Cyber Morning Call

Referências do Episódio
/bin/live: CISOs - com Fabiana Tanaka e Denis Nesi

TURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06

FishMonger’s arsenal upgraded: SprySOCKS for Windows

隐形毒刺：超4000台老旧路由器遭AryStinger入侵，沦为黑客全球攻击跳板

Rokarolla : Android Banker with Complete Device Takeover Capabilities

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Critical Fortinet FortiSandbox flaws now exploited in attacks

Chrome Releases - Tuesday, June 16, 2026

GitBait: Phishing the Mexican Financial Sector

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
TURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06

Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research

SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon

CVE-2026-42824 - M365 Copilot Information Disclosure Vulnerability

Unveiling ErrTraffic: inside a growing ClickFix malware distribution framework

FI-2026-007 - Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability

EvilTokens: A phishing attack that doesn’t steal your password

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
MS 사칭 피싱과 Dead-drop C2 기반 APT37 NarwhalRAT 분석

Atomic Arch: Attackers Hijack Trusted AUR Packages to Deliver Rootkit-Like Malware

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)

FBI takes down massive China-based cybercrime network that caused $1.9B in losses

Iran-Linked Handala Breached a California Water Utility. It Could Have Done Worse, and It Knows That.

Cyber Intel Brief: Handala Claims Breach of California Water Service

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

Oracle Security Alert Advisory - CVE-2026-35273

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected

Inside OnyxC2: The New Stealer Targeting 210 Apps

OceanLotus: From external espionage to domestic targeting

Arctic Wolf Observes an Increase in Palo Alto Networks GlobalProtect Authentication Bypass Exploitation via CVE-2026-0257

From SQLi to RCE – Exploiting LangGraph’s Checkpointer

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation

CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

Who Runs the Ransomware Group ‘The Gentlemen?’

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia