Cyber Morning Call

Referências do Episódio
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports (Security Affairs)

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk (The Register)

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (The Hacker News)

GitLab warns of new max severity code execution vulnerability (BleepingComputer)

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer)

Security Advisory 0199 (Arista)

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise (Microsoft)

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors (Wiz)

Cisco Expressway Series Remote Code Execution Vulnerability (Cisco)

Cisco Unified Communications Products Security Hardening Release: October 2026 (Cisco)

How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia (Kaspersky Securelist)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security advisory: Critical remote code execution vulnerabilities, update now (PHP.net)

Upcoming Critical PHP Security Release (PHP.net)

Security advisory: Critical remote code execution vulnerabilities, update now (PHP.net)

Upcoming Critical PHP Security Release (PHP.net)

Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers (Cisco Talos)

Operation FlashHole: Lazarus breaks security, defies control (Kaspersky Securelist)

Stray Cat, Open Doors: How k0t Wanders Through the Network Edge (Group-IB)

Oracle Critical Patch Update Advisory - October 2026 (Oracle)

Oracle October 2026 Critical Patch Update Addresses 1209 CVEs (Tenable)

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
PHP RCE Zero-Days CVE-2026-109618, CVE-2026-109619 Leak Early (Cyber Kendra)

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE (Horizon3)

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA (The Hacker News)

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries (Symantec)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan (The Hacker News)

SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center (Siemens)

Active Exploitation of CVE-2026-110936 in Siemens Software Center (Siemens)

Same Vulkan Host, Different Payload: Inside VulcanRAT207.B (Morphisec)

NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779 (Rapid7)

Citrix NetScaler Exploitation Guidance and IOCs - WHIPSHOT/SLAPSHOT (Mandiant) 

F5 releases out-of-band patches for critical NGINX vulnerabilities (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Investigating Ephemeral Supply Chain Tampering (Mandiant e Google Threat Intelligence Group)

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants (The Hacker News)

CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability (Zscaler)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia