Podcast Episodes
Back to Search
Rethinking APT Attribution: Dakota Cary on Chinese Contractors and Espionage-as-a-Service
Three Buddy Problem - Episode 56: China-focused researcher Dakota Cary joins the buddies to dig into China’s sprawling cyber ecosystem, from the HAFNIUM indictments and MSS tasking pipelines to the m…
Published on 4 months ago
Microsoft Sharepoint security crisis: Faulty patches, Toolshell zero-days
Three Buddy Problem - Episode 55: A SharePoint zero-day exploit chain from Pwn2Own Berlin becomes a full-blown security crisis with Chinese nation-state actors exploiting vulnerabilities that Microso…
Published on 4 months, 1 week ago
Train brake hack, GRU sanctions, Wagner war crimes, Microsoft's Chinese ‘digital escorts’
Three Buddy Problem - Episode 54: Europol busted pro‑Russian hacktivist crew NoName 057(16), the Brits announce sanctions on Russia’s GRU cyber units, Wagner‑linked “war influencers” streamed atroc…
Published on 4 months, 2 weeks ago
How did China get Microsoft's zero-day exploits?
Three Buddy Problem - Episode 53: We dig into news of the first-ever arrest of a Chinese intelligence-linked hacker in Italy, unpack the mystery behind HAFNIUM and how they somehow got their hands o…
Published on 4 months, 3 weeks ago
Who’s hacking who? Ivanti 0-days in France, China outs 'Night Eagle' APT
Three Buddy Problem - Episode 52: Fresh intelligence reports out of Europe and China: France’s ANSSI documents a string of Ivanti VPN zero-days ('Houken'), and Quanxin frames a stealth Microsoft Exc…
Published on 5 months ago
Israel-Iran cyberwar: Predatory Sparrow, vanishing crypto, destructive bank hacks
Three Buddy Problem - Episode 51: Former Immunity/Trail of Bits researcher Hamid Kashfi joins the buddies for a fast-moving tour of cyber activities in the Israel-Iran war. The crew unpacks who 'Pre…
Published on 5 months, 2 weeks ago
Cyber flashpoints in Israel-Iran war, the 'magnet of threats', Mossad drone swarms
Three Buddy Problem - Episode 50: This week, we dissect cyber flashpoints in the Iran-Israel war, revisit the “magnet of threats” server in Iran that attracted APTs from multiple nation-states, and r…
Published on 5 months, 3 weeks ago
Mikko Hypponen talks drone warfare, APT naming schemes
Three Buddy Problem - Episode 49: Cybersecurity veteran Mikko Hypponen joins the show to discuss the fast-changing life and times on NATO’s newest frontline, how Ukraine’s long-range “Spiderweb” dro…
Published on 6 months ago
The dark hole of 'friendlies' and Western APTs
Three Buddy Problem - Episode 48: We unpack a Dutch intelligence agencies report on ‘Laundry Bear’ and Microsoft’s parallel ‘Void Blizzard’ write-up, finding major gaps and bemoaning the absence of …
Published on 6 months ago
Russia hacks Ukraine war supply lines, Signal blocks Windows screenshots, BadSuccessor vuln disclosure debate
Three Buddy Problem - Episode 47: We unpack a multi-agency report on Russia’s APT28/Fancy Bear hacking and spying on Ukraine war supply lines, CISA’s sloppy YARA rules riddled with false positives, t…
Published on 6 months, 1 week ago