Sign in

Costin G. Raiu

@craiu.bsky.social
4.2K followers 274 following 30 posts

Romanian antihacker from another planet. #threatintel #yara #chess #taekwondo black belt Motto: "One reboot a day keeps the implant away"

PostsRepliesMedia
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 21/07/2026
"The AI is not the end game. These models are not the final product..." @craiu.bsky.social @jags.bsky.social
042
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 18/04/2026
NEW PROBLEM UP! 🚨 We discuss a mysterious, VM-obfuscated backdoor that lived undetected on a single U.K. machine for a year before disappearing, finding clues pointing to an elite-level APT intrusion that still evades broader industry coverage. WATCH on YouTube www.youtube.com/watch?v=mSD9...
youtube.com
The Angry Spark APT Mystery: One Victim, Zero Attribution
YouTube video by Three Buddy Problem
1114
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 19/04/2026
"They sound like idiots...WHAT are you talking about?!?" #threebuddyproblem @jags.bsky.social @craiu.bsky.social
232
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 06/04/2026
"Are you saying that through technology and AI, we will reach the ideals of communism?" @craiu.bsky.social @jags.bsky.social www.youtube.com/watch?v=bQMB...
youtube.com
Karl Marx, AI, and the future of work
YouTube video by Three Buddy Problem
122
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 14/03/2026
FRESH! Our weekend radio show is available for all earholes everwhere @craiu.bsky.social @jags.bsky.social LISTEN podcasts.apple.com/us/podcast/t...
podcasts.apple.com
Three Buddy Problem
Technology Podcast · Updated Weekly · The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware,...
233
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 28/02/2026
POD UP ALERT! (Presented by @thinkstcanary.canary.tools) War in Iran + cyber capabilities and proxy risks; Anthropic’s clash with the Pentagon; market shockwaves from AI-driven security tools; mass layoffs tied to automation; Trenchant exec sentencing and sanctions in the exploit trade...
securityconversations.com
War in Iran, Anthropic v Pentagon, Trenchant zero-day sanctions, AI stock market shocks - Security Conversations
(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes […]
164
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 30/01/2026
🔥 #ThreeBuddyProblem Ep83 has been pushed to your earholes. Poland CERT on Russian wipers, Sandworm or not Sandworm, new FortIvanti nightmares + some KasperSekrets chit-chat @craiu.bsky.social @jags.bsky.social securityconversations.com/episode/a-de...
securityconversations.com
A destructive cyberattack in Poland raises NATO 'red-line' questions - Security Conversations
(Presented by Material Security: We protect your company’s most valuable materials — the emails, files, and accounts that live in your Google Workspace and Microsoft […]
163
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 23/01/2026
🌨️ ❄️ Here's a fresh episode of the problem to help you brave the bad weather this weekend (sponsored by Material Security) @craiu.bsky.social @jags.bsky.social LISTEN securityconversations.com/episode/chea...
securityconversations.com
Cheap, AI-generated zero-days and the real meaning of ‘advanced’ malware - Security Conversations
(Presented by Material Security: We protect your company’s most valuable materials — the emails, files, and accounts that live in your Google Workspace and Microsoft […]
154
Reposted by Costin G. Raiu
Sean Lyngaas @snlyngaas.bsky.social · 16/01/2026
Sources: US officials are telling multiple agencies, including FBI, to pull pple from attending the RSA conference after Jen Easterly, who led CISA under Biden, was named RSAC CEO: www.cnn.com/politics/liv...
cnn.com
Live updates: Trump keeping Machado’s Nobel prize after Venezuelan opposition leader presents it to him | CNN Politics
Venezuelan opposition leader María Corina Machado, the 2025 Nobel Peace Prize winner, met with President Donald Trump today. Follow for live updates.
43221
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 05/01/2026
This week's Three Buddy Problem show is presented by Material Security and includes book-reading recommendations from @craiu.bsky.social and @jags.bsky.social WATCH youtu.be/mY9rRd1Wm_I?...
youtu.be
A special mailbag episode with book recommendations
YouTube video by Three Buddy Problem
1104
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 09/01/2026
NEW!! (Presented by Material Security). We talk about the escalating protests in Iran, the expected cyber effects, and parallels with cyber operations and Venezuela power cuts. @craiu.bsky.social @jags.bsky.social @darkcell.bsky.social securityconversations.com/episode/hami...
securityconversations.com
Hamid Kashfi on the situation in Iran; Did cyber cause Venezuela blackouts? - Security Conversations
(Presented by Material Security: We protect your company’s most valuable materials — the emails, files, and accounts that live in your Google Workspace and Microsoft […]
242
Costin G. Raiu @craiu.bsky.social · 10/01/2026
The Cybersecurity Booklist: 11 Must-Reads for 2026 from The Three Buddy Problem Podcast: t.co/XuM7Bd0MXh @ryanaraine.bsky.social @jags.bsky.social
t.co
https://medium.com/@costin.raiu/the-cybersecurity-booklist-11-must-reads-for-2026-from-the-three-buddy-problem-podcast-ef8216958bd3
063
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 13/12/2025
This weekend's problem is up on YouTube. Shoutout to ThreatLocker for supporting the show! @craiu.bsky.social @jags.bsky.social www.youtube.com/watch?v=LR9F...
youtube.com
Legal Corruption, React2Shell Exploitation, Dual-Use AI Risks
YouTube video by Three Buddy Problem
032
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 06/12/2025
!! BRAND NEW Three Buddy Problem, on React2Shell, BRICKSTORM, .gov surveillance madness, and AI agents finding smart contracts exploits @craiu.bsky.social @jags.bsky.social LISTEN EVERYWHERE pod.link/1414525622 (Presented by ThreatLocker)
176
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 21/11/2025
This week's problem is up on YouTube @craiu.bsky.social @jags.bsky.social (Presented by Material Security) youtu.be/75F-z1OvpYU?...
youtu.be
Gemini 3, Fortinet/Chrome zero-days, Cloudflare monoculture
YouTube video by Three Buddy Problem
072
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 29/11/2025
NEW podcast alert! @jags.bsky.social @craiu.bsky.social securityconversations.com/episode/shai...
securityconversations.com
Shai-Hulud 2.0, Russia GRU Intrusions, and Microsoft’s Regulatory Capture - Security Conversations
(Presented by Material Security: We protect your company’s most valuable materials — the emails, files, and accounts that live in your Google Workspace and Microsoft […]
152
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 01/11/2025
OpenAI's Dave Aitel on using Aardvark to audit cryptocurrency smart contracts @craiu.bsky.social @daveaitel.bsky.social
162
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 08/11/2025
Three Buddy Problem, Ottawa, Canada. @craiu.bsky.social @jags.bsky.social
1131
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 31/10/2025
This week's show features OpenAI's Dave Aitel and is up on YouTube @daveaitel.bsky.social @jags.bsky.social @craiu.bsky.social youtu.be/EwMJsU8klZ0?...
youtu.be
OpenAI’s Dave Aitel talks Aardvark, economics of bug-hunting with LLMs
YouTube video by Three Buddy Problem
193
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 24/10/2025
New episode ALERT! @craiu.bsky.social @jags.bsky.social News on Apple's iOS 26 quietly killing shutdown.log forensic artifact, a million-dollar WhatsApp zero-click that never materialized, Chinese threat intel reports pointing fingers at the NSA... securityconversations.com/episode/appl...
securityconversations.com
Apple’s iOS forensics freeze, WhatsApp zero-click, China outs NSA - Security Conversations
Three Buddy Problem – Episode 69: We dig into news that Apple's iOS 26 has quietly killed the shutdown.log forensic artifact used to spot signs […]
063
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 29/09/2025
Costin with some advice for threat hunters @craiu.bsky.social @jags.bsky.social youtube.com/shorts/z6fX1...
youtube.com
Costin's advice for threat hunters: Look at Ukraine CERT reports
YouTube video by Three Buddy Problem
162
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 12/10/2025
An all-new Three Buddy Problem for your weekend earholes. Apple exploits chains, Oracle + ransomware, Ivanti 0days, VT pricing tiers @craiu.bsky.social @jags.bsky.social youtu.be/qPj9_8azAvk?...
youtu.be
Apple Exploit-Chain Bounties, Tactical Wi-Fi Exploit Suitcases
YouTube video by Three Buddy Problem
064
Reposted by Costin G. Raiu
Eliot Higgins @eliothiggins.bsky.social · 26/09/2025
1835447
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 14/06/2025
"The best netflow comes from asking friends for favors." -- @jags.bsky.social @craiu.bsky.social
192
Reposted by Costin G. Raiu
Hervé Letoqueux @herve.checkfirst.network · 07/05/2025
[FR][EN]Our last report on Storm-1516, a russian information manipulation set (IMS) likely to affect the French and European debate. So proud of my team! Feel free to share and enjoy. #FIMI
1236
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 28/03/2025
🔥 NEW pod alert! Signalgate and Signal's ID management nightmares, who's the mysterious APT caught in Russia, the return of Lab Dookhtegan and coordinated hack-for-leak ops @craiu.bsky.social @jags.bsky.social Apple: bit.ly/3budprob YouTube: bit.ly/TBP-YT Spotify: bit.ly/3DH5wEO
bit.ly
Three Buddy Problem
Technology Podcast · Updated Weekly · The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware,...
093
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 20/03/2025
This week, four buddies, no problems! Katie Moussouris is joining the show 🌺 Set your alarms ⏰ Spotify: bit.ly/3DH5wEO Apple: bit.ly/3budprob YouTube: bit.ly/TBP-YT @k8em0.bsky.social @craiu.bsky.social @jags.bsky.social
1226
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 14/03/2025
A brand-new pod for your weekend earholes. The show is available on all platforms @craiu.bsky.social @jags.bsky.social securityconversations.com/episode/a-ha...
securityconversations.com
A half-dozen Microsoft zero-days, Juniper router backdoors, advanced bootkit hunting - Security Conversations
Three Buddy Problem – Episode 38: On the show this week, we look at a hefty batch of Microsoft zero-days exploited in the wild, iOS […]
0133
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 26/02/2025
🇨🇳🇺🇸🕵️ On the pod, we unpacked a new report on what China knows about NSA intrusions @jags.bsky.social @craiu.bsky.social www.linkedin.com/posts/ryanar...
linkedin.com
Ryan Naraine on LinkedIn: #threebuddyproblem
🇨🇳 🇺🇸 On the pod, we unpacked a new report on what China knows about NSA intrusions 🕵‍♀️ Costin Raiu #ThreeBuddyProblem
172
Reposted by Costin G. Raiu
Lukasz Olejnik @lukaszolejnik.bsky.social · 23/02/2025
Good news, there appear to be no need to cancel the results of the German elections!
3122
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 21/02/2025
Three Buddy Problem heads-up: The pod will be a day late this week because of travel schedules. Catch up on Spotify open.spotify.com/show/6dXbRag...
open.spotify.com
An 'extremely sophisticated' iPhone hack; Google flags major AMD microcode bug
093
Reposted by Costin G. Raiu
Alex Pinto @alexcp.bsky.social · 08/01/2025
Tuned in to listen to a pretty nuanced take on Salt Typhoon, got jump scared by @jags.bsky.social mentioning my name lol
0143
Costin G. Raiu @craiu.bsky.social · 04/01/2025
Three Buddy Problem Episode 28 - the first of 2025, is out! We discuss the US Treasury/BeyondTrust hack, APT group naming bad examples of bad examples, a new variant of the Xdr33 malware and exclusive new information on the Cyberhaven hack. securityconversations.com/episode/us-t...
securityconversations.com
US Treasury hacked via BeyondTrust, MISP and the threat actor naming mess - Security Conversations
Three Buddy Problem – Episode 28: In this episode, we explore the ongoing challenges of threat actor naming in cybersecurity and the confusion caused by […]
2148
Reposted by Costin G. Raiu
Cynthia Brumfield @metacurity.com · 31/12/2024
“Today, more seasoned hackers are recruiting kids from the gaming world, said Allison Nixon, chief research officer at online investigations firm Unit 221B. ‘There’s a talent pool in those videogames that can be drawn from and fraud groups have realized this.’” www.wsj.com/tech/cyberse...
wsj.com
Getting Cheated in a Videogame Led Him to a World of Online Crime
At 16, Ricky Handschumacher was a high-school baseball star. A decade later, he was facing federal prison for stealing cryptocurrency.
0176
Reposted by Costin G. Raiu
Hervé Letoqueux @herve.checkfirst.network · 29/12/2024
Proud and honored to see @viginum.bsky.social ’s investigation on the Portal Kombat disinformation network mentioned in @craiu.bsky.social’s top of the top 2024 research list. Thank you & Kudos to the DivOps team! @colingerard.bsky.social medium.com/@costin.raiu...
medium.com
The Best Cybersecurity Stories of 2024
For me, 2024 has been an amazing year. I finally got my black belt in Taekwondo and together with my friends Juan and Ryan we started a new…
1205
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 27/12/2024
New pod alert! @craiu.bsky.social @jags.bsky.social podcasts.apple.com/us/podcast/s...
podcasts.apple.com
Security Conversations
Technology Podcast · 144 Episodes · Updated Weekly
052
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 23/12/2024
🎁🧐 NEW! Episode 26 is gift-wrapped and delivered with spicy hot takes on CISA's VPN advice, banning TP-Link, bombing ransomware hackers and Cellebrite/Android 0days @craiu.bsky.social @jags.bsky.social Enjoy wherever pods are found! securityconversations.com/episode/us-g...
securityconversations.com
US government's VPN advice, dropping bombs on ransomware gangs - Security Conversations
Three Buddy Problem – Episode 26: We dive deep into the shadowy world of surveillance and cyber operations, unpacking Amnesty International's explosive report on NoviSpy, […]
1117
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 23/12/2024
On the YouTubes! @jags.bsky.social @craiu.bsky.social youtu.be/khT86zvLJXE?...
youtu.be
US government’s VPN advice, dropping bombs on ransomware gangs
YouTube video by Ryan Naraine
062
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 11/12/2024
For Christmas, the Three Buddy Problem pod will be looking back at the best security research that was published in 2024. Special buddy cookies to those who were outstanding. Extra points for obscure ones! @craiu.bsky.social @jags.bsky.social Link: docs.google.com/forms/d/e/1F...
docs.google.com
Three Buddy Problem's Best Security/CTI Research of 2024
0149
Costin G. Raiu @craiu.bsky.social · 11/12/2024
What is the link between the canceling of the presidential elections in Ro, foreign influence, Russia and TikTok? Episode 24 of the Three Buddy Problem podcast deep dives into the topic with local insights: securityconversations.com/episode/insi...
securityconversations.com
Inside the Turla Playbook: Hijacking APTs and fourth-party espionage - Security Conversations
Three Buddy Problem – Episode 24: In this episode, we did into Lumen/Microsoft’s revelations on Russia's Turla APT stealing from a Pakistani APT, and issues […]
0112
Costin G. Raiu @craiu.bsky.social · 11/12/2024
Help us choose the best security research of 2024:
072
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 30/11/2024
Three Buddy Problem: Volexity's Steven Adair joins the show 🔥 @stevenadair.bsky.social @craiu.bsky.social @jags.bsky.social Enjoy securityconversations.com/episode/vole...
1239
Reposted by Costin G. Raiu
Bartek Jerzman @handle.invalid · 25/11/2024
If you have not listened to the latest episode #ThreeBuddyProblem 🎙️then it is high time to catch up 😁 #PIVOTcon #PIVOTcon25 was mentioned 🙏🤟💪 Love it! cc: @ryanaraine.bsky.social @craiu.bsky.social @jags.bsky.social
073
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 22/11/2024
A band new Three Buddy Problem episode for your weekend earholes! 🔥 with @craiu.bsky.social @jags.bsky.social We cover Volexity’s discovery of Russian APT Wi-Fi “nearest neighbor attacks,” the Chinese surveillance state, Salt Typhoon realities, and more... LISTEN open.spotify.com/episode/2Bop...
open.spotify.com
Russian APT weaponized nearby Wi-Fi networks in DC, new macOS zero-days, DOJ v Chrome
Security Conversations · Episode
0138
Reposted by Costin G. Raiu
Eric Geller @ericjgeller.com · 22/11/2024
@hultquist.bsky.social kicks off this year's #CYBERWARCON.
0174
Reposted by Costin G. Raiu
Andy Greenberg @agreenberg.bsky.social · 22/11/2024
Russian spies—likely Russia's GRU intelligence agency—used a new trick to hack a victim in Washington, DC: They remotely infected another network in a building across the street, hijacked a laptop there, then breached the target organization via its Wifi. www.wired.com/story/russia...
wired.com
Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack
In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.
12573322
Reposted by Costin G. Raiu
visi stark @invisig0th.bsky.social · 16/11/2024
Here's a job opening for PaloAlto Unit 42 (Sr. Principal Threat Researcher) that mentions #synapse experience would be a plus! 🎉💚 jobs.smartrecruiters.com/PaloAltoNetw...
jobs.smartrecruiters.com
Sr. Principal Threat Researcher (Unit 42)
Company Description: Our MissionAt Palo Alto Networks® everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world w...
0104
Reposted by Costin G. Raiu
Ryan Naraine @ryanaraine.bsky.social · 15/11/2024
🔥 TPB Episode 21 is live on all platforms! The future of CISA is a recurring theme of an episode filled major gov-level hacking attacks from Iran, China... securityconversations.com/episode/what...
securityconversations.com
What happens to CISA now? Is deterrence in cyber possible? - Security Conversations
Three Buddy Problem – Episode 21: We dig into an incredible government report on Iranian hacking group Emennet Pasargad and tradecraft during the Israel/Hamas war, […]
1146
Reposted by Costin G. Raiu
StrikeReady Labs @strikereadylabs.com · 16/11/2024
if plugx is your game, open dir with live payloads 103.43.18[.]71:88 #apt #malware files archived here for homegamers github.com/StrikeReady-...
opendir apache-ish listing for 103.43.18.81
0134