Cyber Morning Call

Referências do Episódio3a Edição da Human Risk ConferenceNovel supplychain.local Go worm appearsMemTensor npm and PyPI Packages Hit by a Go WormMemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain AttackSckit Supply Chain Worm Hits MemTensor npm & PyPi scopesMeet AvisLoader: A Windows Loader Built to Outlast a TakedownRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioSecurity Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-DayThe Closed Quorum: Inside the first reported autonomous AI C2 implantD-Link warns of max severity zero-day bug in DIR-822A routersArista Security Advisory 0183SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324)SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability (CVE-2026-28326)WordPress 7.1.2 ReleaseK000162605: BIG-IP APM vulnerability CVE-2026-94127CISA Adds Four Known Exploited Vulnerabilities to CatalogBIG-IP APMs expostos por continenteDisrupting EvilTokens: The AI Chatbot Built for CybercrimeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioWe got a cybersecurity expert to hack this BYD. It was too easyTASK#STOMP: PowerShell Backdoor for Document Theft and Remote AccessVidar Adds Virtual Machine and Custom Stream Ciphers For String ObfuscationShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion paymentRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioPublic Exploits Released for Four Linux Kernel Flaws That Enable Local RootA quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpillDon’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto TiesNorth Korean "WaterPlum," commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and EuropeRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Referências do EpisódioBeware the SparroWock: The backdoor that bites, the commands that catchThe Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrentsVídeo sobre DDR em blockchainsHEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala HackStable Channel Update for Desktop - Thursday, September 17, 2026Check Point Fixes Critical CVE-2026-91843 Allowing Root Code ExecutionRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia