Cyber Morning Call

Referências do EpisódioASCII smuggling crosses over from AI prompt injection to phishing evasionThe Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement ActionOne Blank Field Bypasses Direct Send ControlSNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple VulnerabilitiesResearcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike FalconRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioGaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weaponCisco Nexus 9000 Series Switches Silicon One Remote Code Execution VulnerabilityCisco IOS XR Software Security Hardening Release: September 2026Uncovering StreamRat: From Meta Ads to Full Device TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSonicWall Advisory SNWLID-2026-0016SonicWall warns of actively exploited SMA1000 zero-day flawsWhat Comes After Cards: A Brazilian Magecart Operation Moves into Instant Payments (PIX)Post de Caitlin Condon da VulnCheck sobre exploração da CVE-2026-0768 no LangflowPost da WatchTowr sobre exploração da CVE-2026-82329 no JFrog Artifactory.Stable Channel Update for Desktop - Tuesday, September 1, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioFinancially Motivated Threat Actor BREEZE COMET Targets BrazilSistema de Transferência de Reservas (STR)Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware setSpring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft TeamsBreaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 BytecodeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAnatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLFire Ant Evolves: From Hypervisors to Trusted InfrastructureTerminalFix campaign deploys a reverse tunnel through multistage intrusionPaperCut releases second emergency patch for exploited flawsURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth RangeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioURGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)PaperCut warns of NG, MF flaw exploited in zero-day attacksPaperCut Actively Exploited: A Pre-Auth RCE ChainBlueDelta Targets Defense and Diplomacy with HOOKEDGEAustralia charges two men for TeamPCP supply-chain hacking spreeOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging FaceSecurity: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - August 27, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioEdge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeterDark Caracal Reloaded: New Malware, Same Hunting GroundsUbiquiti patches three max severity security vulnerabilitiesNovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of OrganizationsJustice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical InfrastructureCISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers DoA Reported Log4j RCE Is More Complicated Than It LooksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioExposing AnonyMousKIT: AI-Powered PhaaS Supply ChainTortoiseshell: New Toolset and Operational Infrastructure ExposedClickFix Phishing Pages Discovered in 24 npm PackagesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadStable Channel Update for Desktop - Tuesday, August 25, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataOracle Critical Patch Update Advisory - January 2026Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE ChainHackers infecting Android car systems to build proxy botnetRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioUAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operationsUAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilitiesGoing with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaBTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation PrimitiveSilkParasite: Tracking a China-Nexus APT Across Central AsiaCVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability NewU.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalogGitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureFrequently asked questions about the active threat to Siemens S7 Series PLCsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio/bin/live: Proteção infantojuvenil Online com Karina Queiroz e Amanda YumiGrandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaignBalonx Sistema: The Face Behind the PhaaS Affecting Mexican BankingCisco Crosswork Security Hardening Release: August 2026Cisco Secure Workload Software Security Hardening Release: August 2026Hunting MacSync Stealer infrastructure through behavioral pivotsOperation CameraSwarm:  Over 14,000 Dahua cameras compromised across Ukraine and RussiaOracle Critical Security Patch Update Advisory - August 2026NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490Stable Channel Update for Desktop - Tuesday, August 18, 2026Windows 11 24H2 Home and Pro reach end of support in 2 monthsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCoSnitch: When Your AI Assistant Becomes Its Own WhistleblowerPurpleDelta's Fraudulent Employment Operations StubMaker RubyGems Campaign Delivers a Windows InfostealerThousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtectRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PROperation ASTERIX: Anatomy of a Crypto Fraud PipelineC2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11Microsoft starts removing WMIC tool used by cybercriminalsApple Patches 122 Flaws including macOS Screen Sharing Flaw (CVE-2026-65400)Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioAPT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkitSAP Commerce Cloud CVE-2026-58231 Exploited in the WildRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMulti-Functional Linux Botnet “Evooo1Bot”Dissecting the JWR phishing frameworkJewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by SideAdobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public DisclosureSecurity update available for Adobe Commerce | APSB26-92Attackers Exploit SharePoint Authentication Bypass After Public PoC ReleaseYou’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))Trezor Says ShipMonk Breach Exposed 13,689 CustomersAmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsersMalware Crypting Services and the Threat Actors Who Sell ThemRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioActive exploitation of CVE-2026–59310: 361 victim IPs across 47 countriesVMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessAdobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic FlawsAbuse of alternative runtime environments Deno-tes defender headachesKimwolf v7: An Evolution of the Kimwolf BotnetCATAnA: On the Dangers of SIM-Originating AT CommandsArmored Likho expands its cyber-espionage toolkitRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioZOOMSDAY - How A Security Found a