Cyber Morning Call

Referências do Episódio
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Abyssos: Technical Analysis of a New Modular RAT

Critical Progress LoadMaster flaw now actively exploited in attacks

Follow-Up Analysis of the 29 December 2025 Energy Sector Incident 

Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Security update available for Metabase - Please upgrade now

natjack - A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICES

Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse

XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)

RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak Data

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Behind the Panels: Validating ShinyHunters Cluster A Infrastructure Through Network Telemetry

We infiltrated a criminal phishing panel: here’s what we found

UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Zapscape KVM Flaw Lets Guest VMs Seize Host Root

Apple libera macOS Tahoe 26.6.1, com correções de segurança

Chrome Stable Channel Update for Desktop - Thursday, August 6, 2026

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
ENDLESSDOORS Is Phoning Home. Pick Up.

Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026

Cisco IOS XE Software Security Hardening Release: August 2026

OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root

Breaking the Paperclip

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Keyv and friends compromised in active Shai-Hulud supply chain attack
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Analyzing SMOKE#SCREEN: ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software Lures

Introducing DOUBLECUP, a ClickFix Loader Delivering CountLoader and DeviceManager RATs

Interlock ransomware gang creates volatile situation

cPanel Bug Hands Database Root to Any Hosting Customer

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia