Podcast Episodes

APTs pounce on React2Shell; BRICKSTORM backdoors; .gov surveillance

(Presented by ThreatLocker: Allow what you need. Block everything else by default, including ransomware and rogue code.)

Three Buddy Problem - Episode 75: We dig into a CVSS 10/10 unauthenticated RCE…

Published on 4 hours ago

Shai-Hulud 2.0, Russia GRU Intrusions, and Microsoft’s Regulatory Capture

(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.)

Three Buddy …

Published on 1 week ago

Gemini 3 reactions, Fortinet/Chrome zero-days, a Cloudflare monoculture and a billion-dollar crypto twist

(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.)

Three Buddy …

Published on 2 weeks, 1 day ago

Anthropic Claude Code automating APT hacks, KnownSec leak, Chinese buses with remote access

Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.

Three Buddy Pr…

Published on 3 weeks, 1 day ago

LIVE from Ring0 COUNTERMEASURE: Google v FFmpeg, Ransomware Turncoats, Samsung 0days

Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.

Three Buddy Pr…

Published on 3 weeks, 5 days ago

OpenAI’s Dave Aitel talks Aardvark, economics of bug-hunting with LLMs

Three Buddy Problem - Episode 70: Dave Aitel from OpenAI's technical staff joins the buddies to discuss the just-launched Aardvark, OpenAI’s agentic “security researcher” that claims to read code, fi…

Published on 1 month ago

Apple’s iOS forensics freeze, WhatsApp zero-click, China outs NSA

Three Buddy Problem - Episode 69: We dig into news that Apple's iOS 26 has quietly killed the shutdown.log forensic artifact used to spot signs of infections and what it means for threat hunters. Pl…

Published on 1 month, 1 week ago

JAGS LABScon 2025 keynote: Steps to an ecology of cyber

Three Buddy Problem (Episode 68): The buddies are trapped in timezone hell with cross-country travel this week.

In this special episode, we present Juan Andres Guerrero-Saade's LABScon 2025 keynote-…

Published on 1 month, 2 weeks ago

Apple Exploit-Chain Bounties, Wireless Proximity Exploits and Tactical Suitcases

Three Buddy Problem - Episode 67: We discuss the rise of automated red-teaming, Apple’s $2 million exploit chain bounties aimed at outbidding spyware brokers and the iPhone maker's focus on wireless…

Published on 1 month, 3 weeks ago

Chris Eng on lessons learned from the NSA, @Stake, Veracode, and 20 years in cybersecurity

This week on Security Conversations, Ryan sits down with Chris Eng, former Chief Research Officer at Veracode, to talk about life after nearly two decades at one company and the lessons learned along…

Published on 1 month, 4 weeks ago