Referências do Episódio

• Fake "Security Alert" issues on GitHub use OAuth app to hijack accounts

•  What Is The New Steganographic Campaign Distributing Multiple Malware

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

• SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers

• 2025-03 Out-of-Cycle Security Bulletin: Junos OS: A local attacker with shell access can execute arbitrary code (CVE-2025-21590)

• #StopRansomware: Medusa Ransomware

• Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits

• Lookout Discovers New Spyware by North Korean APT37

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability New - CVE-2025-24983

• Windows NTFS Information Disclosure Vulnerability New - CVE-2025-24984

• Windows Fast FAT File System Driver Remote Code Execution Vulnerability New - CVE-2025-24985

• Windows NTFS Information Disclosure Vulnerability New - CVE-2025-24991

• Windows NTFS Remote Code Execution Vulnerability New - CVE-2025-24993

• Microsoft Access Remote Code Execution Vulnerability New - CVE-2025-26630

• Microsoft Management Console Security Feature Bypass Vulnerability New - CVE-2025-26633

• Apple fixed the third actively exploited zero-day of 2025

• Exposure of Sensitive Information to an Unauthorized Actor

• Use of hardcoded key used for remote backup server password encryption

• XSS flaw in Fortiview/SecurityLogs pages

• Cross Site Request Forgery in admin endpoint

• Incorrect authorization in GUI console

• Multiple command injections on CLI

• Multiple format string vulnerabilities

• Os command injection on vm download feature

• Ballista – New IoT Botnet Targeting Thousands of TP-Link Archer Routers

• New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects

• DCRat backdoor returns

• Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Blind Eagle: …And Justice for All

• UTC−05:00

• SideWinder targets the maritime and nuclear sectors with an updated toolset

• CVE-2017-11882 - Microsoft Office Memory Corruption Vulnerability

• A Hit is made: Suspected India-based Sidewinder APT successfully cyber attacks Pakistan military focused targets

• AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Undocumented commands found in Bluetooth chip used by a billion devices

• RootedCON - Attacking Bluetooth the easy way

• CVE-2025-27840

• Ripple Co-founder’s $150M XRP Heist Related to LastPass Hack: ZachXBT

• Feds seized $23 million in crypto stolen using keys from LastPass breaches

• Thread\ da Microsoft no X sobre o Moonstone Sleet estar usando o Qlin

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Malvertising campaign leads to info stealers hosted on GitHub

• GreyNoise Detects Active Exploitation of Silk Typhoon-Linked CVEs

• Kibana 8.17.3 Security Update (ESA-2025-06)

• Over 37,000 VMware ESXi servers vulnerable to ongoing attacks

• A Deep Dive into Strela Stealer and how it Targets European Countries

• Unmasking the new persistent attacks on Japan

• Unmasking GrassCall Campaign: The APT Behind Job Recruitment Cyber Scams

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)

• Android Security Bulletin—March 2025

• Cellebrite zero-day exploit used to target phone of Serbian student activist

• Silk Typhoon targeting IT supply chain

• Unveiling EncryptHub: Analysis of a multi-stage malware campaign 

• Not Lost in Translation: Rosetta 2 Artifacts in macOS Intrusions

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations

• You've Got Malware: FINALDRAFT Hides in Your Drafts

• Winos 4.0 Spreads via Impersonation of Official Email to Target Users in Taiwan

• Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools

• Spring Dragon – Updated Activity

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referência do Episódio

• CrowdStrike 2025 Global Threat Report: Beware the Enterprising Adversary - 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia