Sign up to save your podcasts
Or
Share The Angry Spark APT Mystery: A Year-Long Backdoor, One Victim, Zero Attribution
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The Angry Spark APT Mystery: A Year-Long Backdoor, One Victim, Zero Attribution
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 94: We discuss a mysterious, VM-obfuscated backdoor that lived undetected on a single U.K. machine for a year before disappearing, finding clues pointing to an elite-level APT intrusion that still evades broader industry coverage.
Plus, connecting the dots across AI-driven vulnerability discovery, Microsoft’s massive Patch Tuesday, Jensen Huang talks cybersecurity, Mythos dangers and Chinese chips, and the quiet erosion of CVE enrichment at NIST.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 – Intros + AI news whiplash
5:10 – Patch Tuesday breakdown: Microsoft's second-largest CVE release ever
7:32 – AI accelerating vulnerability discovery at record pace
10:00 – Frontier lab cyber models, fine-tuning, guardrail removal & KYC
12:37 – FreeBSD NFS bug: Opus 4.6 was already finding critical vulns
14:26 – Anthropic's infrastructure strain: Is Opus being nerfed?
21:05 – OpenAI's Trusted Access for Cyber vs. Anthropic's Mythos cabal
28:45 – SharePoint zero-day CVE-2026-32201: The endless Microsoft tax
34:36 – Adobe Acrobat zero-day: A rare, real, Russia-linked exploit in the wild
41:36 – VirusTotal mining: The golden age of threat intel hunting
50:03 – ZionSiphon: Vibe-coded OT malware targeting Israeli water infrastructure
55:04 – Paleontology of threat research: When do you publish? Who do you trust?
1:13:53 – Angry Spark: A one-machine, one-year backdoor raises eyebrows
1:49:25 – Jensen Huang vs. Dwarkesh Patel on Mythos, China and chips
2:14:32 – Chinese AI distillation: 24,000 fake Anthropic accounts, DeepSeek & the catch-up question
Links:
- Transcript
- Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulns
- ZDI: April 2026 Patch Tuesday Review
- Inside ZionSiphon: OT Malware Targeting Israeli Water Systems
- GenDigital: Chasing an Angry Spark
- MAD Bugs: Month of AI-Discovered Bugs (Calif)
- HackerOne: The Vulnerability Apocalypse is a Remediation Crisis
- OpenAI scaling up Trusted Access for Cyber (TAC) Program
- OpenAI Commits $10m in API credits for cybersecurity
- Anthropic: Introducing Claude Opus 4.7
- OpenAI confirms Axios developer tool compromise
- Jensen Huang x Jensen Huang on Nvidia’s AI Moat
- Anthropic: Detecting and preventing distillation attacks
- NIST Updates NVD Operations to Address Record CVE Growth
- Dreadnode Open-Source Tools to Measure AI Offense-Defense Gap
- LABScon 2026 Call for Papers
- Cyber-Paleontology in the Age of AI (Black Hat Asia 2026)
- Ekoparty Miami Schedule
- TLPBLACK
View all episodes
By Security Conversations
4.9
6161 ratings
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 94: We discuss a mysterious, VM-obfuscated backdoor that lived undetected on a single U.K. machine for a year before disappearing, finding clues pointing to an elite-level APT intrusion that still evades broader industry coverage.
Plus, connecting the dots across AI-driven vulnerability discovery, Microsoft’s massive Patch Tuesday, Jensen Huang talks cybersecurity, Mythos dangers and Chinese chips, and the quiet erosion of CVE enrichment at NIST.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 – Intros + AI news whiplash
5:10 – Patch Tuesday breakdown: Microsoft's second-largest CVE release ever
7:32 – AI accelerating vulnerability discovery at record pace
10:00 – Frontier lab cyber models, fine-tuning, guardrail removal & KYC
12:37 – FreeBSD NFS bug: Opus 4.6 was already finding critical vulns
14:26 – Anthropic's infrastructure strain: Is Opus being nerfed?
21:05 – OpenAI's Trusted Access for Cyber vs. Anthropic's Mythos cabal
28:45 – SharePoint zero-day CVE-2026-32201: The endless Microsoft tax
34:36 – Adobe Acrobat zero-day: A rare, real, Russia-linked exploit in the wild
41:36 – VirusTotal mining: The golden age of threat intel hunting
50:03 – ZionSiphon: Vibe-coded OT malware targeting Israeli water infrastructure
55:04 – Paleontology of threat research: When do you publish? Who do you trust?
1:13:53 – Angry Spark: A one-machine, one-year backdoor raises eyebrows
1:49:25 – Jensen Huang vs. Dwarkesh Patel on Mythos, China and chips
2:14:32 – Chinese AI distillation: 24,000 fake Anthropic accounts, DeepSeek & the catch-up question
Links:
- Transcript
- Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulns
- ZDI: April 2026 Patch Tuesday Review
- Inside ZionSiphon: OT Malware Targeting Israeli Water Systems
- GenDigital: Chasing an Angry Spark
- MAD Bugs: Month of AI-Discovered Bugs (Calif)
- HackerOne: The Vulnerability Apocalypse is a Remediation Crisis
- OpenAI scaling up Trusted Access for Cyber (TAC) Program
- OpenAI Commits $10m in API credits for cybersecurity
- Anthropic: Introducing Claude Opus 4.7
- OpenAI confirms Axios developer tool compromise
- Jensen Huang x Jensen Huang on Nvidia’s AI Moat
- Anthropic: Detecting and preventing distillation attacks
- NIST Updates NVD Operations to Address Record CVE Growth
- Dreadnode Open-Source Tools to Measure AI Offense-Defense Gap
- LABScon 2026 Call for Papers
- Cyber-Paleontology in the Age of AI (Black Hat Asia 2026)
- Ekoparty Miami Schedule
- TLPBLACK
More shows like Three Buddy Problem
View all
Hacked
187 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
372 Listeners
Risky Business
371 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
651 Listeners
CyberWire Daily
1,028 Listeners
Smashing Security
317 Listeners
Click Here
418 Listeners
Darknet Diaries
8,077 Listeners
Cybersecurity Today
175 Listeners
Hacking Humans
315 Listeners
CISO Series Podcast
195 Listeners
Defense in Depth
73 Listeners
Cybersecurity Headlines
139 Listeners
Risky Bulletin
45 Listeners
The 404 Media Podcast
398 Listeners