Cyber Morning Call

Referências do Episódio
Coruna: the framework used in Operation Triangulation

Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

Coruna: Inside the Nation-State-Grade iOS Exploit Kit We've Been Tracking

Russian government accuses Apple of colluding with NSA in iPhone spy operation

Security Advisory on Multiple Vulnerabilities on TP-Link Archer NX200, NX210, NX500 and NX600 (CVE-2025-15517 to CVE-2025-15519 and CVE-2025-15605)

Illuminating VoidLink: Technical analysis of the VoidLink rootkit framework

Pawn Storm Campaign Deploys PRISMA, Targets Government and Critical Infrastructure Entities

Anatomia de um Infostealer Moderno: Três Camadas, Uma Botnet

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security Update: Suspected Supply Chain Incident

Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign

TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise

OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers

ClickFix Campaigns Targeting Windows and macOS

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Checkmarx Security Update

KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack

CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran

TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions

Pro-Iranian Nasir Security is Targeting The Energy Sector in the Middle East

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368

Rapid Reaction – Citrix NetScaler ADC and NetScaler Gateway Memory Overread Vulnerability (CVE-2026-3055)

Bucklog’s Machine: Inside a Kubernetes Scanning Fleet

M-Trends 2026: Data, Insights, and Strategies From the Frontlines

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Oracle Security Alert Advisory - CVE-2026-21992

Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

CVE-2026–33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed

CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Researchers warn of unpatched, critical Telnetd flaw affecting all versions

Vulnerability advisory: Pre-Auth Remote Code Execution via Buffer Overflow in telnetd LINEMODE SLC Handler

Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls

Cisco’s latest vulnerability spree has a more troubling pattern underneath

Technical Analysis of SnappyClient

The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico

Inside a network of 20,000+ fake shops

The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia