Cyber Morning Call

Referências do Episódio
The Psychedelic Stealer: When a CAPTCHA Becomes an Installer

MacSync under the microscope: new delivery methods and a new payload

Uncovering a SectopRAT Variant Embedded in Legitimate Software

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
3a Edição da Human Risk Conference

Novel supplychain.local Go worm appears

MemTensor npm and PyPI Packages Hit by a Go Worm

MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack

Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

Meet AvisLoader: A Windows Loader Built to Outlast a Takedown

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Security Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616

Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

The Closed Quorum: Inside the first reported autonomous AI C2 implant

D-Link warns of max severity zero-day bug in DIR-822A routers

Arista Security Advisory 0183

SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324)

SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability (CVE-2026-28326)

WordPress 7.1.2 Release

K000162605: BIG-IP APM vulnerability CVE-2026-94127

CISA Adds Four Known Exploited Vulnerabilities to Catalog

BIG-IP APMs expostos por continente

Disrupting EvilTokens: The AI Chatbot Built for Cybercrime

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
We got a cybersecurity expert to hack this BYD. It was too easy

TASK#STOMP: PowerShell Backdoor for Document Theft and Remote Access

Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation

ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia

Referências do Episódio
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean "WaterPlum," commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe

Roteiro e apresentação: Carlos Cabral
Edição de áudio: Paulo Arruzzo 
Narração de encerramento: Bianca Garcia