motivated Threat Actor BREEZE COMET Targets BrazilSistema de Transferência de Reservas (STR)Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware setSpring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft TeamsBreaking the Seal: Static Deobfuscation of JSCeal's Compiled V8 BytecodeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAnatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLFire Ant Evolves: From Hypervisors to Trusted InfrastructureTerminalFix campaign deploys a reverse tunnel through multistage intrusionPaperCut releases second emergency patch for exploited flawsURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth RangeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)PaperCut warns of NG, MF flaw exploited in zero-day attacksPaperCut Actively Exploited: A Pre-Auth RCE ChainBlueDelta Targets Defense and Diplomacy with HOOKEDGEAustralia charges two men for TeamPCP supply-chain hacking spreeOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging FaceSecurity: CVE-2026-65643 Vulnerability in cPanel's Domain Parking Functionality - August 27, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioEdge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeterDark Caracal Reloaded: New Malware, Same Hunting GroundsUbiquiti patches three max severity security vulnerabilitiesNovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of OrganizationsJustice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical InfrastructureCISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers DoA Reported Log4j RCE Is More Complicated Than It LooksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioExposing AnonyMousKIT: AI-Powered PhaaS Supply ChainTortoiseshell: New Toolset and Operational Infrastructure ExposedClickFix Phishing Pages Discovered in 24 npm PackagesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadStable Channel Update for Desktop - Tuesday, August 25, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataOracle Critical Patch Update Advisory - January 2026Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE ChainHackers infecting Android car systems to build proxy botnetRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioUAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operationsUAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilitiesGoing with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaBTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation PrimitiveSilkParasite: Tracking a China-Nexus APT Across Central AsiaCVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability NewU.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalogGitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureFrequently asked questions about the active threat to Siemens S7 Series PLCsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio/bin/live: Proteção infantojuvenil Online com Karina Queiroz e Amanda YumiGrandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaignBalonx Sistema: The Face Behind the PhaaS Affecting Mexican BankingCisco Crosswork Security Hardening Release: August 2026Cisco Secure Workload Software Security Hardening Release: August 2026Hunting MacSync Stealer infrastructure through behavioral pivotsOperation CameraSwarm:  Over 14,000 Dahua cameras compromised across Ukraine and RussiaOracle Critical Security Patch Update Advisory - August 2026NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490Stable Channel Update for Desktop - Tuesday, August 18, 2026Windows 11 24H2 Home and Pro reach end of support in 2 monthsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCoSnitch: When Your AI Assistant Becomes Its Own WhistleblowerPurpleDelta's Fraudulent Employment Operations StubMaker RubyGems Campaign Delivers a Windows InfostealerThousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtectRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWiz Red Agent Finds Its Way Into Snowflake's Internal Jira Through a Flaw in a GitHub Copilot–Assisted PROperation ASTERIX: Anatomy of a Crypto Fraud PipelineC2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11Microsoft starts removing WMIC tool used by cybercriminalsApple Patches 122 Flaws including macOS Screen Sharing Flaw (CVE-2026-65400)Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAPT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkitSAP Commerce Cloud CVE-2026-58231 Exploited in the WildRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMulti-Functional Linux Botnet “Evooo1Bot”Dissecting the JWR phishing frameworkJewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by SideAdobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public DisclosureSecurity update available for Adobe Commerce | APSB26-92Attackers Exploit SharePoint Authentication Bypass After Public PoC ReleaseYou're Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))Trezor Says ShipMonk Breach Exposed 13,689 CustomersAmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsersMalware Crypting Services and the Threat Actors Who Sell ThemRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActive exploitation of CVE-2026–59310: 361 victim IPs across 47 countriesVMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessAdobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic FlawsAbuse of alternative runtime environments Deno-tes defender headachesKimwolf v7: An Evolution of the Kimwolf BotnetCATAnA: On the Dangers of SIM-Originating AT CommandsArmored Likho expands its cyber-espionage toolkitRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioZOOMSDAY - How A Security Found a Nation-State Vulnerability in Zoom in One DayAugust 2026 Security Updates Patch Tuesday - August 2026Microsoft and Adobe Patch Tuesday, August 2026 Security Update ReviewMicrosoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)Shattering the Dream – When a Job Offer Becomes a Zero-Day AttackMicrosoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-daysShieldBreak: New Windows Zero-Day Bypasses Microsoft's RoguePlanet PatchSAP Security Patch Day - August 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilitySonicWall Email Security Affected By Multiple VulnerabilitiesSonicWall GMS Security Affected By Multiple VulnerabilitiesMozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private RepoRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructureAbyssos: Technical Analysis of a New Modular RATCritical Progress LoadMaster flaw now actively exploited in attacksFollow-Up Analysis of the 29 December 2025 Energy Sector Incident Six npm Packages Use Ethereum Transactions to Retrieve Malicious PayloadsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMetabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataSecurity update available for Metabase - Please upgrade nownatjack - A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICESBring Your Own EDR: How to Turn a Commercial EDR into a Trojan HorseXSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)RovoBlast: How One Click Triggered Atlassian's AI Assistant to Leak DataSCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-FreeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioBehind the Panels: Validating ShinyHunters Cluster A Infrastructure Through Network TelemetryWe infiltrated a criminal phishing panel: here's what we foundUNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud EnvironmentsToken Jacking: Cybercriminals Could Be Stealing Your AI ResourcesZapscape KVM Flaw Lets Guest VMs Seize Host RootApple libera macOS Tahoe 26.6.1, com correções de segurançaChrome Stable Channel Update for Desktop - Thursday, August 6, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioENDLESSDOORS Is Phoning Home. Pick Up.Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026Cisco IOS XE Software Security Hardening Release: August 2026OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become RootBreaking the PaperclipRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioKeyv and friends compromised in active Shai-Hulud supply chain attackkeyv and cacheable npm Package Hijacked in Supply Chain AttackAnalyzing SMOKE#SCREEN: ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software LuresIntroducing DOUBLECUP, a ClickFix Loader Delivering CountLoader and DeviceManager RATsInterlock ransomware gang creates volatile situationcPanel Bug Hands Database Root to Any Hosting CustomerRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioPass the Passkey: A Novel Attack Surface in Passwordless AuthenticationDarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator ClusterFrom WSProxy to Root: INC ransomware and SonicWall SMA Exploit ChainRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioN-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577N-able Says Attackers Take Over N-central Servers After Initial Fix Proves IncompleteCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftAdobe fixed a maximum-severity vulnerability flaw in Campaign ClassicSecurity update available for Adobe Campaign Classic | APSB26-114Série de posts da Galaxy Research sobre ataque contra carteiras da ColdcardThe Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET VersionToy Ghouls' new toy: the GenieLocker ransomwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio-North Korean hackers behind major open-source supply chain attacks, Amazon says-Amazon identifies North Korean hacker group behind open-source supply chain attacks-ClickFix, EtherHiding & a DPRK Wallet Trail-Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts-(합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공격 주의 권고-Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks-OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia-Investigating three real-world incidents in our cybersecurity evaluationsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco warns of FMC static credential flaw exploited in zero-day attacksVMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code ExecutionInside Astaroth's New Spambot ComponentStable Channel Update for Desktop - Wednesday, July 29, 2026KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't EnoughCheck Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)Coordinated “cyberattack” on Minnesota water utilities: What you need to knowClaude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES AttackRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCritical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as RootFast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security FindingsCritical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 NowRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCertighost (CVE-2026-54121)僵尸网络新秀：Dysphoria 演进与深度技术分析Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe Signs Were There: What the First Autonomous Ransomware Case ConfirmsChaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat ActivityTAG-195 Upgrades MaaS Ecosystem with Modular ToolsKimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confineRefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeLampion's Portugal-focused phishing campaign delivers multistage malwareAttack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient)Security Advisory – Action Required – July 2026 Security UpdateHermeticReader: The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioA new extortion cocktail: office printers, small ransoms, and BitLockerSolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28307)SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311)SolarWinds Serv-U Broken Access Control Vulnerability (CVE-2026-28321)Oracle Critical Patch Update Advisory - July 2026OpenAI admits it was the source of the agent swarm that attacked Hugging FacePublic PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCritical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code ExecutionCVE-2026-6875 - Sandbox Escape in ServiceNow AI PlatformCookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin RansomwareExploitation in the Wild of wp2shellRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioProxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitationwp2shell: Pre Authentication RCE in WordPress CoreWordPress Core "wp2shell" RCE flaws get public exploits, patch nowThree Steps to the Terminal: A Siemens ROX II Zero-Day TrilogyHOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control ChannelsOpenSSL HollowByte: A DoS Hiding in 11 BytesNew North Korean campaign uses fake coding interviews to steal developer credentialsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioUAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaignClickLock Stealer: Paste Once, Lose EverythingACR Stealer: Two observed intrusion chains amid increased threat activitySpirals: New Stealthy Ransomware Deployed Against Asian IT CompanyGoSerpent: a persistent threat evolves with sophisticated data collection and exfiltrationRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioChaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows SystemsTuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted DevelopmentClaudeFix: Shared Claude Chats Meet ClickFixRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesTwo SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin CommandsMicrosoft July 2026 Security UpdatesSAP Security Patch Day - July 2026Progress confirms ShareFile zero-day flaw behind Storage Zone shutdownRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEOne Misconfigured Server, Three Active Campaigns: Full exposure of three AiTM Phishing OperatorsImprove Router Hygiene to Protect Against Russian State-Sponsored TargetingCrashStealer: C++ macOS infostealer posing as crash reporterOAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEProgress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.Unfit to Boot: Breaking U-Boot's FIT Signature VerificationCritical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User SessionsOne Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law EnforcementRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable DefensesGigaWiper: Anatomy of a destructive backdoor assembled from multiple malwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGhostApproval: A Trust Boundary Gap in AI Coding AssistantsClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud ToolkitMicrosoft patches RoguePlanet Defender zero-day vulnerabilityHackers can use 9 of the most popular AI tools to assemble massive botnetsCoordinated npm and PyPI Campaign Typosquats Popular Secure Payment AppsSygnia Investigation Finds AI Accelerated Attack Enabled Lone Threat Actor to Rapidly Compromise Enterprise Cloud EnvironmentJuniper Security AdvisoriesPalo Alto Networks Security AdvisoriesChrome ReleasesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia