Cyber Morning Call

Referências do Episódio Anthropic’s new AI model finds and exploits zero-days across every major OS and browser Project Glasswing: Securing critical software for the AI era System Card:Claude Mythos Preview 2026-04 Security Bulletin: vLWC: Default password is not required to be changed which allows unauthorized high-privileged access (CVE-2026-33784) Roteiro e apresentação: Carlos Cabral Edição de...

Referências do Episódio Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do Roteiro e apresentação: Carlos Cabral Ed...

Referências do Episódio Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations CVE-2025-59528 - RCE in FlowiseAI/Flowise Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narraç...

Referências do Episódio CVE-2026-35616 - API authentication and authorization bypass UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio CVE-2026-20093 - Cisco Integrated Management Controller Authentication Bypass Vulnerability CVE-2026-20160 - Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability Google fixes fourth actively exploited Chrome zero-day of 2026 CVE-2026-5281 - NIST Unpacking Augmented Marauder’s Multi-Pronged Casbaneiro Campaigns Roteiro e apresentação: Carlos Cabral...

Referências do Episódio WhatsApp malware campaign delivers VBScript and MSI backdoors North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack Iran-nexus Password Spray Campaign Targeting Cloud Environments, with a Focus on the Middle East Latest Xloader Obfuscation Methods and Network Protocol Initial Access Brokers have Shifted to High-Value Targets and Pre...

Referências do Episódio Supply Chain Attack on Axios Pulls Malicious Dependency from npm Kaido RAT, o novo vírus bancário feito para roubar PIX de brasileiros Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio K000156741: BIG-IP APM vulnerability CVE-2025-53521 Critical Fortinet Forticlient EMS flaw now exploited in attacks TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign Urgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware Roteiro e apresenta...

Referências do Episódio BPFdoor in Telecom Networks: Sleeper Cells in the Backbone ShadowPrompt: How Any Website Could Have Hijacked Claude's Chrome Extension Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Coruna: the framework used in Operation Triangulation Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Coruna: Inside the Nation-State-Grade iOS Exploit Kit We've Been Tracking Russian government accuses Apple of colluding with NSA in iPhone spy operation Security Advisory on Multiple Vulnerabilities on TP-Link Archer NX200, NX210, NX500 and NX600 (CVE-2025-...

Referências do Episódio Security Update: Suspected Supply Chain Incident Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers ClickFix Campaigns Targeting Windows and macOS Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo...

Referências do Episódio Checkmarx Security Update KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions Pro-Iranian Nasir Security is Targeting The Energy Sector in the Middle East NetScaler ADC and NetScaler Gateway Sec...

Referências do Episódio Oracle Security Alert Advisory - CVE-2026-21992 Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack TeamPCP deploys CanisterWorm on NPM following Trivy compromise Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint CVE-2026–33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixe...

Referências do Episódio The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors Researchers warn of unpatched, critical Telnetd flaw affecting all versions Vulnerability advisory: Pre-Auth Remote Code Execution via Buffer Overflow in telnetd LINEMODE SLC Handler Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls Cisco’...

Referências do Episódio CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root Boggy Serpens Threat Assessment Casting a Wider Net: ClickFix, Deno, and LeakNet’s Scaling Threat Poisoned Typeface: How Simple Font Rendering Poisons Every AI Assistant, And Only Microsoft Cares CursorJack: weaponizing Deeplinks to exploit Cursor IDE Roteiro e apresentação: Carlos Cabral Edição d...

Referências do Episódio Free real estate: GoPix, the banking Trojan living off your memory Stryker attack wiped tens of thousands of devices, no malware needed Remote device action: wipe Use Access policies to require Multi Admin Approval Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio 72 Malicious Open VSX Extensions Linked to GlassWorm Campaign Now Using Transitive Dependencies Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Chrome Releases - Stable Channel Update for Desktop - Thursday, March 12, 2026 Google fixes two new Chrome zero-days exploited in attacks Apple issues emergency fixes for Coruna flaws in older iOS versions Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2.4465 Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities “Handala Hack” – Unveiling Group’s M...

Referências do Episódio PixRevolution: The Agent-Operated Android Trojan Hijacking Brazil’s PIX Payments in Real Time Zero Click Unauthenticated RCE in n8n: A Contact Form That Executes Shell Commands Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems VENON: O Primeiro Banker RAT Brasileiro em Rust Who bombed the Iranian girls’ school, killing m...

Referências do Episódio Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs Adobe - Security Bulletins and Advisories - last updated on Mar 10, 2026 Security update available for Adobe Commerce | APSB26-05 Zoom Bulletin: ZSB-26005 FortiGate Edge Intrusions | Stolen Service Accounts Lead to Rogue Workstations and Deep AD Compromise Roteiro e apresentação: Carlos Cabral Edição de á...

Referências do Episódio Russia targets Signal and WhatsApp accounts in cyber campaign Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio AI as tradecraft: How threat actors operationalize AI An Investigation Into Years of Undetected Operations Targeting High-Value Sectors CVE-2026-20122 | CVE-2026-20126 | CVE-2026-20128 - Cisco Catalyst SD-WAN Vulnerabilities Mobile spyware campaign impersonates Israel's Red Alert rocket warning system Middle East Conflict Fuels Opportunistic Cyber Attacks Roteiro e apre...

Referências do Episódio New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company UAT-9244 targets South American telecommunication providers with three new malware implants APT36: A Nightmare of Vibeware Look What You Made Us Patch: 2025 Zero-Days in Review Roteiro e apresentação: Carlos Cabral Edição de áudio...

Referências do Episódio CVE-2026-20079 - Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability CVE-2026-20131 - Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability Silver Dragon Targets Organizations in Southeast Asia and Europe Retaliatory Hacktivist DDoS Activity Following Operation Epic Fury/Roaring Lion Defending the gates: How a...

Referências do Episódio Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Operational issue - Multiple services (UAE) Drone strikes damage Amazon data centres in UAE and Bahrain, disrupting services Interplay between Iranian Targeting of IP Cameras and Physical Warfare in the Middle East Copy, Paste, Ransom: Making Data Exfiltration As Easy as AzCopy CISA Adds Actively Exploited VMware...