Three Buddy Problem, Ottawa, Canada. @craiu.bsky.social @jags.bsky.social

Three of my favorite security people. And Ryan!

This week's show features OpenAI's Dave Aitel and is up on YouTube @daveaitel.bsky.social @jags.bsky.social @craiu.bsky.social youtu.be/EwMJsU8klZ0?...

FULL SHOW youtu.be/EwMJsU8klZ0?...

Another great episode. Glad to see that people are starting to catch on to this podcast, just hit 1K subs on YT :-) @ryanaraine.bsky.social still waiting for the 3BP merch store 🙃

"It's like if you watched a train crash, full of puppies." @daveaitel.bsky.social www.youtube.com/watch?v=JCnt...

Terrific discussion with OpenAI's @daveaitel.bsky.social on @ryanaraine.bsky.social's Three Buddy Problem podcast about Aardvark, which is OpenAI's new agentic bug-hunting tool. It's a must listen if you're in security. #infosec www.youtube.com/watch?v=EwMJ...

OpenAI's Dave Aitel on using Aardvark to audit cryptocurrency smart contracts @craiu.bsky.social @daveaitel.bsky.social

This week's show features OpenAI's Dave Aitel and is up on YouTube @daveaitel.bsky.social @jags.bsky.social @craiu.bsky.social youtu.be/EwMJsU8klZ0?...

Watch on YouTube youtu.be/PHijS6jLPxI?...

New episode ALERT! @craiu.bsky.social @jags.bsky.social News on Apple's iOS 26 quietly killing shutdown.log forensic artifact, a million-dollar WhatsApp zero-click that never materialized, Chinese threat intel reports pointing fingers at the NSA... securityconversations.com/episode/appl...

New episode ALERT! @craiu.bsky.social @jags.bsky.social News on Apple's iOS 26 quietly killing shutdown.log forensic artifact, a million-dollar WhatsApp zero-click that never materialized, Chinese threat intel reports pointing fingers at the NSA... securityconversations.com/episode/appl...

The people that work at Ivanti literally have no idea that these are problems for their customers. I've dealt with them before and they absolutely could not understand why we'd want to get rid of their VPN product even after all of the critical vulns.

On the pod, we discussed Ivanti's inability to keep pace with security problems in its security products @jags.bsky.social @craiu.bsky.social

“Misery is not activism” 💯 ✊ Great episode @ryanaraine.bsky.social @jags.bsky.social @craiu.bsky.social

An all-new Three Buddy Problem for your weekend earholes. Apple exploits chains, Oracle + ransomware, Ivanti 0days, VT pricing tiers @craiu.bsky.social @jags.bsky.social youtu.be/qPj9_8azAvk?...

WATCH youtu.be/qPj9_8azAvk?...

Costin on million-dollar "tactical suitcases" with iPhone wireless proximity exploits @craiu.bsky.social @jags.bsky.social www.youtube.com/shorts/r3vu_...

Costin on million-dollar "tactical suitcases" with iPhone wireless proximity exploits @craiu.bsky.social @jags.bsky.social www.youtube.com/shorts/r3vu_...

Today I needed a bit of code, but instead of asking an LLM I tried writing it myself and wow, this could be a new paradigm

An all-new Three Buddy Problem for your weekend earholes. Apple exploits chains, Oracle + ransomware, Ivanti 0days, VT pricing tiers @craiu.bsky.social @jags.bsky.social youtu.be/qPj9_8azAvk?...

YouTube youtu.be/fsDJTtIfMc8?...

Apple Podcasts podcasts.apple.com/us/podcast/c...

SPOTIFY open.spotify.com/episode/5FKD...

For the SecurityConversations show, I interviewed appsec and software supply chain security expert Chris Eng @ceng.bsky.social LISTEN securityconversations.com/episode/chri...

From my conversation with Chris Eng youtube.com/shorts/-PzmE...

My interview with Chris Eng for the SecuirtyConversations show is now up on YouTube @ceng.bsky.social www.youtube.com/watch?v=fsDJ...

"How many CISOs are personally briefing their board of directors? Chris Eng with thoughts @ceng.bsky.social

For the SecurityConversations show, I interviewed appsec and software supply chain security expert Chris Eng @ceng.bsky.social LISTEN securityconversations.com/episode/chri...

This week's show is up on YouTube. We dig into an Oracle vuln leading to ransomware extortion campaigns youtu.be/519suxip6uM

We're streaming live to YouTube in ~20 mins. Come hang out with us www.youtube.com/watch?v=zjdh...

Costin with some advice for threat hunters @craiu.bsky.social @jags.bsky.social youtube.com/shorts/z6fX1...

The three buddies back together for a fresh problem. @craiu.bsky.social @jags.bsky.social WATCH on YouTube youtu.be/yBrNMWvYQ6A?...

Costin with some advice for threat hunters @craiu.bsky.social @jags.bsky.social youtube.com/shorts/z6fX1...

Watch on YouTube youtu.be/yBrNMWvYQ6A

This week's pod is up on Spotify open.spotify.com/episode/5c5t...

The three buddies back together for a fresh problem. @craiu.bsky.social @jags.bsky.social WATCH on YouTube youtu.be/yBrNMWvYQ6A?...

HRC Senior Director @lindsaysfreeman.bsky.social cial joined @sentinellabs.bsky.social's Juan Andres Guerrero-Saade and @ryanaraine.bsky.social to discuss the Wagner Group’s war crimes in Mali at #LABScon25 for The Three Buddy Problem podcast. Full episode here: www.youtube.com/watch?v=XOAa...

NEW!! TBP x LABScon live podcasts! 😍 Visi Stark on lessons from the APT1 report youtu.be/CTFd6KyiQzU Lindsay Freeman on tracking war criminals on social media youtu.be/XOAaLN4zmGc Aurora Johnson/Trevor HIlligoss on flushing China's 'Internet Toilets' youtu.be/2g_DgVSaSvI

WATCH: A conversation with Visi Stark on nation-state stuff @invisig0th.bsky.social @jags.bsky.social youtu.be/CTFd6KyiQzU?...

This research demonstrates how easily full persistence can be achieved on Supermicro BMC, allowing complete takeover of the server. - CVE-2025-7937: bypassed “fix” for CVE-2024-10237. - CVE-2025-6198: Supermicro RoT bypass. www.binarly.io/blog/broken-...

WATCH: A conversation with Visi Stark on nation-state stuff @invisig0th.bsky.social @jags.bsky.social youtu.be/CTFd6KyiQzU?...

NEW!! TBP x LABScon live podcasts! 😍 Visi Stark on lessons from the APT1 report youtu.be/CTFd6KyiQzU Lindsay Freeman on tracking war criminals on social media youtu.be/XOAaLN4zmGc Aurora Johnson/Trevor HIlligoss on flushing China's 'Internet Toilets' youtu.be/2g_DgVSaSvI

Coming up on the Three Buddy Problem podcast feed this week, live interviews from LABScon! - Lindsay Freeman, Human Rights Center, UC Berkeley School of Law. - Visi Stark, Co-founder, Vertex Project - Aurora Johnson and Trevor Hilligoss (SpyCloud) Sub and listen pod.link/1414525622

Coming up on the Three Buddy Problem podcast feed this week, live interviews from LABScon! - Lindsay Freeman, Human Rights Center, UC Berkeley School of Law. - Visi Stark, Co-founder, Vertex Project - Aurora Johnson and Trevor Hilligoss (SpyCloud) Sub and listen pod.link/1414525622

@craiu.bsky.social I liked your thoughts about logging all iOS network traffic on the latest Three Buddy Problem. What are your thoughts around mitigating how Apple allows many of their services — notably Messages — to bypass VPN?

NEW! This week's Three Buddy Problem is live on all platforms! - YouTube (livestream replay) youtube.com/watch?v=aflo... - Apple Podcasts podcasts.apple.com/us/podcast/s... - Spotify open.spotify.com/show/6dXbRag...

TBP HEADS-UP: Due to travel and Chinacon and life stuff, we are skipping the pod this week. @craiu.bsky.social @jags.bsky.social Lots of time to catch up, like and subscribe 👊🏽✊🏽 www.youtube.com/@ryanaraine/...