Cyber Morning Call

Referências do Episódio
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Vulnerability Discovery and Exploitation Trends in the AI Era

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Disrupting a coordinated model-distillation campaign

CVE-2026-86950: The Great Glyph Grift

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

TV-2026-1010: Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related Services

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

Citrix, Check Point, F5 e Arista: mais uma semana com falhas críticas sob ataque na borda das empresas

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Alleged ShinyHunters leader arrested in the Netherlands

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
About the security content of iOS 26.7.1 and iPadOS 26.7.1

Apple patches CoreGraphics zero-day flaw exploited in attacks

From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
 Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

NetScaler ADC and NetScaler Gateway Security Bulletin (CTX697096)

Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities

ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Imminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Roundcube security advisory (AV26-503) – Update 1

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
The Psychedelic Stealer: When a CAPTCHA Becomes an Installer

MacSync under the microscope: new delivery methods and a new payload

Uncovering a SectopRAT Variant Embedded in Legitimate Software

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia