Cyber Morning Call

Referências do Episódio
Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

Stable Channel Update for Desktop - Tuesday, September 8, 2026

SAP Security Patch Day - September 2026
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information

JWT used for authentication in web GUI signed with static key

Improper Authentication of FortiPAM Server

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Krytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacja

ConnectWise warns of new ScreenConnect flaw without patch

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack

Urgent Action Required: Critical Security Update Available for Adobe Commerce (APSB26-146)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
ASCII smuggling crosses over from AI prompt injection to phishing evasion

The Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement Action

One Blank Field Bypasses Direct Send Control

SNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple Vulnerabilities

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon

Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

Cisco IOS XR Software Security Hardening Release: September 2026

Uncovering StreamRat: From Meta Ads to Full Device Takeover

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia