1109 - Novo normal: Microsoft corrige recorde de mais de 1.400 falhas, uma delas já explorada por atacantes

Notas do episódio

Referências do Episódio Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug (The Hacker News) Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951) (Tenable) SAP warns of maximum severity OAuth2 SSRF security flaw (BleepingComputer) OAuth2 SSRF vulnerability in SAP Cloud SDK for Python (SAP / GitHub) Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day (CyberScoop) A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days (Volexity) Stable Channel Update for Desktop (Google Chrome Releases) Extended Stable Update for Desktop (Google Chrome Releases) Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (Docker) Arbitrary file write in grpc phQueryMaster (FortiGuard Labs) Improper access control and session management in the web management interface (FortiGuard Labs) When LLM Gateways Go Wrong: Findings from LiteLLM (Check Point Research) Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways (Check Point) Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia