Cyber Morning Call

Referências do Episódio
/bin/live: Conheça o Instituto Aaron Swartz com Lucas Lago e Ana Freitas (Mente Binária)

Status Dashboard (N-able)

N-able takes cloud platform offline after 30+ “zero-days” published (BleepingComputer)

N-able takes N-central platform offline after zero-day dump (TechTarget)

N-able takes N-central offline as alleged zero-day exploits surface (Field Effect)

Stable Channel Update for Desktop (Google Chrome Releases)

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 (The Hacker News)

The Cold Chain on Fire : Unpatched Danfoss controllers exploited (Sekoia)

Trusted by Default: Qubole Cross-Account Access Abused in the Wild (Wiz)

FORGE Lab uses agentic tools to identify memory safety issues in Rust (Microsoft)

BluePhishing: Initial Access via Third-Party Agent Blueprint Consent (Proofpoint)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Authentication Enforcement Bypass in SonicOS SSLVPN Allowing SAML and MFA Bypass (SonicWall PSIRT)

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog (Security Affairs)

SonicWall security advisory (AV26-1133) (Canadian Centre for Cyber Security)

ARTEX abuse expands as cybercriminals target financial sector (Microsoft)

Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CWPdoor: The Invisible Backdoor Living Inside Control Web Panel (XLab / QiAnXin)

Threat actors use agentic AI tooling to find and abuse exposed secrets (Microsoft)

Cobalt Strike: Favorite Tool from APT to Crimeware (Proofpoint)

Alleged source code of Cobalt Strike toolkit shared online (BleepingComputer)

Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns (Check Point Research)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (watchTowr Labs)

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released (Security Affairs)

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution (The Hacker News)

OpenSSH flaw lets attackers log into password-disabled Linux accounts (BleepingComputer)

OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) (OX Security)

sshole (CVE-2026-123158): OpenSSH password bypass on Alpine Linux (Cycode, via Security Boulevard)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware (ESET WeLiveSecurity)

Defrost and Disrupt | An Assessment of Europe’s Refrigeration Attacks (SentinelOne)

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles (Check Point Research)

Poisoned Source: APT29 watering holes target mobile devices with n-day exploits (Sekoia)

Possible arbitrary file write and read in Active Storage image analysis (GitHub / Rails)

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory (The Hacker News)

XSA-523 - Xen Security Advisories (Xen Project)

Exploitation Targeting Node-RED, a Tool Embedded in ICS Products (VulnCheck)

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root (The Hacker News)

SonicWall warns of unpatched flaws in end-of-life GMS software (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources (Google Threat Intelligence Group)

ARTEX and Friends: Enter Agentic Offensive Frameworks (Google Threat Intelligence Group)

CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations (Kaspersky Securelist)

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths (Microsoft)

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) (Rapid7)

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw (The Hacker News)

North Korea Responsible for $6 Billion+ Binance Attack (FBI) 

Foi assim que Hackers Roubaram Bilhões (canal O Bobo de Wall Street no Youtube)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia