Edição 137 - 14.02.23

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: CFPs: YSTS 2025https://tinyurl.com/cfpysts17 Notícias:  https://www.techspot.com/news/105929-russia-tests-cutting-itself-off-rest-internet-most.htmlhttps://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/ Quatro países que têm um lugar especial no coração da CISA:  https://www.cisa.gov/topics/cyber-threats-and-advisories/nation-state-cyber-actors Música:  Que tal uma de IA? (Caneta Azul cantando Pearl Jam)  https://www.youtube.com/watch?v=YO_9X9ATkbk Falando em AI https://slator.com/zuckerberg-launches-ai-dubbing-speech-translation-meta-developer-conference/ Mais Notícias:  TP-LInk banida dos US:https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6https://www.reuters.com/technology/us-considers-ban-chinas-tp-link-wsj-reports-2024-12-18/ Previsões para 2025:“IOT vai bombar em 2025” https://www.helpnetsecurity.com/2024/12/24/iot-2025-security/     Relacionado com os itens anteriores:     https://www.helpnetsecurity.com/2022/11/30/iot-device-origin/    https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act https://cybermagazine.com/articles/top-10-cybersecurity-predictions-for-2025 https://www.forescout.com/blog/7-cybersecurity-predictions-for-2025-prepare-for-a-bumpy-ride/ Seção Abobrinha AeroEspacial https://apnews.com/article/drones-new-jersey-what-to-know-e6f565f5d51d9d47ad140e7e7d131842 https://www.youtube.com/watch?v=ZID7wRpdg1M

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Eventos: DEF CON: Como foi? BSidesLV: Como foi? BlackHat: Como foi? THOTCON agora a cada 2 anos Ekoparty: 1, 2, 3 de Novembro CFP ainda aberto H2HC: 9 e 10 de Dezembro https://www.rnp.br/noticias/hackers-do-bem-abre-processo-seletivo-para-docentes Notícias: Bypass Two-Factor Authentication of Facebook Accounts ($25,300) Relatório da HP detalha técnicas de evasão de detecção, incluindo abuso do campo TXT do DNS. https://www.forbes.com/sites/thomasbrewster/2023/08/30/malicious-signal-app-planted-on-google-play-by-china-linked-cyber-spies/?sh=6549aea048e9 Música: Mais Notícias: https://www.tse.jus.br/comunicacao/noticias/2023/Agosto/tse-publica-edital-de-convocacao-do-teste-publico-de-seguranca-2023 Microsoft, o que aconteceu? https://samcurry.net/Points-com/ https://g1.globo.com/politica/noticia/2023/08/17/hacker-afirma-a-cpi-que-uma-das-senhas-do-sistema-do-cnj-era-12345-deputada-diz-que-era-senha-simples.ghtml https://headtopics.com/us/why-the-chainsmokers-invest-in-and-party-with-niche-cybersecurity-companies-42769817 https://www.404media.co/i-tracked-nyc-subway-rider-home-omny-mta/ Dica da Semana: 303party.org

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Eventos: https://www.roadsec.com.br/programacao Registro de workshops da DEF CON Fechado. Workshop do Spookerlabs Provavelmente a lista de talks da DEF CON estará no ar até lá. Para esses lados aqui, SummerCon neste final de semana Notícias: https://eco.sapo.pt/2023/07/10/cartao-do-cidadao-vai-poder-servir-de-titulo-de-transporte/ Vai parar!! Noticia. Hack Música: Mais Notícias: https://www.bleepingcomputer.com/news/security/chinese-hackers-use-dns-over-https-for-linux-malware-communication/ https://www.bleepingcomputer.com/news/security/attackers-abuse-google-dns-over-https-to-download-malware/ https://www.vice.com/en/article/93kkky/people-pirating-gpt4-scraping-openai-api-keys Seção Abobrinha AeroEspacial https://www.virgingalactic.com/?utm_id=2585548&sfmc_id=261488864&ck=00Q3z00001FqolqEAB#featured Dica da Semana: https://mrbilly.blogspot.com/2009/12/defcon-para-leigos.html https://anchisesbr.blogspot.com/2019/07/seguranca-preparativos-para-defcon-2019.html https://www.youtube.com/watch?v=AsPeB6bc5ho

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Eventos: Teve: THOTCON, YSTS, re:inforce e fwd:cloudsec BSidesSP CFPs: Sector.ca até 22 de junho. Notícias: https://www.bleepingcomputer.com/news/security/barracuda-says-hacked-esg-appliances-must-be-replaced-immediately/ https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally https://labs.watchtowr.com/xortigate-or-cve-2023-27997/ https://www.bleepingcomputer.com/news/security/chinese-hackers-use-dns-over-https-for-linux-malware-communication/ Música Mais Notícias: https://www.tomshardware.com/news/security-researcher-finds-coldplay-lyrics-in-kingston-ssd-firmware https://thenewstack.io/the-first-kubernetes-bill-of-materials-standard-arrives/ Seção Abobrinha AeroEspacial https://www.virgingalactic.com/news/virgin-galactic-announces-start-of-commercial-spaceflight-service https://www.apple.com/apple-vision-pro Dicas de streaming por pessoas de extremo e refinado bom gosto ⁠Playlist do YSTS 15 Tecsec Podcast

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: RSA Conf YSTS Agenda no Ar CFPs BlackHat USA Arsenal 21 de Abril Notícias:  A nova moda, Juice Jacking Mas que não é nada mais do que https://media.blackhat.com/us-13/US-13-Ossmann-Multiplexed-Wired-Attack-Surfaces-WP.pdf Não acredite em tudo que vê na internet Música Mais Notícias:  SIM Swap, a "novidade" dos Estados Unidos https://thehackernews.com/2023/04/israeli-spyware-vendor-quadream-to-shut.html Nokia 3310, o novo Flipperzero https://www.bloomberg.com/news/articles/2023-04-04/branson-s-rocket-launch-firm-virgin-orbit-files-for-bankruptcy

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Eventos: https://www.summercon.org/ https://securitybsides.com.br/2023/ Notícias: https://www.eff.org/deeplinks/2023/03/flipper-zero-devices-being-seized-brazils-telecom-agency https://techdigipro.com/how-to/casper-attack-steals-data-using-internal-air-gapped-computer-speaker/ https://www.linkedin.com/feed/update/urn:li:activity:7037622241441808384/ https://www.washingtonpost.com/nation/2023/03/14/tesla-app-unlock-strangers-car/ https://abcnews.go.com/GMA/News/video/tracking-service-inside-volkswagen-delayed-tracing-car-kidnapped-97516191 Música: https://www.youtube.com/watch?v=qkaAmfgJ60w Mais Notícias: https://www.jailbreakchat.com/ https://www.reuters.com/technology/chinese-search-giant-baidu-introduces-ernie-bot-2023-03-16/ https://www.reuters.com/technology/google-ai-chatbot-bard-offers-inaccurate-information-company-ad-2023-02-08/ https://arstechnica.com/gadgets/2023/03/samsung-says-it-adds-fake-detail-to-moon-photos-via-reference-photos/ Seção Abobrinha Inter-estelar https://www.theregister.com/AMP/2023/03/13/lockbit_spacex_ransomware/

1 hora e 4 minutos Eventos SSI (ITA) no more (?) 24th Chaos Communication Congress 2007: Call for Participation December 27th to 30th, 2007 Berlin, Germany http://events.ccc.de/congress/2007/ POC Date of POC 2007 • Date: November 15 ~ 16 • Venue: Seoul Kyoyuk MunHwa HoeKwan. POC 2007 Call for Papers (August 23, 2007) eadline of Submission: September 30, 2007 All submission must include PPT and WORD in English with your brief biography. http://www.powerofcommunity.net/notice.html Noticias Fonelista http://comercio.fonelista.com.br/cadastro.html?Submit=Incluir+meu+Telefone%21 iPhone Unlocked http://www.engadget.com/2007/08/24/iphone-unlocked-atandt-loses-iphone-exclusivity-august-24-2007/ http://www.iphonesimfree.com/ Researcher crosses swords with Google over XSS 'flaw' http://www.theregister.co.uk/2007/08/21/google_modules_security_debate/ - Assunto 1 [Dailydave] Myth: The US is more vulnerable to information warfare because it is more reliant on information technology http://lists.immunitysec.com/pipermail/dailydave/2007-August/004524.html Assunto 2 Hacking Germany's New Computer Crime Law http://www.darkreading.com/document.asp?doc_id=132255&WT.svl=news1_2

Duração 58 minutos Eventos Bluehat 14 SampaSec SaciCon H2HC C00l B-Sides Edição 10 Black Hat São Paulo GTS 24 RoadSec SP CFP da Infiltrate 2015 Vídeos da DerbyCon 2014 Vídeos da Secure Brasil 2014 Notícias POODLE Test Mais POODLE Vazamento de informação na Staples Abóbrinhas sobre o Apple Pay Estatísticas em ataques em caixas eletrônicos FCC e o ataque contra os Access Points Piratas E, para confirmar que o Nelson estava certo... os Furbies

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Seção: A gente não erra mas às vezes comete pequenos equívocos: Eventos: https://www.mindthesec.com.br/call-for-papers Notícias: Hackeando o chatGPT OpenSSL Security Advisory [7th February 2023]  https://openssf.org/  Música: https://www.youtube.com/watch?v=swr719Qc2Yk  Malditos HackerEs https://globoplay.globo.com/v/11347652/ https://www.cnn.com/2023/02/12/middleeast/hackers-interrupt-iran-leader-revolution-anniversary-intl-hnk/index.html https://archive.is/DQJrE Seção Abobrinha Inter-estelar https://www.cnnbrasil.com.br/entretenimento/no-japao-peixes-de-estimacao-viralizam-por-jogar-videogame-e-fazer-compras-no-cartao-do-dono/ https://www.youtube.com/channel/UCSoTXYNzSD9f6fF2IvRVHdA https://youtu.be/upIhDDI0b8Y Dicas de streaming por pessoas de extremo e refinado bom gosto: https://www.youtube.com/watch?v=KBhJZ2qD0yM  Dica da Semana: Por favor, parem de falar errado Engine Zine Source

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: BSidesSF - CFP aberto até 1o. de Fevereiro  CanSecWest CFP ainda aberto até quando não sabemos (talvez nem eles) Roadsec CFP até 12/04 YSTS 15 Def Con CFM BlueHat Seattle - Dias 8 e 9 de Fevereiro DEF CON Trainings  Notícias:  Acabou o drama https://thehackernews.com/2023/01/millions-of-vehicles-at-risk-api.html https://www.malwarebytes.com/blog/news/2023/01/fake-flipper-zero-websites-look-to-cause-a-big-splash Música:   - Avu-Chan (Queen Bee) -- 生き続ける (Staying Alive) Japanese Cover Mais notícias: chkrootkit 0.57 is now available! (Release Date: Jan 13 2023) https://www.vice.com/en/article/wxn9vx/researchers-track-reviver-digital-license-plate-gps-location https://thehackernews.com/2023/01/researchers-uncover-3-pypi-packages.html Dica da Semana: Treinamento de grátis para desenvolvedores Livro do SpaceRogue