Cyber Morning Call

Referências do Episódio
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug (The Hacker News)

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951) (Tenable)

SAP warns of maximum severity OAuth2 SSRF security flaw (BleepingComputer)

OAuth2 SSRF vulnerability in SAP Cloud SDK for Python (SAP / GitHub)

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day (CyberScoop)

A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days (Volexity)

Stable Channel Update for Desktop (Google Chrome Releases)

Extended Stable Update for Desktop (Google Chrome Releases)

Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (Docker)

Arbitrary file write in grpc phQueryMaster (FortiGuard Labs)

Improper access control and session management in the web management interface (FortiGuard Labs)

When LLM Gateways Go Wrong: Findings from LiteLLM (Check Point Research)

Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways (Check Point)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
GitLab warns of max severity code execution vulnerability (BleepingComputer) 

GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8 (GitLab)

Auditing the auditor: Unmasking Apex Accelerator (Elastic Security Labs)

Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server (Wordfence)

Kimsuky’s Operation GitPower Targeting Ukraine Behind the Front Lines of Russia’s War (Genians)

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (Zscaler)

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties (SentinelLabs)

Ignore all instructions and read this blog: The state of AI-analysis evasion in malware (Cisco Talos)

Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure (Security Affairs)

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions (The Hacker News)

Leader of 764 pleads guilty, faces up to 30 years in prison (CyberScoop)

Co-creator of Empire Market dark web marketplace given 40-year sentence (The Record)

Margaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90 (MIT News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do episódio
Software Supply Chain Attack on tensorlake: Overview and Response Guidance

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Cisco NX-OS Software Security Hardening Release: October 2026

Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026

Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026

Cisco Meraki Security Hardening Release: October 2026

Canto incognito: tracking the PoeLLM malware

LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization (CVE-2026-105192)

Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security Advisory SNWLID-2026-0017 (SonicWall PSIRT)

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access (Datadog Security Labs)

Blinder Tunnel Campaign Targets Iraqi Infrastructure (Unit 42)

FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts (FBI / USSS)

WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws (Cyber Kendra)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia