Cyber Morning Call

Referências do Episódio
Silent Train: uncovering Volt Typhoon’s operational framework for zero-day exploitation and strategic access (Lumen)

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN (Cisco Talos)

Juniper Fixes 18 Session Smart Router Vulnerabilities, Two Rated CVSS 9.8 (SecurityOnline)

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch (The Hacker News)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft (Zero Day Initiative)

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws (The Hacker News)

Discovering and exploiting vulnerabilities in critical, real-world software with Claude (Anthropic)

Tricks from the Past deployed via signed ChatGPT and Claude binaries (Check Point Research)

An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure (Kaspersky Securelist)

Apple backports CoreGraphics zero-day patches to older iPhones (BleepingComputer)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Возвращение IDFKA: как APT-группа NGC5081 провела работу над ошибками (Solar 4RAYS)

Cache Me If You Can: Unpacking a Go Implant and Its Toolkit (VulnCheck)

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution (The Hacker News)

PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts (Security Affairs)

UK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest (The Register)

Microsoft releases emergency .NET patches for critical Brotli flaw (BleepingComputer)

CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Palo Alto Networks)

Multiple Node.js CVEs (Fortinet)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks (Microsoft)

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline (The Hacker News)

PHP shares mitigation for new RCE vulnerability with no patch (BleepingComputer)

Infostealer riding the AI Train (Check Point Research)

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability (Wiz)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports (Security Affairs)

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk (The Register)

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (The Hacker News)

GitLab warns of new max severity code execution vulnerability (BleepingComputer)

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer)

Security Advisory 0199 (Arista)

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise (Microsoft)

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors (Wiz)

Cisco Expressway Series Remote Code Execution Vulnerability (Cisco)

Cisco Unified Communications Products Security Hardening Release: October 2026 (Cisco)

How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia (Kaspersky Securelist)

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia