Cyber Morning Call

Referências do Episódio
-North Korean hackers behind major open-source supply chain attacks, Amazon says
-Amazon identifies North Korean hacker group behind open-source supply chain attacks
-ClickFix, EtherHiding & a DPRK Wallet Trail
-Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
-(합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공격 주의 권고
-Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
-OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
-Investigating three real-world incidents in our cybersecurity evaluations
Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Cisco Secure Firewall Management Center Software Static Credential Vulnerability

Cisco warns of FMC static credential flaw exploited in zero-day attacks

VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

Inside Astaroth's New Spambot Component

Stable Channel Update for Desktop - Wednesday, July 29, 2026

KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't Enough

Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)

Coordinated “cyberattack” on Minnesota water utilities: What you need to know

Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 Now

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-68686 - SSL-VPN Symlink Persistence Patch Bypass

CVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Mirage Kitten targets Middle East and Africa region with new malware

Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection

Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC Backdoor

Breaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 Patch

Apple security releases

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia
X6LO8GntgGb95egmmOCZ

Referências do Episódio
Certighost (CVE-2026-54121)

僵尸网络新秀：Dysphoria 演进与深度技术分析

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia