ISTS - i sh0t the sheriff

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Eventos: https://www.summercon.org/ https://securitybsides.com.br/2023/ Notícias: https://www.eff.org/deeplinks/2023/03/flipper-zero-devices-being-seized-brazils-telecom-agency https://techdigipro.com/how-to/casper-attack-steals-data-using-internal-air-gapped-computer-speaker/ https://www.linkedin.com/feed/update/urn:li:activity:7037622241441808384/ https://www.washingtonpost.com/nation/2023/03/14/tesla-app-unlock-strangers-car/ https://abcnews.go.com/GMA/News/video/tracking-service-inside-volkswagen-delayed-tracing-car-kidnapped-97516191 Música: https://www.youtube.com/watch?v=qkaAmfgJ60w Mais Notícias: https://www.jailbreakchat.com/ https://www.reuters.com/technology/chinese-search-giant-baidu-introduces-ernie-bot-2023-03-16/ https://www.reuters.com/technology/google-ai-chatbot-bard-offers-inaccurate-information-company-ad-2023-02-08/ https://arstechnica.com/gadgets/2023/03/samsung-says-it-adds-fake-detail-to-moon-photos-via-reference-photos/ Seção Abobrinha Inter-estelar https://www.theregister.com/AMP/2023/03/13/lockbit_spacex_ransomware/

1 hora e 4 minutos Eventos SSI (ITA) no more (?) 24th Chaos Communication Congress 2007: Call for Participation December 27th to 30th, 2007 Berlin, Germany http://events.ccc.de/congress/2007/ POC Date of POC 2007 • Date: November 15 ~ 16 • Venue: Seoul Kyoyuk MunHwa HoeKwan. POC 2007 Call for Papers (August 23, 2007) eadline of Submission: September 30, 2007 All submission must include PPT and WORD in English with your brief biography. http://www.powerofcommunity.net/notice.html Noticias Fonelista http://comercio.fonelista.com.br/cadastro.html?Submit=Incluir+meu+Telefone%21 iPhone Unlocked http://www.engadget.com/2007/08/24/iphone-unlocked-atandt-loses-iphone-exclusivity-august-24-2007/ http://www.iphonesimfree.com/ Researcher crosses swords with Google over XSS 'flaw' http://www.theregister.co.uk/2007/08/21/google_modules_security_debate/ - Assunto 1 [Dailydave] Myth: The US is more vulnerable to information warfare because it is more reliant on information technology http://lists.immunitysec.com/pipermail/dailydave/2007-August/004524.html Assunto 2 Hacking Germany's New Computer Crime Law http://www.darkreading.com/document.asp?doc_id=132255&WT.svl=news1_2

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts Some Music from: https://www.bensound.com Seção: A gente não erra mas às vezes comete pequenos equívocos: Eventos: https://www.mindthesec.com.br/call-for-papers Notícias: Hackeando o chatGPT OpenSSL Security Advisory [7th February 2023]  https://openssf.org/  Música: https://www.youtube.com/watch?v=swr719Qc2Yk  Malditos HackerEs https://globoplay.globo.com/v/11347652/ https://www.cnn.com/2023/02/12/middleeast/hackers-interrupt-iran-leader-revolution-anniversary-intl-hnk/index.html https://archive.is/DQJrE Seção Abobrinha Inter-estelar https://www.cnnbrasil.com.br/entretenimento/no-japao-peixes-de-estimacao-viralizam-por-jogar-videogame-e-fazer-compras-no-cartao-do-dono/ https://www.youtube.com/channel/UCSoTXYNzSD9f6fF2IvRVHdA https://youtu.be/upIhDDI0b8Y Dicas de streaming por pessoas de extremo e refinado bom gosto: https://www.youtube.com/watch?v=KBhJZ2qD0yM  Dica da Semana: Por favor, parem de falar errado Engine Zine Source

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: BSidesSF - CFP aberto até 1o. de Fevereiro  CanSecWest CFP ainda aberto até quando não sabemos (talvez nem eles) Roadsec CFP até 12/04 YSTS 15 Def Con CFM BlueHat Seattle - Dias 8 e 9 de Fevereiro DEF CON Trainings  Notícias:  Acabou o drama https://thehackernews.com/2023/01/millions-of-vehicles-at-risk-api.html https://www.malwarebytes.com/blog/news/2023/01/fake-flipper-zero-websites-look-to-cause-a-big-splash Música:   - Avu-Chan (Queen Bee) -- 生き続ける (Staying Alive) Japanese Cover Mais notícias: chkrootkit 0.57 is now available! (Release Date: Jan 13 2023) https://www.vice.com/en/article/wxn9vx/researchers-track-reviver-digital-license-plate-gps-location https://thehackernews.com/2023/01/researchers-uncover-3-pypi-packages.html Dica da Semana: Treinamento de grátis para desenvolvedores Livro do SpaceRogue

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: CFP BlackHat Asia (Cingapura) - até 12 de janeiro 2023 CFP CanSecWest  Notícias:  Pq ainda usam a PyPi?  Novembro Agosto Julho https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html https://www.sans.org/blog/get-ahead-of-the-five-most-dangerous-new-attack-techniques/ Música:  Mais notícias: https://www.reddit.com/r/cybersecurity/comments/yj8q14/isc2_posts_invalid_ballot_for_board_election/ Blue Tick falso FTX, irão pegar os malditos hackers? Seção Abobrinha https://olhardigital.com.br/2022/11/16/ciencia-e-espaco/dia-historico-nasa-lanca-com-sucesso-missao-artemis-1-rumo-a-lua/ Mike Tyson e Holyfield  https://www.roadandtrack.com/car-culture/a33656042/cannonball-record-broken-25-hours-39-minutes-from-nyc-to-la/

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: Como foi CyberSecurity Summit 2022, MTS, GTER 51, GTS 37, H2HC ? B-Sides SP 20/11 CFP THOTCON fecha 1 de jan CFP ShmooCon 30 de nov Livro - Jairo Willian Notícias: TOP 10 unattributed APT mysteries Cybersecurity event cancelled after scammers disrupt LinkedIn live chat Fresquinha, WhatsApp parou hoje? Música Mais notícias: Mais para uma discussão https://www.darkreading.com/careers-and-people/stress-driving-cybersecurity-professionals-rethink-roles https://www.theregister.com/2022/10/18/car_thieves_arrested_keyless_tech/ Seção Abobrinha https://www.vice.com/en/article/5d3yyq/the-chess-world-is-absolutely-losing-it-over-cheating-allegations-after-massive-upset https://www.news.com.au/finance/business/technology/tech-giant-atlassian-slammed-for-ongoing-ties-to-russia-as-it-wages-war-on-ukraine/news-story/f601981baa6b64b839b1b261a100f65b https://gizmodo.com/apple-app-store-ads-today-tab-homepage-1849694826 https://www.cisa.gov/sites/default/files/publications/June%202022%20CSAC%20Recommendations%20%E2%80%93%20TAC.pdf

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: CyberSecurity Summit  2022  DEF CON e Black Hat como foi? https://www.vice.com/en/article/88qxdz/hacker-conference-def-con-bans-pro-trump-outlet-oan https://www.theregister.com/2022/08/15/black_hat_covid/ https://hackaday.com/2022/08/14/starlink-ground-stations-successfully-hacked/ https://www.theregister.com/2022/08/16/john_deere_doom/ https://www.vice.com/en/article/y3pwqx/hackers-took-over-a-commercial-satellite-to-broadcast-hacker-movies https://defcon.outel.org/consolidated_page_split_Sat.html#AAVMV_f951fe8a642cec6da8016b461dac0b10 https://defcon.outel.org/consolidated_page_split_Fri.html#AAPLV_7ec0d25db7da7de46a596ea974018217 Notícias: https://www.cnn.com/2022/08/23/tech/twitter-whistleblower-peiter-zatko-security/index.html https://www.cnn.com/2022/08/24/tech/peiter-zatko-twitter-whistleblower-profile/index.html https://www.theguardian.com/technology/2022/aug/30/elon-musk-adds-whistleblower-claims-to-list-of-reasons-for-ending-twitter-deal https://www.theguardian.com/technology/2022/aug/29/how-to-shut-down-the-internet-and-how-to-fight-back https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html https://www.vice.com/en/article/88q8ak/kaspersky-employees-say-they-were-asked-to-resign-because-they-wanted-to-leave-russia Música:  Mais notícias: https://www.vice.com/en/article/qjkvxv/how-a-third-party-sms-service-was-used-to-take-over-signal-accounts https://www.theguardian.com/technology/2022/aug/18/apple-security-flaw-hack-iphone-ipad-macs https://nakedsecurity.sophos.com/2022/08/31/urgent-apple-quietly-slips-out-zero-day-update-for-older-iphones/ https://www.vice.com/en/article/v7veg8/anom-app-source-code-operation-trojan-shield-an0m?utm_content=bufferf67ab&utm_medium=social&utm_source=linkedin.com&utm_campaign=buffer https://spreadprivacy.com/protect-your-inbox-with-duckduckgo-email-protection/ https://www.hackread.com/cisco-confirms-breach-employee-google-account-hacked/ https://www.zdnet.com/article/lastpass-hacked/ Seção Abobrinha  https://gizmodo.com/spacex-south-korea-moon-launch-pathfinder-lunar-orbiter-1849373010 https://www.washingtonpost.com/technology/2022/08/30/spacex-t-mobile-starlink-satellite/ https://www.theverge.com/2022/8/30/23329610/royal-caribbean-spacex-starlink-cruise-ships-celebrity-silversea https://olhardigital.com.br/2022/08/30/reviews/iphone-14-pode-ter-conectividade-via-satelite-mas-isso-depende-de-acordos/ https://www-vice-com.cdn.ampproject.org/c/s/www.vice.com/amp/en/article/akek8e/walmart-30tb-ssd-hard-drive-scam-sd-cards https://www.forbes.com/sites/richardnieva/2022/08/18/tiktok-in-app-browser-research

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: DEF CON e Black Hat chegando Notícias: Johnny Fat Fingers no Canadá https://www.darkreading.com/iot/unpatched-gps-tracker-security-bugs-disruption https://tech.slashdot.org/story/22/07/18/0433238/report-facebook-has-started-encrypting-links-to-counter-browsers-anti-tracking-measures Mais notícias: Seria verdade? Malditos Hackers Relacionado a ultima noticia acima Seção Abobrinha Aeroespacial https://www.vice.com/en/article/93abw3/nasa-rover-discovers-weird-clump-of-string-on-mars https://www.vice.com/en/article/xgydzw/fedex-support-employee-on-twitter-sorry-we-lost-your-dead-body

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: YSTS BHack Ingressos a venda Evento tech, não exatamente de segurança Notícias: https://thehackernews.com/2022/05/attackers-can-use-electromagnetic.htm https://www.infosecurity-magazine.com/news/evil-corp-changes-ransomware/ https://www.bleepingcomputer.com/news/security/mandiant-no-evidence-we-were-hacked-by-lockbit-ransomware/ https://www.darkreading.com/threat-intelligence/mandia-keep-shields-up-to-survive-the-current-escalation-of-cyberattacks?_mc=NL_DR_EDT_DR_daily_20220608&cid=NL_DR_EDT_DR_daily_20220608&sp_aid=111122&elq_cid=34635899&sp_eh=cc1532bb1a740047a430b84b126dac15ea5c1eee9dcf92b46e734cc987bafd4f&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_06.08.22&sp_cid=45166&utm_content=DR_NL_Dark%20Reading%20Daily_06.08.22 Música Mais notícias: https://thehackernews.com/2022/06/atlassian-releases-patch-for-confluence.html https://www.darkreading.com/threat-intelligence/an-emerging-threat-attacking-5g-via-network-slices?_mc=NL_DR_EDT_DR_daily_20220608&cid=NL_DR_EDT_DR_daily_20220608&sp_aid=111122&elq_cid=34635899&sp_eh=cc1532bb1a740047a430b84b126dac15ea5c1eee9dcf92b46e734cc987bafd4f&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_06.08.22&sp_cid=45166&utm_content=DR_NL_Dark%20Reading%20Daily_06.08.22 https://g1.globo.com/mg/minas-gerais/bom-dia-minas/video/hacker-invade-painel-de-publicidade-e-exibe-video-porno-em-montes-claros-10628370.ghtml https://g1.globo.com/rj/rio-de-janeiro/noticia/2022/05/27/paineis-de-aeroporto-sao-hackeados.ghtml Seção Abobrinha Aeroespacial https://g1.globo.com/inovacao/noticia/2022/06/06/brasileiro-no-espaco-perguntas-e-respostas-sobre-voo-da-blue-origin.ghtml https://www.space.com/spacex-starship-deploy-starlink-satellites-pez-dispenser https://www.virgingalactic.com/sign-up

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: https://www.roadsec.com.br/ https://www.cybersecuritysummit.com.br/ https://www.mindthesec.com.br/mts-22 Notícias: A guerra e o cyber Mailchimp Leak Dica da Semana: O tapa do Will Smith E como já falamos antes, não saia scaneando QR codes Como disse o Nelson, escolha para quem vc vende sua privacidade Música:  Mais Noticias: Lapsus$ Então? No final, o que aconteceu? https://blog.checkpoint.com/2022/03/22/lapsuss-okta-the-cyber-attacks-continue/ E o que já falamos de MFA Seção Abobrinha Elon investe no twitter e ganha assento no board. https://www.sciencealert.com/some-people-are-mixing-their-psychedelics-with-digital-drugs-and-it-s-all-a-bit-weird https://www.bbc.com/news/world-us-canada-10668480 Nova especialidade do Nelson Murilo

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos https://www.virusbulletin.com/conference/vb2022/call-papers1/ VB2022 will take place in Prague, Czech Republic, from 28 to 30 September 2022. BHAck - 26 e 27 de Novembro, Belo Horizonte.  Notícias: https://www.elindependiente.com/economia/2022/02/28/telefonica-crea-el-primer-puesto-directivo-para-el-metaverso-y-pone-al-frente-a-yaiza-rubio/ https://www.vice.com/en/article/akvya5/russian-electric-vehicle-chargers-hacked-tell-users-putin-is-a-dickhead?utm_source=email&utm_medium=editorial&utm_content=tech&utm_campaign=220228 https://www.armis.com/research/tlstorm/ "Meu dados vazaram e tudo que eu tenho é essa camiseta" Música: https://www.youtube.com/watch?v=NxeybUo7whY Mais Noticias: https://www.itsecurityguru.org/2022/03/16/german-government-warns-against-using-kaspersky/?utm_source=feedly&utm_medium=rss&utm_campaign=german-government-warns-against-using-kaspersky https://nakedsecurity.sophos.com/2022/03/16/russian-actors-bypass-2fa-story-what-happened-and-how-to-avoid-it/ https://arstechnica.com/information-technology/2022/03/researcher-uses-600-year-old-algorithm-to-crack-crypto-keys-found-in-the-wild/ https://www.schneier.com/blog/archives/2022/03/breaking-rsa-through-insufficiently-random-primes.html Seção Abobrinha https://interestingengineering.com/elon-musk-starlink-satellite-ukraine https://www.teslarati.com/elon-musk-starlink-ukraine-most-downloaded-app https://www.nytimes.com/2022/03/15/us/politics/submarine-spy-brazil.html

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos Wicked6.com Notícias: SuperBowl QR Code https://www.vice.com/en/article/k7wpax/freedom-convoy-givesendgo-donors-leaked Google Project Zero Dica da Semana: https://www.kaspersky.com/blog/webkit-vulnerability-cve-2022-22620/43650/ E-Book da OCC com 50 tipos de golpes digitais Música:  Mais Noticias: Experts Warn of Hacking Group Targeting Aviation and Defense Sectors BGP Hijack https://www.darkreading.com/vulnerabilities-threats/google-paid-record-8-7-million-to-bug-hunters-in-2021 Apple moves to stop AirTag tracking misuse Um bilhão de máquinas de cartão num estalar de dedos:  Seção Abobrinha https://www.engadget.com/spacex-all-civilian-spacewalk-starship-flight-165202465.html https://www.theverge.com/2022/2/16/22935861/uber-five-star-rating-breakdown-customers-privacy?scrolla=5eb6d68b7fedc32c19ef33b4

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos YSTS CFP https://nullbyte-con.org/ Bsides Vancouver Virtual - CFP open.  Seção Obituário: Morreu pero no mucho Notícias: E o log4j deu o ar da graça, mas para a versão 1.x que está descontinuada desde 2015. NSO volta ao foco  Segundo problema no validador de passaporte da vacina DATASUS em uma semana.  Joe Grand recupera crypto wallet 19 anos do aniversário do Slammer North Korea Hacker Dicas da Semana: Tem um iPhone? Já o atualizou desde a semana passada? Outra dica A óbvia dica meu caro Watson Música:  Mais Noticias: https://news.ycombinator.com/item?id=30150343 https://www.vice.com/en/article/y3vbjj/pirates-spammed-an-infamous-soviet-short-wave-radio-station-with-memes-uvb-76 Receita da Semana: https://www.mcdonalds.com/us/en-us/menu-hacks.html Seção Abobrinha Tesla Karaoke Robotaxi Windows fast Update

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Seção: A gente não erra mas às vezes comete pequenos equívocos: O nome da jurada do AlterEgo era Alanis Morissette e não Celine Dion.  Eventos ShmooCon - adiada para Março RSA - adiada para Junho CanSecWest - Adiada para 18-20 de Maio Infiltrate - ainda prevista para final de março https://nullcon.net/berlin-2022/cfp/ https://pancakescon.com/2022-conference-information/ https://www.microsoft.com/bluehat/il/cfp/ YSTS CFP  Seção Obituário: Blackberry Notícias: Estamos a 21 dias sem uma nova CVE pro log4j Indução (?)  do Dan Kaminski no Internet Hall of Fame Desafios da Alexa MS Pluton Ransom.wiki (Have they been ransomware'd?)  Dica da Semana: Música:  (Black Dog em Filandes)  Mais Noticias: Norton Crypto Mining Hackers Printing Manifestos Signal CEO Seção Abobrinha Samsung Eco Remote Twitter Reactions Amazon Teams Walkie Talkie Mais um que ouve o ISTS Receita da Semana: Dicas de streaming por pessoas de extremo e refinado bom gosto:  Red Notice - Netflix 

Roteiro: Luiz Eduardo, Nelson Murilo, Willian Caprino Produção: Halfmouth Podcasts  Some Music from: https://www.bensound.com Eventos: Reveillon DEF CON Discord Notícias: Mas não foi só nos Estados Unidos que deu problema. SaferNet tbm. Telefones do Departamento do Estado Norte-Americano infectados pelo Pegasus. Dica da Semana: Tem um iPhone? Faça uns ajustes da configuração para ficar menos exposto. Música:  Mas tem que ver o vídeo Mais Noticias: Ferramenta wireless versão millennial do Beholder. Unidade de CyberSec do Reino Unido compartilha 585 milhoes de senhas vazadas com o site Have I Pwned  Log4JJJJJJJ Seção Abobrinha: https://fortune.com/2021/12/08/ralph-lauren-digital-fashion-line-roblox-metaverse/ https://www.adidas.com/into_the_metaverse https://www.reuters.com/markets/us/musk-says-tesla-will-accept-dogecoin-merchandise-2021-12-14/