YouTube Instagram TikTok How it works FAQ

The fastest way to turn talking videos into clean, searchable text. Free, private and no account required.

About

Built by Rishav Raj with one goal: free transcripts for everyone.

rishav@yttotranscript.com

Transcribe

YouTube to text
YouTube with timestamps
Instagram Reels
TikTok videos

Learn

How it works
FAQ
YouTube transcripts guide

More

Chrome extension
Contact
Privacy policy
Terms of service

© 2026 YTtoTranscript. Made for creators & researchers.

Not affiliated with YouTube, Instagram or TikTok. Respect creators’ copyright.

Cybersegurança na Era da Inteligência Artificial — Transcript · YTtoTranscript

Home/Transcripts/YouTube

YouTube Transcript

Cybersegurança na Era da Inteligência Artificial

EBAC TV · 13,532 words · 68 min read · EN

Watch on YouTube

Share X LinkedIn WhatsApp

Below is the complete, readable transcript of Cybersegurança na Era da Inteligência Artificial by EBAC TV on YouTube. Read the full text, copy any part you need, or generate a transcript for any video with our free tool.

เฮ

เฮ

เฮ Hey

guys, how are you? Welcome to another live stream here on Ebacube. I'm Pedro Brocal, R in operations here at EBAC. Hey everyone, it's a great pleasure to be talking to you all on this Thursday night. Thank you to everyone who, after work and studies, came here to catch up with us , right? We're always talking

about technology, we're always talking about IAK Nebak, and now we're going to talk about the topic that I think is most important in the age of the I, which is cybersecurity. How to protect yourself, how to avoid attacks, and how to ensure that your integrity, and importantly, the integrity of your company, remains

intact. For those of you who may not know EBAC, it is the British School of Creative Arts and Technology. Our focus is to provide employability, access, and knowledge in diverse areas, for all students and all people interested in the job market throughout this vast Brazil. We're extending this to Mexico and Chile as well, but what I want to

focus on here isn't so much this opening; I want to get straight to the content. But before that, I want to say goodnight to everyone who's here with us. So I'm going to use my cell phone to send a hug to Fernando Santana from Ceará, who's speaking to us from Ceará. Rafaela Samili from Caruaru, Pernambuco,

Transcribe another video

Paste any YouTube, Instagram or TikTok link to get a free transcript.

Free · No sign-up · Unlimitedor

Add to Chrome — transcribe in one click

Jeon from Rio Grande do Sul, Artur Lopes from Bahia, and Vanderson from Ceilândia, Federal District. We have a lot of people here in the chat, guys, and I really like the energy I'm seeing there, you all talking, you all interacting . I always joke that Bá is like a mother, because we're very open about

communication, we open this channel a lot for you all to be with us. So don't waste any time. Post a story, tag us. If you want to chat, send a message here in the chat. We have career consultants here who can talk to you and answer your questions. Don't waste your time with that, okay? Well,

I think my initial message has been delivered. I have two experts here at the table to contribute to this conversation with us. I'll start with the first one, who is my partner here, Alan Dantas. Folks, it's a pleasure to be here with you. I am Alan Dantas, director here at IBC TOB. Working with AI has been

very interesting, but with the digitization of the world, we're seeing that we have to take care of the boundaries, right? We need to take care of the security of this digital world. We have a guest here who needs no introduction, but let's let him introduce himself in case you don't know him: Gabriel Pato, one

of the leading cybersecurity experts and influencers in Brazil, and perhaps even the world. Thank you for accepting our invitation here. Thank you very much for the invitation. It's an honor to be participating in this panel. We're really at a point where we need to talk about security. It 's no longer about compliance, it

's no longer about looking nice, no, that's no longer the case. We're really in a critical moment where attacks are escalating and the attacker's entry barrier is getting really low. There's a number you brought to us that was very interesting, that increase is statistical, right? Number of attacks that people are noticing and

commenting on. Can I get a number? Of course. Well, first let me introduce myself, okay? Just for everyone, good evening to everyone in the chat. I then found out that there are a lot of people in the chat. Good evening everyone. Uh, I'm Gabriel Pato. I am an ethical hacker. I always say that this ethical consideration wasn't supposed to

be necessary, but it's there just to clarify things, right? But ultimately, I 'm passionate about technology and information security. Ever since I was a kid, I started hacking, you know, like that young guy who likes to rummage through things. And that was part of my DNA, it's part of my DNA, and I've carried it with me throughout my life.

So, I've done a lot of consulting work for various types of companies. I participated in some companies that connect hackers with companies to be tested abroad. And then, because I enjoyed talking about it, I ended up opening a YouTube channel and realized that there were several other people also interested in learning and talking

about it. And it was really cool to start spreading hacking more and sharing with people a bit of what was a passion I had kept to myself until then. Yeah, it was really cool to see other people's eyes start to light up for hacking too. So, it's an accessible language, right? We have

to say that this is difficult, right? Exactly. And it's a scary area, isn't it? People are afraid, but they're afraid of how far I'll go there, that it might not be a crime, that it might not be a very big problem. Yes definitely. In hacking, we say that, first and foremost, what we say is

that the hacker hacks; it's part of their DNA. So he's always going to be on that tightrope of ethical boundaries so that we always stay within, you know, on this side of the wall. But, you know, since it's something derived from curiosity, it's natural that the characteristic of someone who gets into hacking is to like

digging into things, to be nosy, you know, or whatever you call nosy, but it's important that they are well guided so that they don't get lost in this process. That's great, right, man? This curiosity is what allows us to prevent bigger attacks, and it makes us understand our systems and our daily routines. I'm

very excited because we're going to talk about this today. And I think, I often joke that our conversations, which are in this podcast format, end up turning into a lesson. So, for those of you watching, we also have the EBAC certificate, which you can issue there. The production team will be sending the links, but I promised this

was the last message. Let's continue from here. Tell me a little more about the number. We were covering up topics here, guys, in the car, having a coffee, talking a lot about it. How's the high going, man? Oh, that's really scary. On the one hand, for those who like to applaud chaos like me, Red Team, who

like to see this offensive side of security, perhaps we speak with a little more enthusiasm, because it is indeed frightening, isn't it? The number of severe vulnerabilities disclosed by some of the world's largest organizations , when added together in recent months, has more than tripled. So, comparing it to previous years, it's more than tripled, right?

And the success rate as well, not just the attempt itself, right? So, I can really get in. That's a good point. Ah, a lot of demand was created for the security team in general, precisely because there started to be a lot of noise, a lot of submission of potential vulnerabilities. When you looked all the way to

the end of the tail, it turned out to be a false positive; someone was messing around with IAI, reporting it, and so on. But this becomes a demand; it requires a team here, analyzing it. So, yes, we did indeed see an increase in actual failures, but also in false positives and failures that were actually

potential failures, right? There were flaws that I noticed, and someone started looking at them one way or another, but even the person reporting them didn't actually validate them until the end. So, the headaches in general have gotten worse, right? That's what I was going to say. And how does the other side defend itself against that?

Is it also using AI tools, and is it a larger team? That's the million- dollar question. This question that we're trying to answer also means that we're already starting out with a fully formed startup. Exactly. No, the industry is actually asking itself this question, because from the attacker's side, it's convenient in that sense; they

can cause trouble, they can, they have nothing to lose. Well, the defensive side needs to keep the systems afloat, needs to find all its weaknesses in order to defend itself, and keep the ship sailing in the right direction to maintain appearances, right? Because a security breach brings a company down, both financially and in terms of reputation, and

people will look at it and say, "I don't know if I can trust them with my data anymore." And even regarding the issue of false positives, if you have a leaner company, sometimes you'll divert attention from the product, from improvements, from company expansion, because you're getting so many false positives that you're afraid, or it's occupying your team,

your budget, or even the attention of the company owner, right? Because so much is happening there, but in the end it's a false positive. So how do you know? And the fear of an attack is the same fear we might have once, like, "Wow, I think it'll be really cool to walk down

Paulista Avenue at dawn." It must be really cool, but what about the fear of being robbed? It's the same thing as that guy. Damn, I want to release some software here soon with a coding vibe, but what kind of problems could you give me? Did I want to bring this up with you?

No, that's the big question, right? Because in the tech industry, the issue is innovation. So you want to take risks, you need to take risks in order to maintain that pioneering spirit. Ah, at the same time, being too fast can cause you to forgo care that would have been successfully implemented if you had followed the guidelines more

rigorously. So, to what extent can we sacrifice care in order to continue pioneering in technology, in terms of balance? So this is really a balancing act that the company needs to achieve in terms of its values, its business vision, and its positioning. Well, there's no right answer, is there? Well, what I think we've

really been discussing in recent weeks is the direction of this race for perfect AI, for IGI, for a self-sufficient AI. In fact, to what extent should we sacrifice self- care in favor of being first in this race? But if I stop here, will my competitor, the one on the other side, also stop? So that's

the point, the sore spot of the moment. Yes, it's a powerful [I] that has no restrictions, while the population is still learning about the first one that came out, right, a large part of the population, right? Exactly. Exactly. So, and it's even a matter of geopolitics, a matter of power in terms of the state, it's about whoever

achieves that potential first. So, it's not as simple as saying let's stop everyone, right? and even in terms of the domestic market . Companies, obviously, the Big Tech companies want, everyone wants to be the birthplace of this greater AI, this IGI. So, really, getting this group to work together so that everyone is on the

same page and playing the same game isn't an easy task. Yes, it's something I see that scares a lot of people, especially mediums, and small and medium-sized business owners, right? The thing is, at the turn of the century, when there was that whole issue of the turn of the millennium and all that,

the paradigm could still be reversed. So, like, companies are still semi-digital or not at all digitized, so if a really big problem happens, man, just shut down this server, print these papers, and we're safe because the paradigm doesn't affect us. Then we have this thing called digitization, digital transformation, which today is no longer possible to

de-digitize or become analog again, because there are many companies that are truly digital, even small ones, maybe, I don't know, a logistics company, if their servers are attacked, if access to the servers or the solutions they use, like SaaS, is cut off, the company stops, and it's a medium-sized company, maybe in the interior of São Paulo, but

it's totally dependent on digital, right? That's why cybersecurity, or cyburity, became so relevant so quickly, right? Yes, and my daily work involves talking to a lot of people. And I see two scenarios. The people who are afraid of IIAI because of the possibility of it turning against us, much like Skynet, which I

think is an interesting topic, but I don't think it's worth going into too much detail here. And then there's the main topic, which is backdoors. I'd like you to explain this concept to us a little bit. We have students here of all different types. The people who are talking about it now will talk about backdoors, and the people who don't even

know what that is... Pato, could you provide some context on what this lack of care or the large-scale automation that this scale can generate in systems that facilitates access? Very good point. Ah, I usually say that when we talk about hacking, you have one side where AI is hacking and another side where AI is being

hacked, right? This has its different facets and its ramifications. Yes, but in fact, as you rightly pointed out, we are becoming dependent on a structure that is in the hands of certain companies, and sometimes we are building ourselves entirely based on them. So all this intelligence is going in this direction, towards this

dependence that we are creating on these providers. Ah, and then we can break that down into a whole host of other topics, right? From the employee's internal content being passed to an AI, and this content becoming a dataset for these providers, to the product itself being built around this IPI that is totally dependent on and

providing it. So, there have been a lot of startups that have emerged in the last few months that suddenly became a feature of a provider that it used as its core, right? So, in business terms, that's an interesting perspective as well. And there's also the point where she says, "Damn, I know, I studied, I've

protected myself, you can rest assured here that my system is all set." But then you connect to another system, and maybe that system is faulty. We had that Windows issue about two years ago, which caused problems at airports, that whole mess. It wasn't Windows that had a problem; I can't recall the name of the solution, but it

was a security module that was outsourced to Windows that caused the problem. How do you protect yourself in a situation like this? This is one case, this is one of the biggest problems in security, which is the supply chain, right? supply chain. So we always have a dependency on some technology that might suddenly

release an update or have a vulnerability, and then you'll see, "Who has this in their core, who uses this source?" Everyone's in the same boat when it comes to being infected, right? So, this week there was a major outage in WordPress, which is widely used on the internet and therefore doesn't have any errors. As soon as the vulnerability

is disclosed, automated bots start entering various websites on the internet, trying to ping those servers and see if they can find a vulnerable WordPress site. This has escalated monstrously. Ah, so in AI there's a lot of that side of the issue, both AI hacking and AI being manipulated. Well, and that's it, in short, we as users, whether we're

business owners or users of the PT chat, whatever, we're part of this chain. Totally, very good, absolutely. And how do we begin to delve a little into the solution and then into the future, right? So how could an average business owner , for example, begin to take preventative measures? And then I wanted to delve more not

into the practical aspects, because the practical side will just become a backlog, right? But perhaps into the aspect of his self-development , because he's the businessman, he'll have his team, maybe he'll have an IT guy who's his nephew there, that's fine, but he'll have to make the decisions, he'll have to allocate the budget, he

'll have to figure out how to do it, right? How does he prepare himself in terms of self-development in a world where AI can teach you everything, YouTube has everything, but he doesn't even know his own level? The most interesting thing is that, although the scale and the number of attacks happening have changed drastically, in the

end, the recipe and the recipe we share, everything we've always talked about regarding security, remains valid and continues to be what really solves the problem; what has changed. A, a brought the scale, accelerates and increases. It accelerates very quickly. It's like having an entire building of hired competitors wanting to attack you, willing and being paid 24 hours a day

to do so. And so the barrier to entry fell significantly during the attacks. Ah, but the tip, the recipe, remains what we've always talked about regarding safety: reducing the attack surface is crucial. So, the less time I have online, the less chance there is of something going wrong there. This really hits a nerve with the vibe code,

and it resonates strongly with what we've seen in recent months, which is precisely the opposite. Yes, it's become very easy to upload code, which increasingly expands your attack surface and increases the chance of encountering problems. So, as you mentioned, it found a problem, the attack escalates to use that initial information to gain privileges and further escalate the

attack, right? So, attack surface there, folks. If you have any questions, or if you want to explore further, feel free to ask in the chat. Well, to put it more practically, it's about doing the essentials well, right? So, everything we always hammered home safely back then, remains valid. I think that's the main point

. People think that because AI is arriving and scaling up, it has brought some way of seeing that we weren't seeing before? In truth no. It's really the scale. Uh-huh. Scale. So, all this stuff we're seeing, it's always existed. If there had been people testing, if there had been people with that perspective, they would have been

highlighted in recent years. Now we're seeing, we're poking at the wound of a job that wasn't done as it should have been done all this time. Dude, I really like what you said because, in the end, well-cooked rice and beans will still fill you up , right? When we talk about technology, everything we say about computing,

we're talking about computational thinking. And there's always an analogy with human beings. When we talk about security in our home, it's not just about locking the door, checking if the window is closed, seeing if there's no entry through the roof, all that. It used to be just one thief trying to break in, now there are several. That's the

difference. You need to protect yourself more. It's not that there are multiple attacks, but that the attacks are stronger. They could be, right? Please forgive me if I'm wrong. It might be due to the intelligence that is acquired, but the issue is that now it's brute force; there are too many people trying to get in.

Yes, it's a barrier to entry. Ah, you should always have to think about who would attack me, right? I own a company that does X, Y, and Z. Who would be willing to attack me and have the necessary funds , intelligence, and time? Oh man, depending on who you're playing in the game, you're going to have so many

attacks coming your way, usually from a competitor, you know, something like that , right? So, there are, and always have been, attackers, and they will continue to exist. But now that Aá is arriving, I simply ask her to do this. It could be a young person having fun right now. Exactly. Whether they have

full knowledge of the issue, or the time and money they would have needed to launch an attack of this magnitude, that barrier to entry has fallen. So the volume will naturally scale up as well. So we're seeing a lot of attempts, it 's bizarre, from one year to the next there 's a huge difference in terms of

attempted attacks, right? Uh, agents running the automated tests. Yeah, and obviously the success of those attacks as well. What surprised me the most, considering I'm not very familiar with this area, is the speed at which a bug or vulnerability in WordPress is reflected, for example, in Google search results for websites that use WordPress. There

was a recent bug involving Japanese e-commerce sites. Suddenly they inject an entire Japanese e-commerce site into a plugin that was already vulnerable, just to boost the SEO of someone who pays this hacker, right? When the vulnerability was released, an NGO I volunteer for, man, within two days they had this plugin, it was released there

too, it was all in Japanese and it takes a long time to fix. Then another website that I knew, where I worked, also exploited this vulnerability. So I guess that's what you're talking about regarding the scale, right? This speed, and perhaps even a lack of interest. It's like anyone who has this vulnerability for no reason, without

purpose, without any malice whatsoever, the worst will happen because it's automated, right? This search for vulnerabilities is very automated, is n't it? Exactly. There was a recent group, a recent news story I was studying, a group of attackers that automated even the process of identifying whether a given website is a viable route for

money laundering or for buying a gift card, for doing this, for doing that. So, even the criminal investigation of potential websites, instead of having a person actually browsing and looking for where they're going to focus their efforts, even that has become a fluid spectacle of crime, wow, it's crazy. And you see that at the end of the day, right,

we're saying that most cases end up coming from external tools, that had some vulnerability, something, it's that old problem, right? Be careful what you bring into your home. So, be careful where your system connects, where you connect, where you log in. But, I wanted to turn the tables a bit, and we're talking a lot about

offense, but what about defense? What benefits and scale has AI brought to that ? Ah, regarding the defense, he's working on it, right? He's a goalkeeper, right? He's a goalkeeper. So, as we're saying, there's a company to keep running, an entire system to maintain, and the attacker always has that greater advantage in exploiting the system. Well, this caused the demand

for security on the defensive side to increase dramatically. So, there needs to be something to compensate for that, so we can return to a balance between attack and defense. Well, naturally, AI will also be responsible for addressing that other aspect. We were even talking about this earlier, right? Ah, the awareness of vulnerability, it's the same for

both sides. So, when you're training an AI to find a vulnerability, you're training it to avoid that vulnerability, and at the same time you're training the attacker to be able to exploit that vulnerability. It can be resolved, right? Exactly. Exactly. Yes, knowledge is the same. It's exactly the same. Ah, so the answer to your

question points in that direction. Certainly, there will be the emergence of more tools, especially in relation to context, correlating events. So you have something happening on certain servers, you see that on another server there's another log and another event happening, and you understand that it's all part of the same attack, the same

attempt. So this issue of context, which we previously had to work much harder to understand, to reach that vision, that perception, that conclusion on the defensive side, AI will help a lot with, and is already helping a lot with. So yes, they should, they already are, and this is certainly the path that is

emerging, and will continue to emerge, with products very much focused on responding to these excessive attacks. Good. And as for how, I don't even know how you can answer that question or if you should, but how do you, Pato, I know you also work in consulting on this, what's your first impression, you know?

What do you carry in your little doctor's bag before evaluating a company? What is your briefing? In what sense do you mean, man, to see if she has any vulnerabilities? Let's suppose our listener is saying something like, "Man, I made a system here, I created the startup of my life, but it's based on how

I see to mitigate risks here?" Are you sure there are people watching us? Our colleague at the logistics company is also using a lot of AI for many things. Exactly. Because there are a lot of people listening to us, and how do we know, for example, that Daniel here, who's sending us his regards, just came up with

his solution and, well, he won't be attacked? Which protocol is he using, man? There isn't one single answer that will cover everything, because when we talk about security, it's always a cycle, right? So, there is n't always a checklist that, when we finish it, we go home because we've reached perfection. Quite the contrary, it's something

continuous, and there's no ideal. We always have a next step to take. So what we're going to look at differently between different companies is their level of maturity in relation to security. So, the company is determined to be Big Tech; it has already spent a lot of time being tested and has a

higher level of maturity. Well, other smaller companies, they went through fewer of these processes, right? There's still more rice and beans to eat, to grow, and to get there. Well, how do they know if they're being attacked or not? I always hope it's through an internal perception rather than a leak. Bill him to pay for the resort.

Monitoring, right? I hope it will be through this route. But do you have any recipes? I'll give you an example, okay? The car broke down, and you're going to say, "Damn, it's the battery, the dashboard lights are on, the headlights are flashing," you always have something to try and figure out what the problem is.

I think it's very much related to literacy, right? It's about knowing your own system, right? Exactly. Yes, from my side, right? I am, I am, uh, my side of contributing to security is always the offensive side of security. So, in my consulting work and other projects, I always simulate the striker role. I simulate your

enemy. So, in the same question that your competitor, your enemy, your attacker who is interested in your system is probably asking themselves, I try to emulate them and ask the same questions. to try and get there and see if the doors are locked or not. Well, that's the contribution from the offensive security side within this

operational cycle of information security. Yes, it's about trying to do this cycle I mentioned, it will never end, it's about rotating faster, it's about pushing, it's about not waiting until game day to see if the goalkeeper is good, it's about being the guy who's going to be shooting at goal to see if that's how you train better and

identify a goalkeeper who isn't as good as you thought he was before the game, preferably. This applies both to the person watching us, who is thinking about entering the field, and to your perspective as a consultant. Well, I see security as being like car insurance. You pay even if you don't want to use it.

Investment is increasing, people are... I imagine so, but I'd like to hear that from someone who's dealing with it day-to-day. Man, the market is really on fire. Well, I do n't know if I should say this in a celebratory way or not. As someone who applauds chaos, I'd say the market is really on fire, it's very hot. But

for those entering the field, what I always say is that this applies to other areas of technology, not just security; it's about staying curious, okay? Ah, so nowadays AI already gives you the answer as if it were the divine word, the truth after all. And you forget about the process, you forget the curiosity of

wondering how you got there and checking that process. So, in technology you need to be passionate and always want to be the person who asks the questions and breaks everything down. The child will want to open the toy instead of playing with it as it was designed to be played with. Ah, so regarding

security, uh, I think I'd say this a lot to anyone coming in, uh, you have to keep asking questions, uh, especially about offensive security. We're always going to be the annoying one at the party, but someone has to be the annoying one, right? Yes. Very good. Uh, we were talking about this earlier, right? Well, I

mentioned a phrase I saw in a training session for technical people, that cybersecurity specialists are increasingly participating in board meetings, right? So, at the same time, we're seeing that the market is on fire, there's more demand and everything else. The biggest fear I see among students, and especially technical people who want to migrate to the security field, is

that they believe there won't be the same entry-level opportunities as before because of AI itself. So, in the past there was a space for the junior analyst, for monitoring, for being there and all that. How do you see this entrance? Especially for our students who want to migrate, who want to change fields, whether they are technical students or

not, do you think there will still be room for Júnior? No, that's a great question. Well, we even hear from big names in the field that talk about stopping studying, it's not worth being a developer anymore, it's not worth going into security anymore, it's not worth it anymore. Honestly, this destination might be

reasonable, it might even be, but what I usually say is: pay close attention to who's talking, because we've been hearing a lot of noise that, if you first stop to think about why that person is acting this way, you'll see that there are other reasons behind it. Ah, I think so, like I said, you have to

be passionate about technology. Well, especially now, discipline alone isn't enough anymore, I think that's not enough. Well, change is very continuous. So, there's no such thing as wanting to learn a whole range of things and thinking you'll be fine with it. You really have to have the drive to keep up to date. And I think the only

way you can follow that is by being passionate or crazy. So, it's one of two ways. Ah, but for safety, uh, as I said, to keep doing, to stay curious, to keep doing, questioning everything. This is the DNA, and it's what will differentiate a good professional from one who is replaceable. Show. Are there other areas for us

to explore? We're at a systemic level now. We're going to delve more into the human level, right? No need to talk about fake news, social engineering, and all that. I'm going to leave a question for the end so everyone stays with us until the very end. If you were to write a job description to

recommend your client hire a junior to be the specialist in the security area, wow, what characteristics would that job description have? But don't tell anyone now so they can stay with us until the end . Then the businessman will want to know so he can fill the position, and the young person who is studying will want to

prepare. Good. I'm going to use this opportunity to talk to those of you who are interested in entering the job market in general, and specifically in the technology field. Abac is launching EA Start, which is our course designed to help those with no prior knowledge or those just starting their transition to using AI in the tech world

reach a professional level, enabling them to master the main market tools, learn how to code (create your application using prompts), create images, and even automate your daily routines. Whether you're a marketing professional, a technology professional, a business professional, or from a variety of other fields, we have the fundamentals of AI for you. It's 10

hours of content with me and Alan talking about the AI vertical, and what the AI market is like. And then you might think, Pedro, this is a topic that's constantly evolving, how are you going to do this in a recorded course? Don't worry, we'll always meet in live streams like this one. When you purchase

our course, you then get access to the live sessions, or rather, the student live sessions, to keep up with the news, follow the updates, and even better, bring your case study, ask your question, and talk directly to the instructor about it. We have a super special offer for today's live stream . It's worth 40,000, with the difference being 100

. The production is going to kill me now, but you can check it out and secure your spot by clicking the button below. But I won't go into too much detail about this. Let's come back here with a question from the team that the production team already sent me. Gesimiel, I'm sorry if I

misread your name, dear. What is the most common mistake companies make when evaluating the attack surface of AI-based solutions? Oops. Wow, that one was complex, huh? One of the good ones. Yes, that's not J anymore. Please repeat the question. What is the most common mistake companies make when evaluating the attack surface of

AI-based solutions? Ah, I think it doesn't only apply to the issue of AI specifically. I think the error lies in the assessment of the attack surface as a whole. Well, actually, the concept of attack surface is exactly what we were mentioning: it's about exposing less, so the more you have available, the less

chance you have of having a problem. H, what has AI changed in this sense? One of the changes that AI has brought is making it easier for new features to go live. So, before you know it, you have teams that aren't even from the tech area launching products, testing anything, right? They're integrated with

company databases or connecting to company resources that are simply becoming new attack surfaces, becoming excessively exposed to the internet. I think one of the points, and this was a suggestion you all asked me about before, is precisely to use products or access rules to restrict these resources that are being uploaded, which are for

internal use and sometimes end up becoming available to anyone who opens a subdomain or anyone who wants to look at a log of certificates that are being uploaded. Ah, so I think that's one of the points I look at first. You asked about the things I look at first. This one, this one has seemed

good to me so far. Yes, there's actually a lot of stuff and a lot of apps and programs being uploaded that the internal team thinks are just for them, when in fact they're exposed to the entire internet. Oh, and there was the GPT chat incident, remember? People were sharing the GPT link, and it

started showing up on Google. I didn't remember, did I? So Google is n't going to forgive them; they didn't create a robot because the "good guys" will still follow the ethics of "can I crow or not." Imagine what the others are like, right? Imagine what the others are like. Good. I hope that answered your

question, Jesiel. Do like Jesiel, guys, send your questions here. I can't guarantee we'll read them all, because there are really a lot of people out there, but our production team is always behind the scenes, looking at your comments and they'll send them to me at the end. But Ala, do you have any questions? Can I pull from a

deepfake? Because this is a topic that interests me a lot. Yeah, I wanted to get into the personal and social engineering aspects, but still on our friend's question, uh, I haven't tested that since you're the security guy, right? I've heard a lot of myths about Vibe Coding, like, you know , importing, uh, hallucinating about the

name of a module in your application or a library that doesn't exist, and someone could create that library with vulnerabilities and affect you. I think it 's a really tough stretch, way too forced. It 's curious because there are many hardcore developers who are defensive and say, "No, I'm not going to lose my way of coding and I'm not going to

embrace this new thing that's coming, " while others completely give up on having to write a single line and just start writing without the care they should. So there are two sides, and there isn't just one answer. I think that if you don't embrace the coding vibe today, if you don't embrace its use in

development, you'll hardly be able to stop the market's progress. Your competitor will either publish the feature before you, or there will be many other people publishing it. Similarly, if you're not careful in this process, you're actually more exposed to creating attack surfaces and vulnerabilities. Ah, it's curious that if we look at the

advancement of AI intelligence, taking well-known and well- resolved vulnerabilities, like a Skink Injection, well, for those who are already more familiar with the field, don't be surprised if you're not. Ah, it's likely that even the most advanced AI wouldn't make that mistake with a junior developer, a beginner who might end up making it.

Yes. Similarly, AI itself ends up creating, as in the case of prompt injection, a new attack surface. It is a different resource that may be vulnerable; it becomes a problem, a potential problem. Okay, cool. It's a lot, sometimes people think, "Oh, you're being too indecisive." That's because there really isn't a single million-dollar answer that fits

all cases. But I asked more because I saw a lot of advanced developers, right? It's senior talking about this, I haven't tested it, so I don't know if it's actually possible. Since you're the expert I was looking for, my question was: "Have you ever seen a case like this? Like injecting via a

library, via a package?" This happens quite often, not only with AI, but also as a form of mathematics. As a supply chain, you invent a name, and someone will read it. Sometimes it's a name that's used internally, but publicly, when it runs on another machine, it will search for that name, and it's not

openly registered. This can happen and does happen quite often in supply chain matters. Uh, and Iá is going to explore those aspects, right, like Iá as an attacker here, as I'm saying, right? Ah, so, wow, there's a lot to unpack from this. Legal. Good, good, good, good. Well, I want to bring up this topic

because I think it's something the public is generally curious about , but the issue of deepfakes is what scares me the most , you know? It's terrifying. And I'll give you an example, man. My father is not in the technology field. I always bring this example into my home. I taught him how to

create images, and because he's a critical person, he's like, "Oh, that's bad , that's bad." Then, it gets to a point where you say, "That car is his, he's really on this trip." My dad is doing this for the best, to control the family group chat, the gang. I see him posting, I think, it looks like it's

you guys, it looks like it's us at the bar. It's going to screw me over, right? People were crowding into the bar at 2 pm and said, "No, guys, it's my dad's." Or is this my excuse, but I only wanted you, man, as a professional, how do you see it? It's terrifying. It's generally a deep fake. Yeah, that

's it, right? As someone who applauds chaos, once again, I position myself in this way. I like it and at the same time I'm afraid of it, you know? So, there are interesting paths that the market has taken, such as, for example, having a cryptographic signature on a device that is taking a photo to prove

that the photo was in fact captured by a camera sensor and was not manipulated along the way. That's cool, man. This is interesting because it's the opposite of you marking the images that were generated by I. will be taken from the camera of the quoit. Both paths are valid, right? So, today, media generation is driven by

large AIs, and they are all being targeted, whether visibly or invisibly, to the point where the AI itself can look and say, "Was this generated by me or not?" So this is one path where the watermark is injected by AI, but the opposite is also growing a lot, which is proving that the

image was generated by a camera and not that it was generated by both . There are a lot of papers coming out, and in different ways, they try to arrive at this answer, which in the end is: is this image real or is it generated? What 's interesting is that, in a way,

we've been generating modified images for a long time now. So at what point do we start turning the question or statement into whether this image was edited or generated ? Because if we're going to consider it an Instagram filter, we've been changing the images for a long time now. That's crazy. Alan. Any more questions

before I open it up for questions from the audience? Our chat is quite active right now. We 'll all talk more about prevention later, right? Perhaps to take care of oneself for good. Let's pull this one. But let me just read one more question here, because Ingrid asked a really good one. Ingrid, thank you for your question. She

said, "Pato, is it possible to enter the area directly?" I'm asking because I work in customer service and I've been dreaming about this a lot. I've been studying using free resources and preparing a portfolio, but I've only been receiving rejections. What advice would you give Ingrid? I'm sure there are many people like

Inrid in the chat. Ah, I don't really like dividing things into areas. I think all the knowledge will add up to the professional who, in the end, will deliver value to the market. Ah, I say this a lot because, for example, I've studied a lot about video in my life, because I like audiovisual media, I have a

YouTube channel and everything else. And that made me a better security professional, because when I see pipelines that process video, upload media, my knowledge as someone curious about audiovisuals, a video editor, someone who understands how videos work on the internet, helps me become a better security professional. Ah, so, all the knowledge you have, sometimes you

think, no, this is too bloated, this will build your baggage to become a better professional. Ah, so another point that's often related to this, and that I get asked about a lot, is the idea that, oh, do I have to be a developer to be a hacker, to get into the security field?

Naturally, you'll have to be, yes. Ah, sometimes you won't follow the same order, and that's okay. And I say this largely from my own experience. I grew up learning, I started studying technology in general when I was 10 or 11 years old, but I already wanted to be a hacker. Uh-huh . So I used my

desire to reach my goal of being passionate. I used this passion for hacking as a driving force that motivated me to study development, networking, and everything else. Ah, so my answer might seem a bit generic, but ultimately you won't necessarily have a checklist or an order to follow, but all the knowledge you have,

regardless of the area, will add up to something. I think a really good example you give, and one that aligns very well with EBAC's methodology, is that you produce knowledge. When you produce knowledge, when you create content on LinkedIn and YouTube, people not only identify with you, but they also start picking up your way of speaking and

teaching. Suddenly, a consulting job, a mentorship opportunity, or a job opening comes up, right? And to conclude, I 'll never forget when I discovered, I was living in China and I discovered this thing called project-based learning, which is a methodology that, in the end, became EBAC's methodology, which is learning by solving problems. Then the

guy gave a portfolio example, saying : "Why is a former police officer hired to be a security guard? Seriously, what's the portfolio of a former police officer who became a nightclub bouncer, who became the head of security for a company?" It's pretty obvious to us, because, look, he knows how to handle a

weapon, he knows how to deal with people. So, what are those references, that portfolio, that analysis for the area you want to work in, the area you want to enter ? So, if you're going to put together an inrid cybersecurity portfolio , imagine a police officer who's going to become a security guard, right? So what will the

other person on the other side have to see? And there's a very big obstacle for our students here, more than 180,000 students, you're in the digital world. Uh-huh . The police officer is still in the real world, right? He might be strong, he might have a gun here and stuff. In the digital world, where will you have to

present yourself? No digital, dude. Exactly, right? You have an amazing job on social media, it's obvious you're very skilled, you're on TV, you're in many places, right? And that's the point, and I'm very grateful for the compliment and the communication. Ah, I say that I opened my channel because I like talking about it, because I'm passionate about it, it

wasn't with any ulterior motive. And this is one aspect that truly creates opportunities, where you can identify the good professional, the one who is passionate, who wants to talk about it because they are thrilled by it. And then, he might be tired, he might be sick, he'll talk, if he lets us, we'll talk all

night and I'll remember several guys, we'll go on, we'll go on . So I think that human aspect of passion, even for yourself, thinking that you're dedicating your time to something that pleases you, right? Something that makes you happy with your self-assessment. And work is a consequence, right? Work is simply an opportunity for you to

solve more problems in something you enjoy. Exactly. And AI ends up camouflaging a lot of people in this, right? Because sometimes you see topics being raised in meetings and speeches and such, and you think, "Wow, what a genius." But if you try to continue this conversation in everyday life, you'll see who's who. Yes,

so as I was saying, Iala will give you a final answer, but to be a good professional, you can't give up on asking questions and being that curious person who wants to dissect and question the reasoning behind that answer, right? It's about continuing to be that crazy, passionate person . So, to summarize for

Ingrid, I think it's curious, right? Show your worth and, above all, demonstrate how much knowledge you have to enter a field like this. Sometimes it's not any specific knowledge, it's a kind of knowledge that we jokingly refer to here, a nexialist knowledge, which encompasses various areas. I just wanted to make a disclaimer here, Daniel

Bookles, sorry if I got your last name wrong too, sent this and it's really cool. Send a shout-out to the folks in Ouricuri, Pernambuco. I'd like a message from you all for the tech-savvy folks here in the Sertão do Araripe region . Well, a shout-out to all of you who are following us. It's great to

see the communities together here. Alan, get to your agenda, we've got tons of questions here. Hey, cool. I think it's more of a comment, and I'm opening it up for you to comment freely, right? It's about using AI regardless of the field. Today we teach in 150 courses, we provide training for executives. I always say:

"Use AI, but do it, practice." Exactly. Because today, when I'm reviewing a resume for someone we're hiring for, when I'm reviewing a service provider, I look at a portfolio. It's beautiful, impeccable, technically sound, and even exceeds expectations in quality. I can tell if the person has actually practiced what's in their portfolio at least once in their life, just by

talking to them. One minute. How did you create your portfolio? Why did you choose this thesis? Why did you go that way? So AI is there to show us the way to execute, to train us, but we need the background because AI can overdo it, AI can do too much, and doing too much

doesn't fit into reality, it doesn't fit into Mr. José's logistics company, right? So you have to have that technical knowledge, even if it's just once. I'll do the attack once, I'll test it once, I'll research it once, then I'll do it on AI. I think that would just be a message for Ingrid as well, to wrap things up. That's

it, it's about continuing to ask the questions, right? What moves man further is the question, not the answer. The discomfort of knowing that something is happening there and you don't know why. Well, that's what will motivate us to study more, to further develop what we know about that subject. That's science itself, right? So,

stay curious, passionate, crazy about the subject, wanting to turn everything upside down, and don't just settle for one answer that came your way, right? Uh-huh . Good. And it goes even further, right? AI fosters standardization. Sometimes this type of resume example is very good. When we're evaluating someone here at EBA, and sometimes the person went a little overboard in their

resume description, you think: "Wow, this person is not only using things we use, things we use in our daily lives, but that's all good." But go further, right? Add something bigger. This is very important. That 's really interesting. Let's move on to another question, guys. Keep sending them. We still have time, a little bit, but we still

have time to read your questions. I'm going here to give Rafaela Samili. I'm choosing the topic for my thesis. Oops. Talking to people from Áreas. My mentor suggested Privacy by Design in the Industry. Yeah. A systematic review of privacy mechanisms in industrial software that processes employee data. I'd like to know what other topics or branches of

cybersecurity in companies would be relevant to you? Wow, that's quite a master's degree. It's a great back, a great topic. That's a great topic, extremely relevant. We're starting to understand the impact of our own data, right? Take, for example, Google buying an airline that 's only interested in its data, right? An airline went bankrupt, and Google is still

interested in the data. Why? If they have their own IAD, they could generate that data. That's where you start to see the power and value of truly qualified data, generated by a human. We're talking about everything from the code they wrote internally, to the feedback from withdrawals that satisfy the user, to airport logistics—all of that

now, with the potential of AI, has a much multiplied value. Yes. Ah, so privacy is a fundamental issue, because we're realizing how much we give up of our own power of choice in life when we expose ourselves too much or when our data is too exposed. Yes, my master's degree was in management and

public policy. Not because I like it, but because I was just curious to know what it was like . Very good. Very good. So, you see, I focused a lot on technology, contrast, and everything else. So I would say, it's Inrid who's doing it, it 's Inrid. Uh, I would say, sorry Rafaela Sam, sorry

Rafaela. Well, I'd say that I think understanding how these communities that people are calling gated communities within the internet itself, or this new internet that's emerging because of the dead internet theory and all that, how this is going to become a new model of society, not even a business model, right? So we have a lot of

bright-headed people rethinking how we're going to connect to the internet, whether it's going to be like a bunch of digital condos, you know? If it's going to be, uh, I'm going to jump from mine to yours, there has to be an invitation for me to go to the duck's network and stuff, because that's what the dead internet theory is all

about. We don't know anymore, do we? If Pato's website was made by him, if Pato's website is real. So you have to meet him in person and understand that that website belongs to him. It's impossible to know more about social media, right? Yesterday, Fernanda, our friend, was showing me her Instagram posts; I did everything with her. That's not what I said.

That's crazy, right? This is crazy. So I think that's another topic I would study as well, because governments are crazy, they don't know how to even begin talking about this subject. And I think we definitely gave you those insights, but community in the tech field is very important. So, joining forums, joining communities, this work

you're doing in the chat here, which is really great just to chat, is also very important and will give you a lot of insight into it. Uh-huh . Beauty. But her topic is already getting hot, huh? Okay, okay indeed . Hey, one more question, guys. Franciel asks us how companies can prepare to deal

with potential breaches and data leaks, since the models, in a way, still have loopholes that a malicious person can exploit and use to attack the companies themselves. From what I understand here, it's kind of like what we have, we chose the whole conversation, but good point is, ah, well, I think I'm going to end up hammering on what

I said in the previous answers, but we share this side of security, he's always thinking about these potential gaps that we might be leaving. So, it 's always a matter of continuing to ask that question. I really like your speech because it's almost a variable, right? Then you can add it there. And what I keep

thinking, man, especially when talking to people in executive technology, is if we're not continuously learning, improving ourselves and learning about new technologies, suddenly a new model comes out , like Jeev, and I'll test Jeev, which is the part about doing things, right? I saw that JV exists, but I haven't tested it. I do

n't know what it's for. Oh, yeah, okay. It's really cool, really cool, really cool. Yeah, that's where L came out. I installed it on my little computer, Laia, to test it. If we haven't tested it, we haven't seen it fail, we haven't seen it work well, right? I only have this in my head, in

theory, when I receive an attack or when I plan to avoid receiving an attack, I can't really see myself planning for these problems. So what I see happening is that we're going to increase the team size, since we generally don't have the technical capacity, especially in leadership, to actually assemble a team that will

be lean, but that will absorb all this demand and continue learning. That's why we talk a lot here at EBAC about organizational efficiency, not individual efficiency, right? Well, then I see the team growing to the point where everyone is kind of doing the same task, but one person is filling in for the other.

I could have a team where I'm not firing anyone, but I could have a team of five people instead of 15, but with an internal company learning process, organization there, uh, organizational efficiency, right, that would perhaps be much more preventative than, I don't know, hiring a super robust system and hiring a huge consulting firm and not improving

that aspect, right? Security, it's a matter of culture, right? So, it's curious, I've always worked a lot on the offensive side, bringing in, emulating the enemy. And I've participated in many dialogues where I sometimes pointed out a certain characteristic, a vulnerability that some people on the team say: "Damn, I already knew she

was there, I already knew this happened, it did n't become a priority, did it? But exactly, but what, right? Why then wasn't this bothersome enough? If someone knew, how come this wasn't, right? Exactly. So that's where I say it's very much about culture. Uh, uh, valuing this internally to the point that the individual, the

person who sees the problem, but prefers to sweep the dirt under the rug instead of bringing it to the table for various reasons, right? They have to be valued, and this needs to be instilled in the company culture so that this person is valued, and this perspective isn't like, 'Oh, who messed up here so we can fire them?' It's not that

perspective of, 'Wow, we messed up, how did this happen, why did it happen, and how do we prevent it from happening again?' And this with everyone thinking, 'Okay,' It was a mistake, it was, we learned, we evolved, the game goes on. So, it's very much a company culture, it's about valuing these moments of reporting,

of learning, right? And not letting it go, like, "Oh, it 'll bother so-and-so, it'll bother so-and-so, do a makeshift solution." Exactly. This has to come from leadership, right? Unfortunately, right? Processes, right? It's all annoying together. Good. Uh, I have more questions here. I'll keep going, guys. The job description is still at the end

, right? Yes, it's the job description. Right. Oh, this is quick, but I'll answer. Fernando Santana asked: "Does IBAC already have a Discord server?" Not on Discord. We're our own two-like community. I'll ask the production team to send us the link in the chat soon, okay? And don't forget the certificate. You're participating in this webinar

with us, it's also part of a class, so you're entitled to the certificate too. I'll I'm sending you the link so you can issue it. It's only valid until today, okay? Until 11:59 you can issue your certificate at no cost. Have you already participated in this class? Great! I'm going to the next one. Nando Gomes sent

us this: "For those starting out in cybersecurity, what's most valuable today?" Investing in certifications or experience? Practice with labs, CTFs, and portfolio. That's a great question, man. I'll answer you by telling you something personal: I don't have any certifications. Okay, okay, I've answered. And I'm not even a graduate. Okay, you've answered. "It's over

," he replied. And that's a common question, right? Well, we work with nine verticals here, just in technologies, there are several, right? And people always ask: "Do I need a degree?" Man, I always encourage them, I say: "I teach, you can never have too much of it." But we live in the technology field,

in the project field, in the community field, and in the era of EAI (Environmental, Innovation, and Action). So, learn how to use this to your advantage, learn how to connect, learn how to participate in ch. What we were talking about here is EA ending up disguising the good professionals, right? But a good professional doesn't just go that way; he has to

be the curious type, the type who, regardless of whether he has a direction, a certification, or anything like that , feels the urge to go his own way, because he's that passionate, crazy person we're talking about here. Yes. And dude, I'm going, Renato sent a question here, look. Good evening, everyone. Send a shout-out to Recife. Greetings to

Recife. I wanted to ask something to those who are starting out in cybersecurity. What are the best specifications or courses? I'll skip ahead a bit to the part about the course, we'll talk about that later, but specifics, that's a question I also had, because back then I thought about going into the cybersecurity field. What

is the first step? If I need to learn Linux networking, I need to learn Firewall, you know? Download Cal. What's the first thing? It's a classic mistake for someone to think that the tool will solve something. What are networks? What is it? I don't know. Like I was saying, all knowledge will add up,

and naturally you'll always go to a deeper level to truly understand it. So, for example, operating systems, if you're talking about a program or development at a much higher level , you won't need to understand how the operating system works. But the good professional, the one who is bothered and who will deliver the best

results and quality code, is the one who understands the other layers, who is going into the more in-depth concepts, including operating systems, networks, firewalls, and so on. All of that will add up to making you a good professional. Well, as we answered the other question, and I'll reiterate, there isn't necessarily a set order, and you can use your discomfort, your

goal, as the guiding factor. It doesn't have to be in order. Ah, as someone with ADHD and as someone who was self-taught, I often say this: I hate linear things. I need a kind of discomfort that makes me want to be studying a particular subject at that moment. So, what I've always done to learn

is to create projects that I'll eventually stumble upon in that space. That's practice, right? Which means that I might not necessarily know right now a concept that you consider the main one or the primary point. Your point one might be my point ten, but naturally, if I remain restless and eager to learn,

improving my knowledge, I 'll get there eventually. Practice forces you to explore these concepts, right? I don't know, I want to connect to my neighbor's Wi-Fi, but I'm going to study, I'm going to study, I'm going to study. Suddenly you've learned something about an operating system, I'm going to do another task. You go from micro to macro

and back several times, right? So, practice is very good. I even say this on my own YouTube channel, right? That's where most people got to know me, and by the way, a shout-out to everyone who follows me on YouTube. We're all in this together, we're all in this together with the chat crew.

Ah, but I did that a lot there. I'd set a goal, and everything I go through along the way to reach that goal would be worth it. Uh-huh . valid knowledge. Ah, there was a video of mine that I even recompiled in Chrome to try and see if it would reflect in a capture of the voting,

I think from Big Brother, if I'm not mistaken, something that today I say "wow" and in the end it was n't anything like that, it didn't work, but it answered the same question. Éidou. So that's pretty much it, you know? It's about putting yourself out there; sometimes a lot of people ask what books you've read. Hey

man, I haven't read any because that's not my way of learning. Ah, so it might work for so- and-so, it might work for so- and-so, but understanding how you learn is, I think, the most crucial point in technology. Well, creating these small projects or these small motivations, something that justifies why you're focusing on a certain

subject, for me, is a factor that has completely changed things . I think there's a saying that people often talk about in the digital world: that someone like you, who didn't graduate and achieved success, is having the same success you had. It's like playing soccer; it's for a select few. And then I say that it's possible to break

that rule. It's always about practice, man. Like, a person will usually have this practice, they'll have this knowledge, then suddenly they'll meet more people, they'll discover they're a Racatom and go to a Racatom community, then they'll join a community and start exploring that community. So, it's rare for people without a degree to reach a

high level within the technology field. It's relatively rare, not as common as people would like it to be, but the only rule is that they all enjoy the practice. Uh-huh . Back in the day, you could get a certificate from ITA and become an executive, a trainee, quickly, just with that piece of paper,

because ITA proved that you went through an experience and you were required to do certain practices, right? Ultimately, it ends up being a sort of validation for a gap in the selection process. Today, society is so well-informed in its ability to evaluate these people that I, even without an ITA (Instituto Tecnológico de Aeronáutica) certificate, could be

selected over someone who did, but it will be based on what I've done, what I'm delivering, what I'm saying, and how I'm saying it, right? So I think practice is what solves this equation, this Neymar equation, right? Yes. And one does not cancel out the other. I always say that. We have 160,000 students.

I would speak, if I had the opportunity to speak to everyone, I would. Complementarity is important . So, you're being complementary, look, I'm very good at this, I don't need a college degree to get this position, as is the case here with many people, but if you can get one, that's great too.

Maybe you won't need it at the beginning of your career, right? But then I'll earn some money and do it if I want to. You're at a point where you wouldn't need to do your master's degree; you're doing it to gain more experience. I usually say, there are a lot of people who

talk about these negative visions of the future and so on. I say that for me, the most terrifying scenario is thinking about being on a couch for a long time with nothing to do because I'm doing it for me. Oh no, never. Just like when I had vacation on the third day, I'll be trembling,

wanting to grab a code so I can mess around with it . This discomfort is a crucial factor in the DNA of technological evolution and is completely aligned with the next question I have here, guys. Unfortunately, we're nearing the end, so now's the time to ask questions. Gesimiel sent this to us. Let's

try doing this here. Quick, fast-paced game of ball games. Let's go. First thing that comes to mind, huh? Which human skill will remain irreplaceable in the age of AI and cybersecurity? Storytelling, curiosity, resourcefulness, the ability to make things happen. A mixture of the two. Can you explain it quickly? No, I think if you can't

tell a good story in a time when anyone can create anything, you're not going to sell, you're not going to convince anyone to use it, right? So if you want to be a leader today, it's about telling a good story, because there are 50 solutions competing with EBAC. Why do we sell? We'll tell the story of EBAC

soon. Exactly. Good. Good point . Well, if everyone's wearing red, whoever wears blue will stand out. So, I think that on top of that, ah, that's reflected a lot. We might have a scenario where many people are delivering quality work thanks to AI, but it's the person who was bothered by the process who will stand out, in my

view, and who will continue to stand out. Good. And it's my way of unfolding things, because we have the ability to make everything happen. Uh-huh . As human beings, and especially as Brazilians, we will learn in every way possible. Brazilians are hackers by nature. He is a hacker at heart. We'll figure out

a way to make it work together with us. I'm not at all afraid that Scarnet isn't listening to me, not at all . She won't be able to dominate because we'll be able to get around that and overcome it. Good. Fast forward 10 years, okay Pedro? She's here, didn't you tell her? We're thanking Iá for that. Ah, junade

mo de vocês. Send a shout-out to no one, but I always thank my GPT because I'm afraid of that. Okay, let's go, guys. There are a lot of people here asking about EBAC courses in the chat. Guys, you can find EBAC courses at ebaconline.com.br. We currently have a portfolio of over 130 products and

160,000 students enrolled with us. But today, remember that we have an exclusive offer here for IA Start, which is a course designed to take you to a professional level in the use of AI. These are 10-hour courses, not including the assignments you'll complete with us and the live sessions you'll participate in, where you can bring your

real-life problems for analysis with the instructor. Beauty? Today it's 55% off, so don't waste time, click the button here to secure yours. Ah, Pedro, I'm not sure if I'll buy it now, I don't know how it's going to be. Click the button to ensure driving. This is a tip that Pedro, who the production team is nagging me about, is

giving you. Go ahead and click the button to make sure you're taking advantage of this promotion , okay? Yes, and don't forget the certificate. It's very good, especially for your resume, to have a certificate of participation and attendance at live events. If you are a university student, this counts towards your supplementary hours, so you can receive a

certificate. Don't forget, it's only until 11:59 today and it's not marketing, I swear. 11:59 is the limit. Let's move on to the next one. And then I think I'll have to wrap it up . So, we'll describe it, uh, I'll read one more here and then we'll move on to the job description. Could it be? Let's go

then. Caio José Pimentel sent: "Gabriel, have you been having more work because of the AI, in other words, more bugs and vulnerabilities to spot?" The little guy even broke a sweat here. My God, a movie played in my cave. Certainly, as we were saying at the beginning, the demand has increased a lot, the number of attempts

has increased a lot, right? It's no coincidence that we're finding flaws in operating systems that existed 15 years ago, but were simply considered untouchable. Nobody exploited it. No one explored the exploration. Well, the barrier to entry for exploration has dropped dramatically. So, the number of attempts and successes in the attacks increased significantly. So, in that

sense, it fosters the security market, which I'm a part of. That's a bad thing, but I say that being an offensive security guard right now is the easiest because I 'm celebrating the chaos, but it's also being on the defensive side, which is where I naturally play, right? It's a cycle; everything ultimately comes down

to security within a unified framework. Oh, that 's really scary, isn't it? I believe, I'm very optimistic, right? Chaos prepares us for something new, maybe something better, right? If we can organize this chaos even minimally, it's a step towards something better, right? Exactly. My job is precisely to provoke this, so that the

annoying question, the annoying guy in the group, is me, who's part of the team, and not some intruder who's already there in the newspaper publishing a leak. So, uh, making security offensive, it has that role, it's about poking at the wound, but know that it coming from someone within the team is much better than coming from a

journalist covering a Vasco case, feedback from friends. Trust me, trust me. Awesome! Alan, pull that stitch again. We will answer him. We're going to wrap things up . We usually talk about this during our live streams, right? So, if someone wanted to follow your path to have the profession you have today, the reach

you have today, but I'm going to change it a little bit. So, if a business owner were to hire someone to take care of their security and everything else, what would that job description look like? If you were to do a job consulting for, let's not say junior, but perhaps someone to handle security in a

company that doesn't have one? Ah, I'm going to go back to the point of curiosity, which for me is, I think, the easiest way for me to differentiate between someone I consider likely to be a good professional and someone who isn't. Ah, that's pretty clear to me, or to you to be honest. I see the

guy who's been wanting to tinker since the young man liked to mess with his game to put on a skin that wasn't part of the game, to put the car in GTA. These annoyances, these curiosities, this desire to change something, even without a reason, for me, that's the main point that I know will allow this person to

remain a good professional, because technology changes every day. It's very difficult to keep up with this movement. Uh, I was saying yesterday that Gemini released version 3.8, and I said, "Man, version 3.7 was, I don't know, three weeks ago, two weeks ago, I had just commented on that, and now there's a new version."

So, either you're crazy or you're in love. So, because without that discomfort, you really won't be able to keep up, and then you evaluate it in practice. Exactly, yes. Yes, it's precisely about not wanting to keep adding items to your description, like, "Oh, I completed this, and so on." The subject, concluding that, is

naturally letting oneself flow through all those paths. And then it's about looking at GitHub, looking at portfolios, looking at projects, and also engaging in conversation, right? Exactly. It's about exploring. Explore. Awesome, fantastic! Well, we've already spent 20 minutes of our time here, people are pulling my bag, it'll take another two hours. But I wanted to extend this conversation,

guys. We're not going to stop here, though. Find us on Instagram, find us on LinkedIn. We, I mean Alan Pedro, Pato, and Ebac, call us over to talk. We are very open and always encourage that. We were just talking about positioning ourselves in the market, about establishing ourselves. Guys, you have in your

hand the certificate that proves you just listened to a lesson by Gabriel Pato. That's really cool of you guys to do. Share it on LinkedIn, tag us, follow EBAC and EBAC Tub, okay? We would also be very happy to see your comments, what you thought of these live streams, and suggestions for topics for the next one. The

idea is that we might come back here weekly. It all depends on you, encouraging us, leaving comments so we can always bring you the hottest topics. Beauty? Guys, I was asked to remind you that you have until today to fill out the certificate, and it will arrive in your email inbox tomorrow. Beauty? And Alan Pato,

what's the final message here to wrap things up for everyone? I'll go first, then our guest will speak. Okay then . My social media networks are Alandantas on LinkedIn and Instagram. On LinkedIn, I tend to respond more quickly. My schedule is open, if you want to chat , grab a coffee. You can be a

business owner, student, alumnus, whatever , let's talk, I'm always available. And that's practical, right? By publishing a certificate from an EBAC event, you're at least proving—it's not an item, but it shows that you participated in a live session and were here with us, right? And there's Pato liking his comment, liking his certificate,

Pato's network will see it, my network will see it. This is an exposure that, if you are prepared, can be very good for you. I think that's my message, and thank you. Ultimately, what we're doing here—conversing—is the human side of things, and that's what will be most valued in an increasingly synthetic internet. So,

congratulations to everyone who's following us, who's interacting, because you're doing what the internet, unfortunately, is losing, which is human connection. And each one is using it more and more. Ah, I'm going to use a boat to increase my growth. Ultimately, it's going to be a case of one person reading and liking the

other's posts. And here we are doing the opposite, which is essential at the moment. Exactly. We are the resistance here. So, thanks for the invitation. It was an honor to be a part of this conversation. Yeah, you can call me as many times as you want. I'm here, we'll be here for this

chat. If you let us, we can talk about this for hours, because it's truly something I talk about out of passion. I really enjoy sharing a little bit of my passion for this subject and seeing the new generation arriving, growing, and taking over the market. Well, for me it's extremely rewarding and I really enjoy

being a part of it. So, thank you for the invitation. Hey guys on Instagram, @gabrielpato, and on YouTube too, Gabrielpato. I promise I'll be back there soon, back to my core content creation roots. Look how cool, Duck! I would like to thank you on behalf of all of Ebua for your participation. We are very happy. Did

you see the team here? Everyone who 's a fan of Napoleon over there is up there in the production crew. Juno. Everyone is happy to have you here. Chat team, thank you for sticking with us here. You might think it's common, but it's not, guys. On a Thursday, from 7 pm until almost 8:30 pm, you can join us here for a

class. So, thank you from the bottom of my heart. Don't forget to share what you see here, and feel free to get in touch with us. Remember to issue your certificate and secure your course status here. I think those were my messages. Now it's just a matter of saying thank you again, Alan Pato. Thanks. Thank you,

everyone. It was a true honor. I loved being a part of this conversation, and you can count on me. I will always be here to comment on precisely those issues that we applaud, but that many people have good opinions about. We're in this together, guys. Thank you and good night to you all. Goodbye. It cost,