Cyber Morning Call

Referências do Episódio Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware Family LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem) Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio APT28 Leverages CVE-2026-21509 in Operation Neusploit AI-assisted cloud intrusion achieves admin access in 8 minutes Metro4Shell: Exploitation of React Native’s Metro Server in the Wild Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Notepad++ Hijacked by State-Sponsored Hackers The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit 1-Click RCE via Authentication Token Exfiltration From gatewayUrl 1-Click RCE To Steal Your Moltbot Data and Keys Giving OpenClaw The Keys to Your Kingdom? Read This First Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerrament...

Referências do Episódio Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft Guidance from the Frontlines: Proactive Defense Against ShinyHunters-Branded Data Theft Targeting SaaS GlassWorm Loader Hits Open VSX via Developer Account Compromise ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting 19 Shades of LockBit5.0, Inside the Latest Cross-P...

Referências do Episódio Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) Inside the Infrastructure: Who’s Scanning for Ivanti Connect Secure? CVE-2025-0282 Detail Dissecting UAT-8099: New persistence mechanisms and regional focus Threat Bulletin: Critical eScan Supply Chain Compromise Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  N...

Referências do Episódio Solarwinds - WHD 2026.1 release notes CVE-2025-40551: Another Solarwinds Web Help Desk Deserialization Issue Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554 Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic Can’t stop, won’t stop: TA584 innovates initial access Two...

Referências do Episódio Administrative FortiCloud SSO authentication bypass Analysis of Single Sign-On Abuse on FortiOS CMC 935 - A notável escala dos ataques do PurpleBravo | FortiGate sob ataque Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088 HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns Threat Actors Using AWS WorkMail in Phishing Ca...

Referências do Episódio CVE-2026-21509 - Microsoft Office Security Feature Bypass Vulnerability Microsoft patches actively exploited Office zero-day vulnerability Bypassing Windows Administrator Protection APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1 PackageGate: 6 Zero-Days in JS Package Managers But NPM Won't Act Roteiro e apresentação: Carlos Cabral...

Referências do Episódio PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups Stanley — A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio KONNI Adopts AI to Generate PowerShell Backdoors Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware Osiris: New Ransomware, Experienced Attackers? Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access Malicious VS Code AI Extensions Harvest...

Referências do Episódio PurpleBravo’s Targeting of the IT Software Supply Chain New Phishing Campaign Targeting LastPass Customers Cisco Unified Communications Products Remote Code Execution Vulnerability Arctic Wolf Observes Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento:...

Referências do Episódio VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun Cyata Research: Breaking Anthropic’s Official MCP Server Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Weaponizing Calendar Invites: How Prompt Injection Bypassed Google Gemini’s Controls Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites Creepy Crawlers: Hunting Those Who Hunt For WordPress Plugins 100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Advanced Custom Fields: Extended WordPress Plugin Roteiro e apresen...

Referências do Episódio From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers PDFSIDER Malware - Exploitation of DLL Side-Loading for AV and EDR Evasion VoidLink threat analysis: Sysdig discovers C2-compiled kernel rootkits Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework Roteiro e apresentação: Carlos Cabral Edição de á...

Referências do Episódio /bin/live: Rafael Silva, Luiz Eduardo, Willian Caprino e Nelson Murilo - Hacking Remote Code Execution via Expression Injection Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances December 22 Advisory: Critical n8n Vulnerability Allows Remote Code Execution [CVE-2025-68613] From ClickFix to code signed: the quiet shift of MacSync Stea...

Referências do Episódio NPM Package With 56K Downloads Caught Stealing WhatsApp Messages 작전명 아르테미스: HWP 기반 DLL 사이드 로딩 공격 분석 Zscaler Threat Hunting Catches Evasive SideWinder APT Campaign Tracing a Paper Werewolf campaign through AI-generated decoys and Excel XLLs Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio ​ HPESBGN04985 rev.2 - Hewlett Packard Enterprise OneView Software, Remote Code Execution ​ CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView ​ Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns ​ LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan Roteiro e ap...

Referências do Episódio SonicWall SMA1000 appliance local privilege escalation vulnerability CVE-2025-40602: SonicWall Secure Mobile Access (SMA) 1000 Zero-Day Exploited SonicWall warns of actively exploited flaw in SMA 100 AMC UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager CISA Adds Three Known Exploited Vulnerabilities to Catalog Operation ForumTroll contin...

Referências do Episódio 史上最疯：独家揭秘感染全球180万Android设备的巨型僵尸网络Kimwolf Inside Ink Dragon: Revealing the Relay Network and Inner Workings of a Stealthy Offensive Operation EtherRAT dissected: How a React2Shell implant delivers 5 payloads through blockchain C2 Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users Roteiro e apresentação: Carlos Cabral Edição de áudio: Paul...

Referências do Episódio Webinar Tendências em Cyber 2026 Arctic Wolf Observes Malicious SSO Logins on FortiGate Devices Following Disclosure of CVE-2025-59718 and CVE-2025-59719 SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Webinar Tendências em Cyber 2026 Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Hunting for Mythic in network traffic Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics Gogs 0-Day Exploited in the Wild How to find Gogs installations on your network - Latest Gogs vulnerability: CVE-2025-8110 CVE-2025-30406 - Critical Gladinet Cent...

Referências do Episódio *Stable Channel Update for Desktop - Wednesday, December 10, 2025 - https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html  *Google fixes eighth Chrome zero-day exploited in attacks in 2025 - https://www.bleepingcomputer.com/news/security/google-fixes-eighth-chrome-zero-day-exploited-in-attacks-in-2025/  SOAPwn: Pwning .NET Framework Applica...

Referencias do episodio Webinar Tendencias em Cyber 2026 https://www.even3.com.br/tendencias-em-cyber-2026-661705/ Microsoft December 2025 Patch Tuesday fixes 3 zero-days, 57 flaws https://www.bleepingcomputer.com/news/microsoft/microsoft-december-2025-patch-tuesday-fixes-3-zero-days-57-flaws/ Microsofts December 2025 Patch Tuesday Addresses 56 CVEs (CVE-2025-62221) https://www.tenable.com/blog/mi...

Referências do Episódio Webinar Tendências em Cyber 2026 The VS Code Malware That Captures Your Screen | Koi Blog GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia