Cyber Morning Call

Referências do Episódio
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (Zscaler)

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties (SentinelLabs)

Ignore all instructions and read this blog: The state of AI-analysis evasion in malware (Cisco Talos)

Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure (Security Affairs)

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions (The Hacker News)

Leader of 764 pleads guilty, faces up to 30 years in prison (CyberScoop)

Co-creator of Empire Market dark web marketplace given 40-year sentence (The Record)

Margaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90 (MIT News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do episódio
Software Supply Chain Attack on tensorlake: Overview and Response Guidance

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Cisco NX-OS Software Security Hardening Release: October 2026

Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026

Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026

Cisco Meraki Security Hardening Release: October 2026

Canto incognito: tracking the PoeLLM malware

LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization (CVE-2026-105192)

Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security Advisory SNWLID-2026-0017 (SonicWall PSIRT)

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access (Datadog Security Labs)

Blinder Tunnel Campaign Targets Iraqi Infrastructure (Unit 42)

FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts (FBI / USSS)

WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws (Cyber Kendra)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products (Atlassian)

Atlassian warns of critical file access flaw in its datacenter products (The Register)

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure (FortiGuard Labs)

Rejetto HFS servers now actively scanned for critical RCE flaw (BleepingComputer)

Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access (Security Affairs)

Exchange Flaw CVE-2026-96940 Exposes Users' Mailboxes (Cyber Kendra)

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits (The Hacker News)

Microsoft Threat Intelligence no X (@MsftSecIntel)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Understanding and Addressing CVE-2026-88779 in Citrix NetScaler ADC and Citrix NetScaler Gateway

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

SMTP is the key: BPFDoor and AVERAT hitting the network edge

AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it

GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia