1109 - Novo normal: Microsoft corrige recorde de mais de 1.400 falhas, uma delas já explorada por atacantes

Referências do Episódio

• Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug (The Hacker News)

• Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951) (Tenable)

• SAP warns of maximum severity OAuth2 SSRF security flaw (BleepingComputer)

• OAuth2 SSRF vulnerability in SAP Cloud SDK for Python (SAP / GitHub)

• Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day (CyberScoop)

• A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days (Volexity)

• Stable Channel Update for Desktop (Google Chrome Releases)

• Extended Stable Update for Desktop (Google Chrome Releases)

• Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (Docker)

• Arbitrary file write in grpc phQueryMaster (FortiGuard Labs)

• Improper access control and session management in the web management interface (FortiGuard Labs)

• When LLM Gateways Go Wrong: Findings from LiteLLM (Check Point Research)

• Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways (Check Point)

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo 

Narração de encerramento: Bianca Garcia