Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: Thycotic

https://thycotic.com/

Eventos:

DEF CON 

SECTOR CFP - Our first-round Call for Papers (CFP) ends Sunday, May 2, 2021. That’s 12 days for you to get your proposals together and submitted at sector.ca/cfp. As you may have heard, SecTor 2021 will be a hybrid event taking place on November 3 and 4. This year will be our 15th annual conference.

SocStock - 15 de Junho  - On Line. 

Notícias:

Querem que a internet pare em todo lugar

https://www.nbcnews.com/politics/justice-department/texas-man-charged-planning-blow-amazon-data-center-virginia-n1263663

E, relacionado a notícia acima

Video do Keynote da CanSecWest

E falando de FBI…  removendo webshells mas deixando a porta aberta

E na mesma linha, who is watching the watchmen?

Cellebrite hax. Provavelmente a melhor notícia dos últimos tempos.

Musica: The Day the Router Died

Mais Noticias

Máquinas de sorvete hackeadas

E máquinas de fritar batatinhas tb. 

BGP Leak

Comunicação com os pesquisadores

Apple Targeted in $50 Million Ransomware Hack of Supplier Quanta

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: Thycotic - https://thycotic.com/

Eventos:

Black Hat deve abrir registration agora em Abril

CanSecWest acontecendo nas próximas semanas (cada semana um pouco de coisa)

Notícias:

Facebook says leak of 533m accounts is old news. But my date of birth, name, etc haven't changed in years, Zuck

https://www.theregister.com/2021/04/05/facebook_data_dump/

https://mashable.com/article/zuckerberg-on-signal/

E lá, a internet parou.

https://www.theguardian.com/world/2021/feb/17/myanmars-internet-shutdown-whats-going-on-and-it-crush-dissent

Ameaças a infraestruturas críticas, follow-up, acho que falamos disso há umas edições atrás.

https://newsopener.com/product-reviews/the-threat-to-the-water-supply-is-real-and-only-getting-worse/

US nuclear command agency’s gibberish tweet was sent by a child

https://grahamcluley.com/us-nuclear-command-agencys-gibberish-tweet-was-sent-by-a-child/

Musica: Accepted the Risk

https://www.youtube.com/watch?v=9IG3zqvUqJY

Mais Noticias:

Google lança seu próprio chip para Telefones e Chromebooks

https://www.engadget.com/google-silicon-whitechapel-pixel-6-170200955.html

E como falamos de VR headsets de realidade aumentada

https://www.forbes.com/sites/ginaheeb/2021/03/31/microsoft-wins-22-billion-army-contract-for-augmented-reality-headsets/?sh=5d347cda65d4

E achávamos que só com Wi-Fi já estava bom.

https://www.independent.co.uk/life-style/gadgets-and-tech/brain-computer-interface-braingate-b1825971.html

Utah contrata empresa de monitoração com AI que não tinha AI.

https://www.vice.com/amp/en/article/pkd7pk/banjo-ai-surveillance-utah-contract

Hahahahaha

https://www.nbcnews.com/science/space/first-time-scientists-find-x-rays-coming-uranus-n1262897

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: Thycotic https://thycotic.com/

Eventos: Nada não.

Noticias:

E a semana (passada) começou com o Microsoft Teams capenga.

https://www.theverge.com/2021/3/15/22332539/microsoft-teams-down-outage-connectivity-issues

E os seus pontos de fidelidade?

https://techcrunch.com/2021/03/04/sita-airline-passenger-breach/#:~:text=Global%20air%20transport%20data%20giant,U.S.%20servers%20had%20been%20breached.

(placas NViDIA com limitação pra minerar Ethereum, que falamos em uma edição passada,  são desbloqueadas acidentalmente com uma atualização do driver)

https://www.theverge.com/2021/3/16/22333544/nvidia-rtx-3060-ethereum-mining-rate-limit-unlock-driver

Receita da semana: Macarrão do Tik Tok

Tragédia do deepfake

https://blog.knowbe4.com/mom-charged-in-deepfake-cheerleading-plot

Depois do Oculos, Facebook lendo a mente das pessoas?

https://newatlas.com/vr/facebook-wrist-ar-control-neuromotor/?utm_source=tldrnewsletter

Música:  The Trooper Version Andina

South Park episode:

https://www.youtube.com/watch?v=cnYAOSrTQaI

Mais Notícias:

Trojan disfarçado de clubhouse app pra android.

https://www.zdnet.com/article/fraudsters-jump-on-clubhouse-hype-to-push-malicious-android-app/

https://9to5mac.com/2021/03/16/russia-pre-install-iphone-apple/

Na mesma linha:

Governo Britanico logando acessos a sites e etc

https://www.newsbreak.com/news/2182510178451/the-uk-is-secretly-testing-a-controversial-web-snooping-tool

Enquanto isso, China bloqueia o app Signal.

https://www.newsbreak.com/news/2183201265221/encrypted-messaging-app-signal-blocked-in-china

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: https://www.halfmouthsecurity.org/

Eventos: 

https://conference.auscert.org.au/ (11th - 14th May 2021 // The Star Hotel, Gold Coast, Australia // In person & virtual)

https://www.rsaconference.com/Events/2021-USA

(17-20 de Maio - 100% virtual)  

https://sector.ca

(1-4 de Novembro - Hibrido) 

Noticias:

https://www.securezoo.com/2021/02/microsoft-launches-phase-2-fix-for-netlogon-elevation-of-privilege-vulnerability-cve-2020-1472/

https://www.darkreading.com/threat-intelligence/microsoft-fixes-exchange-server-zero-days-exploited-in-active-attacks/d/d-id/1340305?_mc=NL_DR_EDT_DR_daily_20210303&cid=NL_DR_EDT_DR_daily_20210303&elq_mid=102440&elq_cid=34635899

https://gizmodo.com/someone-is-hacking-the-hackers-1846406428

https://therecord.media/first-fully-weaponized-spectre-exploit-discovered-online/

Música 「Dschinghis Khan」

Mais Notícias:

https://www.thetimes.co.uk/article/deepfake-videos-of-tom-cruise-watched-by-millions-tr8lkmfdk?utm_medium=Social&utm_source=Twitter#Echobox=1614620214

https://news.sky.com/story/creator-of-viral-tom-cruise-deepfake-wants-to-raise-awareness-over-trick-videos-12237680

https://www.theregister.com/2021/03/03/qualys_ransomware_clop_gang/

https://twitter.com/officialmcafee/status/1357967289862283264?s=20

https://www.imore.com/author-takes-twitter-after-breaking-icloud-true-last-name

Pergunta do ouvinte: Qual é o nome do livro sobre singularidade que eu falei

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: https://www.halfmouthsecurity.org/

Noticias:

https://arstechnica.com/information-technology/2021/02/new-malware-found-on-30000-macs-has-security-pros-stumped/

https://arstechnica.com/information-technology/2021/02/new-browser-tracking-hack-works-even-when-you-flush-caches-or-go-incognito/

https://googleprojectzero.blogspot.com/2021/02/deja-vu-lnerability.html

Música: https://www.youtube.com/watch?v=QvUqE_jGoyU

Mais Noticias:

https://www.fastcompany.com/90606386/social-media-scam-phishing-ethical-hacker

https://www.iphoneincanada.ca/news/clubhouse-leak/

https://www.media.mit.edu/projects/detect-fakes/overview/

https://www.bbc.com/news/technology-56114508

Brigadeiro de maconha:  https://www.youtube.com/watch?v=f7M9-HBBU8A

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Patrocínio: https://www.halfmouthsecurity.org/

Eventos:

Noticias:

https://pollevanhoof.be/nuggets/smart_cards/nespresso

Update do cinto de castidade

https://www.forbes.com/sites/brucelee/2021/02/06/chastity-belt-ransomware-how-hackers-held-peoples-genitals-hostage/?sh=59aa3fe792b2

Domínios hijacked

https://www.ehackingnews.com/2021/01/perlcom-official-site-for-perl.html

https://www.bleepingcomputer.com/news/security/spamcop-anti-spam-service-suffers-an-outage-after-its-domain-expired/

https://www.darkreading.com/application-security/security-researchers-push-for-bug-bounty-program-of-last-resort/d/d-id/1340081?_mc=NL_DR_EDT_DR_daily_20210208&cid=NL_DR_EDT_DR_daily_20210208&elq_mid=101978&elq_cid=34635899

https://www.forbes.com/sites/daveywinder/2021/02/05/google-chrome-update-gets-serious-hackers-already-have-high-severity-attack-code/?sh=1f2f829d30f1

Música: Bota no meu pix

Mais Noticias:

https://www.metropoles.com/brasil/economia-br/mulher-usa-pix-para-tentar-reatar-namoro-e-revela-furo-no-sistema

https://www.darkreading.com/vulnerabilities---threats/advanced-threats/microsoft-says-its-time-to-attack-your-machine-learning-models/d/d-id/1340072

https://www.zdnet.com/article/with-one-update-this-malicious-android-app-hijacked-10-million-devices/

Não necessariamente falando de segurança, mas

https://9to5mac.com/2021/02/04/apple-mixed-reality-headset/?utm_source=tldrnewsletter

https://www.ibtimes.co.in/facebook-reality-labs-working-teleporting-mark-zuckerberg-hints-it-clubhouse-chat-832897?utm_source=tldrnewsletter

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Eventos:

Não tem.

Noticias:

Bug do Kindle

https://www.vice.com/en/article/93wgzy/bugs-allowed-hackers-to-hack-kindle-accounts-with-malicious-ebooks

https://www.theregister.com/2021/01/26/qualys_sudo_bug/

https://www.zdnet.com/article/linux-mint-fixes-screensaver-bypass-discovered-by-two-kids

https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

Música: Love of my life

Mais Noticias:

https://www.schneier.com/blog/archives/2021/01/massive-brazilian-data-breach.html

e

https://tecnoblog.net/404838/exclusivo-vazamento-que-expos-220-milhoes-de-brasileiros-e-pior-do-que-se-pensava/

Solarwinds é o novo coronga

https://blog.malwarebytes.com/malwarebytes-news/2021/01/malwarebytes-targeted-by-nation-state-actor-implicated-in-solarwinds-breach-evidence-suggests-abuse-of-privileged-access-to-microsoft-office-365-and-azure-environments/

Na mesma linha:

https://www.darkreading.com/application-security/mimecast-recent-certificate-compromise-tied-to-solarwinds-attacks/d/d-id/1339984?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Mais sobre Solarwinds:

https://thehackernews.com/2021/01/heres-how-solarwinds-hackers-stayed.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29

Pauta 101

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Eventos

Noticias:

Engenharia reversa na vacina.

https://berthub.eu/articles/posts/reverse-engineering-source-code-of-the-biontech-pfizer-vaccine/

https://www.bleepingcomputer.com/news/security/hackers-leak-stolen-pfizer-covid-19-vaccine-data-online/

https://cybernews.com/news/70tb-of-parler-users-messages-videos-and-posts-leaked-by-security-researchers/

https://www.washingtonpost.com/politics/2021/01/07/cybersecurity-202-riot-capitol-is-nightmare-scenario-cybersecurity-professionals/

https://financialpost.com/pmn/business-pmn/hacking-victim-solarwinds-hires-ex-homeland-security-official-krebs-as-consultant

E a saga dos instant messengers.

Música  Despacito em Japones

Mais Noticias:

Update no cinto de castidade bluetooth

https://www.vice.com/en/article/m7apnn/your-cock-is-mine-now-hacker-locks-internet-connected-chastity-cage-demands-ransom

https://arstechnica.com/information-technology/2021/01/hackers-can-clone-google-titan-2fa-keys-using-a-side-channel-in-nxp-chips/

Malware usando Mac Address (BSSID)  para identificar roteador wifi das vítimas.

https://isc.sans.edu/diary/rss/26910

https://www.halfmouthsecurity.org/

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Convidado especial:  Cleber Brandão.

Música - Brucelose - Te quero mais

Update de Eventos

https://events.ccc.de/2020/09/04/rc3-remote-chaos-experience/#english

Noticias

https://www.vice.com/en/article/y3z5kg/apple-research-device-program-iphone-hackers

https://www.nytimes.com/2020/12/08/technology/fireeye-hacked-russians.html

https://arxiv.org/abs/2012.06884

https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino

Produção: MJ Podcasts e Comunicações

Update de Eventos

Noticias

https://canaltech.com.br/pirataria/usuarios-de-torrent-recebem-cobranca-no-valor-de-r-3-mil-no-brasil-175411/

https://threatpost.com/turkeybombing-zoom-abuse/161646/

https://www.zdnet.com/article/amazon-heres-what-caused-major-aws-outage-last-week-apologies/

Música 

Mais noticias

https://www.schneier.com/blog/archives/2020/12/manipulating-systems-using-remote-lasers.html

https://www.sans.org/blog/are-you-prepared-for-double-extortion-attacks-/

https://www.zdnet.com/article/best-gifts-for-hackers/