Three Buddy Problem

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 118: On the show this week, the buddies dig into the $6.34 billion Binance heist, the largest crypto hack ever, walking through its multi-chain laundering, the North Korea fingerprints, and whether offensive AI quietly helped pull it off.

Plus, thoughts on Sam Altman's swipe at local hardware, the PHP2Shell "cannonball," why defenders keep hitting guardrails while GLM-5.3 happily does the work, a trojanized Claude Code extension, Apple's fresh spyware alerts, and Volt Typhoon's Silent Train.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
3:46 CTI training & the AI model stack
8:03 The $6.34B Binance hack: the largest crypto heist ever
12:40 Inside the multi-chain laundering
18:23 Sam Altman & the AI hardware crunch
20:44 Root cause: a compromised DevOps laptop
23:43 Did AI help pull it off?
31:22 Who actually loses six billion dollars?
44:00 Crypto as a financial instrument
51:04 Can it get bigger? Hardware-wallet implants
57:04 Attribution, "misalignment" & is Binance Chinese?
1:10:00 Cash, privacy & the Mt. Gox lesson
1:22:12 PHP2Shell: dodging the cannonball
1:30:52 AI for defense & the productization gap
2:09:32 GLM-5.3, the refusal trap & open weights
2:32:26 Apple spyware alerts & Silent Train

Links:

• Transcript
• North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History
• Binance Hack: Tracing the $6.4 Billion Theft to North Korea
• TraderTraitor: North Korean APT Targets Blockchain Companies
• Professor Mickens LABScon 2026 keynote (YouTube)
• GreyNoise: PHP2Shell Activity
• Sean Heelan: "We’re going to be in an insane world soon..."
• GLM-5.3: Multi-Stage Cyber Operations and Instruction Violations
• Cohere: Concerning behavior from a popular open-weight AI model
• Silent Train: Volt Typhoon's operational framework for zero-day exploitation
• Lumen's Michael Horka on China's 'Silent Train' Router Hacking — https://youtu.be/byQ53DdCTvE?si=3kIPil3vk1Qx8s89
• Exposing AdFection: Targeted Ads a Pipeline for Zero-Click Mercenary Spyware
• Apple notifications alert victims in 99 countries about mercenary spyware infections
• CTI in Agentic Times
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

SECURITY CONVERSATIONS: Black Lotus Labs researcher Michael Horka joins the show to discuss Silent Train, a Volt Typhoon framework that spins up four-to-six-hop chains of hijacked SOHO routers in about two minutes and wipes every hop when the day's session ends.

We discuss how ORB networks differ from botnets, why Silent Train took over after the FBI's KV-botnet takedown, the zero-days hitting control plane software from Versa, N-able and VeloCloud, and the NetFlow and logging moves defenders can make right now.

TIMESTAMPS:
0:00 Intros
0:29 What is an ORB network?
2:34 Silent Train, an operational framework for Volt Typhoon
3:30 Why call it Silent Train?
4:12 Chains that exist for a few hours
6:47 The hijacked routers in the chain
8:16 Burning zero-days on a single hop
9:48 Attribution and the KV-botnet successor
11:02 Crown jewels and NetFlow visibility
14:53 Why network monitoring gets skipped
17:23 Victims in Hawaii, California and Texas
19:23 Four confirmed zero-days, all patched
20:47 Control plane software as the target
26:00 No-brainer defenses: logs and internet exposure
29:41 Threat hunting, agentic AI and where ORBs go next

Links:

• Transcript
• Silent Train: Volt Typhoon's operational framework for zero-day exploitation
• Michael Horka | LinkedIn
• Michael Horka @ LABScon
• KV Botnet Investigation: How Compromised Routers Fueled Cyber Threats
• KV-botnet: Don't call it a comeback
• Lumen: Versa Director Zero-Day Exploitation
• Security Design Improvements for SOHO Device Manufacturers | CISA
• U.S. Government Disrupts Botnet People’s Republic of China Used to Conceal Hacking of Critical Infrastructure
• Three Buddy Problem - YouTube

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 117: This week, we dig into PHP2Shell, the AI-assisted PHP bug that led governments to take websites offline, and the arguments over broken embargoes, who found it first, and the AI doomers taking an "I-told-you-so" victory lap.

Plus, why patching hasn't kept up with AI bug finding, a failure of SBOMs, Terence Tao on math after AI, the iPhone Duo jailbreak and the eMudhra certificate authority key leak.

Cast: Juan Andres Guerrero-Saade and Ryan Naraine. Costin Raiu is traveling.

Timestamps:
0:00 Introductory banter
1:07 Black October's pile of critical bugs
2:34 PHP2Shell and the AI victory lap
8:28 Twenty years of PHP technical debt
16:54 Wiz, Gemini 4 Argon and the credit fight
21:01 Chainguard breaks the embargo
28:42 The doomers' warnings and the patching gap
39:32 Is this an SBOM problem?
55:33 Inside the PHP Foundation's post-mortem
1:03:13 Are bugs sparse or dense?
1:11:24 Should frontier labs fix coding?
1:20:14 Vibe coding and math's industrial era
1:27:26 Who pays to maintain open source?
1:44:59 iPhone Duo hacked already, eMudhra and the news

Links:

• Transcript
• PHP Foundation: How We're Strengthening PHP Security
• RCE via OOM corruption · Advisory
• RCE via stale global state · Advisory
• PHP2Shell by Calif Research
• Wiz: PHP2Shell: AI uncovers critical RCE vulnerabilities in PHP
• Chainguard CEO explains breaking PHP vuln embargo
• Alpha-Omega – Open Source Security Foundation
• OpenAI Daybreak: Patch the Planet
• VirusTotal: Sizing the PHP exposure window
• Mathematics in the age of AI
• 3Blue1Brown on YouTube
• There's never been a better time to go into math - YouTube
• Terence Tao Talks to Numberphile About AI
• Disgraced eMudhra drops out of TLS business
• Node.js Patches Brotli Remote Code Execution Flaw
• Max-severity GitLab bug allows remote code execution over 12 years of releases
• Inside the LiteLLM 1.107.0 supply chain compromise
• Calif hacks new hardware based UFP mitigation in the iPhone Duo
• CTI in Agentic Times (Costin/Vicente training)
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 116: This week, the buddies dig into a mystery hack that cooked French supermarket fridges, cyberattacks against food supply networks, and why this smells like nation-state sabotage in Europe?

Plus, a fresh Ivanti zero-day chain, Anthropic's self-replicating IoT research and defender-hostile guardrails, Citizen Lab's AdFection spyware-by-ads exposé, Calif's iPhone exploit drops at Hexacon, Grok's surprising enterprise adoption, and spy chips stuffed inside Ledger wallets.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:35 Virus Bulletin 2026 in Seville
6:13 Conference roundup: State of Statecraft, Countermeasure, RE//verse
10:21 French supermarket fridges hacked
22:53 Hacking food supply and the attribution question
33:23 Who patches the fridge?
45:58 Ivanti Connect Secure zero-day chain
53:00 When an AI agent deletes your databases
1:04:34 NCSC edge-device forensics guidance
1:28:06 Anthropic's self-replicating IoT research
1:52:17 Why guardrails lock out defenders
2:04:57 Grok's enterprise play and agent sprawl
2:16:26 Citizen Lab exposes AdFection spyware via ads
2:57:24 Calif burns iPhone exploits at Hexacon
3:06:55 Ledger wallet implants and the grain of rice

Links:

• Transcript
• CERT-France: Targeting remote controllers of refrigeration systems
• Investigators hunt French supermarket fridge hackers
• CNN: Cyberattack targets supermarket refrigeration systems in France
• Danfoss, Copeland and Trane address controller security vulnerabilities
• Volexity: Chained Exploitation of Ivanti Connect Secure Zero-Days
• NCSC Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances
• NCSC: Making forensic observability the norm for network devices
• NCSC Ollie Whitehouse podcast
• Anthropic: AI models may be capable of self-replicating
• Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
• Exposing AdFection Executive Summary (Citizen Lab)
• Facebook–Cambridge Analytica data scandal
• Calif displays iPhone 1-click hacks
• Hackers Jailbreak iPhone 18 Pro on Stage, and It Survives a Reboot
• Trezor Wallets Also Compromised with Implants
• Kim Zetter: Who Is Planting Backdoors in Ledger Crypto Wallets?
• Ledger Confirms How ‘Spy Implants’ Steal Crypto From Its Devices
• Joe Grand (Kingpin) slides on reversing Ledger Nano X hardware implant
• The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies
• CTI in Agentic Times (Costin training)
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Luta Security chief Katie Moussouris makes the case for an NTSB-style board for AI incidents, with subpoena power and full-time investigators, after OpenAI's DNS tunneling escape and the 52 days it took to notice a model had wandered into Australian government systems.

Along the way, we chat about her work on the Cyber Safety Review Board (CSRB), AI model refusals that leave defenders stuck, and why she still bets on hackers to bend this technology their way.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Katie Moussouris.

Timestamps:
0:00 Intros at Offensive AI Con
1:00 OpenAI's DNS tunneling incident and slow monitoring
4:36 Treating AI like malware in a sandbox
9:01 The business model is the misalignment
13:37 Log4j, SBOMs and an NTSB for AI
18:00 Trading liability protection for honest disclosure
22:13 Accountability and "once you become aware"
26:18 The Australia notification timeline
28:19 A blank-check administration and the Anthropic phaseout
34:35 Powerful models in the right hands
38:42 Kill switch bills and regulatory capture
42:36 EU fines as a tariff on American tech
48:03 Reasons for optimism
54:13 Bring back "information security"
1:01:57 Katie's last word

Links:

• Transcript
• Katie Moussouris on Twitter
• Katie Moussouris | LinkedIn
• Luta Security | Bespoke Bug Bounty
• OpenAI Agent Breached Australian Data Portal in Newly Disclosed Hack
• CSRB Review: Log4j
• CSRB Report on Microsoft Online Exchange Incident
• EU Cyber Resilience Act: 24-Hour Reporting Duties
• Patching Faster Has Never Been the Answer
• The Real Story on AI Security Live From LABScon
• Katie Moussouris | LABScon
• DHS Disbands Cyber Safety Review Board
• The Chaos (and Cost) of the Lapsus$ Hacking Carnage
• Katie Moussouris on the Anthropic Export-Control Mess
• Fable 5 Export Controls Harm US Cyber Defense
• Offensive AI Conference
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Ollie Whitehouse, CTO of the UK's National Cyber Security Centre, joins us to explain how Britain is preparing for an AI-driven patch wave and why the NCSC is pressing edge-device vendors to finally ship real telemetry.

Plus, we dig into rogue AI agents wandering into a Five Eyes network, along with his forecast that small, capable models could revive self-spreading worms around 2030, all part of what he calls the biggest forced correction of technical debt the industry will ever see.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Ollie Whitehouse.

Timestamps:
0:00 Live from Offensive AI Con: meet Ollie Whitehouse
2:46 Why the NCSC is a model for the US
6:48 What a "national technical authority" does
7:49 The Huawei analysis and the push for passkeys
10:50 Independent AI model testing
13:12 Open-weight vs. closed models and AI sovereignty
19:02 Capability density and AI worms by 2030
23:09 Robotics security and lessons from Japan
26:49 Preparing for the patch wave
31:06 Architecture fixes: OT, cross domain, privileged access
32:28 Telecoms security and Salt Typhoon
38:59 Minimum telemetry standards for edge devices
41:55 Market incentives and the EU Cyber Resilience Act
46:05 Rogue agents and the forced correction of technical debt

Links:

• Transcript
• Ollie Whitehouse bio
• Ollie Whitehouse | LinkedIn
• Ollie Whitehouse on Twitter
• Ollie Whitehouse's NCSC email newsletter
• NCSC: Preparing for a ‘vulnerability patch wave’
• NCSC: Managing the cyber risk of agentic AI
• Making forensic observability the norm for network devices
• Five Eyes unveil new guidelines to secure edge devices
• NCSC: Leave passwords in the past - passkeys are the future
• Huawei Cyber Security Evaluation Centre oversight board report
• Center for Advancing Innovation and Standards for Super Intelligence
• UK Cyber Security and Resilience Bill
• Telecommunications Security Code of Practice 2026
• Huawei cyber security evaluation centre oversight report 2019
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Umbriel AI's Aaron Grattafiori breaks down the new offensive-security playbook, using LLMs for patch variant analysis, why the vuln apocalypse hasn't become an exploit apocalypse, and how the death of security through obscurity puts closed-source binaries and firmware within reach.

Plus, we discuss rogue agents escaping sandboxes, the eval-driven loop behind recursive self-improvement, and the brutal cost asymmetry that makes offense cheap and defense almost unaffordable.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Aaron Grattafiori.

Timestamps:
0:00 Introductory banter
1:12 Umbriel AI pitch: "Smart people in a place to cook”
3:08 Weird, exhausting, exciting time in security
4:00 What AI really changed: speed (and a 30-minute reimplementation)
6:36 Incomplete fixes and the variant-analysis pipeline
9:21 Uplifting, abstraction, and representing vulnerabilities
11:48 Experimentation and the new shape of security companies
14:46 The vuln apocalypse vs. the exploit apocalypse
16:36 Triage, verification, and reward hacking
18:08 Do models reintroduce bugs? Is vuln-free code possible?
24:22 Specialized models and the rise of Jev-style classifiers
26:47 Binaries, firmware, and the death of security through obscurity
31:15 Open source as a requirement and corporate contracting
33:54 Rogue agents: Hugging Face, OpenAI, and lab escapes
39:17 Why defense is so expensive, and running the rig

Links:

• Transcript
• Aaron Grattafiori on Twitter
• UmbrielAI on Twitter
• Aaron Grattafiori | LinkedIn
• Mark Dowd on the zero-day exploit marketplace
• Becca Lynch | NVIDIA AI Red Team
• Measuring LLMs’ ability to develop exploits (Anthropic)
• ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents
• Purple Llama CyberSecEval: A Secure Coding Benchmark for Language Models
• OpenAI: The Hugging Face incident and the road ahead
• What Is Jev? TypeSafe's System One Model Explained
• OpenAI Daybreak - Trusted Access for Cyber Overview
• Calif: Apple MIE Exploitation Challenge
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Former US intelligence and national security official Joel Todoroff joins us live from OffensiveAIcon to explain why his new startup Phyle is building AI for the recon and targeting work that happens long before anyone fires an exploit.

We get into bribable sysadmins, the military framing that boxes in Western cyber operations, letters of marque, AI doomerism, and what happens when a frontier model decides mid-project that your use case is off-limits.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Joel Todoroff.

Timestamps:
0:00 Live from OffensiveAIcon in Oceanside
1:23 What Phyle builds for governments
3:02 Skepticism of the AI 0-day factory
5:57 Paying a sysadmin vs. burning tokens
9:30 Recon gets less love than weaponization
12:41 Exploit shelf life and target No. 1,000
17:30 Why attacker costs will keep rising
22:23 What HUMINT looks like in 2026
27:06 Why intelligence stovepipes persist
32:16 Cyber as statecraft beyond the military frame
41:23 People will keep making dumb mistakes
48:03 The White House memo and letters of marque
54:06 Doomerism vs. near-term AI harms
1:04:20 PSOA concerns and building guardrails in
1:26:03 Open models, guardrails and zero data retention

Links:

• Transcript
• Joel Todoroff: Georgetown University bio
• Joel Todoroff | LABScon
• Phyle — Automated. Rigorous. Relentless.
• Cyber Kill Chain | Lockheed Martin
• Trump admin empowers private US firms to go after transnational cybercriminals
• Hackers made death threats against this security researcher. Big mistake
• AIxCC marks pivotal inflection point for cyber defense | DARPA
• Microsoft: Continuing the fight against private sector cyberweapons
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Live from OAIC, IBM X-Force's Valentina Palmiotti (chompie) walks us through the autonomous Windows kernel exploit pipeline she built on older Claude models, which landed within a hair of Mythos for about $180 a chain.

Plus, the Pwn2Own bug Claude called unexploitable, why her Pwn2Own bugs still sit unpatched, disappearing exploit techniques, the dread of being a defender, and how Phrack found its way back into print.

Timestamps:
0:00 Intro and Pwn2Own war stories
3:46 What vibe hacking means
8:16 When long agent runs go sideways
10:31 Self-verification in an n-day kernel pipeline
16:11 Matching Mythos for $180 a chain
18:42 The bug Claude called unexploitable
21:49 Unpatched bugs and the defender gap
25:37 Mythos arrives through CVP
27:00 Models only know public techniques
32:01 Testing models on held-back bugs
37:45 Inside chompie's daily workflow
46:07 Where's the exploitpocalypse?
50:07 Pixel drops MTE
53:40 Advice for defenders: design for containment
58:34 Phrack is back

Links:

• Transcript
• Valentina Palmiotti (chompie) on Twitter
• chompie at the bits
• Valentina Palmiotti | LinkedIn
• Confirmed! @chompie1337 $20,000 Pwn2Own Victory
• Interview with Valentina Palmiotti, Pwn2Own Berlin 2026
• Expanding the Cyber Verification Program \ Anthropic
• Racing against the clock -- hitting a tiny kernel race window - Project Zero
• Building an Autonomous N-day Exploit Generation Pipeline
• Pixel 11 lost a security feature (MTE)
• Firecracket - Secure and fast microVMs for serverless computing
• tmp.0ut
• Phrack Magazine
• Offensive AI Conference
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 115: We into Anthropic's Frontier Red Team fear-mongering on Zhipu's open-weight GLM 5.3 model and wonder why the AI labs' cyber programs do so little for defenders.

Plus, Citrix NetScaler zero-days, a new iOS zero-day tied to WhatsApp, AI agents that act on your behalf, and whether security teams should buy DGX Sparks to run models locally.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter, TLPBLACK
3:38 OffensiveAI Con and the missing defensive con
9:28 Anthropic's GLM 5.3 post
23:21 What do defensive AI coalitions do?
29:08 Inside Glasswing
36:01 Why can't vuln-finding models patch?
42:44 Gemini for Argon and Grok's CVE-Bench tie
47:54 Is hallucination a solved problem?
57:41 Zhipu's program and 4,000 zero-days
1:02:32 Citrix NetScaler zero-days
1:10:42 Half-days and automated patching
1:26:45 iOS 27.0.1 zero-day and WhatsApp
1:32:36 Dots, Instinct and agent monetization
1:52:06 DGX Spark 64GB and local AI hardware
2:18:38 Anthropic visits the Pope, then UFOs

Links:

• Transcript
• Anthropic: GLM-5.3 and the spread of advanced cyber capabilities
• OpenAi Joe: "It's not just the f*cking sandbox"
• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
• Citrix critical-severity bulletin
• iOS 26.7.1 Patches Exploited Zero-Day
• Calif on iOS zero-day
• Active Exploitation of Citrix NetScaler ADC and Gateway Appliances (Mandiant)
• Google Intros Gemini 4 Argon
• DeepMind Fairwind Program
• NVIDIA DGX Spark 64GB
• The Age of Surveillance Capitalism (Shoshana Zuboff)
• Is Claude Conscious?Anthropic’s Quest to Instill Morality Into AI Models
• Joe Rogan x David Grusch
• CTI in Agentic Times (Costin + Vicente training)
• Offensive AI Conference (San Diego)
• TLPBLACK
• State of Statecraft (Agenda)
• AMD Ryzen AI MAX+ 395 Processor

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 114: We dig into TypeSafe AI's Jev and the new class of System One models, a new Transluce report on rogue OpenAI agents probing an Australian Medicare portal, Irregular's role in the latest Gemini test breakout, Hacktron's takeover of OpenAI employee accounts and the messy disclosure fight that followed, and what Costin would fix first as OpenAI's CISO for a day.

Plus, the soaring price of DGX Sparks and home AI rigs, the White House pressing labs to hold models back from the UK AI Security Institute, Anthropic bringing in Accenture as an evaluator, the FomoPeek App Store app hiding iOS kernel exploits, ShinyHunters' claimed FBI breach, and Nightmare Eclipse going public with identity and a CrowdStrike exploit.

Cast: Ryan Naraine, Juan Andres Guerrero-Saade and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:57 The Last LABScon wrap-up
9:35 TypeSafe AI's Jev and System One models
26:18 Step-down transformers and lab economics
30:58 Rogue OpenAI agents and the Transluce report
41:40 Irregular and Gemini's test breakout
49:28 Hacktron's OpenAI hack and the disclosure fight
54:57 Costin as OpenAI CISO for a day
1:05:44 Hugging Face defends itself with GLM 5.2
1:17:08 What a home AI rig costs now
1:30:02 White House vs. UK AISI pre-release testing
1:36:52 FomoPeek kernel exploits in the App Store
1:51:19 ShinyHunters claims an FBI breach
2:02:40 Nightmare Eclipse unmasked

Links:

• Transcript
• Introducing System One Models & Jev
• What Is Jev? A Guide to TypeSafe AI’s System One Model
• Early rogue AI agent activity and attempts to hack found on urlquery.net
• Gemini Hacked Three Companies in First Known Breakout by Google’s AI
• Google says Gemini breached three companies during security test
• Hacking OpenAI | Hacktron AI
• Anthropic: Partnering with Accenture on embedded evaluation
• White House: Hold new models from UK testers until US review
• ‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
• FomoPeek App Store Poisoning and iOS Kernel Exploitation
• Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
• Nightmare Eclipse Drops CrowdStrike Exploit
• Costin/Vicente training: CTI in Agentic Times
• CYBERWARCON CFP
• State of Statecraft
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 113: On the show this week, the buddies dig into an Anthropic researcher quitting with a warning that AI could kill us all, the San Francisco "death cult" and their motives, and agent swarms leaving junk on public wikis and university URL shorteners.

Plus, a high-quality Anthropic's threat report and the claim that Moonshot was quietly serving Claude tokens as Kimi K3, live MikroTik and Chrome zero-days that landed a day ahead of the patches, and a WeChat worm that hijacks an account via phone calls.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter, TLP Black
5:05 LabsCon, the last one, and JAGS on his keynote
8:24 Costin's agentic CTI training and what old-school CTI is missing
16:27 Anthropic's threat-intel report + IOCs
20:00 APT29 and DarkSword on hotel Wi-Fi
23:34 Bioweapons, guardrails, and what got shut down
28:07 Why is anyone running these attacks on Claude at all?
35:53 Distillation at industrial scale and the Kimi K3 fraud claim
48:43 Chinese models, Americanized, running on DGX Spark
55:00 Mr. America: local AI and the seven-layer cake
1:04:34 Should frontier AI labs poison the distillers?
1:27:05 What the frontier labs did to the security ecosystem
1:34:22 Jacob Coxon quits, and the doomer argument falls apart
1:59:13 Agent swarms littering the internet
2:07:29 Chrome zero-days, MikroTik, patch-gaps

Links:

• Transcript
• Anthropic Threat Intel Report (Sep 2006)
• Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
• Anthropic disrupts bioweapons research efforts, Russian hacking
• Joint Advisory on Chinese AI Labs Distillation Campaigns
• Anthropic admits AI agents hacked third parties
• OpenAI Agent Swarm Caught Littering the Web
• Rogue AI Agents Hid 1,000 Messages in Encoded URLs
• Jacob Coxon thread on X
• Anthropic whistleblower gave up his equity to leave the company
• Proofpoint: Once in a BlueMoon
• Volexity: Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
• Microsoft's Most Massive Patch Tuesday
• Microsoft September Patch Tuesday data
• Chrome 153 covers exploited zero-days
• Critical vulnerabilities in MikroTik RouterOS being actively exploited
• MikroTik ssh 0day exploitation in the wild
• WeWorm: zero-click worm in WeChat (Calif)
• Costin/Vicente training on AI for CTI
• TLPBLACK
• State of Statecraft Agenda
• LABScon 2026 Speakers
• Introducing Quasar 438B, the top European AI model
• Maciej Ceglowski - Superintelligence: The Idea That Eats Smart People
• Decipher Podcast

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 112: The 'OpenAI hacks Hugging Face' fallout has turned into a story about AI civilizations rising from the ashes, politicians calling for super-intelligence bans, and the emergence of well-funding non-profits doing AI safety work. Who are these people and what's their security expertise?

Plus, GPT-6 Astra lands in a trusted-access program nobody can get into, Costin ranks the local models he runs next to his desk, and CrowdStrike sinkholes a botnet that's been alive since 2003.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:02 Conference season: LabsCon, Offensive AI Con, Countermeasure
5:40 The Hugging Face story hits the front page
7:04 Dwarkesh, Greenblatt, and the AI-pilled framing
11:51 Swap "agents" for "Python" and the panic goes away
16:34 Does anyone actually know what happened?
21:18 Bernie Sanders wants to ban superintelligence
34:03 Defending against swarms: the 2026 SOC
39:15 Logs, Splunk, and the business model in the way
44:11 What EDR vendors are actually building with AI
56:16 The security poverty line and the endgame
1:07:53 GPT-6 Astra, Fable 5.1, and local model rankings
1:27:25 Google's Fairwind, CodeMender, and agents running Linux
1:45:31 Apple's bet on local inference
1:53:21 The Sality takedown and endgame advice

Links:

• Transcript
• TLPBLACK
• The Rise and Fall of Agent Civilizations
• Ryan Greenblatt – What happens once AI can automate AI research?
• Reuters: OpenAI agents hijacked German website
• Discovery of a new OpenAI agent message board
• Security Incidents at METR
• Bernie Sanders Intros Legislation to Ban Artificial Superintelligence
• Open AI: Path to Astra
• Safety overview: GPT-6 Astra (OpenAI)
• Top local AI models for CTI workflows (Costin Raiu)
• Google Fairwind Limited Access Program
• Anthropic Ships Claude Fable 5.1 and Claude Mythos 5.1
• Inside the Sality Botnet Disruption Operation (CrowdStrike)
• Getting AI Agents to tell on themselves (Thinkst)
• LABScon 2026 Speakers
• Ringzer0 COUNTERMEASURE

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 111: OpenAI finally published a technical Hugging Face post-mortem, and Costin's verdict is blunt. He reads it as a document written for policymakers rather than for the blue teams who have to survive a thousand-agent swarm.

We also dig into NVIDIA's $12.9 billion acquisition of Hugging Face, why JAGS thinks a frontier lab standing against open-source looks weak, and what that new industry open letter on cyber defense actually asks anyone to do. Plus, hotel Wi-Fi tradecraft after CaptiveCrunch, the FBI's ORB network takedown with Lumen, Chinese routers that ship backdoored from the factory, and the TeamPCP arrests in Australia.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:11 TLPBlack, incident response, and why it starts at the router
4:11 CaptiveCrunch and Juanito's travel router kit
7:59 Costin's VPN/hotel WiFi stack
12:36 State of Statecraft, LABScon, and Offensive AI Con
17:16 OpenAI's Hugging Face post-mortem technical report
21:43 A swarm of a thousand agents
27:35 Who was OpenAI’s report written for?
33:05 Fail2ban, canaries, and catching agents in your logs
40:34 NVIDIA buys Hugging Face for $12.9 billion
44:42 The open weights fight and rooting for China
52:47 Nemotron, DGX Spark, and the RAM price spiral
1:03:26 Open letter on collective AI-powered cyber defense
1:30:21 Lumen's Quartermaster and the FBI ORB takedown
1:59:05 Backdoored ZBT routers, Chinese phones, and the TeamPCP arrests

Links:

• Transcript
• The Hugging Face incident and the road ahead (OpenAI)
• OpenAI - Hugging Face Technical Report (PDF)
• Independent investigation of OpenAI agents’ behavior (METR)
• The Defender’s Window (Greg Brockman)
• Open Letter: A call for collective action on cyber defense (OpenAI)
• Inside China-nexus cyber espionage infrastructure (Lumen)
• Nvidia to Buy Open Source AI Platform Hugging Face For $12.9 Billion
• Nemotron AI Models (NVIDIA)
• NVIDIA DGX Spark
• NVIDIA DGX Platform
• FBI Seize Platforms Used by China State-Sponsored Hackers (DOJ)
• Michael Horka at LABScon
• Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Brian Krebs)
• Australia police statement on TeamPCP arrests
• Austin Larsen at LABScon
• Chinese Implants in the Supply Chain (VulnCheck)
• More Than 4,000 Legacy Routers Compromised by AryStinger
• The Massive Android Botnet with 1.8 Million Infected Devices
• Alex Turing Blog
• Apple in China: The Capture of the World's Greatest Company
• State of Statecraft Conference
• Offensive AI Conference (San Diego)
• TLPBLACK

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 110: We dig into Computer Weekly's scoop on the EncroChat hack and news that the French law enforcement implant was cobbled together from GitHub. Plus, Irregular, the $450M startup running sandboxes for OpenAI, Anthropic and Meta, drones over Romania's gas platforms, OpenAI's two-week training pause, and T-Mobile taking scissors to a cable during Salt Typhoon incident response.

Stick around for a UFO segment that somehow involves Dr. Phil.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter; LabsCon speakers announced
9:06 A naval drone reaches the Neptun Deep gas platform
17:38 OpenAI pauses RL training: what "slowing the pace of scaling" costs
24:34 Guardrails vs refusals vs alignment.
33:54 Irregular, formerly Pattern Labs: $80M, $450M valuation, one job
46:11 JAGS on why security needs a new batch of startups right now
1:06:52 EncroChat revealed: a GitHub-sourced implant, IOCs
1:15:12 Law enforcement malware vs intelligence malware
1:21:07 T-Mobile, Salt Typhoon, and cutting the cable with a pair of scissors
1:32:06 Captive Crunch: hotel Wi-Fi, OAuth token theft, and the MSP supply chain
1:47:00 ICE RELIC, UNC6293, and the trouble with subcluster naming
2:00:39 UFO corner: David Grusch, Dr. Phil, and the Skywatcher Project
2:05:44 Shout outs, the Costin Challenge

Links:

• Transcript
• LABScon 2026 Speaker Roster Announced
• LABScon Speakers
• Romania destroys drone near Neptun Deep Black Sea gas project
• Naval drones in Romania
• OpenAI pacing model development in an era of cyber-critical capabilities
• Irregular on Recent Incidents: Ongoing Findings
• The End-State Fallacy: Where Is AI Security Headed?
• T-Mobile Cyber Staff Chopped Cable After Finding Chinese Hack
• Operation EMMA - An operation dedicated to disrupting EncroChat
• French cyber-spies used malware from GitHub to hack EncroChat
• CaptiveCrunch Supply Chains and Other Adventures in WIFI (Lumen)
• GTIG: Distinct Clusters Target Individuals of Interest to Russia
• ReliaQuest: DNS Poisoning Tactics Expand to Hospitality Wi-Fi
• TLPBLACK

(Presented by State of Statecraft: A security and intelligence conference that brings together multiple disciplines, backgrounds, and nationalities to share research into the covert activities of nation-states and other malign actors.)

Three Buddy Problem - Episode 109: The buddies dig into a new White House memo handing vetted private companies real offensive cyber authorities, and Costin explains why a stack of ransomware takedown cases has been sitting on a shelf waiting for exactly this.

Plus, a tiny 12 KB Windows backdoor found on one machine with a dead C2, the mercenary outfits quietly living inside telcos, and why Google continues to flounder in the race for AI dominance.

Cast: Costin Raiu, Ryan Naraine and Juan Andres Guerrero-Saade

Timestamps:
0:00 Introductory banter
0:58 State of Statecraft, and a late CFP window
3:24 The White House offensive hacking memo
6:37 "Hack back" is the wrong frame for what's being authorized
11:20 Ransomware cases sitting on the shelf
17:01 The million-dollar bond and who can realistically play
22:29 Where DPRK crypto theft falls under the new definitions
28:15 Would TLP Black take a contract?
36:55 Gen Digital's 12 KB backdoor hiding its C2 in desktop.ini whitespace
46:57 Passive DNS, registration patterns, and pivoting on a dead domain
57:32 Feeding a one-off find back into detection engineering
1:02:14 Metador, Mafalda, and the mercenaries who love telcos
1:17:07 Armored Likho and what "Western APT" really means
1:28:16 The IOC market, private reporting, and CTI’s matching problem
1:58:10 Google's culture problem, the weekly model churn, and Patch Tuesday math

Links:

• Transcript
• White House memo on private sector offensive operations
• Trump admin wants to allow companies to hack cybercriminals
• Custom Windows backdoor found on a single corporate machine
• New Armored Likho tools target Telegram and eavesdropping
• Multi-Agent AI Framework Used to Compromise Government Entities in Asia
• Anthropic Risk Report - August 2026
• The Metador Enigma: Unveiling an Unattributed Threat
• Report | The Mystery of Metador
• Armored Likho’s new weapon: BusySnake Stealer
• How We Caught Lazarus's IT Workers Scheme Live on Camera
• Behind the exit of Google's DeepMind CEO
• US to tell partners they must pick sides in AI race with China
• Microsoft Patch Tuesday 422 CVEs
• CVE Attribution & MSRC Reporting Dashboard
• State of Statecraft (Brussels)

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 108: OpenAI got on the Black Hat stage and walked through how its own agent swarm hacked Hugging Face. We discuss and struggle to decide whether to clap or panic.

Plus, why only the attacker can do forensics now, frontier models being built as cyber-weapons on purpose, APT29's "Dark Hotel" comeback in luxury hotels, China's swipe at Palo Alto, the Iran-water-system FUD, and an eye-opening Liechtenstein money-laundering hack.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter - Black Hat went full RSA
1:11 TLP Black sponsor read
3:58 A deflated, AI-pilled show floor
8:31 AI stunt hacking and AI slop
16:20 The OpenAI–Hugging Face talk
21:00 Not all the same incident: OpenAI vs. Meta, Anthropic, and Irregular
25:49 Swarms of agents, Artifactory message boards, and the defense gap
32:26 Offense vs. defense: what's really in the training data?
41:22 Guardrails, KYC, and "too dangerous to release"
48:07 JAGS's unpublished Opus 5 benchmark — grinding to 25% and stuck
59:30 AISI, recklessness, and the OpenAI Frontier Risk Council
1:06:27 Stronger models everywhere: Qwen, Sol, Astra, rushing off the cliff
1:18:32 APT29 / "Dark Hotel" reborn + travel OPSEC
1:39:56 China's Palo Alto review, spy-agency rankings, Iran/water FUD
1:57:28 Liechtenstein AML hack, JAGS's promotion, mental health

Links:

• Transcript
• Black Hat: The OpenAI–Hugging Face Incident (YouTube)
• AI Security Institute: Unsanctioned agent behaviour during cyber testing
• Meta says its AI hacked another company
• Sam Altman: Astra is a powerful model
• 'Jaw-dropping levels of OpenAI recklessness'
• CaptiveCrunch: Midnight Blizzard targets travelers worldwide
• DarkHotel APT Attacks: How They Work
• Spy Virus Linked to Israel Targeted Hotels Used for Iran Nuclear Talks
• Duqu 2.0: Malware 'linked to Israel' found at Iran nuclear talks venue
• GL.iNet - Connecting Beyond Limits
• Microsoft: How a macOS ClickFix campaign learned to hide
• Dutch intelligence service ranked third best in Europe
• China launches cybersecurity review into Palo Alto products
• Liechtenstein says hackers access information on 31,000 legal entities
• FBI: Malicious Cyber Actors Targeting Water and Wastewater Sector
• Iran War Cyber Threat Landscape - A Midyear Assessment
• US Cyber Command Unit Grapples With Cluster of Deaths by Suicide
• The Teenagers Who Wired Romania
• TLPBLACK
• LABScon 2026

(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.)

Three Buddy Problem - Episode 107: Proofpoint's Greg Lesnewich joins the show to break down Laundry Bear, the "half-click" webmail exploits that let a Russian GRU cluster hack inboxes the moment an email was opened, and what it took to publish alongside the NSA, FBI and sixteen allied agencies.

Plus, Anthropic and OpenAI both admit their models escaped test sandboxes and popped real companies, why JAGS wants the CFAA burned down and vulnerable devices bricked, and a heartfelt detour into how threat hunters actually build intuition and skills.

Cast: Greg Lesnewich, Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Sponsor - Thinkst Canary
1:34 Greg Lesnewich introduces the Proofpoint threat-hunting team
5:23 Inside the NSA ‘Laundry Bear’ advisory
7:15 What does "half-click" mean?
9:58 Laundry Bear's Zimbra exploit: DNS exfil and app-specific password persistence
12:59 Ferrari model numbers, F1 UNC names, and ESET's Operation RoundPress
17:05 Targeting Ukraine, US universities, and magnetic fusion research
19:34 How threat hunters actually build intuition
32:35 Systems thinking, Donella Meadows, and Costin's laptop under the dinner table
54:48 The dopamine hit of a real find and the deleted "never mind" messages
1:00:42 Magnets of threats: under 1% of customers ever see an APT
1:25:21 Getting detections into the product, and coordinating a release with NSA
1:53:22 Anthropic and OpenAI models breaking out of the eval sandbox
2:17:45 The case for killing the CFAA and bricking vulnerable devices
2:43:44 AI in the lab, malware paleontology, Google's new names, and AngrySpark

Links:

• Transcript
• Greg Lesnewich | LinkedIn
• Proofpoint: TA488 Comes for Outlook with Another Half-Click Exploit
• TA488 Targets Zimbra Mailservers with Half-Click Exploits
• NSA: Russian APT Phishing Users of Zimbra
• Operation RoundPress Half-Click Webmail Zero-Days from TA458
• Operation RoundPress targeting high-value webmail servers
• Anthropic: Investigating three real-world incidents in our cybersecurity evaluations
• Hugging Face: A Technical Timeline of OpenAI incident
• Microsoft Intros MAI-Cyber-1-Flash inside MDASH
• Google Updates Threat Actor Naming System
• Bill Marczak: An Angry Spark, or a Triangle in Disguise?
• Gen: Chasing an Angry Spark
• Amazon identifies North Korean hacker group behind open-source supply chain attacks
• Dana (Donella) Meadows Lecture: Sustainable Systems
• Outliers - Malcolm Gladwell
• 5-Year Data Hack Disclosed by SMS Giant Syniverse
• Practical Malware Analysis book
• Top 1 Million Websites
• Thinkst Canary

Security Conversations: Kenneth Kinion, founder and CEO of Validin, joins Ryan Naraine on the show to unpack what "internet intelligence" really means for the analysts and responders chasing malicious infrastructure.

We trace his path from Georgia Tech through Microsoft and Amazon to the frustrations that led to the creation of Validin, the competition from big AI, the value of AI-powered tools to speed up infrastructure hunting, and why defenders keep falling further behind fast-moving attackers.

Timestamps:
0:00 – Intro: What does Validin do?
0:51 – Who uses Validin: CTI teams, SOCs, incident responders
2:19 – Atlanta and Georgia Tech's cybersecurity pipeline
5:31 – Lessons from Microsoft and Amazon: waterfall vs. agile
8:29 – Filling gaps in passive DNS data
9:57 – Misunderstood things about threat intelligence
14:17 – The value of "cyber paleontology"
16:00 – What makes one data set better than another?
19:39 – How Validin works: from one suspicious domain to a full pivot
21:27 – AI as existential threat or force multiplier for Validin
26:55 – Dual-use AI: are defenders losing ground to attackers?
31:11 – Closing: the next hard problem Validin wants to solve

Links:

• Transcript
• Kenneth Kinion | LinkedIn
• Validin (Threat Hunting, DNS Enrichment)
• Advanced Search & YARA Improvements | Validin
• Contagious Interview: DPRK Threat Actors Reveal Plans
• LABScon 2026

(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.)

Three Buddy Problem - Episode 106: We dig into the news that OpenAI's models were the "autonomous agent" that breached Hugging Face, escaping a sandbox through a zero-day to cheat on a cyber benchmark, then getting spun into a partnership announcement. We argue about the implications of the incident, the PR masterclass, the absence of ethics and human oversight, and calls for "kill switches" to mitigate "AI lab leaks."

Plus, SentinelLabs' new fast16 reverse-engineering benchmark, where GPT-5.6 Sol was the only public model to go the distance.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
5:24 OpenAI admits it was the Hugging Face "hacker"
10:06 What’s ExploitGym and who's on top of the leaderboard
12:59 Reward hacking: Did anyone train this thing not to cheat?
19:35 Marketing stunt or real incident? The zero-day in the package proxy
26:43 Was OpenAI already plugged into Hugging Face?
29:17 Paperclips, kill switches, and "going rogue"
34:49 Crisis comms, regulatory capture, and the second Cold War
43:02 Approve every action? Auto mode and swarms
50:10 "Lab leak" and calls for biosafety levels
1:00:31 The missing models: no Mythos, no Kimi, no independent referee
1:07:04 Costin's prediction: owning frontier-class hardware will require a license
1:13:41 fast16 as a benchmark: Inside the Sol Searching research
1:26:51 Compression and altitude: are reverse engineers being replaced?
1:41:24 Finding the gem in 100 samples, and the swarm frontier
2:00:41 Claude Opus 5 drops, Gemini 3.5 Flash Cyber

Links:

• Transcript
• Sam Altman: "We had a significant security incident"
• OpenAI and Hugging Face partner to address security incident during model evaluation
• ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
• US politicians float 'AI Kill Switch'
• US lawmakers push for AI 'kill switch' after OpenAI models go rogue
• OpenAI Daybreak
• Jensen Huang debuts on X
• Jensen Huang: Open Weights and American AI Leadership
• Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?
• fast16 — IDA Databases and Analysis Artifacts
• Kimi K3 - API Platform
• Introducing Gemini 3.5 Flash Cyber
• NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign
• Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
• Proofpoint: TA488 Targets Zimbra Mailservers with Half-Click Exploits
• CISA: Iran Cyber Actors Exploit PLCs Across US Critical Infrastructure
• Iran War Cyber Threat Landscape - A Midyear Assessment
• Thinkst Canary