Referências do Episódio

• Detecting and countering misuse of AI: September 2026

• Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers

• Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

• PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector

• SloppyRAT: A New Tool For Ransomware Attacks

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days

• Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

• Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

• Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

• The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

• New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

• Stable Channel Update for Desktop - Tuesday, September 8, 2026

• SAP Security Patch Day - September 2026

• Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information

• JWT used for authentication in web GUI signed with static key

• Improper Authentication of FortiPAM Server

• Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Krytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacja

• ConnectWise warns of new ScreenConnect flaw without patch

• Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

• StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack

• Urgent Action Required: Critical Security Update Available for Adobe Commerce (APSB26-146)

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• ASCII smuggling crosses over from AI prompt injection to phishing evasion

• The Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement Action

• One Blank Field Bypasses Direct Send Control

• SNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple Vulnerabilities

• Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon

• Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

• Cisco IOS XR Software Security Hardening Release: September 2026

• Uncovering StreamRat: From Meta Ads to Full Device Takeover

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• SonicWall Advisory SNWLID-2026-0016

• SonicWall warns of actively exploited SMA1000 zero-day flaws

• What Comes After Cards: A Brazilian Magecart Operation Moves into Instant Payments (PIX)

• Post de Caitlin Condon da VulnCheck sobre exploração da CVE-2026-0768 no Langflow

• Post da WatchTowr sobre exploração da CVE-2026-82329 no JFrog Artifactory.

• Stable Channel Update for Desktop - Tuesday, September 1, 2026

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil

• Sistema de Transferência de Reservas (STR)

• Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

• Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

• Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem

• Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

• Fire Ant Evolves: From Hypervisors to Trusted Infrastructure

• TerminalFix campaign deploys a reverse tunnel through multistage intrusion

• PaperCut releases second emergency patch for exploited flaws

• URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)

• UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia

Referências do Episódio

• URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)

• PaperCut warns of NG, MF flaw exploited in zero-day attacks

• PaperCut Actively Exploited: A Pre-Auth RCE Chain

• BlueDelta Targets Defense and Diplomacy with HOOKEDGE

• Australia charges two men for TeamPCP supply-chain hacking spree

• OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

• Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - August 27, 2026

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia