Three Buddy Problem Shai-Hulud 2.0, Russia GRU Intrusions, and Microsoft’s Regulatory Capture
25 snips
Nov 29, 2025 The hosts dive into Microsoft's shifting stance on intel sharing and what it means for the security landscape. They dissect the Shai-Hulud 2.0 npm supply-chain attack and its implications for trust in package ecosystems. CISA's guidance on mobile spyware elicits strong opinions, while NSO's legal troubles reveal the complexities of cyber capabilities. Arctic Wolf's report on GRU-linked intrusions shines a light on geopolitical cyber threats, and the FCC's rollback of telecom cybersecurity rules sparks vital debates on regulation and accountability.
AI Snips
Chapters
Books
Transcript
Episode notes
Policy Push Can Be Regulatory Capture
- Microsoft's policy push reads as regulatory capture: shape rules to protect cloud and AI market position.
- Public advocacy for policy often doubles as strategic positioning to influence regulators.
Supply-Chain Operation Looks Criminal
- Shai-Hulud 2.0 appears more like credential-harvesting criminal infrastructure than a classic nation-state APT.
- Its stealthy exfiltration via GitHub makes detection and attribution harder and long-term impact likely.
Treat Dependencies As High-Risk Assets
- Add supply-chain monitoring and block suspicious package updates in CI/CD pipelines.
- Treat third-party dependencies as high-risk and enforce stricter vetting and change controls.
