Cyber Morning Call

Referências do Episódio SOC Tempest com Google SecOps Treasury Takes Action Against Major Cyber Scam Facilitator Chasing Eddies : New Rust- based InfoStealer used in CAPTCHA campaigns Hackers are exploiting critical flaw in vBulletin forum software Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Cybercriminals camouflaging threats as AI tool installers Qualys TRU Discovers Two Local Information Disclosure Vulnerabilities in Apport and systemd-coredump: CVE-2025-5054 and CVE-2025-4598 ConnectWise breached in cyberattack linked to nation-state hackers Cisco IOS XE WLC Arbitrary File Upload Vulnerability ( CVE-2025-20188 ) Analysis Meta Disrupts Influence Ops Targetin...

Referências do Episódio Mark Your Calendar: APT41 Innovative Tactics PumaBot : Novel Botnet Targeting IoT Surveillance Devices Zanubis in motion : Tracing the active evolution of the Android banking malware GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands of ASUS Routers Pakistan Telecommunication Company (PTCL) Targeted by Bitter APT During Heightened Regional Conflict OneDrive...

Referências do Episódio Earth Lamia Develops Custom Arsenal to Target Multiple Industries DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers New Russia-affiliated actor Void Blizzard targets critical sectors for espionage Onbekende Russische groep achter hacks Nederlandse doelen Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narraç...

Referências do Episódio The Sharp Taste of Mimo’lette: Analyzing Mimo’s Latest Campaign targeting Craft CMS Usage statistics and market share of Craft CMS How Craft CMS built Craft Cloud Investigating an in-the-wild campaign using RCE in CraftCMS Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Silent Ransom Group Targeting Law Firms Scarcity signals: Are rare activities red flags? APT그룹추적보고서 TA-ShadowCricket NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Danabot : Analyzing a fallen empire ViciousTrap – Infiltrate, Control, Lure: Turning edge devices into honeypots en masse.  Inside DanaBot’s Infrastructure: In Support of Operation Endgame II  Operation Endgame 2.0: DanaBusted Подробный технический анализ инструментария Obstinate Mogwai . Часть 2: бэкдоры Donnect, DimanoRAT и веб-шелл AntSpy UAT-6382 exploits Cityworks zero...

Referências do Episódio BadSuccessor : Abusing dMSA to Escalate Privileges in Active Directory Europol and Microsoft disrupt world’s largest infostealer Lumma Lumma Stealer : Breaking down the delivery techniques and capabilities of a prolific infostealer Lumma Stealer toppled by globally coordinated takedown  Russian GRU Targeting Western Logistics Entities and Technology Companies Dero miner zom...

Referências do Episódio Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild Cloudy with a Chance of Hijacking Forgotten DNS Records Enable Scam Actor Brand impersonation , online ads, and malicious merchants help purchase scam network prey on victims Hidden Threats of Dual-Function Malware Found in Chrome Extensions The Sting of Fake Kling : Facebook Malvertising Lures Victims to Fake AI Gen...

Referências do Episódio Firefox Security Response to pwn2own 2025 Hackers earn $1,078,750 for 28 zero-days at Pwn2Own Berlin How Interlock attacks IT specialists with fake CAPTCHAs and ClickFix ClickFix の被害をJSOCの複数のお客様にて観測 Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Chinese ‘kill switches’ found hidden in US solar farms Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Alert Number: I-051525-PSA - May 15, 2025 - Senior US Officials Impersonated in Malicious Messaging Campaign Operation RoundPress Sophisticated NPM Attack Leveraging Unicode Steganography and Google Calendar C2 Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain ( CVE-2025-4427 and CVE-2025-4428 ) Fileless Execution: PowerShell Based Shellcode Loader Executes Rem...

Referências do Episódio DarkCloud Stealer : Comprehensive Analysis of a New Attack Chain That Employs AutoIt Stable Channel Update for Desktop Excel(ent) Obfuscation : Regex Gone Rogue ReliaQuest Uncovers New Critical Vulnerability in SAP NetWeaver Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws Stack-based buffer overflow vulnerability in API Security Advisory Ivanti Neurons for ITSM (On-Premises Only) ( CVE-2025-22462 ) Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 ( CVE-2025-4427 and CVE-2025-4428 ) SAP Security Patch Day - May 2025 /bin/live : Gabriela Salles Roteiro e apr...

Referências do Episódio Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan Marbled Dust leverages zero-day in Output Messenger for regional espionage Researchers found one-click RCE in ASUS’s pre-installed software DriverHub Modern Incident Response: Tackling Malicious ML Artifacts /bin/live - programa da Mente Binária que ocorre hoje às 20hs Roteiro e aprese...

Referências do Episódio Stealthy .NET Malware : Hiding Malicious Payloads as Bitmap Resources Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages Classic Rock: Hunting a Botnet that preys on the Old Lumma Stealer , coming and going Vídeo que fiz sobre ClickFix Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca...

Referências do Episódio Spam campaign targeting Brazil abuses Remote Monitoring and Management tools Ascensão do uso de softwares de monitoramento e gerenciamento remoto em campanhas maliciosas SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root Multiple vulnerabilities in SonicWall SMA 100 series (FIXED) The LockBit ransomware site was breached , database dump was...

Referências do Episódio CVE-2025-20188 - Cisco IOS XE Wireless Controller Software Arbitrary File Upload Vulnerability Ransomware Attackers Leveraged Privilege Escalation Zero-day Agenda Ransomware Group Adds SmokeLoader and NETXLOADER to Their Arsenal COLDRIVER Using New Malware To Steal Documents From Western Targets and NGOs Vídeo que fiz sobre ClickFix Inferno Drainer Reloaded : Deep Dive into...

Referências do Episódio Samsung MagicINFO 9 Server RCE flaw now exploited in attacks  Samsung SVP-AUG-2024   Canary Exploit tool for CVE-2025-30065 Apache Parquet Avro Vulnerability Smishing on a Massive Scale: " Panda Shop " Chinese Carding Syndicate Lights Out and Stalled Factories: Using MATRIX to Learn About Modbus Vulnerabilities Bit ByBit - emulation of the DPRK's largest crypt...

Referências do Episódio Bring Your Own Installer : Bypassing SentinelOne Through Agent Version Change Interruption Boletim de segurança do Android : maio de 2025 Google addresses 1 actively exploited vulnerability in May’s Android security update CVE-2025-27363 Defending Against UNC3944 : Cybercrime Hardening Guidance from the Frontlines Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Ediç...

Referências do Episódio SOC Tempest com Google SecOps I StealC You: Tracking the Rapid Changes To StealC wget to Wipeout : Malicious Go Modules Fetch Destructive Payload Backdoor found in popular ecommerce components Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio SonicWall SSL-VPN SMA100 Version 10.x Is Affected By Multiple Vulnerabilities SonicWall SMA100 SSL-VPN Affected By Multiple Vulnerabilities SonicBoom , From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475) TerraStealerV2 and TerraLogger : Golden Chickens' New Malware Families Discovered Earth Kasha Updates TTPs in Latest Campaign Targeting...

Referências do Episódio Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis Outlaw cybergang attacking targets worldwide Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting Vídeo que fiz sobre ClickFix Wormable Zero-Click Remote Code Execution (RCE) in AirPlay Protocol Puts Apple & IoT Devices at Risk Roteiro e apresentação: Carlos Cabral e Bianca Oliveira E...

Referências do Episódio How the April 28, 2025, power outage in Portugal and Spain impacted Internet traffic and connectivity Dashboard com os servidores vulneráveis à CVE-2025-31324 Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do Episódio CVE-2025-31324 : Zero-Day Vulnerability in SAP NetWeaver Exploited in the Wild ReliaQuest Uncovers New Critical Vulnerability in SAP NetWeaver Triada strikes back Ill intent: How deepfake “doctors” peddle bogus cures on TikTok Various GPT services are vulnerable to "Inception" jailbreak , allows for bypass of safety guardrails Craft CMS RCE exploit chain used in z...