Cyber Morning Call

Referências do Episódio
CWPdoor: The Invisible Backdoor Living Inside Control Web Panel (XLab / QiAnXin)

Threat actors use agentic AI tooling to find and abuse exposed secrets (Microsoft)

Cobalt Strike: Favorite Tool from APT to Crimeware (Proofpoint)

Alleged source code of Cobalt Strike toolkit shared online (BleepingComputer)

Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns (Check Point Research)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (watchTowr Labs)

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released (Security Affairs)

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution (The Hacker News)

OpenSSH flaw lets attackers log into password-disabled Linux accounts (BleepingComputer)

OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) (OX Security)

sshole (CVE-2026-123158): OpenSSH password bypass on Alpine Linux (Cycode, via Security Boulevard)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware (ESET WeLiveSecurity)

Defrost and Disrupt | An Assessment of Europe’s Refrigeration Attacks (SentinelOne)

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles (Check Point Research)

Poisoned Source: APT29 watering holes target mobile devices with n-day exploits (Sekoia)

Possible arbitrary file write and read in Active Storage image analysis (GitHub / Rails)

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory (The Hacker News)

XSA-523 - Xen Security Advisories (Xen Project)

Exploitation Targeting Node-RED, a Tool Embedded in ICS Products (VulnCheck)

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root (The Hacker News)

SonicWall warns of unpatched flaws in end-of-life GMS software (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources (Google Threat Intelligence Group)

ARTEX and Friends: Enter Agentic Offensive Frameworks (Google Threat Intelligence Group)

CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations (Kaspersky Securelist)

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths (Microsoft)

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) (Rapid7)

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw (The Hacker News)

North Korea Responsible for $6 Billion+ Binance Attack (FBI) 

Foi assim que Hackers Roubaram Bilhões (canal O Bobo de Wall Street no Youtube)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Tracking AI adoption in North Korean threat actor tradecraft (Microsoft)

NIK C2: The new AI-enabled command-and-control framework (Cisco Talos)

New Prompt Injection Techniques Cover Agent-Planning Attacks (CrowdStrike)

Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users (Socket)

Chrome extensions with 13.4 million installs caught hijacking searches (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Silent Train: uncovering Volt Typhoon’s operational framework for zero-day exploitation and strategic access (Lumen)

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN (Cisco Talos)

Juniper Fixes 18 Session Smart Router Vulnerabilities, Two Rated CVSS 9.8 (SecurityOnline)

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia