Referências do Episódio

-North Korean hackers behind major open-source supply chain attacks, Amazon says

-Amazon identifies North Korean hacker group behind open-source supply chain attacks

-ClickFix, EtherHiding & a DPRK Wallet Trail

-Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

-(합동사이버보안권고문) 국가배후 해킹조직의 우리 국민·기업 해킹 공격 주의 권고

-Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

-OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

-Investigating three real-world incidents in our cybersecurity evaluations

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Cisco Secure Firewall Management Center Software Static Credential Vulnerability

• Cisco warns of FMC static credential flaw exploited in zero-day attacks

• VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

• Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

• Inside Astaroth's New Spambot Component

• Stable Channel Update for Desktop - Wednesday, July 29, 2026

• KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't Enough

• Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)

• Coordinated “cyberattack” on Minnesota water utilities: What you need to know

• Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

• Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

• Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) – Update to 2025.11.7 or 2026.1.3 Now

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• CVE-2025-68686 - SSL-VPN Symlink Persistence Patch Bypass

• CVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

• Mirage Kitten targets Middle East and Africa region with new malware

• Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection

• Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC Backdoor

• Breaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 Patch

• Apple security releases

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

X6LO8GntgGb95egmmOCZ

Referências do Episódio

• Certighost (CVE-2026-54121)

• 僵尸网络新秀：Dysphoria 演进与深度技术分析

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• The Signs Were There: What the First Autonomous Ransomware Case Confirms

• Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

• CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

• TAG-195 Upgrades MaaS Ecosystem with Modular Tools

• Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine

• RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) 

• JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

• Lampion's Portugal-focused phishing campaign delivers multistage malware

• Attack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient)

• Security Advisory – Action Required – July 2026 Security Update

• HermeticReader: The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp Takeover

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• A new extortion cocktail: office printers, small ransoms, and BitLocker

• SolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28307)

• SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311)

• SolarWinds Serv-U Broken Access Control Vulnerability (CVE-2026-28321)

• Oracle Critical Patch Update Advisory - July 2026

• OpenAI admits it was the source of the agent swarm that attacked Hugging Face

• Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

• CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform

• Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware

• Exploitation in the Wild of wp2shell

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation

• wp2shell: Pre Authentication RCE in WordPress Core

• WordPress Core "wp2shell" RCE flaws get public exploits, patch now

• Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

• HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

• OpenSSL HollowByte: A DoS Hiding in 11 Bytes

• New North Korean campaign uses fake coding interviews to steal developer credentials

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia