Three Buddy Problem - Episode 39: Luta Security CEO Katie Moussouris joins the buddies to parse news around a coordinated Chinese exposure of Taiwan APT actors, CitizenLab's report on Paragon spyware and WhatsApp exploits, an “official” Russian government exploit-buying operation shopping for Telegram exploits, the fragmentation of exploit markets and the future of CISA in the face of budget cuts and layoffs.

Cast: Katie Moussouris, Juan Andres Guerrero-Saade, Costin Raiu and Ryan Naraine.

Links:

• Transcript (unedited, AI-generated)
• China's MSS discloses Taiwan APTs
• Antiy report Taiwan's "Green Spot" attack group
• Citizen Lab on Paragon’s Proliferating Spyware Operations
• Operation Zero wants Telegram 1-click RCE exploits
• Operation Zero 0day Vulnerability Platform
• GitHub Action supply chain attack
• Blast radius of GitHub Action supply chain attack
• Windows .lnk shortcut exploit abused as zero-day
• Sean Plankey nominated to lead CISA
• Trump admin halts funding for two cybersecurity efforts
• CISA publishes Jen Easterley's calendars
• CISA statement on 'red-team' layoff reports