Three Buddy Problem

By Security ConversationsNews Technology Business News Tech News

Three Buddy Problem episodes

October 12Katie Moussouris on AI-as-malware, the monitoring gap, and an NTSB for AI
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem x Offensive AI Con: Luta Security chief Katie Moussouris makes the case for an NTSB-style board for AI incidents, with subpoena power and full-time investigators, after OpenAI's DNS tunneling escape and the 52 days it took to notice a model had wandered into Australian government systems.
Along the way, we chat about her work on the Cyber Safety Review Board (CSRB), AI model refusals that leave defenders stuck, and why she still bets on hackers to bend this technology their way.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Katie Moussouris.
Timestamps:
0:00 Intros at Offensive AI Con
1:00 OpenAI's DNS tunneling incident and slow monitoring
4:36 Treating AI like malware in a sandbox
9:01 The business model is the misalignment
13:37 Log4j, SBOMs and an NTSB for AI
18:00 Trading liability protection for honest disclosure
22:13 Accountability and "once you become aware"
26:18 The Australia notification timeline
28:19 A blank-check administration and the Anthropic phaseout
34:35 Powerful models in the right hands
38:42 Kill switch bills and regulatory capture
42:36 EU fines as a tariff on American tech
48:03 Reasons for optimism
54:13 Bring back "information security"
1:01:57 Katie's last word
Links:
Transcript
Katie Moussouris on Twitter
Katie Moussouris | LinkedIn
Luta Security | Bespoke Bug Bounty
OpenAI Agent Breached Australian Data Portal in Newly Disclosed Hack
CSRB Review: Log4j
CSRB Report on Microsoft Online Exchange Incident
EU Cyber Resilience Act: 24-Hour Reporting Duties
Patching Faster Has Never Been the Answer
The Real Story on AI Security Live From LABScon
Katie Moussouris | LABScon
DHS Disbands Cyber Safety Review Board
The Chaos (and Cost) of the Lapsus$ Hacking Carnage
Katie Moussouris on the Anthropic Export-Control Mess
Fable 5 Export Controls Harm US Cyber Defense
Offensive AI Conference
TLPBLACK
1 hr 6 min
October 12NCSC's Ollie Whitehouse: 'The Biggest Correction of Technical Debt Ever'
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem x Offensive AI Con: Ollie Whitehouse, CTO of the UK's National Cyber Security Centre, joins us to explain how Britain is preparing for an AI-driven patch wave and why the NCSC is pressing edge-device vendors to finally ship real telemetry.
Plus, we dig into rogue AI agents wandering into a Five Eyes network, along with his forecast that small, capable models could revive self-spreading worms around 2030, all part of what he calls the biggest forced correction of technical debt the industry will ever see.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Ollie Whitehouse.
Timestamps:
0:00 Live from Offensive AI Con: meet Ollie Whitehouse
2:46 Why the NCSC is a model for the US
6:48 What a "national technical authority" does
7:49 The Huawei analysis and the push for passkeys
10:50 Independent AI model testing
13:12 Open-weight vs. closed models and AI sovereignty
19:02 Capability density and AI worms by 2030
23:09 Robotics security and lessons from Japan
26:49 Preparing for the patch wave
31:06 Architecture fixes: OT, cross domain, privileged access
32:28 Telecoms security and Salt Typhoon
38:59 Minimum telemetry standards for edge devices
41:55 Market incentives and the EU Cyber Resilience Act
46:05 Rogue agents and the forced correction of technical debt
Links:
Transcript
Ollie Whitehouse bio
Ollie Whitehouse | LinkedIn
Ollie Whitehouse on Twitter
Ollie Whitehouse's NCSC email newsletter
NCSC: Preparing for a ‘vulnerability patch wave’
NCSC: Managing the cyber risk of agentic AI
Making forensic observability the norm for network devices
Five Eyes unveil new guidelines to secure edge devices
NCSC: Leave passwords in the past - passkeys are the future
Huawei Cyber Security Evaluation Centre oversight board report
Center for Advancing Innovation and Standards for Super Intelligence
UK Cyber Security and Resilience Bill
Telecommunications Security Code of Practice 2026
Huawei cyber security evaluation centre oversight report 2019
TLPBLACK
55 min
October 09Aaron Grattafiori Explains How LLMs Hunt Patch Variants at Scale
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem x Offensive AI Con: Umbriel AI's Aaron Grattafiori breaks down the new offensive-security playbook, using LLMs for patch variant analysis, why the vuln apocalypse hasn't become an exploit apocalypse, and how the death of security through obscurity puts closed-source binaries and firmware within reach.
Plus, we discuss rogue agents escaping sandboxes, the eval-driven loop behind recursive self-improvement, and the brutal cost asymmetry that makes offense cheap and defense almost unaffordable.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Aaron Grattafiori.
Timestamps:
0:00 Introductory banter
1:12 Umbriel AI pitch: "Smart people in a place to cook”
3:08 Weird, exhausting, exciting time in security
4:00 What AI really changed: speed (and a 30-minute reimplementation)
6:36 Incomplete fixes and the variant-analysis pipeline
9:21 Uplifting, abstraction, and representing vulnerabilities
11:48 Experimentation and the new shape of security companies
14:46 The vuln apocalypse vs. the exploit apocalypse
16:36 Triage, verification, and reward hacking
18:08 Do models reintroduce bugs? Is vuln-free code possible?
24:22 Specialized models and the rise of Jev-style classifiers
26:47 Binaries, firmware, and the death of security through obscurity
31:15 Open source as a requirement and corporate contracting
33:54 Rogue agents: Hugging Face, OpenAI, and lab escapes
39:17 Why defense is so expensive, and running the rig
Links:
Transcript
Aaron Grattafiori on Twitter
UmbrielAI on Twitter
Aaron Grattafiori | LinkedIn
Mark Dowd on the zero-day exploit marketplace
Becca Lynch | NVIDIA AI Red Team
Measuring LLMs’ ability to develop exploits (Anthropic)
ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents
Purple Llama CyberSecEval: A Secure Coding Benchmark for Language Models
OpenAI: The Hugging Face incident and the road ahead
What Is Jev? TypeSafe's System One Model Explained
OpenAI Daybreak - Trusted Access for Cyber Overview
Calif: Apple MIE Exploitation Challenge
TLPBLACK
55 min
October 09Joel Todoroff on How Offensive AI Is Rewiring Western Government Ops
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem x Offensive AI Con: Former US intelligence and national security official Joel Todoroff joins us live from OffensiveAIcon to explain why his new startup Phyle is building AI for the recon and targeting work that happens long before anyone fires an exploit.
We get into bribable sysadmins, the military framing that boxes in Western cyber operations, letters of marque, AI doomerism, and what happens when a frontier model decides mid-project that your use case is off-limits.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Joel Todoroff.
Timestamps:
0:00 Live from OffensiveAIcon in Oceanside
1:23 What Phyle builds for governments
3:02 Skepticism of the AI 0-day factory
5:57 Paying a sysadmin vs. burning tokens
9:30 Recon gets less love than weaponization
12:41 Exploit shelf life and target No. 1,000
17:30 Why attacker costs will keep rising
22:23 What HUMINT looks like in 2026
27:06 Why intelligence stovepipes persist
32:16 Cyber as statecraft beyond the military frame
41:23 People will keep making dumb mistakes
48:03 The White House memo and letters of marque
54:06 Doomerism vs. near-term AI harms
1:04:20 PSOA concerns and building guardrails in
1:26:03 Open models, guardrails and zero data retention
Links:
Transcript
Joel Todoroff: Georgetown University bio
Joel Todoroff | LABScon
Phyle — Automated. Rigorous. Relentless.
Cyber Kill Chain | Lockheed Martin
Trump admin empowers private US firms to go after transnational cybercriminals
Hackers made death threats against this security researcher. Big mistake
AIxCC marks pivotal inflection point for cyber defense | DARPA
Microsoft: Continuing the fight against private sector cyberweapons
TLPBLACK
1 hr 38 min
October 07Valentina Palmiotti (chompie) on Vulnpocalypse, Matching Mythos on a Budget
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem x Offensive AI Con: Live from OAIC, IBM X-Force's Valentina Palmiotti (chompie) walks us through the autonomous Windows kernel exploit pipeline she built on older Claude models, which landed within a hair of Mythos for about $180 a chain.
Plus, the Pwn2Own bug Claude called unexploitable, why her Pwn2Own bugs still sit unpatched, disappearing exploit techniques, the dread of being a defender, and how Phrack found its way back into print.
Timestamps:
0:00 Intro and Pwn2Own war stories
3:46 What vibe hacking means
8:16 When long agent runs go sideways
10:31 Self-verification in an n-day kernel pipeline
16:11 Matching Mythos for $180 a chain
18:42 The bug Claude called unexploitable
21:49 Unpatched bugs and the defender gap
25:37 Mythos arrives through CVP
27:00 Models only know public techniques
32:01 Testing models on held-back bugs
37:45 Inside chompie's daily workflow
46:07 Where's the exploitpocalypse?
50:07 Pixel drops MTE
53:40 Advice for defenders: design for containment
58:34 Phrack is back
Links:
Transcript
Valentina Palmiotti (chompie) on Twitter
chompie at the bits
Valentina Palmiotti | LinkedIn
Confirmed! @chompie1337 $20,000 Pwn2Own Victory
Interview with Valentina Palmiotti, Pwn2Own Berlin 2026
Expanding the Cyber Verification Program \ Anthropic
Racing against the clock -- hitting a tiny kernel race window - Project Zero
Building an Autonomous N-day Exploit Generation Pipeline
Pixel 11 lost a security feature (MTE)
Firecracket - Secure and fast microVMs for serverless computing
tmp.0ut
Phrack Magazine
Offensive AI Conference
TLPBLACK
1 hr 9 min
October 02Why is Anthropic Afraid of GLM 5.3?
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 115: We into Anthropic's Frontier Red Team fear-mongering on Zhipu's open-weight GLM 5.3 model and wonder why the AI labs' cyber programs do so little for defenders.
Plus, Citrix NetScaler zero-days, a new iOS zero-day tied to WhatsApp, AI agents that act on your behalf, and whether security teams should buy DGX Sparks to run models locally.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter, TLPBLACK
3:38 OffensiveAI Con and the missing defensive con
9:28 Anthropic's GLM 5.3 post
23:21 What do defensive AI coalitions do?
29:08 Inside Glasswing
36:01 Why can't vuln-finding models patch?
42:44 Gemini for Argon and Grok's CVE-Bench tie
47:54 Is hallucination a solved problem?
57:41 Zhipu's program and 4,000 zero-days
1:02:32 Citrix NetScaler zero-days
1:10:42 Half-days and automated patching
1:26:45 iOS 27.0.1 zero-day and WhatsApp
1:32:36 Dots, Instinct and agent monetization
1:52:06 DGX Spark 64GB and local AI hardware
2:18:38 Anthropic visits the Pope, then UFOs
Links:
Transcript
Anthropic: GLM-5.3 and the spread of advanced cyber capabilities
OpenAi Joe: "It's not just the f*cking sandbox"
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Citrix critical-severity bulletin
iOS 26.7.1 Patches Exploited Zero-Day
Calif on iOS zero-day
Active Exploitation of Citrix NetScaler ADC and Gateway Appliances (Mandiant)
Google Intros Gemini 4 Argon
DeepMind Fairwind Program
NVIDIA DGX Spark 64GB
The Age of Surveillance Capitalism (Shoshana Zuboff)
Is Claude Conscious?Anthropic’s Quest to Instill Morality Into AI Models
Joe Rogan x David Grusch
CTI in Agentic Times (Costin + Vicente training)
Offensive AI Conference (San Diego)
TLPBLACK
State of Statecraft (Agenda)
AMD Ryzen AI MAX+ 395 Processor
2 hr 34 min
September 25Kernel Exploits in the iOS App Store, ShinyHunters Inside the FBI
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 114: We dig into TypeSafe AI's Jev and the new class of System One models, a new Transluce report on rogue OpenAI agents probing an Australian Medicare portal, Irregular's role in the latest Gemini test breakout, Hacktron's takeover of OpenAI employee accounts and the messy disclosure fight that followed, and what Costin would fix first as OpenAI's CISO for a day.
Plus, the soaring price of DGX Sparks and home AI rigs, the White House pressing labs to hold models back from the UK AI Security Institute, Anthropic bringing in Accenture as an evaluator, the FomoPeek App Store app hiding iOS kernel exploits, ShinyHunters' claimed FBI breach, and Nightmare Eclipse going public with identity and a CrowdStrike exploit.
Cast: Ryan Naraine, Juan Andres Guerrero-Saade and Costin Raiu.
Timestamps:
0:00 Introductory banter
1:57 The Last LABScon wrap-up
9:35 TypeSafe AI's Jev and System One models
26:18 Step-down transformers and lab economics
30:58 Rogue OpenAI agents and the Transluce report
41:40 Irregular and Gemini's test breakout
49:28 Hacktron's OpenAI hack and the disclosure fight
54:57 Costin as OpenAI CISO for a day
1:05:44 Hugging Face defends itself with GLM 5.2
1:17:08 What a home AI rig costs now
1:30:02 White House vs. UK AISI pre-release testing
1:36:52 FomoPeek kernel exploits in the App Store
1:51:19 ShinyHunters claims an FBI breach
2:02:40 Nightmare Eclipse unmasked
Links:
Transcript
Introducing System One Models & Jev
What Is Jev? A Guide to TypeSafe AI’s System One Model
Early rogue AI agent activity and attempts to hack found on urlquery.net
Gemini Hacked Three Companies in First Known Breakout by Google’s AI
Google says Gemini breached three companies during security test
Hacking OpenAI | Hacktron AI
Anthropic: Partnering with Accenture on embedded evaluation
White House: Hold new models from UK testers until US review
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
FomoPeek App Store Poisoning and iOS Kernel Exploitation
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
Nightmare Eclipse Drops CrowdStrike Exploit
Costin/Vicente training: CTI in Agentic Times
CYBERWARCON CFP
State of Statecraft
TLPBLACK
2 hr 17 min
September 11AI Doomers, Death Cults, and a Million-Dollar WeChat Worm Exploit
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 113: On the show this week, the buddies dig into an Anthropic researcher quitting with a warning that AI could kill us all, the San Francisco "death cult" and their motives, and agent swarms leaving junk on public wikis and university URL shorteners.
Plus, a high-quality Anthropic's threat report and the claim that Moonshot was quietly serving Claude tokens as Kimi K3, live MikroTik and Chrome zero-days that landed a day ahead of the patches, and a WeChat worm that hijacks an account via phone calls.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter, TLP Black
5:05 LabsCon, the last one, and JAGS on his keynote
8:24 Costin's agentic CTI training and what old-school CTI is missing
16:27 Anthropic's threat-intel report + IOCs
20:00 APT29 and DarkSword on hotel Wi-Fi
23:34 Bioweapons, guardrails, and what got shut down
28:07 Why is anyone running these attacks on Claude at all?
35:53 Distillation at industrial scale and the Kimi K3 fraud claim
48:43 Chinese models, Americanized, running on DGX Spark
55:00 Mr. America: local AI and the seven-layer cake
1:04:34 Should frontier AI labs poison the distillers?
1:27:05 What the frontier labs did to the security ecosystem
1:34:22 Jacob Coxon quits, and the doomer argument falls apart
1:59:13 Agent swarms littering the internet
2:07:29 Chrome zero-days, MikroTik, patch-gaps
Links:
Transcript
Anthropic Threat Intel Report (Sep 2006)
Anthropic Says It Blocked Possible Efforts to Build Biological Weapons
Anthropic disrupts bioweapons research efforts, Russian hacking
Joint Advisory on Chinese AI Labs Distillation Campaigns
Anthropic admits AI agents hacked third parties
OpenAI Agent Swarm Caught Littering the Web
Rogue AI Agents Hid 1,000 Messages in Encoded URLs
Jacob Coxon thread on X
Anthropic whistleblower gave up his equity to leave the company
Proofpoint: Once in a BlueMoon
Volexity: Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
Microsoft's Most Massive Patch Tuesday
Microsoft September Patch Tuesday data
Chrome 153 covers exploited zero-days
Critical vulnerabilities in MikroTik RouterOS being actively exploited
MikroTik ssh 0day exploitation in the wild
WeWorm: zero-click worm in WeChat (Calif)
Costin/Vicente training on AI for CTI
TLPBLACK
State of Statecraft Agenda
LABScon 2026 Speakers
Introducing Quasar 438B, the top European AI model
Maciej Ceglowski - Superintelligence: The Idea That Eats Smart People
Decipher Podcast
2 hr 38 min
September 04Three Secret AI Civilizations Rose and Fell. Nobody Checked the Logs.
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 112: The 'OpenAI hacks Hugging Face' fallout has turned into a story about AI civilizations rising from the ashes, politicians calling for super-intelligence bans, and the emergence of well-funding non-profits doing AI safety work. Who are these people and what's their security expertise?
Plus, GPT-6 Astra lands in a trusted-access program nobody can get into, Costin ranks the local models he runs next to his desk, and CrowdStrike sinkholes a botnet that's been alive since 2003.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter
1:02 Conference season: LabsCon, Offensive AI Con, Countermeasure
5:40 The Hugging Face story hits the front page
7:04 Dwarkesh, Greenblatt, and the AI-pilled framing
11:51 Swap "agents" for "Python" and the panic goes away
16:34 Does anyone actually know what happened?
21:18 Bernie Sanders wants to ban superintelligence
34:03 Defending against swarms: the 2026 SOC
39:15 Logs, Splunk, and the business model in the way
44:11 What EDR vendors are actually building with AI
56:16 The security poverty line and the endgame
1:07:53 GPT-6 Astra, Fable 5.1, and local model rankings
1:27:25 Google's Fairwind, CodeMender, and agents running Linux
1:45:31 Apple's bet on local inference
1:53:21 The Sality takedown and endgame advice
Links:
Transcript
TLPBLACK
The Rise and Fall of Agent Civilizations
Ryan Greenblatt – What happens once AI can automate AI research?
Reuters: OpenAI agents hijacked German website
Discovery of a new OpenAI agent message board
Security Incidents at METR
Bernie Sanders Intros Legislation to Ban Artificial Superintelligence
Open AI: Path to Astra
Safety overview: GPT-6 Astra (OpenAI)
Top local AI models for CTI workflows (Costin Raiu)
Google Fairwind Limited Access Program
Anthropic Ships Claude Fable 5.1 and Claude Mythos 5.1
Inside the Sality Botnet Disruption Operation (CrowdStrike)
Getting AI Agents to tell on themselves (Thinkst)
LABScon 2026 Speakers
Ringzer0 COUNTERMEASURE
2 hr 8 min
August 28A Thousand Agents Walk Into Hugging Face
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 111: OpenAI finally published a technical Hugging Face post-mortem, and Costin's verdict is blunt. He reads it as a document written for policymakers rather than for the blue teams who have to survive a thousand-agent swarm.
We also dig into NVIDIA's $12.9 billion acquisition of Hugging Face, why JAGS thinks a frontier lab standing against open-source looks weak, and what that new industry open letter on cyber defense actually asks anyone to do. Plus, hotel Wi-Fi tradecraft after CaptiveCrunch, the FBI's ORB network takedown with Lumen, Chinese routers that ship backdoored from the factory, and the TeamPCP arrests in Australia.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter
1:11 TLPBlack, incident response, and why it starts at the router
4:11 CaptiveCrunch and Juanito's travel router kit
7:59 Costin's VPN/hotel WiFi stack
12:36 State of Statecraft, LABScon, and Offensive AI Con
17:16 OpenAI's Hugging Face post-mortem technical report
21:43 A swarm of a thousand agents
27:35 Who was OpenAI’s report written for?
33:05 Fail2ban, canaries, and catching agents in your logs
40:34 NVIDIA buys Hugging Face for $12.9 billion
44:42 The open weights fight and rooting for China
52:47 Nemotron, DGX Spark, and the RAM price spiral
1:03:26 Open letter on collective AI-powered cyber defense
1:30:21 Lumen's Quartermaster and the FBI ORB takedown
1:59:05 Backdoored ZBT routers, Chinese phones, and the TeamPCP arrests
Links:
Transcript
The Hugging Face incident and the road ahead (OpenAI)
OpenAI - Hugging Face Technical Report (PDF)
Independent investigation of OpenAI agents’ behavior (METR)
The Defender’s Window (Greg Brockman)
Open Letter: A call for collective action on cyber defense (OpenAI)
Inside China-nexus cyber espionage infrastructure (Lumen)
Nvidia to Buy Open Source AI Platform Hugging Face For $12.9 Billion
Nemotron AI Models (NVIDIA)
NVIDIA DGX Spark
NVIDIA DGX Platform
FBI Seize Platforms Used by China State-Sponsored Hackers (DOJ)
Michael Horka at LABScon
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Brian Krebs)
Australia police statement on TeamPCP arrests
Austin Larsen at LABScon
Chinese Implants in the Supply Chain (VulnCheck)
More Than 4,000 Legacy Routers Compromised by AryStinger
The Massive Android Botnet with 1.8 Million Infected Devices
Alex Turing Blog
Apple in China: The Capture of the World's Greatest Company
State of Statecraft Conference
Offensive AI Conference (San Diego)
TLPBLACK
2 hr 28 min

About Three Buddy Problem

From the publisher's feed

The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware, attribution, cyberwar, ethics,…