Cyber Morning Call

Referências do Episódio
Tracking AI adoption in North Korean threat actor tradecraft (Microsoft)

NIK C2: The new AI-enabled command-and-control framework (Cisco Talos)

New Prompt Injection Techniques Cover Agent-Planning Attacks (CrowdStrike)

Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users (Socket)

Chrome extensions with 13.4 million installs caught hijacking searches (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Silent Train: uncovering Volt Typhoon’s operational framework for zero-day exploitation and strategic access (Lumen)

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN (Cisco Talos)

Juniper Fixes 18 Session Smart Router Vulnerabilities, Two Rated CVSS 9.8 (SecurityOnline)

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft (Zero Day Initiative)

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws (The Hacker News)

Discovering and exploiting vulnerabilities in critical, real-world software with Claude (Anthropic)

Tricks from the Past deployed via signed ChatGPT and Claude binaries (Check Point Research)

An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure (Kaspersky Securelist)

Apple backports CoreGraphics zero-day patches to older iPhones (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Возвращение IDFKA: как APT-группа NGC5081 провела работу над ошибками (Solar 4RAYS)

Cache Me If You Can: Unpacking a Go Implant and Its Toolkit (VulnCheck)

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution (The Hacker News)

PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts (Security Affairs)

UK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest (The Register)

Microsoft releases emergency .NET patches for critical Brotli flaw (BleepingComputer)

CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Palo Alto Networks)

Multiple Node.js CVEs (Fortinet)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks (Microsoft)

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline (The Hacker News)

PHP shares mitigation for new RCE vulnerability with no patch (BleepingComputer)

Infostealer riding the AI Train (Check Point Research)

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability (Wiz)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia