Cyber Morning Call

Referências do Episódio
URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)

PaperCut warns of NG, MF flaw exploited in zero-day attacks

PaperCut Actively Exploited: A Pre-Auth RCE Chain

BlueDelta Targets Defense and Diplomacy with HOOKEDGE

Australia charges two men for TeamPCP supply-chain hacking spree

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - August 27, 2026

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter

Dark Caracal Reloaded: New Malware, Same Hunting Grounds

Ubiquiti patches three max severity security vulnerabilities

NovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of Organizations

Justice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical Infrastructure

CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do

A Reported Log4j RCE Is More Complicated Than It Looks

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

Tortoiseshell: New Toolset and Operational Infrastructure Exposed

ClickFix Phishing Pages Discovered in 24 npm Packages

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

Stable Channel Update for Desktop - Tuesday, August 25, 2026

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

Oracle Critical Patch Update Advisory - January 2026

Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain

Hackers infecting Android car systems to build proxy botnet

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia

BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive

SilkParasite: Tracking a China-Nexus APT Across Central Asia

CVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability New

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

Frequently asked questions about the active threat to Siemens S7 Series PLCs

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia