Three Buddy Problem

Security Conversations
undefined
9 snips
Dec 27, 2024 • 1h 53min

Palo Alto network edge device backdoor, Cyberhaven browser extension hack, 2024 research highlights

Delve into the stealthy backdoor found in Palo Alto's network edge devices and the broader implications of the Cyberhaven browser extension hack. Explore the dangers of deepfake technology and its potential misuse in cyber threats. The discussion covers the pressing issues of browser extension security, phishing risks, and insider threats in today's landscape. Additionally, they highlight significant cybersecurity research from 2024, emphasizing the evolving tactics of state-sponsored cyber operations and the need for vigilance against increasing vulnerabilities.
undefined
11 snips
Dec 23, 2024 • 1h 59min

US government's VPN advice, dropping bombs on ransomware gangs

The podcast dives into the controversial U.S. government VPN recommendations and their risks, including potential backdoor access. It uncovers the ethical implications of spyware like NoviSpy used against activists in Serbia. The discussion on Mossad's clever tactics with ransomware exposes the murky depths of cyber warfare. Additionally, it highlights critical cybersecurity vulnerabilities and the challenge of navigating international cooperation amidst an evolving threat landscape. Funny anecdotes and personal updates keep the tone light and engaging.
undefined
16 snips
Dec 13, 2024 • 2h 14min

Surveillance economics, Turla and Careto, and the AI screenshots nobody asked for

Dive into the fraught intersection of technology and democracy, as discussions reveal TikTok's potential to sway elections and amplify misinformation. Explore the dark underbelly of cyber operations with insights into Turla's manipulative tactics and Careto's latest hacking efforts. The ethical ramifications of surveillance capitalism and the covert data capture on macOS raise eyebrows. Plus, a glance at quantum computing’s role in security challenges and the complexities of cyber warfare add layers to this riveting conversation.
undefined
7 snips
Dec 7, 2024 • 1h 47min

Inside the Turla Playbook: Hijacking APTs and fourth-party espionage

Dive into the intriguing world of cyber espionage as experts unravel the tactics of Russia's Turla APT, including its surprising theft from Pakistani networks. Discover the complexities of threat attribution and the challenges of identifying cyber actors. The episode also scrutinizes the concerning rise of spyware in Russia and the implications of supply chain vulnerabilities in Web3 technologies. On a more political note, explore the alarming election interference in Romania fueled by misinformation and social media dynamics.
undefined
4 snips
Nov 30, 2024 • 1h 19min

Volexity’s Steven Adair on Russian Wi-Fi hacks, memory forensics, appliance 0days and network inspectability

Steven Adair, the founder of Volexity and a cybersecurity expert, shares insights on crucial topics in the field. He discusses innovative approaches to memory forensics, emphasizing their importance in incident response. The conversation dives into Volexity's discoveries regarding Wi-Fi hacks and the complexities of EDR systems. Adair also addresses the rise of professional ransomware attacks, highlighting a recent Firefox zero-day and the emergence of a Linux bootkit. His expertise sheds light on significant vulnerabilities and the urgent need for robust network security.
undefined
Nov 28, 2024 • 1h 1min

Sid Trivedi on the RSA Innovation Sandbox $5 million investment gambit

In this conversation, Sid Trivedi, a partner at Foundation Capital specializing in early-stage cybersecurity investments, discusses the RSA Innovation Sandbox's new $5 million investment requirement for finalists. He highlights red-flag concerns regarding pro-rata rights and ethical dilemmas facing CISOs involved with startups. The dialogue also delves into the challenges of funding seed-stage companies in a platform-driven market, while reflecting on the complex relationships between venture capitalists and groundbreaking innovations in cybersecurity.
undefined
12 snips
Nov 22, 2024 • 1h 28min

Russian APT weaponized nearby Wi-Fi networks in DC, new macOS zero-days, DOJ v Chrome

Join security experts Juan Andres Guerrero-Saade from SentinelLabs and Costin Raiu from Kaspersky as they dive into the fascinating world of cyber threats. They discuss alarming tactics used by Russian APTs to exploit nearby Wi-Fi networks and the urgent need for better Wi-Fi security measures. The conversation also covers the DOJ's push to break up Google and the implications for cybersecurity. They touch on the challenges of data sharing across sectors and the transformative impact of AI on coding practices, revealing both opportunities and risks.
undefined
34 snips
Nov 15, 2024 • 1h 54min

What happens to CISA now? Is deterrence in cyber possible?

In this discussion, Juan Andres Guerrero-Saade, a security researcher from SentinelLabs, and Costin Raiu, Director at Kaspersky, dive into the intricacies of cyber deterrence and the evolving threats from Iranian groups. They examine the implications of the FBI and CISA's investigation into recent cyber espionage incidents, including the Salt Typhoon hacks. The conversation also explores the uncertain future of CISA amid political changes and the impact of emerging cyber capabilities from China. Insights into corporate transparency and the role of cryptocurrency in cybersecurity round out this compelling dialogue.
undefined
35 snips
Nov 9, 2024 • 1h 37min

Mysterious rebooting iPhones, EDR vendors spying on hackers, Bitcoin 'meatspace' attacks

Join security experts Juan Andres Guerrero-Saade from SentinelLabs and Costin Raiu from Kaspersky as they dive into intriguing topics. They unravel the mystery of iPhones rebooting in law enforcement custody due to a new iOS feature. They discuss malware like GoblinRAT and North Korea's cunning cryptocurrency theft tactics. The conversation also touches on the ethics of EDR software transparency and the dangers of physical attacks in the crypto world, offering essential insights for enthusiasts and professionals alike.
undefined
47 snips
Nov 3, 2024 • 1h 54min

The Sophos kernel implant, 'hack-back' implications, CIA malware in Venezuela

Joined by Juan Andres Guerrero-Saade, a malware expert at SentinelLabs, and Costin Raiu, Kaspersky’s Director of Global Research, the conversation dives deep into contemporary cybersecurity challenges. They discuss the ethical quandaries of using Sophos's kernel implants for monitoring hackers and the controversial notion of 'hack-back.' The guests also explore CIA malware activities in Venezuela and an alarming espionage scandal involving the Vatican, highlighting the intricate ties between cyber operations and geopolitics.

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app