Three Buddy Problem

From Epstein to Notepad++: Redactions, Zero-Days and Supply Chain Attacks


Listen Later

(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.)

Three Buddy Problem - Episode 84: We process the cybersecurity fallout from the latest Epstein document dump, focusing on why redactions fail in the AI era and how quickly modern tools can unravel them. The conversation moves from sloppy redaction practices and exploit mythology to harder questions about ethics, accountability, and silence within the infosec community.

Plus, inside the Notepad++ supply-chain compromise attributed to a known Chinese APT, Microsoft’s security executive changes, Anthropic's AI-driven vulnerability discovery, China-linked network implants, and Lockdown Mode thwarting FBI investigators.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Links:

  • Thinkst Canary - Customer Love
  • Transcript (unedited, AI-generated)
  • Did a renowned hacker help Jeffrey Epstein get ‘dirt on other people'?
  • DOJ releases details alleged talented hacker working for Jeffrey Epstein
  • Claude Opus 4.6 \ Anthropic
  • 0-Days \ red.anthropic.com
  • JAGS' Claude Code SDLC config
  • CERT-Ukraine on zero-day attacks via MS Office
  • Executive security shuffle at Microsoft
  • TLPBLACK: What we know about the Notepad++ supply chain attack
  • Lotus Blossom APT targets critical infrastructure via Notepad++.
  • Kaspersky: Notepad++ supply chain attack breakdown
  • Validin: Exploring the C2 Infrastructure of the Notepad++ Compromise
  • Hostinger server unauthorized access case: What happened with Notepad++ and how we resolved it
  • Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework
  • Palo Alto Unit 42: The Shadow Campaigns - Uncovering Global Espionage
  • FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled
  • Court document: FBI Washington Post Lockdown Mode
  • PIVOTcon
  • TLP BLACK
  • LABScon 2026
  • Decipher podcast (Dennis Fisher)
  • Detection Engineering newsletter (Zack Allen)
...more
View all episodesView all episodes
Download on the App Store

Three Buddy ProblemBy Security Conversations

  • 4.9
  • 4.9
  • 4.9
  • 4.9
  • 4.9

4.9

61 ratings


More shows like Three Buddy Problem

View all
Hacked by Hacked

Hacked

188 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

372 Listeners

Risky Business by Risky Business Media

Risky Business

372 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

652 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,025 Listeners

Smashing Security by Graham Cluley

Smashing Security

319 Listeners

Click Here by Recorded Future News

Click Here

419 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,088 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

178 Listeners

Hacking Humans by N2K Networks

Hacking Humans

315 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

194 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

73 Listeners

Cybersecurity Headlines by CISO Series

Cybersecurity Headlines

138 Listeners

Risky Bulletin by Risky Business Media

Risky Bulletin

45 Listeners

The 404 Media Podcast by 404 Media

The 404 Media Podcast

399 Listeners