Cyber Morning Call

Referências do Episódio
CVE-2026-41091 - Microsoft Defender Elevation of Privilege Vulnerability

CVE-2026-45498 - Microsoft Defender Denial of Service Vulnerability

ITW SECURITY BULLETIN: Apex One and Vision One – Standard Endpoint Protection (SEP) May 2026 Security Bulletin

A New SonicWall Scanning Spike Echoes the Pattern That Preceded CVE-2026-0400

CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox

Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

Logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333)

PinTheft: Another Linux Privilege Escalation, Another Working Exploit, This Time Targeting Arch

Hackers bypass SonicWall VPN MFA due to incomplete patching

Tracking TamperedChef Clusters via Certificate and Code Reuse

A malicious VS code extension just breached GitHub ‘s internal repositories

CVE-2026-20223 - Cisco Secure Workload Unauthorized API Access Vulnerability

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
DirtyDecrypt: Linux kernel LPE in the RxGK subsystem (CVE-2026-31635) with public PoC

DirtyDecrypt / DirtyCBC

Exposing Fox Tempest: A malware-signing service operation

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

durabletask: TeamPCP's Latest PyPi Compromise

Microsoft shares mitigation for YellowKey Windows zero-day

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

/bin/live: Caio Lüders e Jardel Matias

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Active Supply Chain Attack Compromises @antv Packages on npm

Shai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHub

How Storm-2949 turned a compromised identity into a cloud-wide breach

Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-20182 - Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Frequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182)

CVE-2026-20209, CVE-2026-20210 e CVE-2026-20224 - Cisco Catalyst SD-WAN Manager Vulnerabilities

Active Supply Chain Attack: Malicious node-ipc Versions Published to npm

Popular node-ipc npm Package Infected with Credential Stealer

CVE-2026-42897 - Microsoft Exchange Server Spoofing Vulnerability

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia