Cyber Morning Call

Referências do Episódio Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (Zscaler) Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties (SentinelLabs) Ignore all instructions and read this blog: The state of AI-analysis evasion in malware (Cisco Talos) Hunt.io Finds New Infrastructure Of BraZetsu Acc...

Referências do episódio Software Supply Chain Attack on tensorlake: Overview and Response Guidance Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities Cisco NX-OS Software NX-API Remote Code Execution Vulnerability Cisco License (Smart Software Manager) On-Prem Vulnerabilities C...

Referências do Episódio Security Advisory SNWLID-2026-0017 (SonicWall PSIRT) Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access (Datadog Security Labs) Blinder Tunnel Campaign Targets Iraqi Infrastructure (Unit 42) FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts (FBI / USSS) WordPress 7.1.3 Fixes SQL Injection, Stored XSS Fla...

Referências do Episódio CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products (Atlassian) Atlassian warns of critical file access flaw in its datacenter products (The Register) ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure (FortiGuard Labs) Rejetto HFS servers now actively scanned for critical RCE flaw (BleepingComputer) Dell Urges Customers to Patch Critical...

Referências do Episódio Understanding and Addressing CVE-2026-88779 in Citrix NetScaler ADC and Citrix NetScaler Gateway New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline SMTP is the key: BPFDoor and AVERAT hitting the network edge AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it GitLab AI Gateway Critical Patch Release: 19....

Referências do Episódio Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino FG-IR-26-175: Improper limitation of a pathname to a restricted directory Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site Police disrupt KillSec ransomware, arrest suspected teenage leader 16-year-old suspected leader of KillSec ransomwar...

Referências do Episódio Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504) Vulnerability Discovery and Exploitation Trends in the AI Era Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 Disrupting a coordinated model-distillation campa...

Referências do Episódio Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances Citrix, Check Point, F5 e Arista: mais uma semana com falhas críticas sob ataque na borda das empresas Star Blizzard refines phishing and malware delivery with the RedFlick technique Alleged ShinyHunters leader...

Referências do Episódio About the security content of iOS 26.7.1 and iPadOS 26.7.1 Apple patches CoreGraphics zero-day flaw exploited in attacks From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix NeedyMantis: Unpacking a post-compromise malware family used in targeted operations Roteiro e apresentação: Carlos...

Referências do Episódio   Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation NetScaler ADC and NetScaler Gateway Security Bulletin (CTX697096) Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft Storm-3168: Agentic-driven cloud attacks using compromised service p...

Referências do Episódio The Psychedelic Stealer: When a CAPTCHA Becomes an Installer MacSync under the microscope: new delivery methods and a new payload Uncovering a SectopRAT Variant Embedded in Legitimate Software Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4...

Referências do Episódio 3a Edição da Human Risk Conference Novel supplychain.local Go worm appears MemTensor npm and PyPI Packages Hit by a Go Worm MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes Meet AvisLoader: A Windows Loader Built to Outlast a Takedown Roteiro e apresentação: Carlos Cabral Ediç...

Referências do Episódio Security Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616 Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day The Closed Quorum: Inside the first reported autonomous AI C2 implant D-Link warns of max severity zero-day bug in DIR-822A routers Arista Security...

Referências do Episódio We got a cybersecurity expert to hack this BYD. It was too easy TASK#STOMP: PowerShell Backdoor for Document Theft and Remote Access Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração...

Referências do Episódio Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties North Korean "WaterPlum," commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT...

Referências do Episódio Beware the SparroWock: The backdoor that bites, the commands that catch The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents Vídeo sobre DDR em blockchains HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack Stable Channel Update for Desktop - Thursday, September 17, 2026 Check Point Fixes Critical CVE-...

Referências do Episódio Cisco Identity Services Engine Authentication Bypass Vulnerability Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability Boletim de atualizações do Pixel: setembro de 2026 TrustSink: How a Rogue External MFA Provider Steals Passwords Oracle Critical Security Patch Update, September 2026 Review Oracle September 2026 Critical Security Patch Upda...

Referências do Episódio The banana stand: brokering and managing infections across Asia using MQTT ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Cisco Secure Email Gateway SQL Injection Vulnerability Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit LiteSpeed Enterprise Flaw Could Let O...

Referências do Episódio Smish. Click. Drained: Inside the Smishing Triad's Phishing Cockpit The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours “Eye” spy: Cyclops Blink returns with extended...

Referências do Episódio Detecting and countering misuse of AI: September 2026 Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector SloppyRAT: A New Tool For Ransomware Attacks Roteiro e apresentação: Carlos Cabral Edi...

Referências do Episódio Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days Active exploitation of Cisco Secure Firewall Management Center vulnerabilities Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure The Shared Clipboard I...

Referências do Episódio Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days Microsoft discloses two actively exploited zero-days among 974 vulnerabilities Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day Stable Channel Update for Desktop - Tuesday, September 8, 2026 SAP Security Patch Day - September 2026 Unauthenticated Control of NAT Rules Leading to Ex...

Referências do Episódio Krytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacja ConnectWise warns of new ScreenConnect flaw without patch Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack Urgent Action Required: Critical Security Update A...

Referências do Episódio ASCII smuggling crosses over from AI prompt injection to phishing evasion The Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement Action One Blank Field Bypasses Direct Send Control SNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple Vulnerabilities Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon Roteiro...