Link & Recomendações 

• The CrowdStrike Outage Was Bad, but It Could Have Been Worse https://www.darkreading.com/vulnerabilities-threats/crowdstrike-outage-was-bad-could-have-been-worse

• Palo Alto Networks Announces Agreement to Acquire CyberArk, the Identity Security Leader https://www.cyberark.com/press/palo-alto-networks-announces-agreement-to-acquire-cyberark/

• AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown https://thehackernews.com/2025/08/ai-generated-malicious-npm-package.html

• A New Chapter for AI and Cybersecurity: SentinelOne Acquires Prompt Security https://www.sentinelone.com/blog/a-new-chapter-for-ai-and-cybersecurity-sentinelone-acquires-prompt-security

• Integrated development environment https://survey.stackoverflow.co/2023/#most-popular-technologies-new-collab-tools

• Decepticon - Vibe Hacking Agent ⁠https://github.com/PurpleAILAB/Decepticon⁠

Link & Recomendações 

• Linkedin do Filipi Pires https://www.linkedin.com/in/filipipires

• Magic Quadrant for Endpoint Protection Platforms https://www.gartner.com/doc/reprints?id=1-2LGE96J2&ct=250715&st=sb

• Lessons Learned From McDonald's Big AI Flub https://www.darkreading.com/application-security/lessons-learned-mcdonalds-ai-flub

• Proteção de credenciais: lições do ataque à C&M https://segura.security/pt-br/post/protecao-de-credenciais-licoes-do-ataque-a-c-m

• awspx https://github.com/ReversecLabs/awspx

• Identiverse  https://identiverse.com/ 

• Links de referência

• Linkedin do Felipe Costa https://www.linkedin.com/in/felipe-dacosta/

• GitHub: https://github.com/felipecosta09

• X: https://x.com/devsecguy
• Artigos: https://medium.com/@devsecguy
• Ultimo artigo https://www.linkedin.com/pulse/vision-one-mcp-democratizing-platform-access-ai-felipe-costa-nlj4c/

Neste episódio Raphael Bottino e Tales Casagrande falam sobre as principais funcionalidades de segurança da AWS e o que rolou no re:Inforce 2025, ficou curioso? Dá o play :) 

Links de referência

• AWS re:Inforce roundup 2025: top announcements https://aws.amazon.com/pt/blogs/aws/aws-reinforce-roundup-2025-top-announcements/

• Amazon Inspector Code Security https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments.html

• How to migrate your AWS CodeCommit repository to another Git provider https://aws.amazon.com/pt/blogs/devops/how-to-migrate-your-aws-codecommit-repository-to-another-git-provider/

• AWS Certified Security - Specialty - ⁠https://aws.amazon.com/certification/certified-security-specialty⁠
• Linkedin do Bruno https://www.linkedin.com/in/bruno-silva-goncalves-lima/
• Curso do Bruno https://www.udemy.com/course/formacao-datadog/

Threat Hunting não é para qualquer um! Raphael Bottino e Tales Casagrande conversam com Lucas de Assis para explorar os desafios de analisar ameaças em um ambiente tempestuoso como a nuvem.

Link & Recomendações 

• Linkedin do Lucas https://www.linkedin.com/in/lucasdeassis/

• Sigma pra Cloud: https://github.com/SigmaHQ/sigma/tree/master/rules/cloud 
• S3 Ransomware Simulator: ⁠https://github.com/raphabot/s3-ransomware-simulator⁠

• Invictus IR: https://www.invictus-ir.com/ 

• Understanding CloudTrail Events: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-events.html 

• Stratus Red Team: https://github.com/DataDog/stratus-red-team 

Neste episódio Raphael Bottino e Tales Casagrande discutem sobre os relatórios de Segurança, quem nunca leu um relatório que era mais sobre vendas de ferramentas do que levar um conteúdo técnico sobre segurança, vamos analisar e falar sobre alguns relatórios e extrair o suco da informação! Dá o play :)

Chegou a hora do momento mais esperado de todos os tempos.. temos o nosso primeiro convidado! Neste episódio Raphael Bottino e Tales Casagrande se juntam ao Antonio Firmiano e discutem sobre Como AI Agêntica Muda o Panorama de Segurança e dicas revolucionárias que vão resolver todos os seus problemas (sqn)!

Link & Recomendações 

• Model-Driven Dependency Confusion ​​https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

• Explicacao de MCP vs API: ⁠⁠https://medium.com/@elisowski/mcp-explained-the-new-standard-connecting-ai-to-everything-79c5a1c98288⁠⁠

• GitHub Copilot Agent: https://github.blog/news-insights/product-news/github-copilot-meet-the-new-coding-agent/

• Google Jules: https://jules.google/ 

• Agno https://docs.agno.com/introduction

• Papers de Agentic AI https://ia600601.us.archive.org/15/items/google-ai-agents-whitepaper/Newwhitepaper_Agents.pdf
• Anthropic https://www.anthropic.com/engineering/building-effective-agents
• OpenAi https://cdn.openai.com/business-guides-and-resources/a-practical-guide-to-building-agents.pdf⁠ 

Siga o Antonio Firmiano para saber mais sobre o seu projeto https://www.linkedin.com/in/antonio-firmiano-gomes/

Neste episódio Raphael Bottino e Tales Casagrande falam sobre Hanson Ransom no S3. Sabia que a nuvem traz novos desafios quanto a proteção de Ransomware? Dá o play aí, prometo que ninguém vai cantar no seu ouvido. 🌚

• Links de referência

• https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c

• https://raphabot.medium.com/simulating-detecting-and-responding-to-s3-ransomware-attacks-9f85b2a97086?source=friends_link&sk=712f94cf48b7bc46aa29aa652efacaab 

• https://www.sentinelone.com/blog/the-state-of-cloud-ransomware-in-2024/

• https://www.trendmicro.com/en_us/research/24/j/fake-lockbit-real-damage-ransomware-samples-abuse-aws-s3-to-stea.html

• https://repost.aws/knowledge-center/potential-account-compromise

Neste episódio Raphael Bottino e Tales Casagrande falam sobre construção, pilares mas não é construção civil é nuvem! Dá o play ai :)

• Links de referência

• AWS Well Architected Framework: https://aws.amazon.com/architecture/well-architected/ 

• AWS Well-Architected Tool https://aws.amazon.com/pt/well-architected-tool/

• Azure Well-Architected Framework: https://learn.microsoft.com/en-us/azure/well-architected/

• Azure Well-Architected Review https://learn.microsoft.com/en-us/assessments/azure-architecture-review/

• Google Cloud Well-Architected Framework:  https://cloud.google.com/architecture/framework

• OCI Well-Architected Framework: https://docs.oracle.com/en/solutions/oci-best-practices/index.html 

• OCI Well-Architected Assessment https://well-architected.oracle.com/apex/r/owwa/well-architected-assessment/home

• Uma analogia sobre o AWS Well-Architected Framework https://medium.com/@100HnoMeuNome/uma-analogia-sobre-o-aws-well-architected-framework-237449062823

• Mapa do AWS Well Architected https://wa.aws.amazon.com/wat.map.en.html

• Well Architected Labs: https://www.wellarchitectedlabs.com/ 

• Skill Builder - AWS Well-Architected Foundations: https://explore.skillbuilder.aws/learn/courses/108/aws-well-architected-foundations 

  
  

• Recomendações

• Bottino: https://www.thefrugalarchitect.com/ 

• Tales: https://github.com/infracost/infracost

  
  

Neste episódio Raphael Bottino e Tales Casagrande falam sobre jornada para nuvem, pizza e o modelo de responsabilidade compartilhada! Mas me responde, qual o seu sabor favorito de pizza?

Referência

• PaaS x IaaS x SaaS x CaaS: qual é a diferença entre elas? ⁠https://cloud.google.com/learn/paas-vs-iaas-vs-saas?hl=pt-BR⁠

• Understanding Cloud Misconfigurations — With Pizza and Lego ⁠https://www.trendmicro.com/en_us/research/21/b/understanding-cloud-misconfigurations-with-pizza-and-lego.html⁠

• HashiCorp 2024 State of Cloud Strategy Survey ⁠https://www.hashicorp.com/pt/state-of-the-cloud⁠

• Modelo de arquitetura do Google Cloud ⁠https://cloud.google.com/architecture/framework?hl=pt-br⁠

• AWS Well-Architected  ⁠https://aws.amazon.com/pt/architecture/well-architected/⁠

• Azure Well-Architected Framework ⁠https://learn.microsoft.com/en-us/azure/well-architected⁠

• Oracle Acknowledges Data Breach and Starts Informing Affected Clients ⁠⁠https://cybersecuritynews-com.cdn.ampproject.org/c/s/cybersecuritynews.com/oracle-acknowledges-data-breach/amp/⁠⁠

• What is lift and shift cloud migration? ⁠⁠⁠https://www.pluralsight.com/resources/blog/business-and-leadership/what-is-lift-and-shift-cloud-migration⁠⁠⁠

  
  

  Links das Indicações:

  
  

• AWS Cloud Quest: Cloud Practitioner ⁠https://explore.skillbuilder.aws/learn/courses/11458/aws-cloud-quest-cloud-practitioner/lessons/42651/play-cloud-quest-cloud-practitioner⁠

• Manual de DevOps: Como Obter Agilidade, Confiabilidade e Segurança em Organizações Tecnológicas ⁠https://a.co/d/2qm3fpq