Cyber Morning Call

Referências do episódio
Software Supply Chain Attack on tensorlake: Overview and Response Guidance

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Cisco NX-OS Software Security Hardening Release: October 2026

Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026

Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026

Cisco Meraki Security Hardening Release: October 2026

Canto incognito: tracking the PoeLLM malware

LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization (CVE-2026-105192)

Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security Advisory SNWLID-2026-0017 (SonicWall PSIRT)

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access (Datadog Security Labs)

Blinder Tunnel Campaign Targets Iraqi Infrastructure (Unit 42)

FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts (FBI / USSS)

WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws (Cyber Kendra)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products (Atlassian)

Atlassian warns of critical file access flaw in its datacenter products (The Register)

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure (FortiGuard Labs)

Rejetto HFS servers now actively scanned for critical RCE flaw (BleepingComputer)

Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access (Security Affairs)

Exchange Flaw CVE-2026-96940 Exposes Users' Mailboxes (Cyber Kendra)

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits (The Hacker News)

Microsoft Threat Intelligence no X (@MsftSecIntel)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Understanding and Addressing CVE-2026-88779 in Citrix NetScaler ADC and Citrix NetScaler Gateway

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

SMTP is the key: BPFDoor and AVERAT hitting the network edge

AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it

GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino

FG-IR-26-175: Improper limitation of a pathname to a restricted directory

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Police disrupt KillSec ransomware, arrest suspected teenage leader

16-year-old suspected leader of KillSec ransomware group arrested

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia