Cyber Morning Call

Referências do Episódio32 Red Hat npm packages backdoored in 72 secondsMiasma: Supply Chain Attack Targeting RedHat npm PackagesMeet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised SitesCritical Windows Netlogon RCE flaw now exploited in attacksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bi...

Referências do EpisódioRapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWormMalicious npm packages abuse dependency confusion to profile developer environmentsRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca...

Referências do EpisódioAuthenticated RCE via Argument Injection in Gogs (NOT FIXED)Typosquatted npm packages used to steal cloud and CI/CD secretsDownload pumping: New npm deception technique for supply chain attacksRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioFortiClient EMS Exploited via CVE-2026-35616 to Deliver EKZ Infostealer Disguised as a Fortinet PatchPirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for yearsCommit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development InfrastructureGlassWorm Malware Takedown Disrupts Developer S...

Referências do EpisódioBTMOB: A stealthy RAT burrowing deep into Android devicesDetecting Tycoon 2FA AiTM attacks across Entra ID and Google WorkspaceMicrosoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.CVE-2026-45659 - Microsoft SharePoint Remote Code Execution VulnerabilityFake software on GitHub and SourceForge distribute Deno RAT Roteiro e apresentação: Carlos Cabral...

Referências do EpisódioSmart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC TestnetExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioTrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing ServicesAnalyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret MalwareFast and Furious – Nimbus Manticore Operations During the Iranian ConflictTracking Iranian APT Screening Serpens’ 2026 Espion...

Referências do EpisódioCVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilityCVE-2026-45498 - Microsoft Defender Denial of Service VulnerabilityITW SECURITY BULLETIN: Apex One and Vision One – Standard Endpoint Protection (SEP) May 2026 Security BulletinA New SonicWall Scanning Spike Echoes the Pattern That Preceded CVE-2026-0400CVE-2026-40369: Twelve Bytes to Escape the Browser...

Referências do EpisódioDrupal core - Highly critical - SQL injection - SA-CORE-2026-004Logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333)PinTheft: Another Linux Privilege Escalation, Another Working Exploit, This Time Targeting ArchHackers bypass SonicWall VPN MFA due to incomplete patchingTracking TamperedChef Clusters via Certificate and Code ReuseA malicious VS...

Referências do EpisódioDirtyDecrypt: Linux kernel LPE in the RxGK subsystem (CVE-2026-31635) with public PoCDirtyDecrypt / DirtyCBCExposing Fox Tempest: A malware-signing service operationFrom PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threatdurabletask: TeamPCP's Latest PyPi CompromiseMicrosoft shares mitigation for YellowKey Windows zero-dayCompromise...

Referências do EpisódioActive Supply Chain Attack Compromises @antv Packages on npmShai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHubHow Storm-2949 turned a compromised identity into a cloud-wide breachInside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking FraudRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca...

Referências do EpisódioCVE-2026-20182 - Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityFrequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182)CVE-2026-20209, CVE-2026-20210 e CVE-2026-20224 - Cisco Catalyst SD-WAN Manager VulnerabilitiesActive Supply Chain Attack: Malicious node-ipc Versions Published to npmPopular...

Referências do EpisódioNGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old VulnerabilityK000161019: NGINX ngx_http_rewrite_module vulnerability CVE-2026-42945NGINX Rift: An 18-Year-Old Bug Lets Hackers Hijack One-Third of the Internet's Web ServersFragnesiaNew Fragnesia Linux Kernel LPE Grants Root Access via Page Cache CorruptionCVE-2026-0263 PAN-OS: Remote Code Execution (RC...

Referências do EpisódioMini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised​​Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages“Shai-Hulud, Here We Go Again”: 170+ Packages Hit Across npm & PyPiMay 2026 Security UpdatesMicrosoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilitiesMicrosoft and Adobe Patch Tuesday, May 2...

Referências do EpisódioVibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin AmericaGTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial AccessRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio 秘密活动6年的神秘黑客组织Mr_Rot13正在利用cPanel高危漏洞部署后门木马PamDOORa: Analyzing a New Linux PAM-Based Backdoor for Sale on the Dark WebIncident Update: Saturday, May 9, 2026Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioDirty Frag: Universal Linux LPEMay 2026 Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (Multiple CVEs)PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at ScaleThreat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code ExecutionCVE-2025-68670: discovering an RCE vulnerability in xrdpWhen prompts become shells: RCE vulnerabi...

Referências do EpisódioTCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and OutlookMuddying the Tracks: The State-Sponsored Shadow Behind Chaos RansomwareOceanLotus suspected of using PyPI to deliver ZiChatBot malwareClickFix campaign uses fake macOS utilities lures to deliver infostealersRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca...

Referências do EpisódioCVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalCritical Apache HTTP Server Flaw Exposes Millions of Servers to RCE AttacksApache HTTP Server 2.4 vulnerabilitiesA rigged game: ScarCruft compromises gaming platform in a supply-chain attackCloudZ RAT potentially steals OTP messages using Pheno pluginUAT-8302 a...

Referências do EpisódioQuasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting CapabilitiesBreaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromiseHackers target governments and MSPs via critical cPanel flaw CVE-2026-41940CISA Adds One Known Exploited Vulnerability to Ca...

Referências do EpisódioAnti-DDoS Firm Heaped Attacks on Brazilian ISPsClickFix Removes Your Background but Leaves the MalwareInside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in AsiaImportant Update From TrellixCritrical (sic) cPanel flaw mass-exploited in "Sorry" ransomware attacksRoteiro e apresentação: Carlos CabralEdição de áudio:...

Referências do EpisódioAll supported cPanel versions hit by critical auth bug, now patchedThe Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)Copy Fail: 732 Bytes to Root on Every Major Linux Distribution.Official SAP npm packages compromised to steal credentialsSupply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malwa...

Referências do EpisódioSecuring GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)VECT: Ransomware by design, Wiper by accidentRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWEBINAR TEMPEST: Superfície exposta, acesso concedido: como ativos esquecidos formam o caminho perfeito para o atacanteMicrosoft Patches Entra ID Role Flaw That Enabled Service Principal TakeoverAgent ID Administrator scope overreach: Service Principal takeover in Entra IDCVE-2026-25874: Hugging Face LeRobot Unauthenticated RCE via Pickle DeserializationCVE-2026-42208: Targe...

Referências do EpisódioWEBINAR TEMPEST: Superfície exposta, acesso concedido: como ativos esquecidos formam o caminho perfeito para o atacanteCVE-2026-40050 — CrowdStrike LogScale Unauthenticated Path TraversalCheckmarx Security Update: April 26Checkmarx Security Update: April 22Roteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia