Cyber Morning Call

Referências do Episódio
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Researchers warn of unpatched, critical Telnetd flaw affecting all versions

Vulnerability advisory: Pre-Auth Remote Code Execution via Buffer Overflow in telnetd LINEMODE SLC Handler

Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls

Cisco’s latest vulnerability spree has a more troubling pattern underneath

Technical Analysis of SnappyClient

The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico

Inside a network of 20,000+ fake shops

The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root

Boggy Serpens Threat Assessment

Casting a Wider Net: ClickFix, Deno, and LeakNet’s Scaling Threat

Poisoned Typeface: How Simple Font Rendering Poisons Every AI Assistant, And Only Microsoft Cares

CursorJack: weaponizing Deeplinks to exploit Cursor IDE

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Free real estate: GoPix, the banking Trojan living off your memory

Stryker attack wiped tens of thousands of devices, no malware needed

Remote device action: wipe

Use Access policies to require Multi Admin Approval

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
72 Malicious Open VSX Extensions Linked to GlassWorm Campaign Now Using Transitive Dependencies

Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Chrome Releases - Stable Channel Update for Desktop - Thursday, March 12, 2026

Google fixes two new Chrome zero-days exploited in attacks

Apple issues emergency fixes for Coruna flaws in older iOS versions

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2.4465

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

“Handala Hack” – Unveiling Group’s Modus Operandi

Malware disguised as AI agents

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia