Cyber Morning Call

Referências do Episódio Boletim de segurança do Android – março de 2026 Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panel Funnull Resurfaces: Exposing RingH23 Arsenal and MacCMS Supply Chain Attacks Threat Brief: March 2026 Escalation of Cyber Risk Relate...

Referências do Episódio MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE) Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio New Dohdoor malware campaign targets education and health care Meta Takes Legal Action Against Scam Advertisers APT37 Adds New Capabilities for Air-Gapped Networks Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio CVE-2026-20127 - Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Active exploitation of Cisco Catalyst SD-WAN by UAT-8616 CISCO SD-WAN THREAT HUNT GUIDE Exposing the Undercurrent: Disrupting the GRIDTIDE Global Cyber Espionage Campaign Serv-U 15.5.4 release notes Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Ch...

Referências do Episódio North Korean Lazarus Group Now Working With Medusa Ransomware VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721) 1Campaign: A New Cloaking Platform Helping Attackers Abuse Google Ads Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Detecting and preventing distillation attacks DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning OpenAI suddenly thinks intellectual property theft is not cool, actually, amid DeepSeek’s rise AI-augmented threat actor accesses FortiGate devices at scale | Amazon Web Services AI-augmented threat actor accesses FortiGate devices at scale Roteir...

Referências do Episódio Operation Olalampo: Inside MuddyWater’s Latest Campaign How Predator spyware defeats iOS recording indicators Malicious OpenClaw Skills Used to Distribute Atomic MacOS Stealer Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio PromptSpy ushers in the era of Android threats using GenAI Massiv: When your IPTV app terminates your savings Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day DSA-2026-079: Security Update for RecoverPoint for Virtual Machines Hardcoded Credential Vulnerability New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released Four Vulnerabilities Expose a Ma...

Referências do Episódio About the security content of iOS 26.3 and iPadOS 26.3 OysterLoader Unmasked: The Multi-Stage Evasion Loader GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures Dataflow Rider: How Attackers can Abuse Shadow Resources in Google Cloud Dataflow Rotei...

Referências do Episódio LummaStealer Is Getting a Second Life Alongside CastleLoader AgreeToSteal: The First Malicious Outlook Add-In Leads to 4,000 Stolen Credentials Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Microsoft - February 2026 Security Updates Microsoft February 2026 Patch Tuesday fixes 6 zero-days, 58 flaws Microsoft Patch Tuesday – February 2026 CVE-2025-52436 - XSS via back button CVE-2026-22153 - LDAP authentication bypass in Agentless VPN and FSSO CMC 932 CMC 934 VoidLink: um sinal do fim do gargalo humano no desenvolvimento de malware avançado Roteiro e apresentaçã...

Referências do Episódio UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering Technical Analysis of GuLoader Obfuscation Techniques Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Analysis of active exploitation of SolarWinds Web Help Desk BeyondTrust - Advisory ID: BT26-02 CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio The Shadow Campaigns: Uncovering Global Espionage Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework 2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaults Pro-Russian group Noname057(16) launched DDoS attacks on Milano Cortina 2026 Winter Olympics Roteiro e apresentação: Carlos Cabral Edição de áud...

Referências do Episódio Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware Family LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem) Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio APT28 Leverages CVE-2026-21509 in Operation Neusploit AI-assisted cloud intrusion achieves admin access in 8 minutes Metro4Shell: Exploitation of React Native’s Metro Server in the Wild Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio Notepad++ Hijacked by State-Sponsored Hackers The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit 1-Click RCE via Authentication Token Exfiltration From gatewayUrl 1-Click RCE To Steal Your Moltbot Data and Keys Giving OpenClaw The Keys to Your Kingdom? Read This First Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerrament...

Referências do Episódio Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft Guidance from the Frontlines: Proactive Defense Against ShinyHunters-Branded Data Theft Targeting SaaS GlassWorm Loader Hits Open VSX via Developer Account Compromise ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting 19 Shades of LockBit5.0, Inside the Latest Cross-P...

Referências do Episódio Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) Inside the Infrastructure: Who’s Scanning for Ivanti Connect Secure? CVE-2025-0282 Detail Dissecting UAT-8099: New persistence mechanisms and regional focus Threat Bulletin: Critical eScan Supply Chain Compromise Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  N...

Referências do Episódio Solarwinds - WHD 2026.1 release notes CVE-2025-40551: Another Solarwinds Web Help Desk Deserialization Issue Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554 Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic Can’t stop, won’t stop: TA584 innovates initial access Two...

Referências do Episódio Administrative FortiCloud SSO authentication bypass Analysis of Single Sign-On Abuse on FortiOS CMC 935 - A notável escala dos ataques do PurpleBravo | FortiGate sob ataque Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088 HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns Threat Actors Using AWS WorkMail in Phishing Ca...

Referências do Episódio CVE-2026-21509 - Microsoft Office Security Feature Bypass Vulnerability Microsoft patches actively exploited Office zero-day vulnerability Bypassing Windows Administrator Protection APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1 PackageGate: 6 Zero-Days in JS Package Managers But NPM Won't Act Roteiro e apresentação: Carlos Cabral...

Referências do Episódio PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups Stanley — A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo  Narração de encerramento: Bianca Garcia

Referências do Episódio KONNI Adopts AI to Generate PowerShell Backdoors Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware Watering Hole Attack Targets EmEditor Users with Information-Stealing Malware Osiris: New Ransomware, Experienced Attackers? Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access Malicious VS Code AI Extensions Harvest...