1116 - Falha no PHP que ameaça 70% da web começou a ser explorada 4 dias antes do alerta

Notas do episódio

Referências do Episódio PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports (Security Affairs) PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk (The Register) Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (The Hacker News) GitLab warns of new max severity code execution vulnerability (BleepingComputer) Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer) Security Advisory 0199 (Arista) AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise (Microsoft) ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors (Wiz) Cisco Expressway Series Remote Code Execution Vulnerability (Cisco) Cisco Unified Communications Products Security Hardening Release: October 2026 (Cisco) How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia (Kaspersky Securelist) Roteiro e apresentação: Carlos Cabral Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia