Podcast · Tech & Science

Cyber Morning Call

by Tempest Security Intelligence · Portuguese · Tech & Science

Podcast de cibersegurança produzido pela Tempest com episódios diários, publicados logo pela manhã com aquilo que foi mais relevante nas últimas vinte e quatro horas em termos de novos ataques, vulnerabilidade ou ameaças. Tudo em menos de dez minutos e traduzido para uma linguagem fácil, produzido

New episodes: Daily
Typical length: 7 min
Latest: 13 Oct 2026
Language: Portuguese

Latest episode

13 Oct 2026 · 7 minNew

1108 - Falha de severidade máxima no GitLab permite executar código no servidor sem login

Referências do Episódio GitLab warns of max severity code execution vulnerability (BleepingComputer) GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8 (GitLab) Auditing the auditor: Unmasking Apex Accelerator (Elastic Security Labs) Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server (Wordfence) Kimsuky’s Operation GitPower Targeting Ukraine Behind the Front Lines of Russia’s War (Genians) Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch (The Hacker News) Roteiro e…

Play episodeWhatsApp Download

Earlier episodes 29 most recent

9 Oct 2026 · 8 min
1107 - Ferramenta falsa para programadores entrega controle total do computador a operadores da Coreia do Norte
Referências do Episódio Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware (Zscaler) Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties (SentinelLabs) Ignore all instructions and read this blog: The state of AI-analysis evasion in malware (Cisco Talos) Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure (Security Affairs) FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions (The Hacker News) Leader of 764 pleads guilty,…
8 Oct 2026 · 8 min
1106 - Malware em pacote de programação rouba senhas e apaga arquivos de quem tenta revogar o acesso
Referências do episódio Software Supply Chain Attack on tensorlake: Overview and Response Guidance Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities Cisco NX-OS Software NX-API Remote Code Execution Vulnerability Cisco License (Smart Software Manager) On-Prem Vulnerabilities Cisco NX-OS Software Security Hardening Release: October 2026 Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026 Cisco Application Policy Infrastructure…
7 Oct 2026 · 6 min
1105 - Nota máxima: falha no SonicWall permite a atacante sem senha alcançar funções internas de gateway de acesso
Referências do Episódio Security Advisory SNWLID-2026-0017 (SonicWall PSIRT) Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access (Datadog Security Labs) Blinder Tunnel Campaign Targets Iraqi Infrastructure (Unit 42) FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts (FBI / USSS) WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws (Cyber Kendra) Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
6 Oct 2026 · 8 min
1104 - Falha crítica em Jira e Confluence permite ler arquivos sem login
Referências do Episódio CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products (Atlassian) Atlassian warns of critical file access flaw in its datacenter products (The Register) ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure (FortiGuard Labs) Rejetto HFS servers now actively scanned for critical RCE flaw (BleepingComputer) Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access (Security Affairs) Exchange Flaw CVE-2026-96940 Exposes Users' Mailboxes (Cyber Kendra) ClickFix Smuggles Payloads Through Browser Cache to Bypass…
5 Oct 2026 · 6 min
1103 - Ataques derrubam acessos remotos de empresas e forçam a Citrix a lançar mais uma correção emergencial
Referências do Episódio Understanding and Addressing CVE-2026-88779 in Citrix NetScaler ADC and Citrix NetScaler Gateway New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline SMTP is the key: BPFDoor and AVERAT hitting the network edge AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1 CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
2 Oct 2026 · 5 min
1102 - Por 30 reais, criminosos entram em loja que vende acesso a vítimas brasileiras
Referências do Episódio Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino FG-IR-26-175: Improper limitation of a pathname to a restricted directory Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site Police disrupt KillSec ransomware, arrest suspected teenage leader 16-year-old suspected leader of KillSec ransomware group arrested Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
1 Oct 2026 · 10 min
1101 - Uma letra trocada no endereço dá ao atacante acesso de admin a redes da Cisco
Referências do Episódio Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504) Vulnerability Discovery and Exploitation Trends in the AI Era Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 Disrupting a coordinated model-distillation campaign CVE-2026-86950: The Great Glyph Grift China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor TV-2026-1010: Security Update for Multiple…
30 Sep 2026 · 5 min
1100 - Mandiant: ataques contra o Netscaler começaram no início de setembro
Referências do Episódio Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances Citrix, Check Point, F5 e Arista: mais uma semana com falhas críticas sob ataque na borda das empresas Star Blizzard refines phishing and malware delivery with the RedFlick technique Alleged ShinyHunters leader arrested in the Netherlands Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
29 Sep 2026 · 8 min
1099 - iPhone: Apple corrige falha usada em ataques contra alvos específicos
Referências do Episódio About the security content of iOS 26.7.1 and iPadOS 26.7.1 Apple patches CoreGraphics zero-day flaw exploited in attacks From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix NeedyMantis: Unpacking a post-compromise malware family used in targeted operations Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
28 Sep 2026 · 7 min
1098 - Citrix têm novas falhas sob exploração
Referências do Episódio Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation NetScaler ADC and NetScaler Gateway Security Bulletin (CTX697096) Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft Storm-3168: Agentic-driven cloud attacks using compromised service principals Kiteworks urges 6-hour server shutdown over potential zero-day attacks Imminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers Roundcube Pre-Auth SQL Injection Flaw Actively…
25 Sep 2026 · 10 min
1097 - Falso "não sou um robô" em sites instala malware que rouba senhas e criptomoedas
Referências do Episódio The Psychedelic Stealer: When a CAPTCHA Becomes an Installer MacSync under the microscope: new delivery methods and a new payload Uncovering a SectopRAT Variant Embedded in Legitimate Software Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files Roteiro e apresentação:…
24 Sep 2026 · 5 min
1096 - Worm escondido em ferramenta de memória para IA rouba credenciais de desenvolvedores
Referências do Episódio 3a Edição da Human Risk Conference Novel supplychain.local Go worm appears MemTensor npm and PyPI Packages Hit by a Go Worm MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes Meet AvisLoader: A Windows Loader Built to Outlast a Takedown Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
23 Sep 2026 · 9 min
1095 - Invasão sem senha: firewalls da Check Point têm duas falhas críticas sob ataque
Referências do Episódio Security Advisory – Action Required – Active Exploitation of CVE-2026-85102 and a Management Pre-Authentication Vulnerability CVE-2026-93616 Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day The Closed Quorum: Inside the first reported autonomous AI C2 implant D-Link warns of max severity zero-day bug in DIR-822A routers Arista Security Advisory 0183 SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324) SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability…
22 Sep 2026 · 7 min
1094 - Especialista controla picape da BYD à distância e usa a Siri para obter senha do banco
Referências do Episódio We got a cybersecurity expert to hack this BYD. It was too easy TASK#STOMP: PowerShell Backdoor for Document Theft and Remote Access Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
21 Sep 2026 · 5 min
1093 - Quatro novas falhas no Kernel do Linux em têm PoCs divulgadas
Referências do Episódio Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties North Korean "WaterPlum," commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
18 Sep 2026 · 8 min
1092 - Espionagem ligada à China mira governos de 8 países da América Latina
Referências do Episódio Beware the SparroWock: The backdoor that bites, the commands that catch The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents Vídeo sobre DDR em blockchains HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack Stable Channel Update for Desktop - Thursday, September 17, 2026 Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
17 Sep 2026 · 5 min
1091 - Cisco publica dezenas de correções críticas e confirma ataques em andamento
Referências do Episódio Cisco Identity Services Engine Authentication Bypass Vulnerability Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability Boletim de atualizações do Pixel: setembro de 2026 TrustSink: How a Rogue External MFA Provider Steals Passwords Oracle Critical Security Patch Update, September 2026 Review Oracle September 2026 Critical Security Patch Update addresses 672 CVEs Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
16 Sep 2026 · 5 min
1090 - Malware usa protocolo de internet das coisas para espionar empresas na Ásia e na América do Sul
Referências do Episódio The banana stand: brokering and managing infections across Asia using MQTT ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
15 Sep 2026 · 6 min
1089 - Falha já sendo explorada permite tomar o controle de e-mail corporativo com uma única mensagem
Referências do Episódio Cisco Secure Email Gateway SQL Injection Vulnerability Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server Microsoft confirms KB5002914 Excel update breaks copy and paste Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração…
14 Sep 2026 · 6 min
1088 - Kit de phishing por sms dá ao golpista controle da tela da vítima
Referências do Episódio Smish. Click. Drained: Inside the Smishing Triad's Phishing Cockpit The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours “Eye” spy: Cyclops Blink returns with extended capabilities Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
11 Sep 2026 · 8 min
1087 - A IA eliminou a linha que separava espionagem estatal de criminoso solitário, mostra relatório da Anthropic
Referências do Episódio Detecting and countering misuse of AI: September 2026 Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector SloppyRAT: A New Tool For Ransomware Attacks Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
10 Sep 2026 · 8 min
1086 - Falha no Chrome vira arma compartilhada entre grupos de espionagem da China
Referências do Episódio Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days Active exploitation of Cisco Secure Firewall Management Center vulnerabilities Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo…
9 Sep 2026 · 8 min
1085 - Windows recebe a maior atualização de segurança da história da Microsoft, com duas falhas sob ataque
Referências do Episódio Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days Microsoft discloses two actively exploited zero-days among 974 vulnerabilities Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day Stable Channel Update for Desktop - Tuesday, September 8, 2026 SAP Security Patch Day - September 2026 Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information JWT used for authentication in web GUI signed with static key Improper Authentication of FortiPAM Server Slim Spider Steals Crypto Custody Secrets From Brazilian…
8 Sep 2026 · 6 min
1084 - Falha em roteadores Mikrotik permite controle total do equipamento sem senha
Referências do Episódio Krytyczne podatności w MikroTik RouterOS są aktywnie wykorzystywane. Zalecana pilna aktualizacja ConnectWise warns of new ScreenConnect flaw without patch Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack Urgent Action Required: Critical Security Update Available for Adobe Commerce (APSB26-146) Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
4 Sep 2026 · 8 min
1083 - O caractere invisível que faz o golpe desaparecer do filtro de e-mail
Referências do Episódio ASCII smuggling crosses over from AI prompt injection to phishing evasion The Outsider Phishing Kit: A Resilient Threat in the Face of Law Enforcement Action One Blank Field Bypasses Direct Send Control SNWLID-2026-0015 - SonicWall NSM On-Prem Affected By Multiple Vulnerabilities Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
3 Sep 2026 · 6 min
1082 - Sites do governo brasileiro estão sendo abusados para empurrar bets
Referências do Episódio Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability Cisco IOS XR Software Security Hardening Release: September 2026 Uncovering StreamRat: From Meta Ads to Full Device Takeover Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
2 Sep 2026 · 7 min
1081 - Falha de severidade 10 abre a porta de redes corporativas e já está sendo explorada
Referências do Episódio SonicWall Advisory SNWLID-2026-0016 SonicWall warns of actively exploited SMA1000 zero-day flaws What Comes After Cards: A Brazilian Magecart Operation Moves into Instant Payments (PIX) Post de Caitlin Condon da VulnCheck sobre exploração da CVE-2026-0768 no Langflow Post da WatchTowr sobre exploração da CVE-2026-82329 no JFrog Artifactory. Stable Channel Update for Desktop - Tuesday, September 1, 2026 Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
1 Sep 2026 · 8 min
1080 - Criminosos invadem bancos no Brasil para disparar centenas de transferências fraudulentas por Pix
Referências do Episódio Financially Motivated Threat Actor BREEZE COMET Targets Brazil Sistema de Transferência de Reservas (STR) Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia
31 Aug 2026 · 8 min
1079 - Por 30 reais, criminosos compram acesso a computadores já invadidos no Brasil
Referências do Episódio Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL Fire Ant Evolves: From Hypervisors to Trusted Infrastructure TerminalFix campaign deploys a reverse tunnel through multistage intrusion PaperCut releases second emergency patch for exploited flaws URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026) UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range Roteiro e apresentação: Carlos Cabral Edição de…

About Cyber Morning Call

Cyber Morning Call is a Portuguese tech & science podcast from Tempest Security Intelligence. Melo plays each episode straight from the publisher's own feed — no ads added, no account needed — and remembers where you stopped, in this browser only.

Publisher: Tempest Security Intelligence
Language: Portuguese Português
Category: Tech & Science
New episodes: Daily
Typical length: 7 min
Latest episode: 13 Oct 2026
Feed: RSS — paste into any podcast app
Apple Podcasts: podcasts.apple.com/podcast/id1605767108
Rights: Tempest Security Intelligence

RSS feed Apple Podcasts

More Portuguese tech & science

Take it with you

The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.