Cyber Morning Call

Referências do Episódio
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 Now

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-68686 - SSL-VPN Symlink Persistence Patch Bypass

CVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Mirage Kitten targets Middle East and Africa region with new malware

Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection

Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC Backdoor

Breaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 Patch

Apple security releases

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia
X6LO8GntgGb95egmmOCZ

Referências do Episódio
Certighost (CVE-2026-54121)

僵尸网络新秀：Dysphoria 演进与深度技术分析

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
The Signs Were There: What the First Autonomous Ransomware Case Confirms

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

TAG-195 Upgrades MaaS Ecosystem with Modular Tools

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) 

JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

Lampion's Portugal-focused phishing campaign delivers multistage malware

Attack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient)

Security Advisory – Action Required – July 2026 Security Update

HermeticReader: The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp Takeover

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia