{"users":[{"id":1,"username":"Grego","name":"","avatar_template":"/user_avatar/www.yodev.dev/grego/{size}/649_2.png","admin":true,"moderator":true,"trust_level":4},{"id":7,"username":"Devy","name":"","avatar_template":"/user_avatar/www.yodev.dev/devy/{size}/62_2.png","admin":true,"trust_level":2},{"id":82,"username":"Team","name":null,"avatar_template":"/user_avatar/www.yodev.dev/team/{size}/2092_2.png","admin":true,"trust_level":2}],"primary_groups":[],"flair_groups":[],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/cybersecurity/16?page=1","per_page":30,"top_tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":369,"name":"claude-code","slug":"claude-code"},{"id":686,"name":"cve","slug":"cve"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":289,"name":"npm","slug":"npm"},{"id":366,"name":"open-source","slug":"open-source"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":126,"name":"noticias","slug":"noticias"},{"id":279,"name":"security","slug":"security"},{"id":27,"name":"ia","slug":"ai"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":474,"name":"codex","slug":"codex"},{"id":151,"name":"cursor","slug":"cursor"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":2,"name":"javascript","slug":"javascript"},{"id":522,"name":"malware","slug":"malware"},{"id":275,"name":"mcp","slug":"mcp"},{"id":191,"name":"openai","slug":"openai"},{"id":743,"name":"owasp","slug":"owasp"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":499,"name":"plugins","slug":"plugins"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"},{"id":480,"name":"railway","slug":"railway"},{"id":444,"name":"yodev","slug":"yodev"},{"id":1290,"name":"actualizar-php","slug":"actualizar-php"}],"topics":[{"fancy_title":"About the Cybersecurity category","fancy_title_localized":false,"locale":null,"id":68,"title":"About the Cybersecurity category","slug":"about-the-cybersecurity-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-07-06T22:52:18.294Z","last_posted_at":"2025-07-06T22:52:18.299Z","bumped":true,"bumped_at":"2025-07-06T22:54:06.888Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Las últimas noticias sobre detección y protección contra amenazas.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[],"tags_descriptions":{},"views":8,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"PHP2Shell: como saber se explodiram seu servidor com um único grep (e por que seu access.log não encontra)","fancy_title_localized":true,"locale":"es","id":5751,"title":"PHP2Shell: cómo saber si explotaron tu servidor con un solo grep (y por qué tu access.log no lo encuentra)","slug":"php2shell-como-saber-si-explotaron-tu-servidor-con-un-solo-grep-y-por-que-tu-access-log-no-lo-encuentra","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/658b85d6677967892d55074a47dfc1ddec10e065.jpeg","created_at":"2026-10-23T12:03:37.546Z","last_posted_at":"2026-10-23T12:03:37.770Z","bumped":true,"bumped_at":"2026-10-23T12:03:37.770Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Para saber se explodiram PHP2Shell no seu servidor, a AWS publicou apenas uma assinatura: requisições POST com PHP_SESSION_UPLOAD_PROGRESS no corpo, desde 17 de outubro. O problema é que em um servidor nginx ou Apache com a…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":896,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/658b85d6677967892d55074a47dfc1ddec10e065.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":345,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/658b85d6677967892d55074a47dfc1ddec10e065_2_620x345.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":444,"name":"yodev","slug":"yodev"},{"id":346,"name":"aws","slug":"aws"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":1308,"name":"apache","slug":"apache"},{"id":1307,"name":"nginx","slug":"nginx"},{"id":1306,"name":"logs","slug":"logs"}],"tags_descriptions":{},"views":10,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"CVE-2026-109618 e CVE-2026-109619: qual versão do PHP você precisa e quando sai o patch","fancy_title_localized":true,"locale":"es","id":5732,"title":"CVE-2026-109618 y CVE-2026-109619: qué versión de PHP necesitas y cuándo sale el parche","slug":"cve-2026-109618-y-cve-2026-109619-que-version-de-php-necesitas-y-cuando-sale-el-parche","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_1024x576.jpeg","created_at":"2026-10-21T11:40:44.653Z","last_posted_at":"2026-10-21T11:40:44.936Z","bumped":true,"bumped_at":"2026-10-21T11:40:44.936Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A versão do PHP que corrige CVE-2026-109618 e CVE-2026-109619 será conhecida na quarta-feira, 21 de outubro de 2026 às 14:00 UTC, quando a equipe de segurança do PHP publicar o patch. Enquanto isso, você já pode verificar…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1600,"height":900,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_620x348.jpeg"}],"tags":[{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":1291,"name":"seguridad-web","slug":"seguridad-web"},{"id":1290,"name":"actualizar-php","slug":"actualizar-php"}],"tags_descriptions":{},"views":39,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Como saber se um plugin do Claude Code é seguro? Testamos ModVet, o scanner que o verifica antes de instalá-lo","fancy_title_localized":true,"locale":"es","id":5728,"title":"¿Cómo saber si un plugin de Claude Code es seguro? Probamos ModVet, el escáner que lo revisa antes de instalarlo","slug":"como-saber-si-un-plugin-de-claude-code-es-seguro-probamos-modvet-el-escaner-que-lo-revisa-antes-de-instalarlo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_1024x512.png","created_at":"2026-10-20T19:48:43.379Z","last_posted_at":"2026-10-20T19:48:43.716Z","bumped":true,"bumped_at":"2026-10-20T19:48:43.716Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Para saber se um plugin do Claude Code é seguro, revise o que ele vai executar antes de instalá-lo: seus hooks, seus mods, seus servidores MCP e sua pasta bin/, porque tudo isso roda na sua máquina com suas permissões de usuári…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_620x310.png"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":369,"name":"claude-code","slug":"claude-code"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":499,"name":"plugins","slug":"plugins"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"},{"id":1284,"name":"mods","slug":"mods"},{"id":743,"name":"owasp","slug":"owasp"}],"tags_descriptions":{},"views":19,"like_count":1,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"O dsh-our-free-model é seguro? O que descobrimos ao analisar o código do plugin “gratuito” para DeepSeek Harness.","fancy_title_localized":true,"locale":"es","id":5723,"title":"¿Es seguro dsh-our-free-model? Lo que encontramos al leer el código del plugin “gratis” para DeepSeek Harness","slug":"es-seguro-dsh-our-free-model-lo-que-encontramos-al-leer-el-codigo-del-plugin-gratis-para-deepseek-harness","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-10-20T00:31:09.300Z","last_posted_at":"2026-10-20T00:31:09.537Z","bumped":true,"bumped_at":"2026-10-20T00:31:09.537Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Não é seguro carregá-lo junto com suas próprias credenciais: dsh-our-free-model, um plugin independente para DeepSeek Harness que promete modelos de fronteira gratuitos, sem conta e sem API key, obtém esses modelos das camadas g…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":1019,"name":"open-code","slug":"open-code"},{"id":499,"name":"plugins","slug":"plugins"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":194,"name":"deepseek","slug":"deepseek"},{"id":1006,"name":"deepseek-harness","slug":"deepseek-harness"}],"tags_descriptions":{},"views":25,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Next.js 16.4.1 e 15.5.28 corrigem dois RCEs críticos: como saber se seu app está exposto","fancy_title_localized":true,"locale":"es","id":5708,"title":"Next.js 16.4.1 y 15.5.28 corrigen dos RCE críticas: cómo saber si tu app está expuesta","slug":"next-js-16-4-1-y-15-5-28-corrigen-dos-rce-criticas-como-saber-si-tu-app-esta-expuesta","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_1024x576.png","created_at":"2026-10-17T18:19:46.396Z","last_posted_at":"2026-10-17T18:19:46.633Z","bumped":true,"bumped_at":"2026-10-17T18:19:46.633Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A Vercel publicou Next.js 16.4.1 e 15.5.28 em 14 de outubro de 2026 para corrigir duas vulnerabilidades críticas de execução remota de código (RCE) sem autenticação e uma negação de serviço de alta severidade. Que seu ap…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1600,"height":900,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_1024x576.png"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_620x348.png"}],"tags":[{"id":105,"name":"react","slug":"react"},{"id":686,"name":"cve","slug":"cve"},{"id":289,"name":"npm","slug":"npm"},{"id":634,"name":"nextjs","slug":"nextjs"},{"id":1268,"name":"rce","slug":"rce"},{"id":1267,"name":"vulnerabilidad","slug":"vulnerabilidad"}],"tags_descriptions":{},"views":35,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Seu projeto usa uma versão vulnerável do Handlebars? Como verificar e atualizar para a 4.7.10","fancy_title_localized":true,"locale":"es","id":5647,"title":"¿Tu proyecto usa una versión vulnerable de Handlebars? Cómo comprobarlo y actualizar a 4.7.10","slug":"tu-proyecto-usa-una-version-vulnerable-de-handlebars-como-comprobarlo-y-actualizar-a-4-7-10","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_1024x512.png","created_at":"2026-10-11T13:27:44.835Z","last_posted_at":"2026-10-11T13:27:45.096Z","bumped":true,"bumped_at":"2026-10-11T13:27:45.096Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Se seu projeto tem Handlebars 4.0.0 a 4.7.9 em qualquer lugar da árvore de dependências, está usando uma versão vulnerável: a 4.7.10 corrige dois falhas críticas de injeção de JavaScript. A versão foi lançada em 5 de outubro d…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_620x310.png"}],"tags":[{"id":2,"name":"javascript","slug":"javascript"},{"id":5,"name":"nodejs","slug":"nodejs"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":289,"name":"npm","slug":"npm"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":1249,"name":"npm-audit","slug":"npm-audit"},{"id":1248,"name":"handlebars","slug":"handlebars"}],"tags_descriptions":{},"views":37,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"O crash do Firebase no iOS: o que aconteceu e por que desativar Analytics não protegeu seu app","fancy_title_localized":true,"locale":"es","id":5486,"title":"El crash de Firebase en iOS: qué pasó y por qué desactivar Analytics no protegió tu app","slug":"el-crash-de-firebase-en-ios-que-paso-y-por-que-desactivar-analytics-no-protegio-tu-app","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_1024x576.jpeg","created_at":"2026-09-29T11:30:19.607Z","last_posted_at":"2026-09-29T11:30:19.769Z","bumped":true,"bumped_at":"2026-09-29T11:30:19.769Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"O crash do Firebase no iOS de 29 de setembro não foi causado pelo seu código: foi causado por uma resposta malformada que o Google Analytics for Firebase enviou de seus servidores, e que fechava os apps ao abrir. O Google corre…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_620x348.jpeg"}],"tags":[{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":614,"name":"firebase","slug":"firebase"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":1054,"name":"ios","slug":"ios"},{"id":1192,"name":"crash","slug":"crash"},{"id":1191,"name":"google-analytics","slug":"google-analytics"}],"tags_descriptions":{},"views":93,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Ghidra: como analisar um programa sem ter seu código-fonte","fancy_title_localized":true,"locale":"es","id":5365,"title":"Ghidra: cómo analizar un programa sin tener su código fuente","slug":"ghidra-como-analizar-un-programa-sin-tener-su-codigo-fuente","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_1024x512.png","created_at":"2026-09-16T19:53:18.271Z","last_posted_at":"2026-09-16T19:53:18.416Z","bumped":true,"bumped_at":"2026-09-16T19:53:18.416Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Ghidra permite analisar programas compilados sem ter seu código-fonte: você pode examinar suas instruções, descompilar funções e explorar sua lógica.\nResulta útil quando uma investigação te leva a um binário: um eix…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_620x310.png"}],"tags":[{"id":1131,"name":"descompilacion","slug":"descompilacion"},{"id":1130,"name":"analisis-de-binarios","slug":"analisis-de-binarios"},{"id":1129,"name":"ingenieria-inversa","slug":"ingenieria-inversa"},{"id":1128,"name":"ghidra","slug":"ghidra"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"Team","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":82,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Como auditar a segurança do seu código com IA usando a skill que a Cloudflare liberou","fancy_title_localized":true,"locale":"es","id":5358,"title":"Cómo auditar la seguridad de tu código con IA usando el skill que liberó Cloudflare","slug":"como-auditar-la-seguridad-de-tu-codigo-con-ia-usando-el-skill-que-libero-cloudflare","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_1024x512.png","created_at":"2026-09-16T17:41:38.280Z","last_posted_at":"2026-09-16T17:41:38.411Z","bumped":true,"bumped_at":"2026-09-16T17:41:38.411Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Agora você já pode auditar a segurança do seu código com IA usando o security-audit, a skill MIT que a Cloudflare usou como base do seu harness interno de vulnerabilidades. Ela é instalada com um único npx skills add e f…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/32cff621bb85918d02879c3f738d520221c9779e.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_620x310.png"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":460,"name":"skills","slug":"skills"},{"id":482,"name":"cloudflare","slug":"cloudflare"},{"id":563,"name":"agent-skills","slug":"agent-skills"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":1127,"name":"auditoria-de-seguridad","slug":"auditoria-de-seguridad"}],"tags_descriptions":{},"views":44,"like_count":0,"has_summary":false,"last_poster_username":"Team","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":82,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OpenAI liberou sua CLI de segurança: assim você a coloca para escanear seu repositório e cortar seu CI","fancy_title_localized":true,"locale":"es","id":4157,"title":"OpenAI liberó su CLI de seguridad: así lo pones a escanear tu repo y a cortar tu CI","slug":"openai-libero-su-cli-de-seguridad-asi-lo-pones-a-escanear-tu-repo-y-a-cortar-tu-ci","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_1024x512.png","created_at":"2026-07-30T14:17:29.158Z","last_posted_at":"2026-07-30T14:17:29.326Z","bumped":true,"bumped_at":"2026-07-30T14:17:29.326Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"OpenAI liberou sua CLI de segurança: assim você a coloca para escanear seu repo e cortar seu CI\nDurante um mês, o issue #29878 em openai/codex ficou aberto com uma observação incômoda em anexo. Codex CLI é Apache-2.0, todo o pr…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_620x310.png"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":474,"name":"codex","slug":"codex"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":191,"name":"openai","slug":"openai"},{"id":428,"name":"cli","slug":"cli"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":975,"name":"sarif","slug":"sarif"}],"tags_descriptions":{},"views":40,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"VulnHunter: Como Colocar o Caçador de Vulnerabilidades da Capital One para Trabalhar no Seu Próprio Repositório","fancy_title_localized":true,"locale":"es","id":3917,"title":"VulnHunter: Cómo Poner el Cazador de Vulnerabilidades de Capital One a Trabajar Sobre Tu Propio Repo","slug":"vulnhunter-como-poner-el-cazador-de-vulnerabilidades-de-capital-one-a-trabajar-sobre-tu-propio-repo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_1024x512.png","created_at":"2026-07-19T14:45:17.855Z","last_posted_at":"2026-07-19T14:45:18.016Z","bumped":true,"bumped_at":"2026-07-19T14:45:18.016Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"VulnHunter: Como Colocar o Caçador de Vulnerabilidades da Capital One para Trabalhar no Seu Próprio Repositório\nPor Devy · Categoria: Cybersecurity para devs + AI coding tools · Com nota estratégica de Grego\nHá uma diferença eno…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_620x310.png"}],"tags":[{"id":27,"name":"ia","slug":"ai"},{"id":55,"name":"devops","slug":"devops"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":279,"name":"security","slug":"security"},{"id":540,"name":"appsec","slug":"appsec"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":951,"name":"vulnhunter","slug":"vulnhunter"}],"tags_descriptions":{},"views":48,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"GhostApproval: A vulnerabilidade que forçou atualização do Cursor, Claude Code e outros agentes de programação","fancy_title_localized":true,"locale":"es","id":3691,"title":"GhostApproval: La Vulnerabilidad que Obligó a Actualizar Cursor, Claude Code y Otros Coding Agents","slug":"ghostapproval-la-vulnerabilidad-que-obligo-a-actualizar-cursor-claude-code-y-otros-coding-agents","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_1024x682.jpeg","created_at":"2026-07-10T17:52:48.500Z","last_posted_at":"2026-07-10T17:52:48.703Z","bumped":true,"bumped_at":"2026-07-10T17:52:48.703Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Durante anos aprendemos a desconfiar dos anexos. \nDepois dos pacotes npm. \nMais tarde das imagens Docker. \nAgora apareceu uma nova categoria de risco: \nos repositórios que você abre com um coding a…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_620x413.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":151,"name":"cursor","slug":"cursor"},{"id":359,"name":"ai-agents","slug":"ai-agents"},{"id":444,"name":"yodev","slug":"yodev"},{"id":279,"name":"security","slug":"security"},{"id":933,"name":"ghost-approval","slug":"ghost-approval"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Agentjacking: quando seu coding agent é a nova superfície de ataque","fancy_title_localized":true,"locale":"es","id":3279,"title":"Agentjacking: cuando tu coding agent es la nueva superficie de ataque","slug":"agentjacking-cuando-tu-coding-agent-es-la-nueva-superficie-de-ataque","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_1024x1024.jpeg","created_at":"2026-06-14T20:04:01.663Z","last_posted_at":"2026-06-14T20:04:01.790Z","bumped":true,"bumped_at":"2026-06-14T20:04:01.790Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Grego — Segurança Cibernética\nDurante anos, asseguramos o pipeline de desenvolvimento fazendo uma única pergunta: quem está autorizado a fazer isso? Firewalls, EDR, IAM, WAF — toda a pilha está construída para bloquear o não …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1254,"height":1254,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/51de3c196978a833475c73792b8b8c477fc3a172.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_1024x1024.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_500x500.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":275,"name":"mcp","slug":"mcp"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":757,"name":"coding-agents","slug":"coding-agents"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"}],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Bumblebee: por que a Perplexity abriu seu playbook de segurança interno","fancy_title_localized":true,"locale":"es","id":3211,"title":"Bumblebee: por qué Perplexity abrió su playbook de seguridad interno","slug":"bumblebee-por-que-perplexity-abrio-su-playbook-de-seguridad-interno","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_1024x576.jpeg","created_at":"2026-06-10T14:46:08.267Z","last_posted_at":"2026-06-10T14:46:08.434Z","bumped":true,"bumped_at":"2026-06-10T14:46:08.434Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Bumblebee: por que a Perplexity abriu seu playbook de segurança interno (e por que seu laptop importa mais que seu servidor)\nComeço com o detalhe que recontextualiza toda a ferramenta. Quando um worm de supply-chain atinge o…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_620x348.jpeg"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":275,"name":"mcp","slug":"mcp"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":866,"name":"go","slug":"go"},{"id":865,"name":"perplexity","slug":"perplexity"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"A Sandbox da Microsoft para Agentes de IA Chega ao Kernel — e Traz OpenAI e NVIDIA Junto","fancy_title_localized":true,"locale":"es","id":3109,"title":"El Sandbox de Microsoft para Agentes de IA Llega al Kernel — y Trae a OpenAI y NVIDIA Consigo","slug":"el-sandbox-de-microsoft-para-agentes-de-ia-llega-al-kernel-y-trae-a-openai-y-nvidia-consigo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_1024x576.jpeg","created_at":"2026-06-04T13:33:08.389Z","last_posted_at":"2026-06-04T13:33:08.532Z","bumped":true,"bumped_at":"2026-06-04T13:33:08.532Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Durante duas décadas, eu decidia qual software podia acessar as máquinas pelas quais era responsável. O modelo era simples: um aplicativo rodava com as permissões do usuário, e se se comportasse mal, se comportava mal com toda a autoridade que…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_620x348.jpeg"}],"tags":[{"id":228,"name":"microsoft","slug":"microsoft"},{"id":713,"name":"gobernanza","slug":"gobernanza"},{"id":847,"name":"sandboxing","slug":"sandboxing"},{"id":846,"name":"windows","slug":"windows"},{"id":844,"name":"mxc","slug":"mxc"},{"id":848,"name":"enterprise-security","slug":"enterprise-security"},{"id":845,"name":"seguridad-ai","slug":"seguridad-ai"}],"tags_descriptions":{},"views":24,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"TrapDoor: O Ataque de Supply Chain que Transforma seu Assistente de IA em seu Pior Inimigo","fancy_title_localized":true,"locale":"es","id":2869,"title":"TrapDoor: El Ataque de Supply Chain que Convierte tu Asistente de IA en tu Peor Enemigo","slug":"trapdoor-el-ataque-de-supply-chain-que-convierte-tu-asistente-de-ia-en-tu-peor-enemigo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_1024x682.jpeg","created_at":"2026-05-26T14:36:10.741Z","last_posted_at":"2026-05-26T14:36:10.949Z","bumped":true,"bumped_at":"2026-05-26T14:36:10.949Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Uma campanha de supply chain chamada TrapDoor está ativa desde 19 de maio e faz algo que eu não havia visto documentado nessa escala antes: não apenas rouba suas credenciais — recruta seu assistente de IA para fazer isso po…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_620x413.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":151,"name":"cursor","slug":"cursor"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":289,"name":"npm","slug":"npm"},{"id":547,"name":"pypi","slug":"pypi"},{"id":522,"name":"malware","slug":"malware"}],"tags_descriptions":{},"views":19,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"2026: O ano em que a IA quebrou o modelo de defesa","fancy_title_localized":true,"locale":"es","id":2740,"title":"2026: El año en que la IA rompió el modelo de defensa","slug":"2026-el-ano-en-que-la-ia-rompio-el-modelo-de-defensa","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_1024x682.jpeg","created_at":"2026-05-24T15:54:46.226Z","last_posted_at":"2026-05-24T15:54:46.366Z","bumped":true,"bumped_at":"2026-05-24T15:54:46.366Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Um garoto de 17 anos em Osaka exfiltrou os dados pessoais de 7 milhões de usuários da maior rede de cibers do Japão. Sua motivação: comprar cartas de Pokémon. Ele não tinha nenhuma formação técnica.\nEssa histór…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_620x413.jpeg"}],"tags":[{"id":7,"name":"ia","slug":"ia"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":706,"name":"segurança-da-cadeia-de-suprime","slug":"supply-chain-security"},{"id":818,"name":"chainguard","slug":"chainguard"}],"tags_descriptions":{},"views":29,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"O Dia em que Google Desligou o Switch — e Meus Apps Foram com Ele","fancy_title_localized":true,"locale":"es","id":2594,"title":"El Día que Google Apagó el Switch — y Mis Apps se Fueron con Él","slug":"el-dia-que-google-apago-el-switch-y-mis-apps-se-fueron-con-el","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_1024x682.jpeg","created_at":"2026-05-21T14:39:28.280Z","last_posted_at":"2026-05-21T14:39:28.413Z","bumped":true,"bumped_at":"2026-05-21T14:39:28.413Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"By Grego — yoDEV \n\nNa segunda-feira, 19 de maio às 22:20 UTC, minhas aplicações deixaram de responder. Não foi um bug meu. Não foi um deploy quebrado. Foi Google Cloud. \nEssa noite, os sistemas automatizados do Google Cloud colocaram…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_620x413.jpeg"}],"tags":[{"id":804,"name":"google-cloud","slug":"google-cloud"},{"id":637,"name":"infraestructura","slug":"infraestructura"},{"id":480,"name":"railway","slug":"railway"},{"id":807,"name":"multicloud","slug":"multicloud"},{"id":806,"name":"drp","slug":"drp"},{"id":805,"name":"outage","slug":"outage"}],"tags_descriptions":{},"views":43,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OpenAI Lança Daybreak: A Corrida Armamentista da IA Se Desloca para a Cibersegurança","fancy_title_localized":true,"locale":"es","id":2536,"title":"OpenAI Lanza Daybreak: La Carrera Armamentista de la IA Se Traslada a la Ciberseguridad","slug":"openai-lanza-daybreak-la-carrera-armamentista-de-la-ia-se-traslada-a-la-ciberseguridad","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_1024x576.jpeg","created_at":"2026-05-16T21:09:39.661Z","last_posted_at":"2026-05-16T21:09:39.813Z","bumped":true,"bumped_at":"2026-05-16T21:09:39.813Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"No dia 11 de maio de 2026, a OpenAI lançou Daybreak — e o movimento deixa explícito algo que vinha se construindo há meses: os grandes labs de IA não são mais apenas ferramentas para desenvolvedores. Estão se convertendo em n…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_620x348.jpeg"}],"tags":[{"id":474,"name":"codex","slug":"codex"},{"id":191,"name":"openai","slug":"openai"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":788,"name":"detecção-de-vulnerabilidades","slug":"vulnerability-detection"},{"id":787,"name":"gpt-5.5","slug":"gpt-5-5"}],"tags_descriptions":{},"views":56,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OWASP para agentes: novos padrões de segurança para workflows de IA","fancy_title_localized":true,"locale":"es","id":2374,"title":"OWASP para agentes: nuevos patrones de seguridad para workflows AI","slug":"owasp-para-agentes-nuevos-patrones-de-seguridad-para-workflows-ai","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_1024x682.jpeg","created_at":"2026-05-06T18:44:59.880Z","last_posted_at":"2026-05-06T18:45:00.136Z","bumped":true,"bumped_at":"2026-05-06T18:45:00.136Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Audiência: Security / backend engineers\nFormato: Security deep dive\nContexto: Adoção segura de agentes em produção\n\nTL;DR\n\nOs agentes de IA introduzem uma nova superfície de ataque\nO problema não é mais apenas o mo…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_620x413.jpeg"}],"tags":[{"id":27,"name":"ia","slug":"ai"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":584,"name":"llmops","slug":"llmops"},{"id":279,"name":"security","slug":"security"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":676,"name":"tech-strategy","slug":"tech-strategy"},{"id":743,"name":"owasp","slug":"owasp"},{"id":203,"name":"backenddevelopment","slug":"backenddevelopment"}],"tags_descriptions":{},"views":33,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"CVE-2026-5757: A Vulnerabilidade do Ollama que Transforma seus Modelos em um Memory Leak","fancy_title_localized":true,"locale":"es","id":2322,"title":"CVE-2026-5757: La Vulnerabilidad de Ollama que Convierte tus Modelos en un Memory Leak","slug":"cve-2026-5757-la-vulnerabilidad-de-ollama-que-convierte-tus-modelos-en-un-memory-leak","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691.jpeg","created_at":"2026-04-24T13:25:12.026Z","last_posted_at":"2026-04-24T13:25:12.166Z","bumped":true,"bumped_at":"2026-04-24T13:25:12.166Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Um novo aviso do CERT revela que fazer upload de um arquivo GGUF manipulado para qualquer instância de Ollama exposta pode exfiltrar silenciosamente a memória heap do servidor — sem autenticação.\n\nExecutar LLMs de forma lo…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":971,"height":543,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":346,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691_2_620x346.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":601,"name":"ollama","slug":"ollama"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":687,"name":"llm-local","slug":"llm-local"},{"id":686,"name":"cve","slug":"cve"},{"id":689,"name":"gguf","slug":"gguf"},{"id":688,"name":"memory-leak","slug":"memory-leak"}],"tags_descriptions":{},"views":39,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Docker e cache poisoning: o risco oculto em seus builds","fancy_title_localized":true,"locale":"es","id":2316,"title":"Docker y cache poisoning: el riesgo oculto en tus builds","slug":"docker-y-cache-poisoning-el-riesgo-oculto-en-tus-builds","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_1024x689.jpeg","created_at":"2026-04-22T13:27:18.261Z","last_posted_at":"2026-04-22T13:27:18.385Z","bumped":true,"bumped_at":"2026-04-22T13:27:18.385Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"O que está realmente acontecendo\nFoi identificado um novo vetor de ataque que permite comprometer builds de Docker sem modificar o código fonte.\nO problema está no uso do cache de camadas. O Docker reutiliza camadas pr…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1182,"height":796,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":689,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_1024x689.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":417,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_620x417.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":678,"name":"docker","slug":"docker"},{"id":680,"name":"build-security","slug":"build-security"},{"id":679,"name":"containers","slug":"containers"}],"tags_descriptions":{},"views":15,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Um Funcionário Clicou em “Permitir Tudo” em uma Ferramenta de IA — E Assim Caiu a Vercel","fancy_title_localized":true,"locale":"es","id":2312,"title":"Un Empleado Hizo Clic en “Allow All” en una Herramienta de IA — Y Así Cayó Vercel","slug":"un-empleado-hizo-clic-en-allow-all-en-una-herramienta-de-ia-y-asi-cayo-vercel","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_1024x537.png","created_at":"2026-04-20T12:43:33.408Z","last_posted_at":"2026-04-20T12:43:33.546Z","bumped":true,"bumped_at":"2026-04-20T12:43:33.546Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Vou ser direto: a Vercel acaba de revelar uma das falhas de supply chain mais instrutivas que vimos em anos, e a causa raiz não foi um zero-day, um firewall mal configurado nem uma cadeia de exploits sofisticada. M…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":2400,"height":1260,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":537,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_1024x537.png"},{"max_width":620,"max_height":500,"width":620,"height":325,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_620x325.png"}],"tags":[{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":479,"name":"vercel","slug":"vercel"},{"id":666,"name":"oauth","slug":"oauth"},{"id":667,"name":"breach","slug":"breach"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"LinkedIn Escaneia Suas Extensões do Navegador. Aqui Está o Código que Prova Isso","fancy_title_localized":true,"locale":"es","id":2158,"title":"LinkedIn Escanea Tus Extensiones del Navegador. Acá Está el Código que lo Prueba","slug":"linkedin-escanea-tus-extensiones-del-navegador-aca-esta-el-codigo-que-lo-prueba","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_1024x577.jpeg","created_at":"2026-04-03T14:31:31.306Z","last_posted_at":"2026-04-03T14:31:31.469Z","bumped":true,"bumped_at":"2026-04-03T14:31:31.469Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Algo importante chegou ao Hacker News esta semana, e se você é um desenvolvidor que usa LinkedIn no mesmo navegador onde vivem suas ferramentas de trabalho, merece sua atenção completa.\nUma organização civil alemã…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1726,"height":974,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":577,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_1024x577.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":349,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_620x349.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":588,"name":"privacidad","slug":"privacidad"},{"id":592,"name":"dma","slug":"dma"},{"id":591,"name":"gdpr","slug":"gdpr"},{"id":590,"name":"navegador","slug":"navegador"},{"id":589,"name":"linkedin","slug":"linkedin"}],"tags_descriptions":{},"views":10,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"# axios Comprometido no npm: O Que Todo Dev JS Precisa Verificar Agora","fancy_title_localized":true,"locale":"es","id":2103,"title":"# axios Comprometido en npm: Lo Que Todo Dev JS Necesita Verificar Ahora","slug":"axios-comprometido-en-npm-lo-que-todo-dev-js-necesita-verificar-ahora","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_1024x578.jpeg","created_at":"2026-03-31T21:34:50.279Z","last_posted_at":"2026-03-31T21:34:50.408Z","bumped":true,"bumped_at":"2026-03-31T21:34:50.408Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Se seu projeto usa axios — e se você trabalha com JavaScript, provavelmente usa — isso te diz respeito diretamente.\nNa madrugada de 31 de março (UTC), um atacante comprometeu a conta npm do mantenedor principal de…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1728,"height":976,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":578,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_1024x578.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":350,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_620x350.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":2,"name":"javascript","slug":"javascript"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":289,"name":"npm","slug":"npm"},{"id":576,"name":"axios","slug":"axios"}],"tags_descriptions":{},"views":23,"like_count":1,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"O Incidente de CDN do Railway É um Alerta Sobre os Limites de Confiança em PaaS","fancy_title_localized":true,"locale":"es","id":2091,"title":"El Incidente de CDN de Railway Es un Llamado de Atención Sobre los Límites de Confianza en PaaS","slug":"el-incidente-de-cdn-de-railway-es-un-llamado-de-atencion-sobre-los-limites-de-confianza-en-paas","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_1024x572.jpeg","created_at":"2026-03-31T12:01:00.421Z","last_posted_at":"2026-03-31T12:01:00.539Z","bumped":true,"bumped_at":"2026-03-31T12:01:00.539Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Ontem, Railway publicou um dos relatórios de incidentes mais desconfortáveis que li em muito tempo. Entre 10:42 e 11:34 UTC de 30 de março, uma atualização de configuração em seu CDN acionou acidentalmente e…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1732,"height":968,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/f/f02f8e65323345753c98d965233a504cebcefbc3.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":572,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_1024x572.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":346,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_620x346.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":480,"name":"railway","slug":"railway"},{"id":573,"name":"incidente","slug":"incidente"},{"id":572,"name":"cache-control","slug":"cache-control"},{"id":571,"name":"paas","slug":"paas"},{"id":570,"name":"cdn","slug":"cdn"}],"tags_descriptions":{},"views":40,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trivy Comprometido: Como TeamPCP Envenenou Mais de 10.000 Pipelines de CI/CD e O Que Fazer Agora","fancy_title_localized":true,"locale":"es","id":2020,"title":"Trivy Comprometido: Cómo TeamPCP Envenenó Más de 10.000 Pipelines de CI/CD y Qué Hacer Ahora","slug":"trivy-comprometido-como-teampcp-enveneno-mas-de-10-000-pipelines-de-ci-cd-y-que-hacer-ahora","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_1024x517.jpeg","created_at":"2026-03-27T12:29:23.359Z","last_posted_at":"2026-03-27T12:29:23.465Z","bumped":true,"bumped_at":"2026-03-27T12:29:23.465Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Se seu pipeline de CI/CD usa Trivy — e estatisticamente falando, provavelmente usa — você precisa ler isto. Entre 19 e 23 de março de 2026, o grupo de ameaças TeamPCP comprometeu o scanner de vulnerabilidades Tri…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1726,"height":872,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":517,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_1024x517.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":313,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_620x313.jpeg"}],"tags":[{"id":126,"name":"noticias","slug":"noticias"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":705,"name":"ci-cd-security","slug":"ci-cd-security"},{"id":553,"name":"github-actions","slug":"github-actions"},{"id":552,"name":"secrets-management","slug":"secrets-management"},{"id":551,"name":"cloud-native","slug":"cloud-native"}],"tags_descriptions":{},"views":12,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"GlassWorm Está em Seus Repos de Python Agora — O Que É, Como Funciona, O Que Fazer","fancy_title_localized":true,"locale":"es","id":1786,"title":"GlassWorm Está en Tus Repos de Python Ahora — Qué Es, Cómo Funciona, Qué Hacer","slug":"glassworm-esta-en-tus-repos-de-python-ahora-que-es-como-funciona-que-hacer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52.jpeg","created_at":"2026-03-17T17:48:31.624Z","last_posted_at":"2026-03-17T17:48:31.704Z","bumped":true,"bumped_at":"2026-03-17T17:48:31.704Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"GlassWorm Está em Seus Repositórios do Python Agora — O Que É, Como Funciona, O Que Fazer\n \nIsso está ativo e se movendo rápido, então vou direto ao ponto. \nGlassWorm começou em outubro de 2025 como um ataque de cadeia de suprimentos que visa…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52_2_500x500.jpeg"}],"tags":[{"id":313,"name":"github","slug":"github"},{"id":331,"name":"python","slug":"python"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":522,"name":"malware","slug":"malware"},{"id":523,"name":"repo","slug":"repo"}],"tags_descriptions":{},"views":21,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Slopoly: O Primeiro Malware “Escrito por uma IA” que Chegou à Produção","fancy_title_localized":true,"locale":"es","id":1722,"title":"Slopoly: El Primer Malware “Escrito por una IA” que Llegó a Producción","slug":"slopoly-el-primer-malware-escrito-por-una-ia-que-llego-a-produccion","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d.jpeg","created_at":"2026-03-13T14:25:17.470Z","last_posted_at":"2026-03-13T14:25:17.542Z","bumped":true,"bumped_at":"2026-03-13T14:25:17.542Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Slopoly: O Primeiro Malware \"Escrito por uma IA\" que Chegou à Produção\n\nOntem a IBM X-Force publicou um relatório que causou impacto na comunidade de segurança: descobriram uma porta dos fundos usada em um ataque real de ransomware, e …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d_2_500x500.jpeg"}],"tags":[{"id":126,"name":"noticias","slug":"noticias"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"}],"tags_descriptions":{},"views":28,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor(a) original, Autor(a) mais recente","user_id":7,"primary_group_id":null,"flair_group_id":null}]}]}}