Nation-State Vulnerability in Zoom in One DayAugust 2026 Security Updates Patch Tuesday - August 2026Microsoft and Adobe Patch Tuesday, August 2026 Security Update ReviewMicrosoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)Shattering the Dream – When a Job Offer Becomes a Zero-Day AttackMicrosoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-daysShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet PatchSAP Security Patch Day - August 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilitySonicWall Email Security Affected By Multiple VulnerabilitiesSonicWall GMS Security Affected By Multiple VulnerabilitiesMozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private RepoRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructureAbyssos: Technical Analysis of a New Modular RATCritical Progress LoadMaster flaw now actively exploited in attacksFollow-Up Analysis of the 29 December 2025 Energy Sector Incident Six npm Packages Use Ethereum Transactions to Retrieve Malicious PayloadsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMetabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataSecurity update available for Metabase - Please upgrade nownatjack - A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICESBring Your Own EDR: How to Turn a Commercial EDR into a Trojan HorseXSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak DataSCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-FreeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioBehind the Panels: Validating ShinyHunters Cluster A Infrastructure Through Network TelemetryWe infiltrated a criminal phishing panel: here’s what we foundUNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud EnvironmentsToken Jacking: Cybercriminals Could Be Stealing Your AI ResourcesZapscape KVM Flaw Lets Guest VMs Seize Host RootApple libera macOS Tahoe 26.6.1, com correções de segurançaChrome Stable Channel Update for Desktop - Thursday, August 6, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioENDLESSDOORS Is Phoning Home. Pick Up.Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026Cisco IOS XE Software Security Hardening Release: August 2026OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become RootBreaking the PaperclipRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioKeyv and friends compromised in active Shai-Hulud supply chain attackkeyv and cacheable npm Package Hijacked in Supply Chain AttackAnalyzing SMOKE#SCREEN: ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software LuresIntroducing DOUBLECUP, a ClickFix Loader Delivering CountLoader and DeviceManager RATsInterlock ransomware gang creates volatile situationcPanel Bug Hands Database Root to Any Hosting CustomerRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioPass the Passkey: A Novel Attack Surface in Passwordless AuthenticationDarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator ClusterFrom WSProxy to Root: INC ransomware and SonicWall SMA Exploit ChainRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioN-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577N-able Says Attackers Take Over N-central Servers After Initial Fix Proves IncompleteCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftAdobe fixed a maximum-severity vulnerability flaw in Campaign ClassicSecurity update available for Adobe Campaign Classic | APSB26-114Série de posts da Galaxy Research sobre ataque contra carteiras da ColdcardThe Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET VersionToy Ghouls’ new toy: the GenieLocker ransomwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio-North Korean hackers behind major open-source supply chain attacks, Amazon says-Amazon identifies North Korean hacker group behind open-source supply chain attacks-ClickFix, EtherHiding & a DPRK Wallet Trail-Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts-(합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공격 주의 권고-Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks-OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia-Investigating three real-world incidents in our cybersecurity evaluationsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco warns of FMC static credential flaw exploited in zero-day attacksVMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code ExecutionInside Astaroth's New Spambot ComponentStable Channel Update for Desktop - Wednesday, July 29, 2026KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't EnoughCheck Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)Coordinated “cyberattack” on Minnesota water utilities: What you need to knowClaude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES AttackRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCritical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as RootFast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security FindingsCritical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 NowRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCISA Adds Two Known Exploited Vulnerabilities to CatalogCVE-2025-68686 - SSL-VPN Symlink Persistence Patch BypassCVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityMirage Kitten targets Middle East and Africa region with new malwareExpanding the Castle: New Campaigns, New Tooling, and the NeedleStealer ConnectionHelpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC BackdoorBreaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 PatchApple security releasesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca GarciaX6LO8GntgGb95egmmOCZ

Referências do EpisódioCertighost (CVE-2026-54121)僵尸网络新秀：Dysphoria 演进与深度技术分析Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioThe Signs Were There: What the First Autonomous Ransomware Case ConfirmsChaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat ActivityTAG-195 Upgrades MaaS Ecosystem with Modular ToolsKimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confineRefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeLampion's Portugal-focused phishing campaign delivers multistage malwareAttack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient)Security Advisory – Action Required – July 2026 Security UpdateHermeticReader: The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp TakeoverRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioA new extortion cocktail: office printers, small ransoms, and BitLockerSolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28307)SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311)SolarWinds Serv-U Broken Access Control Vulnerability (CVE-2026-28321)Oracle Critical Patch Update Advisory - July 2026OpenAI admits it was the source of the agent swarm that attacked Hugging FacePublic PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioCritical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code ExecutionCVE-2026-6875 - Sandbox Escape in ServiceNow AI PlatformCookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin RansomwareExploitation in the Wild of wp2shellRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioProxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitationwp2shell: Pre Authentication RCE in WordPress CoreWordPress Core "wp2shell" RCE flaws get public exploits, patch nowThree Steps to the Terminal: A Siemens ROX II Zero-Day TrilogyHOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control ChannelsOpenSSL HollowByte: A DoS Hiding in 11 BytesNew North Korean campaign uses fake coding interviews to steal developer credentialsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioUAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaignClickLock Stealer: Paste Once, Lose EverythingACR Stealer: Two observed intrusion chains amid increased threat activitySpirals: New Stealthy Ransomware Deployed Against Asian IT CompanyGoSerpent: a persistent threat evolves with sophisticated data collection and exfiltrationRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioChaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows SystemsTuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted DevelopmentClaudeFix: Shared Claude Chats Meet ClickFixRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesTwo SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin CommandsMicrosoft July 2026 Security UpdatesSAP Security Patch Day - July 2026Progress confirms ShareFile zero-day flaw behind Storage Zone shutdownRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEOne Misconfigured Server, Three Active Campaigns: Full exposure of three AiTM Phishing OperatorsImprove Router Hygiene to Protect Against Russian State-Sponsored TargetingCrashStealer: C++ macOS infostealer posing as crash reporterOAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEProgress Told ShareFile Customers to Pull the Plug on Their Servers. Here’s What We Know.Unfit to Boot: Breaking U-Boot's FIT Signature VerificationCritical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User SessionsOne Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law EnforcementRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable DefensesGigaWiper: Anatomy of a destructive backdoor assembled from multiple malwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGhostApproval: A Trust Boundary Gap in AI Coding AssistantsClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud ToolkitMicrosoft patches RoguePlanet Defender zero-day vulnerabilityHackers can use 9 of the most popular AI tools to assemble massive botnetsCoordinated npm and PyPI Campaign Typosquats Popular Secure Payment AppsSygnia Investigation Finds AI Accelerated Attack Enabled Lone Threat Actor to Rapidly Compromise Enterprise Cloud EnvironmentJuniper Security AdvisoriesPalo Alto Networks Security AdvisoriesChrome ReleasesRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEUAT-7810 continues building ORB networks using new malwareAn Introduction to Operational Relay Box (ORB) Networks - Unpatched, Forgotten, and ObscuredIonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux DistrosVidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File InflationThe ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPIOne Email Closer to the Edge: UNK_MassTraction & the Physics of ExploitationCritical Gitea Docker Bug Under Active Exploitation Exposes Repositories and SecretsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTETenda firmware (multiple versions) contains hidden authentication backdoorCavern Manticore: Exposing Iran-Linked Modular C2 FrameworkAdobe ColdFusion flaw CVE-2026-48282 now exploited in the wildGolpe do falso CEO: criminosos usam Microsoft Teams para enganar funcionários19-Year-Old Linux Kernel Bug Earns $80K Bounty, Grants Root in Under a Second16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 SystemsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEArmored Likho digging a snake pit: inside the covert BusySnake Stealer campaignNew "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidCyber Criminal Group TeamPCPRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEPamStealer: a Rust-based macOS infostealer that validates credentials through PAMGoogle’s Continued Disruption of Malicious Residential Proxy NetworksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEDon’t Eat The ChocoPoCs! How Vulnerability Researchers Were Repeatedly Targeted By Trojanised ExploitsARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack TechniqueCisco Catalyst Center Arbitrary File Read VulnerabilityClamAV Vulnerabilities Affecting Cisco Products: July 2026Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation AttemptsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEPhantom Squatting: AI-Hallucinated Domains as a Software Supply Chain VectorSecuring AI agents: When AI tools move from reading to actingGuardFall: a universal shell injection vulnerability in open-source AI agentsSecurity updates available for Adobe Campaign Classic | APSB26-69Security update available for Adobe ColdFusion | APSB26-68Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-ServiceNetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)Chrome Releases - Stable Channel Update for Desktop - Tuesday, June 30, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildChromium extension uses AI‑related branding to redirect browser searchAbout the security content of iOS 26.5.2 and iPadOS 26.5.2About the security content of macOS Tahoe 26.5.2About the security content of Safari 26.5.2A Djinn in the Machine: TaskWeaver’s Node.js Intrusion ChainRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEDissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503)MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code ExtensionAlert Number: I-062626-PSA | 26 June 2026 - Russian Intelligence Services Continue to Target Commercial Messaging ApplicationsCL-STA-1062 Targets Southeast Asian Governments and Critical InfrastructureTONResolver RAT Abuses TON Blockchain to Target Japan's Hotel IndustryRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioMais de 430 mil firewalls corporativos são comprometidos em operação de roubo de credenciaisKazuar: Anatomy of a nation-state botnetSTOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering ApparatusBluekit Phishing-as-a-Service: Browser-in-the-Middle, EvolvedAISLE Discovers 6 New CVEs in curl, Including the Oldest Issue Ever ReportedTuring Day 2026 | 6º ediçãoRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia