Referências do Episódio

• ToolShell, SharePoint, and the Death of the Patch Window | Team Cymru

• ToolShell: An all-you-can-eat buffet for threat actors

• ToolShell: a story of five vulnerabilities in Microsoft SharePoint

• Exploit module for Microsoft SharePoint ToolPane Unauthenticated RCE (CVE-2025-53770 and CVE-2025-53771) #20409

• Dropping Elephant APT Group Targets Turkish Defense Industry With New Campaign and Capabilities: LOLBAS, VLC Player, and Encrypted Shellcode

• Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years

• Hacker sneaks infostealer malware into early access Steam game

• Unmasking the new Chaos RaaS group attacks

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Fire Ant: A Deep-Dive into Hypervisor-Level Espionage

• Key figure behind major Russian-speaking cybercrime forum targeted in Ukraine

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• /bin/live: Gustavo Gus

• Disrupting active exploitation of on-premises SharePoint vulnerabilities

• Cisco confirms active exploitation of ISE and ISE-PIC flaws

• Back to Business: Lumma Stealer Returns with Stealthier Methods

• Coyote in the Wild: First-Ever Malware That Abuses UI Automation

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Estúdio News - 19/07/2025

• /bin/live: Gustavo Gus

• Lookout Discovers Iranian APT MuddyWater Leveraging DCHSpy During Israel-Iran Conflict

• Over 1,000 CrushFTP servers exposed to ongoing hijack attacks

• Hardcoded credentials found in HPE Aruba Instant On Wi-Fi devices

• After a tip, ExpressVPN updates its Windows app to strengthen protections

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• SharePoint 0-day uncovered (CVE-2025-53770)

• CVE-2025-53770: Frequently Asked Questions About Zero-Day SharePoint Vulnerability Exploitation

• Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability (CVE-2025-53770)

• CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability

• CVE-2025-53771 Microsoft SharePoint Server Spoofing Vulnerability

• Customer guidance for SharePoint vulnerability CVE-2025-53770

• The SOC files: Rumble in the jungle or APT41’s new target in Africa

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Phish and Chips: China-Aligned Espionage Actors Ramp Up Taiwan Semiconductor Industry Targeting 

• WordPress Redirect Malware Hidden in Google Tag Manager Code

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor

• UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

• New Fortinet FortiWeb hacks likely linked to public RCE exploits

• From a Teams Call to a Ransomware Threat: Matanbuchus 3.0 MaaS Levels Up

• Lookout Discovers Mobile Forensics Tooling Masisstant In Use by Chinese Gov | Threat Intel

• Signed and stealing: uncovering new insights on Odyssey infostealer.

• GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia

• KAWA4096’s Ransomware Tide: Rising Threat With Borrowed Styles

• Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Stable Channel Update for Desktop

• Unmasking AsyncRAT: Navigating the labyrinth of forks

• Konfety Returns: Classic Mobile Threat with New Evasion Techniques

• Hyper-volumetric DDoS attacks skyrocket: Cloudflare’s 2025 Q2 DDoS threat report

• A summer of security: empowering cyber defenders with AI

• Oracle July 2025 Critical Patch Update Addresses 165 CVEs

• GLOBAL GROUP: Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• CitrixBleed 2 situation update — everybody already got owned

• Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• KongTuke FileFix Leads to New Interlock RAT Variant

• Introducing FileFix – A New Alternative to ClickFix AttacksIntroducing FileFix – A New Alternative to ClickFix Attacks

• Vídeo que fiz sobre ClickFix

• Wing FTP Server Remote Code Execution (CVE-2025-47812) Exploited in the Wild

• Evolving Tactics of SLOW#TEMPEST: A Deep Dive Into Advanced Malware Techniques

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia