Cyber Morning Call

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable DefensesGigaWiper: Anatomy of a destructive backdoor assembled from multiple malwareRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEGhostApproval: A Trust Boundary Gap in AI Coding AssistantsClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud ToolkitMicrosoft patches RoguePlanet Defender zero-day vulnerabilityHackers can use 9 of the most popular AI tools to assemble massive botnetsCoordinated npm and PyPI Campaign Typosquats Popular Secure Paym...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTEUAT-7810 continues building ORB networks using new malwareAn Introduction to Operational Relay Box (ORB) Networks - Unpatched, Forgotten, and ObscuredIonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTETenda firmware (multiple versions) contains hidden authentication backdoorCavern Manticore: Exposing Iran-Linked Modular C2 FrameworkAdobe ColdFusion flaw CVE-2026-48282 now exploited in the wildGolpe do falso CEO: criminosos usam Microsoft Teams para enganar funcionários19-Year-Old Linux Kernel Bug Earns $80K Bounty, Gra...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEArmored Likho digging a snake pit: inside the covert BusySnake Stealer campaignNew "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidCyber Criminal Group TeamPCPRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEPamStealer: a Rust-based macOS infostealer that validates credentials through PAMGoogle’s Continued Disruption of Malicious Residential Proxy NetworksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEDon’t Eat The ChocoPoCs! How Vulnerability Researchers Were Repeatedly Targeted By Trojanised ExploitsARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack TechniqueCisco Catalyst Center Arbitrary File Read VulnerabilityClamAV Vulnerabil...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEPhantom Squatting: AI-Hallucinated Domains as a Software Supply Chain VectorSecuring AI agents: When AI tools move from reading to actingGuardFall: a universal shell injection vulnerability in open-source AI agentsSecurity updates available for Adobe Campaign Classic | APSB26-69Security update available for Adobe ColdFusi...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildChromium extension uses AI‑related branding to redirect browser searchAbout the security content of iOS 26.5.2 and iPadOS 26.5.2About the security content of macOS Tahoe 26.5.2About the security content of Safari 26.5.2A Djinn in the Machine: TaskWe...

Referências do EpisódioWEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTEDissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503)MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code ExtensionAlert Number: I-062626-PSA | 26 June 2026 - Russian Intelligence Services Continue to Target Commercial Messaging ApplicationsCL-STA-1062 Targets Southeast Asian Gover...

Referências do EpisódioMais de 430 mil firewalls corporativos são comprometidos em operação de roubo de credenciaisKazuar: Anatomy of a nation-state botnetSTOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering ApparatusBluekit Phishing-as-a-Service: Browser-in-the-Middle, EvolvedAISLE Discovers 6 New CVEs in curl, Including the Oldest Issue Ever ReportedTuring Day 2026 | 6º e...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN ManagerCVE-2026-20245 - Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation VulnerabilityCVE-2026-20127 - Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the SandboxNew macOS ClickFix attack silently mounts DMGs to push infostealerCisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to RootRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06A VBScript campaign distributed through WhatsApp deploying RMM softwareFortiBleed campaign used custom FortiGate sniffer to steal credentialsFrom Langflow to Monero: Inside CVE-2026-33017 CryptominerPixelSmash – Critical FFmpeg Vulnerability Turns Media Files into WeaponsDifyTap: Zafran discovers how attackers can silently wiretap AI da...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06Introducing usbliter8: An A12/A13 SecureROM exploitWebinar Tempest - Superfície exposta, acesso concedido: como ativos esquecidos formam o caminho para o atacanteSalesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer DataRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramen...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06K000161616: NGINX ngx_http_v3_module vulnerability CVE-2026-42530K000161584: NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability CVE-2026-42055Killing me gently: Inside Gentlemen’s EDR killer frameworkLost in relocation: analysis of a new loader distributing CASTLESTEALERAutoJack: How a single page can RCE the host run...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06FortiBleed — 75k Fortinet firewalls have admin passwords crackedFortiBleed Exposes Admin Passwords for 75,000 Fortinet FirewallsFortiBleed - HudsonRockClickFix Campaign Generated Via AI Delivers SmartRATFrom package to postinstall payload: Inside the Mastra npm supply chain compromiseFrom Stars to Upvotes: Fake Reputation Fueling a Cryp...

Referências do Episódio/bin/live: CISOs - com Fabiana Tanaka e Denis NesiTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06FishMonger’s arsenal upgraded: SprySOCKS for Windows隐形毒刺：超4000台老旧路由器遭AryStinger入侵，沦为黑客全球攻击跳板Rokarolla : Android Banker with Complete Device Takeover CapabilitiesPickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCECritical Fortinet FortiS...

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense ResearchSearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration WeaponCVE-2026-42824 - M365 Copilot Information Disclosure VulnerabilityUnveiling ErrTraffic: inside a growing...

Referências do EpisódioMS 사칭 피싱과 Dead-drop C2 기반 APT37 NarwhalRAT 분석Atomic Arch: Attackers Hijack Trusted AUR Packages to Deliver Rootkit-Like MalwareUnauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseWhy Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)FBI takes down massive Ch...

Referências do EpisódioShinyHunters Targets Education Sector with Oracle PeopleSoft ExploitOracle Security Alert Advisory - CVE-2026-35273Oracle mitigates PeopleSoft zero-day exploited in data theft attacksVelvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network UndetectedInside OnyxC2: The New Stealer Targeting 210 AppsOceanLotus: From external espionage to domesti...

Referências do EpisódioUnpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCEExpanded JDY IoT and SOHO botnet enables rapid vulnerability exploitationCVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationWho Runs the Ransomware Group ‘The Gentlemen?’GitHub to Disable npm Install Scripts by Default to Stop Supply Chain AttacksRoteiro e apr...

Referências do EpisódioMSRC - June 2026 Security UpdatesCVE-2026-45586 - Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability CVE-2026-49160 - HTTP.sys Denial of Service Vulnerability CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityRoguePlanetMicrosoft Defender 'RoguePlanet' zero-day grants SYSTEM privilegesSAP Security Patch Day...

Referências do EpisódioGoogle patches new Chrome zero-day flaw exploited in the wildChrome Releases - Stable Channel Update for Desktop - Monday, June 8, 2026Security Advisory – Action Required – Active Exploitation of Check Point VPN Authentication Bypass (CVE-2026-50751)Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)Off By !: Exploiting a Use-after-Free in the Linux Kern...

Referências do Episódio1-Click GitHub Token Stealing via a VSCode BugError 524 Decoy: Unmasking a Global Smishing Operation Hiding Behind Error PagesOperation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell BackdoorBoletim de segurança do Android: junho de 2026CISA flags two-year-old Oracle flaw as actively exploited in attacksRoteiro e apresentação: Carlos CabralEdição de áudi...