Cyber Morning Call

Referências do Episódio
Multi-Functional Linux Botnet “Evooo1Bot”

Dissecting the JWR phishing framework

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side

Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure

Security update available for Adobe Commerce | APSB26-92

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

Trezor Says ShipMonk Breach Exposed 13,689 Customers

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers

Malware Crypting Services and the Threat Actors Who Sell Them

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Active exploitation of CVE-2026–59310: 361 victim IPs across 47 countries

VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

Abuse of alternative runtime environments Deno-tes defender headaches

Kimwolf v7: An Evolution of the Kimwolf Botnet

CATAnA: On the Dangers of SIM-Originating AT Commands

Armored Likho expands its cyber-espionage toolkit

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
ZOOMSDAY - How A Security Found a Nation-State Vulnerability in Zoom in One Day

August 2026 Security Updates 

Patch Tuesday - August 2026

Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review

Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)

Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

SAP Security Patch Day - August 2026

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

SonicWall Email Security Affected By Multiple Vulnerabilities

SonicWall GMS Security Affected By Multiple Vulnerabilities

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Abyssos: Technical Analysis of a New Modular RAT

Critical Progress LoadMaster flaw now actively exploited in attacks

Follow-Up Analysis of the 29 December 2025 Energy Sector Incident 

Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Security update available for Metabase - Please upgrade now

natjack - A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICES

Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse

XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)

RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak Data

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia