Referências do Episódio

• CVE-2025-31324: Zero-Day Vulnerability in SAP NetWeaver Exploited in the Wild

• ReliaQuest Uncovers New Critical Vulnerability in SAP NetWeaver

• Triada strikes back

• Ill intent: How deepfake “doctors” peddle bogus cures on TikTok

• Various GPT services are vulnerable to "Inception" jailbreak, allows for bypass of safety guardrails

• Craft CMS RCE exploit chain used in zero-day attacks to steal data.

• DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

• Weaponized Words: Uyghur Language Software Hijacked to Deliver Malware

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Earth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors

• io_uring Is Back, This Time as a Rootkit

• Fire In The Hole, We’re Breaching The Vault - Commvault Remote Code Execution (CVE-2025-34028)

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• M-Trends 2025: Data, Insights, and Recommendations From the Frontlines

• 2025 Data Breach Investigations Report

• Distribution of PebbleDash Malware in March 2025

• Operation SyncHole: Lazarus APT goes back to the well

• Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations

• LACNIC 43

• BsidesSP

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Ripple's xrpl.js npm Package Backdoored to Steal Private Keys

• XRP supply chain attack: Official NPM package infected with crypto stealing backdoor

• NFC Fraud Wave: Evolution of Ghost Tap on the Dark Web

• Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

• Cookie-Bite: How Your Digital Crumbs Let Threat Actors Bypass MFA and Maintain Access to Cloud Environments

• ConfusedComposer: A Privilege Escalation Vulnerability Impacting GCP Composer

• Infostealer Malware FormBook Spread via Phishing Campaign – Part I

• Russian organizations targeted by backdoor masquerading as secure networking software updates

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• SOC Tempest com Google SecOps
• CVE-2025-32433: Erlang/OTP SSH Unauthenticated Remote Code Execution Vulnerability
• Billbug: Intrusion Campaign Against Southeast Asia Continues
• Detecting Multi-Stage Infection Chains Madness
• SuperCard X: exposing a Chinese-speaker MaaS for NFC Relay fraud operation
• Phishing attacks leveraging HTML code inside SVG files

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• CVE-2025-24054, NTLM exploit in the wild

• About Apple Security Updates

• CISA adds One Known Exploited Vulnerability to Catalog

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Renewed APT29 Phishing Campaign Against European Diplomats

• UNC5174’s evolution in China’s ongoing cyber warfare: From SNOWLIGHT to VShell

• CrazyHunter Campaign Targets Taiwanese Critical Sectors

• Threat actors misuse Node.js to deliver malware and other malicious payloads

• The CVE program for tracking security flaws is about to lose federal funding

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets

• Cyber Threats 2021:A Year in Retrospect

• Red Menshen (a.k.a. Earth Bluecrow)

• CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild

• Waiting Thread Hijacking: A Stealthier Version of Thread Execution Hijacking

• New Malware Variant Identified: ResolverRAT Enters the Maze

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Palo Alto warns of brute-force login attempts on PAN-OS GlobalProtect gateways indicating possible upcoming attacks

• Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Referências do Episódio

• Unraveling the U.S. toll road smishing scams

• Smishing Triad: Chinese eCrime Group Targets 121+ Countries, Intros New Banking Phishing Kit

• Shuckworm Targets Foreign Military Mission Based in Ukraine

• Analysis of Threat Actor Activity

• CVE-2022-42475 - Heap-based buffer overflow in sslvpnd

• CVE-2023-27997- Heap buffer overflow in sslvpn pre-authentication

• CVE-2024-21762 - Out-of-bound Write in sslvpnd

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia