Cyber Morning Call

Referências do Episódio N-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577 N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic Security update available for Adobe Campaign Classic | APSB...

Referências do Episódio - North Korean hackers behind major open-source supply chain attacks, Amazon says - Amazon identifies North Korean hacker group behind open-source supply chain attacks - ClickFix, EtherHiding & a DPRK Wallet Trail - Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts - (합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공...

Referências do Episódio Cisco Secure Firewall Management Center Software Static Credential Vulnerability Cisco warns of FMC static credential flaw exploited in zero-day attacks VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) Broadcom Patches Critical VMware ESXi Vu...

Referências do Episódio Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 Now Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de...

Referências do Episódio CISA Adds Two Known Exploited Vulnerabilities to Catalog CVE-2025-68686 - SSL-VPN Symlink Persistence Patch Bypass CVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Mirage Kitten targets Middle East and Africa region with new malware Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection Helpdesk Hijackers:...

Referências do Episódio Certighost (CVE-2026-54121) 僵尸网络新秀：Dysphoria 演进与深度技术分析 Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio The Signs Were There: What the First Autonomous Ransomware Case Confirms Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity TAG-195 Upgrades MaaS Ecosystem with Modular Tools Kimi K3 Agents Found Redis Zero-Days and B...

Referências do Episódio CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)  JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake Lampion's Portugal-focused phishing campaign delivers multistage malware Attack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, P...

Referências do Episódio A new extortion cocktail: office printers, small ransoms, and BitLocker SolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28307) SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311) SolarWinds Serv-U Broken Access Control Vulnerability (CVE-2026-28321) Oracle Critical Patch Update Advisory - July 2026 OpenAI admits it was the source of the age...

Referências do Episódio Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware Exploitation in the Wild of wp2shell Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation wp2shell: Pre Authentication RCE in WordPress Core WordPress Core "wp2shell" RCE flaws get public exploits, patch now Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels OpenSSL HollowByte: A DoS...

Referências do Episódio UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign ClickLock Stealer: Paste Once, Lose Everything ACR Stealer: Two observed intrusion chains amid increased threat activity Spirals: New Stealthy Ransomware Deployed Against Asian IT Company GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltratio...

Referências do Episódio Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development ClaudeFix: Shared Claude Chats Meet ClickFix Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands Microsoft July 2026 Security Updates SAP Security Patch Day - July 2026 Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de en...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE One Misconfigured Server, Three Active Campaigns: Full exposure of three AiTM Phishing Operators Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting CrashStealer: C++ macOS infostealer posing as crash reporter OAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumera...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here’s What We Know. Unfit to Boot: Breaking U-Boot's FIT Signature Verification Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTE GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTE GhostApproval: A Trust Boundary Gap in AI Coding Assistants ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit Microsoft patches RoguePlanet Defender zero-day vulnerability Hackers can use 9 of the most popular AI tools to assemble massive botnets Coordinated npm and PyPI Campaign Typosquats Popular Secur...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORT A DE ENTRADA DO ATACANTE UAT-7810 continues building ORB networks using new malware An Introduction to Operational Relay Box (ORB) Networks - Unpatched, Forgotten, and Obscured IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most L...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Tenda firmware (multiple versions) contains hidden authentication backdoor Cavern Manticore: Exposing Iran-Linked Modular C2 Framework Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild Golpe do falso CEO: criminosos usam Microsoft Teams para enganar funcionários 19-Year-Old Linux Kernel Bug Earns $80K Bount...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android Cyber Criminal Group TeamPCP Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE PamStealer: a Rust-based macOS infostealer that validates credentials through PAM Google’s Continued Disruption of Malicious Residential Proxy Networks Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Don’t Eat The ChocoPoCs! How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365 Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique Cisco Catalyst Center Arbitrary File Read Vulnerability ClamAV Vuln...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Securing AI agents: When AI tools move from reading to acting GuardFall: a universal shell injection vulnerability in open-source AI agents Security updates available for Adobe Campaign Classic | APSB26-69 Security update available for Adobe Co...

Referências do Episódio WEBINAR: A CONFIANÇA COMO PORTA DE ENTRADA DO ATACANTE Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild Chromium extension uses AI‑related branding to redirect browser search About the security content of iOS 26.5.2 and iPadOS 26.5.2 About the security content of macOS Tahoe 26.5.2 About the security content of Safari 26.5.2 A Djinn in the Machine:...