ISTS - i sh0t the sheriff

Some Music from: https://www.bensound.com

Eventos:

CFPs: YSTS 2025https://tinyurl.com/cfpysts17

Notícias: 

https://www.techspot.com/news/105929-russia-tests-cutting-itself-off-rest-internet-most.htmlhttps://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/

Quatro países que têm um lugar especial no coração da CISA: 

https://www.cisa.gov/topics/cyber-threats-and-advisories/nation-state-cyber-actors

Música: 

Que tal uma de IA? (Caneta Azul cantando Pearl Jam) 

https://www.youtube.com/watch?v=YO_9X9ATkbk

Falando em AI https://slator.com/zuckerberg-launches-ai-dubbing-speech-translation-meta-developer-conference/

Mais Notícias: 

TP-LInk banida dos US:https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6https://www.reuters.com/technology/us-considers-ban-chinas-tp-link-wsj-reports-2024-12-18/

Previsões para 2025:“IOT vai bombar em 2025”

https://www.helpnetsecurity.com/2024/12/24/iot-2025-security/

    Relacionado com os itens anteriores:     https://www.helpnetsecurity.com/2022/11/30/iot-device-origin/    https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act

https://cybermagazine.com/articles/top-10-cybersecurity-predictions-for-2025

https://www.forescout.com/blog/7-cybersecurity-predictions-for-2025-prepare-for-a-bumpy-ride/

Seção Abobrinha AeroEspacial

https://apnews.com/article/drones-new-jersey-what-to-know-e6f565f5d51d9d47ad140e7e7d131842

https://www.youtube.com/watch?v=ZID7wRpdg1M

Ekoparty: 1, 2, 3 de Novembro CFP ainda aberto

H2HC: 9 e 10 de Dezembro

https://www.rnp.br/noticias/hackers-do-bem-abre-processo-seletivo-para-docentes

Notícias:

Bypass Two-Factor Authentication of Facebook Accounts ($25,300)

Relatório da HP detalha técnicas de evasão de detecção, incluindo abuso do campo TXT do DNS.

https://www.forbes.com/sites/thomasbrewster/2023/08/30/malicious-signal-app-planted-on-google-play-by-china-linked-cyber-spies/?sh=6549aea048e9

Música:

Mais Notícias:

https://www.tse.jus.br/comunicacao/noticias/2023/Agosto/tse-publica-edital-de-convocacao-do-teste-publico-de-seguranca-2023

Microsoft, o que aconteceu?

https://samcurry.net/Points-com/

https://g1.globo.com/politica/noticia/2023/08/17/hacker-afirma-a-cpi-que-uma-das-senhas-do-sistema-do-cnj-era-12345-deputada-diz-que-era-senha-simples.ghtml

https://headtopics.com/us/why-the-chainsmokers-invest-in-and-party-with-niche-cybersecurity-companies-42769817

https://www.404media.co/i-tracked-nyc-subway-rider-home-omny-mta/

Dica da Semana:

303party.org

https://www.roadsec.com.br/programacao

Registro de workshops da DEF CON Fechado. Workshop do Spookerlabs

Provavelmente a lista de talks da DEF CON estará no ar até lá.

Para esses lados aqui, SummerCon neste final de semana

Notícias:

https://eco.sapo.pt/2023/07/10/cartao-do-cidadao-vai-poder-servir-de-titulo-de-transporte/

Vai parar!!

Noticia.

Hack

Música:

Mais Notícias:

https://www.bleepingcomputer.com/news/security/chinese-hackers-use-dns-over-https-for-linux-malware-communication/

https://www.bleepingcomputer.com/news/security/attackers-abuse-google-dns-over-https-to-download-malware/

https://www.vice.com/en/article/93kkky/people-pirating-gpt4-scraping-openai-api-keys

Seção Abobrinha AeroEspacial

https://www.virgingalactic.com/?utm_id=2585548&sfmc_id=261488864&ck=00Q3z00001FqolqEAB#featured

Dica da Semana:

https://mrbilly.blogspot.com/2009/12/defcon-para-leigos.html

https://anchisesbr.blogspot.com/2019/07/seguranca-preparativos-para-defcon-2019.html

https://www.youtube.com/watch?v=AsPeB6bc5ho

https://www.bleepingcomputer.com/news/security/barracuda-says-hacked-esg-appliances-must-be-replaced-immediately/

https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally

https://labs.watchtowr.com/xortigate-or-cve-2023-27997/

https://www.bleepingcomputer.com/news/security/chinese-hackers-use-dns-over-https-for-linux-malware-communication/

Música

Mais Notícias:

https://www.tomshardware.com/news/security-researcher-finds-coldplay-lyrics-in-kingston-ssd-firmware

https://thenewstack.io/the-first-kubernetes-bill-of-materials-standard-arrives/

Seção Abobrinha AeroEspacial

https://www.virgingalactic.com/news/virgin-galactic-announces-start-of-commercial-spaceflight-service

https://www.apple.com/apple-vision-pro

Dicas de streaming por pessoas de extremo e refinado bom gosto

⁠Playlist do YSTS 15

Tecsec Podcast

Some Music from: https://www.bensound.com

Eventos:

RSA Conf

YSTS Agenda no Ar

CFPs

BlackHat USA Arsenal 21 de Abril

Notícias: 

A nova moda, Juice Jacking

Mas que não é nada mais do que https://media.blackhat.com/us-13/US-13-Ossmann-Multiplexed-Wired-Attack-Surfaces-WP.pdf

Não acredite em tudo que vê na internet

Música

Mais Notícias: 

SIM Swap, a "novidade" dos Estados Unidos

https://thehackernews.com/2023/04/israeli-spyware-vendor-quadream-to-shut.html

Nokia 3310, o novo Flipperzero

https://www.bloomberg.com/news/articles/2023-04-04/branson-s-rocket-launch-firm-virgin-orbit-files-for-bankruptcy

https://www.summercon.org/

https://securitybsides.com.br/2023/

Notícias:

https://www.eff.org/deeplinks/2023/03/flipper-zero-devices-being-seized-brazils-telecom-agency

https://techdigipro.com/how-to/casper-attack-steals-data-using-internal-air-gapped-computer-speaker/

https://www.linkedin.com/feed/update/urn:li:activity:7037622241441808384/

https://www.washingtonpost.com/nation/2023/03/14/tesla-app-unlock-strangers-car/

https://abcnews.go.com/GMA/News/video/tracking-service-inside-volkswagen-delayed-tracing-car-kidnapped-97516191

Música:

https://www.youtube.com/watch?v=qkaAmfgJ60w

Mais Notícias:

https://www.jailbreakchat.com/

https://www.reuters.com/technology/chinese-search-giant-baidu-introduces-ernie-bot-2023-03-16/

https://www.reuters.com/technology/google-ai-chatbot-bard-offers-inaccurate-information-company-ad-2023-02-08/

https://arstechnica.com/gadgets/2023/03/samsung-says-it-adds-fake-detail-to-moon-photos-via-reference-photos/

Seção Abobrinha Inter-estelar

https://www.theregister.com/AMP/2023/03/13/lockbit_spacex_ransomware/

Duração 58 minutos


Eventos

Bluehat 14

SampaSec

SaciCon

H2HC

C00l B-Sides Edição 10

Black Hat São Paulo

GTS 24

RoadSec SP

CFP da Infiltrate 2015

Vídeos da DerbyCon 2014

Vídeos da Secure Brasil 2014


Notícias

POODLE Test

Mais POODLE

Vazamento de informação na Staples

Abóbrinhas sobre o Apple Pay

Estatísticas em ataques em caixas eletrônicos

FCC e o ataque contra os Access Points Piratas

E, para confirmar que o Nelson estava certo... os Furbies

Some Music from: https://www.bensound.com

Seção: A gente não erra mas às vezes comete pequenos equívocos:

Eventos:

https://www.mindthesec.com.br/call-for-papers

Notícias:

Hackeando o chatGPT

OpenSSL Security Advisory [7th February 2023]

 https://openssf.org/ 

Música:

https://www.youtube.com/watch?v=swr719Qc2Yk 

Malditos HackerEs

https://globoplay.globo.com/v/11347652/

https://www.cnn.com/2023/02/12/middleeast/hackers-interrupt-iran-leader-revolution-anniversary-intl-hnk/index.html

https://archive.is/DQJrE

Seção Abobrinha Inter-estelar

https://www.cnnbrasil.com.br/entretenimento/no-japao-peixes-de-estimacao-viralizam-por-jogar-videogame-e-fazer-compras-no-cartao-do-dono/

https://www.youtube.com/channel/UCSoTXYNzSD9f6fF2IvRVHdA

https://youtu.be/upIhDDI0b8Y

Dicas de streaming por pessoas de extremo e refinado bom gosto:

https://www.youtube.com/watch?v=KBhJZ2qD0yM 

Dica da Semana:

Por favor, parem de falar errado

Engine

Zine

Source

Roadsec CFP até 12/04

YSTS 15

Def Con CFM

BlueHat Seattle - Dias 8 e 9 de Fevereiro

DEF CON Trainings 

Notícias: 

Acabou o drama

https://thehackernews.com/2023/01/millions-of-vehicles-at-risk-api.html

https://www.malwarebytes.com/blog/news/2023/01/fake-flipper-zero-websites-look-to-cause-a-big-splash

Música:   - Avu-Chan (Queen Bee) -- 生き続ける (Staying Alive) Japanese Cover

Mais notícias:

chkrootkit 0.57 is now available! (Release Date: Jan 13 2023)

https://www.vice.com/en/article/wxn9vx/researchers-track-reviver-digital-license-plate-gps-location

https://thehackernews.com/2023/01/researchers-uncover-3-pypi-packages.html

Dica da Semana:

Treinamento de grátis para desenvolvedores

Livro do SpaceRogue

CFP CanSecWest 

Notícias: 

Pq ainda usam a PyPi? 

Novembro

Agosto

Julho

https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

https://www.sans.org/blog/get-ahead-of-the-five-most-dangerous-new-attack-techniques/

Música: 

Mais notícias:

https://www.reddit.com/r/cybersecurity/comments/yj8q14/isc2_posts_invalid_ballot_for_board_election/

Blue Tick falso

FTX, irão pegar os malditos hackers?

Seção Abobrinha

https://olhardigital.com.br/2022/11/16/ciencia-e-espaco/dia-historico-nasa-lanca-com-sucesso-missao-artemis-1-rumo-a-lua/

Mike Tyson e Holyfield 

https://www.roadandtrack.com/car-culture/a33656042/cannonball-record-broken-25-hours-39-minutes-from-nyc-to-la/

Livro - Jairo Willian

Notícias:

TOP 10 unattributed APT mysteries

Cybersecurity event cancelled after scammers disrupt LinkedIn live chat

Fresquinha, WhatsApp parou hoje?

Música

Mais notícias:

Mais para uma discussão

https://www.darkreading.com/careers-and-people/stress-driving-cybersecurity-professionals-rethink-roles

https://www.theregister.com/2022/10/18/car_thieves_arrested_keyless_tech/

Seção Abobrinha

https://www.vice.com/en/article/5d3yyq/the-chess-world-is-absolutely-losing-it-over-cheating-allegations-after-massive-upset

https://www.news.com.au/finance/business/technology/tech-giant-atlassian-slammed-for-ongoing-ties-to-russia-as-it-wages-war-on-ukraine/news-story/f601981baa6b64b839b1b261a100f65b

https://gizmodo.com/apple-app-store-ads-today-tab-homepage-1849694826

https://www.cisa.gov/sites/default/files/publications/June%202022%20CSAC%20Recommendations%20%E2%80%93%20TAC.pdf

CyberSecurity Summit  2022 

DEF CON e Black Hat como foi?

https://www.vice.com/en/article/88qxdz/hacker-conference-def-con-bans-pro-trump-outlet-oan

https://www.theregister.com/2022/08/15/black_hat_covid/

https://hackaday.com/2022/08/14/starlink-ground-stations-successfully-hacked/

https://www.theregister.com/2022/08/16/john_deere_doom/

https://www.vice.com/en/article/y3pwqx/hackers-took-over-a-commercial-satellite-to-broadcast-hacker-movies

https://defcon.outel.org/consolidated_page_split_Sat.html#AAVMV_f951fe8a642cec6da8016b461dac0b10

https://defcon.outel.org/consolidated_page_split_Fri.html#AAPLV_7ec0d25db7da7de46a596ea974018217

Notícias:

https://www.cnn.com/2022/08/23/tech/twitter-whistleblower-peiter-zatko-security/index.html

https://www.cnn.com/2022/08/24/tech/peiter-zatko-twitter-whistleblower-profile/index.html

https://www.theguardian.com/technology/2022/aug/30/elon-musk-adds-whistleblower-claims-to-list-of-reasons-for-ending-twitter-deal

https://www.theguardian.com/technology/2022/aug/29/how-to-shut-down-the-internet-and-how-to-fight-back

https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html

https://www.vice.com/en/article/88q8ak/kaspersky-employees-say-they-were-asked-to-resign-because-they-wanted-to-leave-russia

Música: 

Mais notícias:

https://www.vice.com/en/article/qjkvxv/how-a-third-party-sms-service-was-used-to-take-over-signal-accounts

https://www.theguardian.com/technology/2022/aug/18/apple-security-flaw-hack-iphone-ipad-macs

https://nakedsecurity.sophos.com/2022/08/31/urgent-apple-quietly-slips-out-zero-day-update-for-older-iphones/

https://www.vice.com/en/article/v7veg8/anom-app-source-code-operation-trojan-shield-an0m?utm_content=bufferf67ab&utm_medium=social&utm_source=linkedin.com&utm_campaign=buffer

https://spreadprivacy.com/protect-your-inbox-with-duckduckgo-email-protection/

https://www.hackread.com/cisco-confirms-breach-employee-google-account-hacked/

https://www.zdnet.com/article/lastpass-hacked/

Seção Abobrinha 

https://gizmodo.com/spacex-south-korea-moon-launch-pathfinder-lunar-orbiter-1849373010

https://www.washingtonpost.com/technology/2022/08/30/spacex-t-mobile-starlink-satellite/

https://www.theverge.com/2022/8/30/23329610/royal-caribbean-spacex-starlink-cruise-ships-celebrity-silversea

https://olhardigital.com.br/2022/08/30/reviews/iphone-14-pode-ter-conectividade-via-satelite-mas-isso-depende-de-acordos/

https://www-vice-com.cdn.ampproject.org/c/s/www.vice.com/amp/en/article/akek8e/walmart-30tb-ssd-hard-drive-scam-sd-cards

https://www.forbes.com/sites/richardnieva/2022/08/18/tiktok-in-app-browser-research

Johnny Fat Fingers no Canadá

https://www.darkreading.com/iot/unpatched-gps-tracker-security-bugs-disruption

https://tech.slashdot.org/story/22/07/18/0433238/report-facebook-has-started-encrypting-links-to-counter-browsers-anti-tracking-measures

Mais notícias:

Seria verdade?

Malditos Hackers

Relacionado a ultima noticia acima

Seção Abobrinha Aeroespacial

https://www.vice.com/en/article/93abw3/nasa-rover-discovers-weird-clump-of-string-on-mars

https://www.vice.com/en/article/xgydzw/fedex-support-employee-on-twitter-sorry-we-lost-your-dead-body

Evento tech, não exatamente de segurança

Notícias:

https://thehackernews.com/2022/05/attackers-can-use-electromagnetic.htm

https://www.infosecurity-magazine.com/news/evil-corp-changes-ransomware/

https://www.bleepingcomputer.com/news/security/mandiant-no-evidence-we-were-hacked-by-lockbit-ransomware/

https://www.darkreading.com/threat-intelligence/mandia-keep-shields-up-to-survive-the-current-escalation-of-cyberattacks?_mc=NL_DR_EDT_DR_daily_20220608&cid=NL_DR_EDT_DR_daily_20220608&sp_aid=111122&elq_cid=34635899&sp_eh=cc1532bb1a740047a430b84b126dac15ea5c1eee9dcf92b46e734cc987bafd4f&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_06.08.22&sp_cid=45166&utm_content=DR_NL_Dark%20Reading%20Daily_06.08.22

Música

Mais notícias:

https://thehackernews.com/2022/06/atlassian-releases-patch-for-confluence.html

https://www.darkreading.com/threat-intelligence/an-emerging-threat-attacking-5g-via-network-slices?_mc=NL_DR_EDT_DR_daily_20220608&cid=NL_DR_EDT_DR_daily_20220608&sp_aid=111122&elq_cid=34635899&sp_eh=cc1532bb1a740047a430b84b126dac15ea5c1eee9dcf92b46e734cc987bafd4f&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_06.08.22&sp_cid=45166&utm_content=DR_NL_Dark%20Reading%20Daily_06.08.22

https://g1.globo.com/mg/minas-gerais/bom-dia-minas/video/hacker-invade-painel-de-publicidade-e-exibe-video-porno-em-montes-claros-10628370.ghtml

https://g1.globo.com/rj/rio-de-janeiro/noticia/2022/05/27/paineis-de-aeroporto-sao-hackeados.ghtml

Seção Abobrinha Aeroespacial

https://g1.globo.com/inovacao/noticia/2022/06/06/brasileiro-no-espaco-perguntas-e-respostas-sobre-voo-da-blue-origin.ghtml

https://www.space.com/spacex-starship-deploy-starlink-satellites-pez-dispenser

https://www.virgingalactic.com/sign-up

YSTS

Troopers 

Notícias:

https://www.nbcnews.com/tech/security/ransomware-attack-covid-combine-shutter-illinois-college-rcna24905

https://arstechnica.com/information-technology/2022/05/hackers-are-actively-exploiting-big-ip-vulnerability-with-a-9-8-severity-rating/

https://abcnews.go.com/International/wireStory/reports-spain-fires-intelligence-chief-amid-hacking-scandal-84611857

Música 

Mais Noticias:

https://nypost.com/2022/05/09/hackers-hijack-russian-tv-to-say-country-has-blood-on-hands/

https://www.foxla.com/news/key-fob-hacking-how-thieves-can-hack-into-your-car-and-tips-to-stop-it

https://g1.globo.com/mg/minas-gerais/noticia/2022/05/09/conheca-o-brasileiro-que-ganhou-sorteio-para-ir-ao-espaco-nao-e-so-para-bilionarios.ghtml

https://nypost.com/2022/05/09/hackers-hijack-russian-tv-to-say-country-has-blood-on-hands/

Seção Abobrinha

https://www.androidauthority.com/motorola-razr-3-design-images-3162383/

https://mashed.com/856489/why-starbucks-wants-to-jump-on-the-nft-bandwagon/

https://g1.globo.com/pop-arte/cinema/noticia/2022/05/09/a-incrivel-historia-do-japones-escondido-na-selva-por-30-anos-sem-saber-do-fim-da-2a-guerra.ghtml

https://www.roadsec.com.br/

https://www.cybersecuritysummit.com.br/

https://www.mindthesec.com.br/mts-22

Notícias:

A guerra e o cyber

Mailchimp Leak

Dica da Semana:

O tapa do Will Smith

E como já falamos antes, não saia scaneando QR codes

Como disse o Nelson, escolha para quem vc vende sua privacidade

Música: 

Mais Noticias:

Lapsus$ Então? No final, o que aconteceu?

https://blog.checkpoint.com/2022/03/22/lapsuss-okta-the-cyber-attacks-continue/

E o que já falamos de MFA

Seção Abobrinha

Elon investe no twitter e ganha assento no board.

https://www.sciencealert.com/some-people-are-mixing-their-psychedelics-with-digital-drugs-and-it-s-all-a-bit-weird

https://www.bbc.com/news/world-us-canada-10668480

Nova especialidade do Nelson Murilo

https://www.virusbulletin.com/conference/vb2022/call-papers1/

VB2022 will take place in Prague, Czech Republic, from 28 to 30 September 2022.

BHAck - 26 e 27 de Novembro, Belo Horizonte. 

Notícias:

https://www.elindependiente.com/economia/2022/02/28/telefonica-crea-el-primer-puesto-directivo-para-el-metaverso-y-pone-al-frente-a-yaiza-rubio/

https://www.vice.com/en/article/akvya5/russian-electric-vehicle-chargers-hacked-tell-users-putin-is-a-dickhead?utm_source=email&utm_medium=editorial&utm_content=tech&utm_campaign=220228

https://www.armis.com/research/tlstorm/

"Meu dados vazaram e tudo que eu tenho é essa camiseta"

Música: https://www.youtube.com/watch?v=NxeybUo7whY

Mais Noticias:

https://www.itsecurityguru.org/2022/03/16/german-government-warns-against-using-kaspersky/?utm_source=feedly&utm_medium=rss&utm_campaign=german-government-warns-against-using-kaspersky

https://nakedsecurity.sophos.com/2022/03/16/russian-actors-bypass-2fa-story-what-happened-and-how-to-avoid-it/

https://arstechnica.com/information-technology/2022/03/researcher-uses-600-year-old-algorithm-to-crack-crypto-keys-found-in-the-wild/

https://www.schneier.com/blog/archives/2022/03/breaking-rsa-through-insufficiently-random-primes.html

Seção Abobrinha

https://interestingengineering.com/elon-musk-starlink-satellite-ukraine

https://www.teslarati.com/elon-musk-starlink-ukraine-most-downloaded-app

https://www.nytimes.com/2022/03/15/us/politics/submarine-spy-brazil.html

Wicked6.com

Notícias:

SuperBowl QR Code

https://www.vice.com/en/article/k7wpax/freedom-convoy-givesendgo-donors-leaked

Google Project Zero

Dica da Semana:

https://www.kaspersky.com/blog/webkit-vulnerability-cve-2022-22620/43650/

E-Book da OCC com 50 tipos de golpes digitais

Música: 

Mais Noticias:

Experts Warn of Hacking Group Targeting Aviation and Defense Sectors

BGP Hijack

https://www.darkreading.com/vulnerabilities-threats/google-paid-record-8-7-million-to-bug-hunters-in-2021

Apple moves to stop AirTag tracking misuse

Um bilhão de máquinas de cartão num estalar de dedos: 

Seção Abobrinha

https://www.engadget.com/spacex-all-civilian-spacewalk-starship-flight-165202465.html

https://www.theverge.com/2022/2/16/22935861/uber-five-star-rating-breakdown-customers-privacy?scrolla=5eb6d68b7fedc32c19ef33b4

YSTS CFP

https://nullbyte-con.org/

Bsides Vancouver Virtual - CFP open. 

Seção Obituário:

Morreu pero no mucho

Notícias:

E o log4j deu o ar da graça, mas para a versão 1.x que está descontinuada desde 2015.

NSO volta ao foco 

Segundo problema no validador de passaporte da vacina DATASUS em uma semana. 

Joe Grand recupera crypto wallet

19 anos do aniversário do Slammer

North Korea Hacker

Dicas da Semana:

Tem um iPhone? Já o atualizou desde a semana passada?

Outra dica

A óbvia dica meu caro Watson

Música: 

Mais Noticias:

https://news.ycombinator.com/item?id=30150343

https://www.vice.com/en/article/y3vbjj/pirates-spammed-an-infamous-soviet-short-wave-radio-station-with-memes-uvb-76

Receita da Semana:

https://www.mcdonalds.com/us/en-us/menu-hacks.html

Seção Abobrinha

Tesla Karaoke

Robotaxi

Windows fast Update

https://nullcon.net/berlin-2022/cfp/

https://pancakescon.com/2022-conference-information/

https://www.microsoft.com/bluehat/il/cfp/

YSTS CFP 

Seção Obituário:

Blackberry

Notícias:

Estamos a 21 dias sem uma nova CVE pro log4j

Indução (?)  do Dan Kaminski no Internet Hall of Fame

Desafios da Alexa

MS Pluton

Ransom.wiki (Have they been ransomware'd?) 

Dica da Semana:

Música:  (Black Dog em Filandes) 

Mais Noticias:

Norton Crypto Mining

Hackers Printing Manifestos

Signal CEO

Seção Abobrinha

Samsung Eco Remote

Twitter Reactions

Amazon

Teams Walkie Talkie

Mais um que ouve o ISTS

Receita da Semana:

Dicas de streaming por pessoas de extremo e refinado bom gosto: 

Red Notice - Netflix 

Mas não foi só nos Estados Unidos que deu problema. SaferNet tbm.

Telefones do Departamento do Estado Norte-Americano infectados pelo Pegasus.

Dica da Semana:

Tem um iPhone? Faça uns ajustes da configuração para ficar menos exposto.

Música: 

Mas tem que ver o vídeo

Mais Noticias:

Ferramenta wireless versão millennial do Beholder.

Unidade de CyberSec do Reino Unido compartilha 585 milhoes de senhas vazadas com o site Have I Pwned 

Log4JJJJJJJ

Seção Abobrinha:

https://fortune.com/2021/12/08/ralph-lauren-digital-fashion-line-roblox-metaverse/

https://www.adidas.com/into_the_metaverse

https://www.reuters.com/markets/us/musk-says-tesla-will-accept-dogecoin-merchandise-2021-12-14/

ShmooCon

Seçao Obituário:

Morre Tim Wilson, co-fundador da Dark Reading

Notícias:

Apple sues NSO Group to curb the abuse of state-sponsored spyware

Randori guardou 0day em produtos Palo Alto por meses

Johnny FF agora faz deploy na MS: 

 Música

Mais Noticias

Trocar Filipinas por Brasil

Hackeando esteiras ergométricas

Seção Abobrinha

Apple e vídeos para consertos de dispositivos (bom na sequencia do reparo de tratores e esteiras do artigo acima)

Qual é o melhor "hacker movie?" Já que o novo Matrix sai no final do mês.

Apple para concorrer com a Tesla?

https://digitalcommons.calpoly.edu/jtiir/

https://www.secwest.net/

Notícias:

Facebookbookbook

Vazamentos das últimas semanas: Robinhood, etc

Como programar jogos NES em 6502 assembly

NSO e outras empresas colocadas no shit-list dos EUA 

https://www.nytimes.com/2021/11/03/business/nso-group-spyware-blacklist.html

Call of Duty

Não é cliente HalfMouth

Música: (Fui Hackeado) 

Mais Noticias

Para os red teamers

Seção Abobrinha

https://www.vice.com/en/article/jg87wg/missing-drunk-man-spent-hours-helping-a-search-party-look-for-himself

https://www.vice.com/en/article/pkpdan/portugal-makes-it-illegal-for-your-boss-to-text-you-after-work

https://www.theverge.com/2021/11/2/22758974/microsoft-teams-metaverse-mesh-3d-avatars-meetings-features?scrolla=5eb6d68b7fedc32c19ef33b4

The Biilion dollar (C)ode - Netflix 

(sugestão do ouvinte Gustavorobertux)

https://2021.chcon.nz/schedule/

https://www.8dot8.org/8-8-brasil/

https://kawaiicon.org/

Notícias:

Ladrão que rouba ladrão.

Facebookbookbook

Mais ou menos relacionado com o negócio do Facebook ^^

CoinBase

Twitch Data Leak

Música:  (Led Zeppelin)

Mais Noticias:

Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012

Apple Pay with Visa Hacked to Make Payments via Locked iPhones

SMS…. 

Seção Abobrinha

https://futurism.com/the-byte/blue-origin-employees-rocket-safe-wouldnt-ride

https://www.businessinsider.com/amazon-salon-hair-dye-pink-virtual-app-london-2021-9

https://finance.yahoo.com/news/bitcoin-set-become-legal-payment-154644863.html

Ekoparty - Mudou pra 100% remota. 

Seção Obituário

Notícias

America's secret terrorist watchlist exposed on the web without a password. 

https://www.bleepingcomputer.com/news/security/secret-terrorist-watchlist-with-2-million-records-exposed-online/

Publicado dia 14 de agosto, hoje dia 16 ainda aguardando detalhes "tempestivos"

Easy money': How international scam artists pulled off an epic theft of Covid benefits

Convidarem o Mr. White Hat para ser o Chief Security Advisor 

Música

Mais Noticias

Mais vazamento de dados.

T-Mobile expõe dados de praticamente todos os clientes americanos. 

Galvão Bueno Italiano divulga senha em rede nacional.

Mas será que dá certo? A Apple "forçando" o X9 do insider job.

Seção Abobrinha

Birra.

Messi pago em PSG Coins :)

Cecilia Tanaka

Notícias:

A jornada de um laptop roubado/perdido com disco cifrado que acabou sendo usado para acessar a rede corporativa. 

Criadores de malware estão usando linguagens fora do radar pra dificultar análise. 

Zoom Lied about End-to-End Encryption

Música: (Criminal) Hacker's Paradise

Mais Noticias:

Supply chain attacks are getting worse, and you are not ready for them

Urnas Eletrônicas -  Inquérito 1468 da Polícia Federal / Relatório do TSE

Seção abobrinha:

Hotel Star Wars

TikTok features

China obrigando pesquisadores a informar suas vulnerabilidades descobertas ao governo.

Atribuições

Brasil anos-luz na frente no ataque a ATMs

AWS banindo contas relacionadas à NSO.

Mais sobre isso.

Música: Lady Gaga versão samba

Mais Noticias:

Seção Polêmica

Audacity Open Source

Deepfake de voz repercutindo.

Jeff Bezos foi pro espaço

Por que a Apple não mostra 69 graus no seu app do tempo? 

Clubhouse agora é pra todos

Não tem café nem direção de graça

Produção: Halfmouth Podcasts - (museu de capas de guarda-chuva)

Some Music from: https://www.bensound.com

Esta edição é um patrocínio de: Malware Patrol. 

https://www.malwarepatrol.net/servicos-de-threat-intelligence/

Notícias:

Venceu a assinatura do antivírus.

ATM Hacking

Iphone Wi-Fi again...

Falando em Wi-Fi

AWSWick

Música:  Even Flow - Pearl Jam (Pagode Cover) By AtilaKw - Konversão

Mais Noticias:

A única "novidade" é que o ataque de força bruta está usando Kubernets para gerenciar a quantidade de instâncias necessárias para quebrar senha em paralelo.   

A RSA pede desculpas: 

Mas, a Internet, assim como o blockchain, não apaga qualquer "transação" realizada. 

Bezos deixa de ser CEO da Amazon

Acredite em tudo que aparece na internet.

Esta edição é um patrocínio de: Malware Patrol. https://www.malwarepatrol.net/servicos-de-threat-intelligence/

Eventos:

Sector: Second Round Call for Papers is OPEN

Notícias:

Hacker Elboniano conta como hackearam a EA

Phishing forever

Da eterna série, privacidade

https://www.wired.com/story/duckduckgo-quest-prove-online-privacy-possible/

Pague o resgate e deduza no leão

As águas vão rolar, e com o cyber eu vou ter que me virar, eu passo a mão no saca-saca-saca rolha, e bebo até me afogar

Música: Workin' From Home 

Mais Noticias:

Crashing Iphones. Again…

Ë sempre tão simples…

Seção não é segurança mas um dia pode ser (astrologia, robótica, self driving things, blowing speakers, etc)

https://www.independent.co.uk/news/world/americas/jeff-bezos-space-trip-petition-b1867533.html

https://hardware.slashdot.org/story/21/06/21/2313250/hyundai-acquires-boston-dynamics-company-most-famous-for-robot-police-dogs

https://hackaday.com/2021/06/10/a-self-driving-bicycle-is-something-to-marvel-at/

https://nakedsecurity.sophos.com/2021/06/18/can-you-blow-a-pc-speaker-using-only-a-linux-kernel-driver/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29

Patrocínio: Thycotic - https://thycotic.com/

Eventos:

Black Hat deve abrir registration agora em Abril

CanSecWest acontecendo nas próximas semanas (cada semana um pouco de coisa)

Notícias:

Facebook says leak of 533m accounts is old news. But my date of birth, name, etc haven't changed in years, Zuck

https://www.theregister.com/2021/04/05/facebook_data_dump/

https://mashable.com/article/zuckerberg-on-signal/

E lá, a internet parou.

https://www.theguardian.com/world/2021/feb/17/myanmars-internet-shutdown-whats-going-on-and-it-crush-dissent

Ameaças a infraestruturas críticas, follow-up, acho que falamos disso há umas edições atrás.

https://newsopener.com/product-reviews/the-threat-to-the-water-supply-is-real-and-only-getting-worse/

US nuclear command agency’s gibberish tweet was sent by a child

https://grahamcluley.com/us-nuclear-command-agencys-gibberish-tweet-was-sent-by-a-child/

Musica: Accepted the Risk

https://www.youtube.com/watch?v=9IG3zqvUqJY

Mais Noticias:

Google lança seu próprio chip para Telefones e Chromebooks

https://www.engadget.com/google-silicon-whitechapel-pixel-6-170200955.html

E como falamos de VR headsets de realidade aumentada

https://www.forbes.com/sites/ginaheeb/2021/03/31/microsoft-wins-22-billion-army-contract-for-augmented-reality-headsets/?sh=5d347cda65d4

E achávamos que só com Wi-Fi já estava bom.

https://www.independent.co.uk/life-style/gadgets-and-tech/brain-computer-interface-braingate-b1825971.html

Utah contrata empresa de monitoração com AI que não tinha AI.

https://www.vice.com/amp/en/article/pkd7pk/banjo-ai-surveillance-utah-contract

Hahahahaha

https://www.nbcnews.com/science/space/first-time-scientists-find-x-rays-coming-uranus-n1262897

Patrocínio: Thycotic https://thycotic.com/

Eventos: Nada não.

Noticias:

E a semana (passada) começou com o Microsoft Teams capenga.

https://www.theverge.com/2021/3/15/22332539/microsoft-teams-down-outage-connectivity-issues

E os seus pontos de fidelidade?

https://techcrunch.com/2021/03/04/sita-airline-passenger-breach/#:~:text=Global%20air%20transport%20data%20giant,U.S.%20servers%20had%20been%20breached.

(placas NViDIA com limitação pra minerar Ethereum, que falamos em uma edição passada,  são desbloqueadas acidentalmente com uma atualização do driver)

https://www.theverge.com/2021/3/16/22333544/nvidia-rtx-3060-ethereum-mining-rate-limit-unlock-driver

Receita da semana: Macarrão do Tik Tok

Tragédia do deepfake

https://blog.knowbe4.com/mom-charged-in-deepfake-cheerleading-plot

Depois do Oculos, Facebook lendo a mente das pessoas?

https://newatlas.com/vr/facebook-wrist-ar-control-neuromotor/?utm_source=tldrnewsletter

Música:  The Trooper Version Andina

South Park episode:

https://www.youtube.com/watch?v=cnYAOSrTQaI

Mais Notícias:

Trojan disfarçado de clubhouse app pra android.

https://www.zdnet.com/article/fraudsters-jump-on-clubhouse-hype-to-push-malicious-android-app/

Apple permite que aplicações específicas sejam instaladas nos iPhones vendidos na Rússia.

https://9to5mac.com/2021/03/16/russia-pre-install-iphone-apple/

Na mesma linha:

Governo Britanico logando acessos a sites e etc

https://www.newsbreak.com/news/2182510178451/the-uk-is-secretly-testing-a-controversial-web-snooping-tool

Enquanto isso, China bloqueia o app Signal.

https://www.newsbreak.com/news/2183201265221/encrypted-messaging-app-signal-blocked-in-china

https://conference.auscert.org.au/ (11th - 14th May 2021 // The Star Hotel, Gold Coast, Australia // In person & virtual)

https://www.rsaconference.com/Events/2021-USA

(17-20 de Maio - 100% virtual)  

https://sector.ca

(1-4 de Novembro - Hibrido) 

Noticias:

https://www.securezoo.com/2021/02/microsoft-launches-phase-2-fix-for-netlogon-elevation-of-privilege-vulnerability-cve-2020-1472/

https://www.darkreading.com/threat-intelligence/microsoft-fixes-exchange-server-zero-days-exploited-in-active-attacks/d/d-id/1340305?_mc=NL_DR_EDT_DR_daily_20210303&cid=NL_DR_EDT_DR_daily_20210303&elq_mid=102440&elq_cid=34635899

https://gizmodo.com/someone-is-hacking-the-hackers-1846406428

https://therecord.media/first-fully-weaponized-spectre-exploit-discovered-online/

Música 「Dschinghis Khan」

Mais Notícias:

https://www.thetimes.co.uk/article/deepfake-videos-of-tom-cruise-watched-by-millions-tr8lkmfdk?utm_medium=Social&utm_source=Twitter#Echobox=1614620214

https://news.sky.com/story/creator-of-viral-tom-cruise-deepfake-wants-to-raise-awareness-over-trick-videos-12237680

https://www.theregister.com/2021/03/03/qualys_ransomware_clop_gang/

https://twitter.com/officialmcafee/status/1357967289862283264?s=20

https://www.imore.com/author-takes-twitter-after-breaking-icloud-true-last-name

Pergunta do ouvinte: Qual é o nome do livro sobre singularidade que eu falei

https://arstechnica.com/information-technology/2021/02/new-malware-found-on-30000-macs-has-security-pros-stumped/

https://arstechnica.com/information-technology/2021/02/new-browser-tracking-hack-works-even-when-you-flush-caches-or-go-incognito/

https://googleprojectzero.blogspot.com/2021/02/deja-vu-lnerability.html

Música: https://www.youtube.com/watch?v=QvUqE_jGoyU

Mais Noticias:

https://www.fastcompany.com/90606386/social-media-scam-phishing-ethical-hacker

https://www.iphoneincanada.ca/news/clubhouse-leak/

https://www.media.mit.edu/projects/detect-fakes/overview/

https://www.bbc.com/news/technology-56114508

Brigadeiro de maconha:  https://www.youtube.com/watch?v=f7M9-HBBU8A

https://pollevanhoof.be/nuggets/smart_cards/nespresso

Update do cinto de castidade

https://www.forbes.com/sites/brucelee/2021/02/06/chastity-belt-ransomware-how-hackers-held-peoples-genitals-hostage/?sh=59aa3fe792b2

Domínios hijacked

https://www.ehackingnews.com/2021/01/perlcom-official-site-for-perl.html

https://www.bleepingcomputer.com/news/security/spamcop-anti-spam-service-suffers-an-outage-after-its-domain-expired/

https://www.darkreading.com/application-security/security-researchers-push-for-bug-bounty-program-of-last-resort/d/d-id/1340081?_mc=NL_DR_EDT_DR_daily_20210208&cid=NL_DR_EDT_DR_daily_20210208&elq_mid=101978&elq_cid=34635899

https://www.forbes.com/sites/daveywinder/2021/02/05/google-chrome-update-gets-serious-hackers-already-have-high-severity-attack-code/?sh=1f2f829d30f1

Música: Bota no meu pix

Mais Noticias:

https://www.metropoles.com/brasil/economia-br/mulher-usa-pix-para-tentar-reatar-namoro-e-revela-furo-no-sistema

https://www.darkreading.com/vulnerabilities---threats/advanced-threats/microsoft-says-its-time-to-attack-your-machine-learning-models/d/d-id/1340072

https://www.zdnet.com/article/with-one-update-this-malicious-android-app-hijacked-10-million-devices/

Não necessariamente falando de segurança, mas

https://9to5mac.com/2021/02/04/apple-mixed-reality-headset/?utm_source=tldrnewsletter

https://www.ibtimes.co.in/facebook-reality-labs-working-teleporting-mark-zuckerberg-hints-it-clubhouse-chat-832897?utm_source=tldrnewsletter

https://www.vice.com/en/article/93wgzy/bugs-allowed-hackers-to-hack-kindle-accounts-with-malicious-ebooks

https://www.theregister.com/2021/01/26/qualys_sudo_bug/

https://www.zdnet.com/article/linux-mint-fixes-screensaver-bypass-discovered-by-two-kids

https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

Música: Love of my life

Mais Noticias:

https://www.schneier.com/blog/archives/2021/01/massive-brazilian-data-breach.html

e

https://tecnoblog.net/404838/exclusivo-vazamento-que-expos-220-milhoes-de-brasileiros-e-pior-do-que-se-pensava/

Solarwinds é o novo coronga

https://blog.malwarebytes.com/malwarebytes-news/2021/01/malwarebytes-targeted-by-nation-state-actor-implicated-in-solarwinds-breach-evidence-suggests-abuse-of-privileged-access-to-microsoft-office-365-and-azure-environments/

Na mesma linha:

https://www.darkreading.com/application-security/mimecast-recent-certificate-compromise-tied-to-solarwinds-attacks/d/d-id/1339984?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Mais sobre Solarwinds:

https://thehackernews.com/2021/01/heres-how-solarwinds-hackers-stayed.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29

https://berthub.eu/articles/posts/reverse-engineering-source-code-of-the-biontech-pfizer-vaccine/

https://www.bleepingcomputer.com/news/security/hackers-leak-stolen-pfizer-covid-19-vaccine-data-online/

https://cybernews.com/news/70tb-of-parler-users-messages-videos-and-posts-leaked-by-security-researchers/

https://www.washingtonpost.com/politics/2021/01/07/cybersecurity-202-riot-capitol-is-nightmare-scenario-cybersecurity-professionals/

https://financialpost.com/pmn/business-pmn/hacking-victim-solarwinds-hires-ex-homeland-security-official-krebs-as-consultant

E a saga dos instant messengers.

Música  Despacito em Japones

Mais Noticias:

Update no cinto de castidade bluetooth

https://www.vice.com/en/article/m7apnn/your-cock-is-mine-now-hacker-locks-internet-connected-chastity-cage-demands-ransom

https://arstechnica.com/information-technology/2021/01/hackers-can-clone-google-titan-2fa-keys-using-a-side-channel-in-nxp-chips/

Malware usando Mac Address (BSSID)  para identificar roteador wifi das vítimas.

https://isc.sans.edu/diary/rss/26910

https://www.halfmouthsecurity.org/

https://events.ccc.de/2020/09/04/rc3-remote-chaos-experience/#english

Noticias

https://www.vice.com/en/article/y3z5kg/apple-research-device-program-iphone-hackers

https://www.nytimes.com/2020/12/08/technology/fireeye-hacked-russians.html

https://arxiv.org/abs/2012.06884
Pesquisador descobre como usar pentes de memória pra trabalhar na frequência de 2.4GHz e enviar dados para fora do computador.

https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html

https://twitter.com/realDonaldTrump/status/1327732691979137041

Rolando problemas de DNS a-la Kaminsky 2008:

https://portswigger.net/daily-swig/sad-dns-researchers-pull-source-code-as-dns-cache-poisoning-technique-deemed-too-dangerous

https://www.theverge.com/2020/11/11/21561764/youtube-down-outage-loading-videos

Música 

Previsões e mais previsões:

https://blog.checkpoint.com/2020/11/10/check-point-softwares-predictions-for-2021-securing-the-next-normal/?utm_source=browser&utm_medium=push-notification&utm_campaign=push-notification-blog

https://www.digicert.com/blog/digicert-2021-security-predictions/

https://msrc-blog.microsoft.com/2020/10/29/attacks-exploiting-netlogon-vulnerability-cve-2020-1472/?_lrsc=6e0b91a1-ec37-4196-834e-6895675002f9

NSS Labs acabou

https://www.darkreading.com/vulnerabilities---threats/nss-labs-shuttered/d/d-id/1339220?_mc=NL_DR_EDT_DR_daily_20201020&cid=NL_DR_EDT_DR_daily_20201020&elq_mid=100105&elq_cid=34635899

Lamphone

https://www.youtube.com/watch?v=t32QvpfOHqw

Criptografia fim-a-fim e master keys como as joias da rainha.

https://www.gov.uk/government/publications/international-statement-end-to-end-encryption-and-public-safety

https://arstechnica.com/gadgets/2020/10/in-a-first-researchers-extract-secret-key-used-to-encrypt-intel-cpu-code/

Música -  Metallachi 

Mais notícias

2020 o ano do bug bounty

https://threatpost.com/bug-bounty-awards-spike-2020/160719/

Chover no molhado já… retrospectiva 2020

https://www.darkreading.com/operations/6-cybersecurity-lessons-from-2020/d/d-id/1339333

https://www.darkreading.com/vulnerabilities---threats/6-things-to-know-about-the-microsoft-zerologon-flaw/d/d-id/1339017?_mc=NL_DR_EDT_DR_daily_20200928&cid=NL_DR_EDT_DR_daily_20200928&elq_mid=99705&elq_cid=34635899

https://www.zdnet.com/article/windows-xp-source-code-leaked-online-on-4chan-out-of-all-places/

https://www.buzzfeednews.com/article/pranavdixit/indian-startups-play-store

https://gizmodo.uol.com.br/hackers-falha-cinto-castidade-prender-penis

Música

Mais Notícias

https://krebsonsecurity.com/2020/09/whos-behind-mondays-14-state-911-outage/

https://thehackernews.com/2020/09/instagram-android-hack.html

https://news.umich.edu/a-self-erasing-chip-for-security-and-anti-counterfeit-tech/

https://www.pcmag.com/news/25-years-ago-hackers-introduced-movie-audiences-to-the-internet

https://www.thrillist.com/entertainment/nation/best-lines-in-hacking-movies-things-hackers-say

Noticias

https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html

https://www.zdnet.com/article/adobe-wants-users-to-uninstall-flash-player-by-the-end-of-the-year/

https://www.dexerto.com/call-of-duty/major-activision-hack-reportedly-compromises-over-500k-cod-accounts-1422141

https://medium.com/@marcelx/attackers-are-abusing-googles-app-engine-to-circumvent-enterprise-security-solutions-again-eda8345d531d

Música da Quinzena

https://www.theverge.com/2020/9/21/21448926/amazon-sidewalk-ring-echo-tile-wifi-mesh-ble-location-tracking

https://www.mobihealthnews.com/news/asia-pacific/singapore-launch-tracetogether-token-device-covid-19-contact-tracing

https://www.youtube.com/watch?v=-l61NE0eqkw

https://anchisesbr.blogspot.com/2020/09/seguranca-troco-minha-privacidade-por.html

https://infiltratecon.com/

https://thotcon.org/

https://ekoparty.org/en_US/ekoparty-2020

Notícias

https://techcrunch.com/2020/08/27/elon-musk-confirms-tesla-was-target-of-foiled-ransomware-attack/#:~:text=Elon%20Musk%20called%20an%20attempted,massive%20factory%20near%20Reno%2C%20Nevada.

https://www.tecmundo.com.br/ciencia/177173-apresentacao-neuralink-nao-empolga-comunidade-cientifica.htm

https://www.zdnet.com/article/new-zealand-stock-exchange-suffers-day-four-disruption-following-ddos-attacks/

Música da Quinzena

Mais Notícias

https://www.securitymagazine.com/articles/93073-sans-institute-suffers-data-breach-due-to-phishing-attack

https://securityaffairs.co/wordpress/107475/hacking/dark-web-market-empire-down.html

https://thehackernews.com/2020/08/microsoft-software-patches.html

https://thehackernews.com/2020/08/amazon-alexa-hacking-skills.html

A Música

Coisas sobre Defcon e Blackhat:

https://searchsecurity.techtarget.com/news/252487374/10-years-after-Stuxnet-new-zero-days-discovered

https://au.pcmag.com/news/68028/spectra-attack-turns-bluetooth-and-wi-fi-against-each-other

This briefing provides a practical look at the considerations an attacker may take when targeting satellite broadband communications networks:

https://www.darkreading.com/application-security/zoom-vulnerabilities-demonstrated-in-def-con-talk/d/d-id/1338636

https://www.pcmag.com/news/the-scariest-things-we-saw-at-black-hat-2020

https://thehackernews.com/2020/07/grub2-bootloader-vulnerability.html

Zoom Bug Allowed Snoopers Crack Private Meeting Passwords in Minutes

https://thehackernews.com/2020/07/zoom-meeting-password-hacking.html

Cloudflare outage on July 17, 2020

https://blog.cloudflare.com/cloudflare-outage-on-july-17-2020/#:~:text=Today%20a%20configuration%20error%20in,services%20that%20lasted%2027%20minutes.&text=This%20quickly%20overwhelmed%20the%20Atlanta,to%20the%20backbone%20to%20fail.

Música da semana/mes/quinzena

Mais notícias:

Will Garmin Pay $10 Million Ransom To End Two-Day Outage?

https://www.forbes.com/sites/barrycollins/2020/07/25/will-garmin-pay-10m-ransom-to-end-two-day-outage/#e56a83164f3b

Thinking of a Cybersecurity Career? Read This

https://krebsonsecurity.com/2020/07/thinking-of-a-cybersecurity-career-read-this/

Eventos e o Corona Virus (cont.)

California tech industry gets its first big coronavirus hit: RSA Conference attendee infected, in serious condition

Noticias


Preparing for Large-Scale Remote Working in the Wake of COVID-19

Intel x86 Root of Trust: loss of trust


Descubren un fallo en contadores de luz de toda España que puede dejarte a oscuras


Musica da Semana

Over a billion Android phone worldwide unprotected from cyber threats

The Debate Around Password Rotation Policies

Eventos e o Corona Virus

Banco Central gera normas pro PIX (Sistema de transferência para substituir o TEC/DOC)

Código de segurança (CVV) de cartão de crêdito/debito dinâmico

Espionagem e a Internet vai parar

Comércio exterior do México paralisado por ransomware

Música da Semana

New Kr00k vulnerability lets attackers decrypt WiFi packets

SurfingAttack: Interactive Hidden Attack on Voice Assistants Using Ultrasonic Guided Waves 

Smart vacuum flaws could give hackers access to camera feed, say security researchers

Eventos

Notícias

Evento cancelado por causa do coronavirus

K-Pop hacking

FBI e Apple

SSH e Yubico, uma história de amor

Deepfakes e Facebook

Óculos para ir na rave ou não ser identificado por câmeras infra-vermelho?