Three Buddy Problem

Trenchant, Peter Williams, and the proliferation of a Shadow Brokers-level iOS exploit framework


Listen Later

(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.)

Three Buddy Problem - Episode 88: We unpack the fallout from public documentation of the Coruna iOS exploit kit, the likely connection to the Peter Williams/Trenchant exploit sale to Russians, how it slipped from government hands into criminal use, and the widening use of zero-days by surveillance vendors and cybercriminals.

Plus, fresh signs of cyber-warfare activity tied to Iran and Israel, the FBI’s disclosure of a breach affecting internal surveillance systems, and the latest debate over AI, security tooling, and Anthropic’s public stumbles.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Links:

  • Transcript (raw, AI-generated)
  • Thinkst Canary (how it works)
  • Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
  • iVerify Details First Known Mass iOS Attack
  • Matthias Frielingsdorf on the mysterious Coruna iOS exploit kit discovery
  • Matthias Frielingsdorf on Coruna (raw transcript)
  • Coruna-related hashes on VirusTotal
  • Kaspersky: No signs Coruna iPhone exploit kit made by US
  • Azimuth unlocked the San Bernardino shooter’s iPhone for the FBI
  • 2025 Zero-Days in Review (Google)
  • FBI investigating ‘suspicious’ cyber activities on critical surveillance network
  • Iranian Hacking Groups Go Dark Amid US, Israeli Military Strikes
  • Interplay between Iranian Targeting of IP Cameras and Physical Warfare
  • Israel says it knocked out Iran’s cyber warfare headquarters
  • Amazon Bahrain facility targeted for U.S. military support
  • Full transcript of Anthropic CEO Dario Amodei interview
  • Codex Security (formerly Aardvark) now in research preview
  • NEBULA:FOG 2026 | AI x Security Hackathon
  • ...more
    View all episodesView all episodes
    Download on the App Store

    Three Buddy ProblemBy Security Conversations

    • 4.9
    • 4.9
    • 4.9
    • 4.9
    • 4.9

    4.9

    61 ratings


    More shows like Three Buddy Problem

    View all
    Hacked by Hacked

    Hacked

    188 Listeners

    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

    369 Listeners

    Risky Business by Risky Business Media

    Risky Business

    376 Listeners

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

    648 Listeners

    CyberWire Daily by N2K Networks

    CyberWire Daily

    1,030 Listeners

    Smashing Security by Graham Cluley

    Smashing Security

    316 Listeners

    Click Here by Recorded Future News

    Click Here

    421 Listeners

    Darknet Diaries by Jack Rhysider

    Darknet Diaries

    8,059 Listeners

    Cybersecurity Today by Jim Love

    Cybersecurity Today

    178 Listeners

    Hacking Humans by N2K Networks

    Hacking Humans

    313 Listeners

    CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

    CISO Series Podcast

    192 Listeners

    Defense in Depth by CISO Series

    Defense in Depth

    73 Listeners

    Cybersecurity Headlines by CISO Series

    Cybersecurity Headlines

    136 Listeners

    Risky Bulletin by Risky Business Media

    Risky Bulletin

    45 Listeners

    The 404 Media Podcast by 404 Media

    The 404 Media Podcast

    392 Listeners