Fortinet 0days, Appin hack-for-hire exposé, crypto heists, Russians booted from Linux kernel
Description
Three Buddy Problem - Episode 18: This week’s show covers the White House's new Traffic Light Protocol (TLP) guidance, Reuters expose of Appin as a hack-for-hire mercenary company, Fortinet zero-day exploitation and missing CSRB investigations, major cryptocurrency heists, Apple opening Private Cloud Compute to public inspection, Russians removed from Linux kernel maintenance and China’s Antiy beefing with Sentinel One over APT reporting.
Cast: Juan Andres Guerrero-Saade (SentinelLabs), Costin Raiu (Art of Noh) and Ryan Naraine (SecurityWeek).
Links:
Transcript (AI-generated)White House TLP guidanceApplin -- How an Indian startup hacked the worldBurning Zero Days: FortiJump FortiManager FlawMandiant on FortiManager Zero-Day ExploitationFortinet bulletin on new 0day exploitationRadiant Capital $50M cryptocurrency theftDPRK's Lazarus steals cryptocurrency with decoy MOBA gameApple opens Private Cloud Compute to security inspectionRussians booted from Linux kernel driver maintenanceAntiy paper responding to SentinelOne
Three Buddy Problem - Episode 22: We discuss Volexity’s presentation on Russian APT operators hacking Wi-Fi networks in “nearest neighbor attacks,” the Chinese surveillance state and its impact on global security, the NSA's strange call for better data sharing on Salt Typhoon intrusions, and the...
Published 11/22/24
Three Buddy Problem - Episode 21: We dig into an incredible government report on Iranian hacking group Emennet Pasargad and tradecraft during the Israel/Hamas war, why Predatory Sparrow could have been aimed at deterrence in cyber, and the FBI/CISA public confirmation of the mysterious Salt...
Published 11/15/24