"Not to pile on, but this was your moment..." - @jags.bsky.social

"Back in the day when we looked at the Duqu 2 incident, they were moving in a very slow fashion, maybe pivoting into another system once a day. They wouldn't pivot into more than one or two systems a day, specifically to avoid triggering alerts."

Another great episode 🔥🔥🔥

Kim Zetter on this topic today: www.zetter-zeroday.com/tracking-pet...

Great stuff from the Buddies this week, as usual.

Apple Podcasts podcasts.apple.com/us/podcast/m...

Spotify open.spotify.com/episode/68EC...

Buried on p9 and p30 of a 'Scattered Spider' arrest indictment: Microsoft's never-before-detailed GDID device identifier, a persistent Windows fingerprint with massive implications for OPSEC, privacy, and APT tracking WATCH youtu.be/mx0CpTp3Q4Y?...

Buried on p9 and p30 of a 'Scattered Spider' arrest indictment: Microsoft's never-before-detailed GDID device identifier, a persistent Windows fingerprint with massive implications for OPSEC, privacy, and APT tracking WATCH youtu.be/mx0CpTp3Q4Y?...

Down memory lane with Katie Moussouris @k8em0.bsky.social @jags.bsky.social @tlpblack.bsky.social

Down memory lane with Katie Moussouris @k8em0.bsky.social @jags.bsky.social @tlpblack.bsky.social

"Software liability is the only thing that will make orgs meaningfully improve quality of software going forward," - Katie Moussouris @k8em0.bsky.social @jags.bsky.social @tlpblack.bsky.social

#FreeMythos #threebuddyproblem

"Software liability is the only thing that will make orgs meaningfully improve quality of software going forward," - Katie Moussouris @k8em0.bsky.social @jags.bsky.social @tlpblack.bsky.social

And last but not least @craiu.bsky.social provides the perfect calm European perspective, proving that homelabs and DIY:ing still have value and it's not all about maxing tokens or profits. Thank you all. If I may wish for something, more guests, those episodes are always extra interesting.

@jags.bsky.social monologues provide unfiltered views of infosec and I've learned to pay attention because there are deeper truths in there, it reminds me of @haroonmeer.canary.love presentations of what is wrong with the infosec industry. Not surprised they sponsor the show :-)

Congrats @ryanaraine.bsky.social @craiu.bsky.social and @jags.bsky.social for getting to episode 100. This podcast has become a must listen for me. Why?

"Nobody owes you anything when they find a bug in your software." #threebuddyproblem @k8em0.bsky.social @jags.bsky.social

The pod got a shoutout on NPR! @jags.bsky.social www.npr.org/2026/06/17/n...

"The AI is the equivalent of a tutor, sitting next to you, it's beautiful. But, if you copy/paste and cheat, you learn nothing." @craiu.bsky.social @jags.bsky.social

A thought on the AI guardrailing conversation 💭

It's not guardrailing, it's gatekeeping. #threebuddyproblem

"There are people making world-altering decisions who barely understand what's going on, and that's the part that scares me." #threebuddyproblem @jags.bsky.social @craiu.bsky.social

"If everybody could reverse engineer anything in front of them for $5, what happens?" @jags.bsky.social @craiu.bsky.social

ChatGPT 5.5 a game-changer!

NEW POD UP: Microsoft threatens legal action against researchers who drop zero-days. We debate whether it’s a fair line against extortion, or amateur-hour PR from a company that already torched its own research community? #threebuddyproblem youtu.be/E5rIJ9nGOUo

JAG-S to Microsoft: "You can't publish a blog about Turla ... You can't publish IOCs because it's too dangerous, or share samples because it's too sensitive, but some junior PR person did this? Enough, man."

time to go back and look at John Pollock's philosophy of AI work again. webspace.science.uu.nl/~prakk101/pu...

10 years after the Shadow Brokers leak, Costin talks about strange things happening at the time... @craiu.bsky.social @jags.bsky.social #threebuddyproblem [ Presented by Ent.ai ]

Costin on frustrations dealing with Microsoft

JAG-S to Microsoft: "You can't publish a blog about Turla ... You can't publish IOCs because it's too dangerous, or share samples because it's too sensitive, but some junior PR person did this? Enough, man."

On the 10th anniversary of the Shadow Brokers leak, we discuss some enduring mysteries, theories on attribution, and an interesting trail that leads to Edward Snowden. [ Sponsored by ent.ai ] youtu.be/E5rIJ9nGOUo?si…

The best segue ever? 🏆 "Speaking of holy war and medieval things — Microsoft took us back to the 2000s with a statement that they're going to bring cases against vulnerability researchers who drop zero-days."

NEW POD UP: Microsoft threatens legal action against researchers who drop zero-days. We debate whether it’s a fair line against extortion, or amateur-hour PR from a company that already torched its own research community? #threebuddyproblem youtu.be/E5rIJ9nGOUo

New podcast is out! 🪲We dig into the unfortunate and ill-considered return of the vulnerability disclosure debate and why blaming researchers is *never* the answer 🖥️ The new help desk employee scam where the scammers show up IRL open.spotify.com/episode/4eqE...

Perri Adams, creator of the AI Cyber Challenge, on the value of security-focused AI models

🔥 Aaron Portnoy on the early days of Pwn2Own, why LLMs can't dream up the next speculative-execution-class bug, and the coming patching apocalypse... Plus, the legendary story of carrying a Walmart "fat stack" of cash to bootstrap Ekoparty in Buenos Aires. youtu.be/2LprkKEtiqM

TBP x Ekoparty Miami (YouTube vids) - Aaron Portnoy www.youtube.com/watch?v=2Lpr... - Gabriel Bernadett-Shapiro www.youtube.com/watch?v=zdak... - Federico Kirschbaum www.youtube.com/watch?v=16tI... - Perri Adams www.youtube.com/watch?v=u6UT... - Jordan Wiens www.youtube.com/watch?v=anqu...

🔥 Aaron Portnoy on the early days of Pwn2Own, why LLMs can't dream up the next speculative-execution-class bug, and the coming patching apocalypse... Plus, the legendary story of carrying a Walmart "fat stack" of cash to bootstrap Ekoparty in Buenos Aires. youtu.be/2LprkKEtiqM

🔥 Catch our interview with XBOW's Federico Kirschbaum on whiplash in the pen-test industry #threebuddyproblem #ekoparty Spotify (with video) open.spotify.com/episode/24ud...

🚨 ANOTHER ONE! Perri Adams of DARPA AIxCC fame hopped on the mic at Ekoparty to chat about proof engines, formal methods, and why LLMs just made a once-niche corner of computer science suddenly essential. www.youtube.com/watch?v=u6UT...

NEW POD! Federico Kirschbaum talks about what happens to offensive security when an autonomous AI hacker can find and exploit real vulnerabilities. Plus, a reckoning over software liability, and Halvar Flake's very honest fear of getting lazy. YouTube youtu.be/16tIHOOWtZY?...

🔥 Catch our interview with XBOW's Federico Kirschbaum on whiplash in the pen-test industry #threebuddyproblem #ekoparty Spotify (with video) open.spotify.com/episode/24ud...

NEW POD! Federico Kirschbaum talks about what happens to offensive security when an autonomous AI hacker can find and exploit real vulnerabilities. Plus, a reckoning over software liability, and Halvar Flake's very honest fear of getting lazy. YouTube youtu.be/16tIHOOWtZY?...

Three Buddy Problem x Ekoparty x Jordan Wiens www.youtube.com/watch?v=anqu...

NEW POD UP! Jordan Wiens (Binary Ninja) joins the problem at the Ekoparty conference to address the big elephant in the room 🎙️ Apple Podcasts podcasts.apple.com/us/podcast/j... 🎙️ Spotify open.spotify.com/episode/21TM... 🎙️ Transcript docs.google.com/document/d/1...

The future of threat intel is in AI "silent detections" #threebuddyproblem

Three Buddy Problem is probably my favorite infosec podcast, and if you're adjacent to AI stuff the latest episode is really good. Grounded, practical takes informed by actual use, as well as larger considerations. securityconversations.fireside.fm/10x-ai-power...

Our weekly Friday radio show is live everywhere! #threebuddyproblem - YouTube youtu.be/SL5N3Zd6vNI?... - Apple podcasts.apple.com/us/podcast/t... - Spotify (with video) open.spotify.com/episode/6aoL... - Transcript docs.google.com/document/d/1...

Our weekly Friday radio show is live everywhere! #threebuddyproblem - YouTube youtu.be/SL5N3Zd6vNI?... - Apple podcasts.apple.com/us/podcast/t... - Spotify (with video) open.spotify.com/episode/6aoL... - Transcript docs.google.com/document/d/1...