iiinova — where your digital self keeps evolving

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 03/10/2026

Powerful AI capabilities now available for everyone with decent hardware @craiu.bsky.social

041

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 21/07/2026

"The AI is not the end game. These models are not the final product..." @craiu.bsky.social @jags.bsky.social

042

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 18/04/2026

NEW PROBLEM UP! 🚨 We discuss a mysterious, VM-obfuscated backdoor that lived undetected on a single U.K. machine for a year before disappearing, finding clues pointing to an elite-level APT intrusion that still evades broader industry coverage. WATCH on YouTube www.youtube.com/watch?v=mSD9...

youtube.com

The Angry Spark APT Mystery: One Victim, Zero Attribution

YouTube video by Three Buddy Problem

1114

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 19/04/2026

"They sound like idiots...WHAT are you talking about?!?" #threebuddyproblem @jags.bsky.social @craiu.bsky.social

232

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 06/04/2026

"Are you saying that through technology and AI, we will reach the ideals of communism?" @craiu.bsky.social @jags.bsky.social www.youtube.com/watch?v=bQMB...

youtube.com

Karl Marx, AI, and the future of work

YouTube video by Three Buddy Problem

122

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 28/02/2026

POD UP ALERT! (Presented by @thinkstcanary.canary.tools) War in Iran + cyber capabilities and proxy risks; Anthropic’s clash with the Pentagon; market shockwaves from AI-driven security tools; mass layoffs tied to automation; Trenchant exec sentencing and sanctions in the exploit trade...

securityconversations.com

War in Iran, Anthropic v Pentagon, Trenchant zero-day sanctions, AI stock market shocks - Security Conversations

(Presented by Thinkst Canary: Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes […]

164

Reposted by Costin G. Raiu

Sean Lyngaas @snlyngaas.bsky.social · 16/01/2026

Sources: US officials are telling multiple agencies, including FBI, to pull pple from attending the RSA conference after Jen Easterly, who led CISA under Biden, was named RSAC CEO: www.cnn.com/politics/liv...

cnn.com

Live updates: Trump keeping Machado’s Nobel prize after Venezuelan opposition leader presents it to him | CNN Politics

Venezuelan opposition leader María Corina Machado, the 2025 Nobel Peace Prize winner, met with President Donald Trump today. Follow for live updates.

43221

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 05/01/2026

This week's Three Buddy Problem show is presented by Material Security and includes book-reading recommendations from @craiu.bsky.social and @jags.bsky.social WATCH youtu.be/mY9rRd1Wm_I?...

youtu.be

A special mailbag episode with book recommendations

YouTube video by Three Buddy Problem

1104

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 13/12/2025

This weekend's problem is up on YouTube. Shoutout to ThreatLocker for supporting the show! @craiu.bsky.social @jags.bsky.social www.youtube.com/watch?v=LR9F...

youtube.com

Legal Corruption, React2Shell Exploitation, Dual-Use AI Risks

YouTube video by Three Buddy Problem

032

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 06/12/2025

!! BRAND NEW Three Buddy Problem, on React2Shell, BRICKSTORM, .gov surveillance madness, and AI agents finding smart contracts exploits @craiu.bsky.social @jags.bsky.social LISTEN EVERYWHERE pod.link/1414525622 (Presented by ThreatLocker)

176

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 01/11/2025

OpenAI's Dave Aitel on using Aardvark to audit cryptocurrency smart contracts @craiu.bsky.social @daveaitel.bsky.social

162

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 08/11/2025

Three Buddy Problem, Ottawa, Canada. @craiu.bsky.social @jags.bsky.social

1131

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 24/10/2025

New episode ALERT! @craiu.bsky.social @jags.bsky.social News on Apple's iOS 26 quietly killing shutdown.log forensic artifact, a million-dollar WhatsApp zero-click that never materialized, Chinese threat intel reports pointing fingers at the NSA... securityconversations.com/episode/appl...

securityconversations.com

Apple’s iOS forensics freeze, WhatsApp zero-click, China outs NSA - Security Conversations

Three Buddy Problem – Episode 69: We dig into news that Apple's iOS 26 has quietly killed the shutdown.log forensic artifact used to spot signs […]

063

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 12/10/2025

An all-new Three Buddy Problem for your weekend earholes. Apple exploits chains, Oracle + ransomware, Ivanti 0days, VT pricing tiers @craiu.bsky.social @jags.bsky.social youtu.be/qPj9_8azAvk?...

youtu.be

Apple Exploit-Chain Bounties, Tactical Wi-Fi Exploit Suitcases

YouTube video by Three Buddy Problem

064

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 14/06/2025

"The best netflow comes from asking friends for favors." -- @jags.bsky.social @craiu.bsky.social

192

Reposted by Costin G. Raiu

Hervé Letoqueux @herve.checkfirst.network · 07/05/2025

[FR][EN]Our last report on Storm-1516, a russian information manipulation set (IMS) likely to affect the French and European debate. So proud of my team! Feel free to share and enjoy. #FIMI

1236

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 28/03/2025

🔥 NEW pod alert! Signalgate and Signal's ID management nightmares, who's the mysterious APT caught in Russia, the return of Lab Dookhtegan and coordinated hack-for-leak ops @craiu.bsky.social @jags.bsky.social Apple: bit.ly/3budprob YouTube: bit.ly/TBP-YT Spotify: bit.ly/3DH5wEO

bit.ly

Three Buddy Problem

Technology Podcast · Updated Weekly · The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware,...

093

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 20/03/2025

This week, four buddies, no problems! Katie Moussouris is joining the show 🌺 Set your alarms ⏰ Spotify: bit.ly/3DH5wEO Apple: bit.ly/3budprob YouTube: bit.ly/TBP-YT @k8em0.bsky.social @craiu.bsky.social @jags.bsky.social

1226

Reposted by Costin G. Raiu

Lukasz Olejnik @lukaszolejnik.bsky.social · 23/02/2025

Good news, there appear to be no need to cancel the results of the German elections!

3122

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 21/02/2025

Three Buddy Problem heads-up: The pod will be a day late this week because of travel schedules. Catch up on Spotify open.spotify.com/show/6dXbRag...

open.spotify.com

An 'extremely sophisticated' iPhone hack; Google flags major AMD microcode bug

093

Reposted by Costin G. Raiu

Alex Pinto @alexcp.bsky.social · 08/01/2025

Tuned in to listen to a pretty nuanced take on Salt Typhoon, got jump scared by @jags.bsky.social mentioning my name lol

0143

Costin G. Raiu @craiu.bsky.social · 04/01/2025

Three Buddy Problem Episode 28 - the first of 2025, is out! We discuss the US Treasury/BeyondTrust hack, APT group naming bad examples of bad examples, a new variant of the Xdr33 malware and exclusive new information on the Cyberhaven hack. securityconversations.com/episode/us-t...

securityconversations.com

US Treasury hacked via BeyondTrust, MISP and the threat actor naming mess - Security Conversations

Three Buddy Problem – Episode 28: In this episode, we explore the ongoing challenges of threat actor naming in cybersecurity and the confusion caused by […]

2148

Reposted by Costin G. Raiu

Cynthia Brumfield @metacurity.com · 31/12/2024

“Today, more seasoned hackers are recruiting kids from the gaming world, said Allison Nixon, chief research officer at online investigations firm Unit 221B. ‘There’s a talent pool in those videogames that can be drawn from and fraud groups have realized this.’” www.wsj.com/tech/cyberse...

wsj.com

Getting Cheated in a Videogame Led Him to a World of Online Crime

At 16, Ricky Handschumacher was a high-school baseball star. A decade later, he was facing federal prison for stealing cryptocurrency.

0176

Costin G. Raiu @craiu.bsky.social · 31/12/2024

Very powerful and relevant report setting the research direction at the start of the year! Thank you! 🙏

020

Reposted by Costin G. Raiu

Hervé Letoqueux @herve.checkfirst.network · 29/12/2024

Proud and honored to see @viginum.bsky.social ’s investigation on the Portal Kombat disinformation network mentioned in @craiu.bsky.social’s top of the top 2024 research list. Thank you & Kudos to the DivOps team! @colingerard.bsky.social medium.com/@costin.raiu...

medium.com

The Best Cybersecurity Stories of 2024

For me, 2024 has been an amazing year. I finally got my black belt in Taekwondo and together with my friends Juan and Ryan we started a new…

1205

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 23/12/2024

🎁🧐 NEW! Episode 26 is gift-wrapped and delivered with spicy hot takes on CISA's VPN advice, banning TP-Link, bombing ransomware hackers and Cellebrite/Android 0days @craiu.bsky.social @jags.bsky.social Enjoy wherever pods are found! securityconversations.com/episode/us-g...

securityconversations.com

US government's VPN advice, dropping bombs on ransomware gangs - Security Conversations

Three Buddy Problem – Episode 26: We dive deep into the shadowy world of surveillance and cyber operations, unpacking Amnesty International's explosive report on NoviSpy, […]

1117

Costin G. Raiu @craiu.bsky.social · 12/12/2024

I can confirm! I thought it was preventing me from finding some pages I saw before, but I guess it’s not just me and not just those pages

130

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 11/12/2024

For Christmas, the Three Buddy Problem pod will be looking back at the best security research that was published in 2024. Special buddy cookies to those who were outstanding. Extra points for obscure ones! @craiu.bsky.social @jags.bsky.social Link: docs.google.com/forms/d/e/1F...

docs.google.com

Three Buddy Problem's Best Security/CTI Research of 2024

0149

Costin G. Raiu @craiu.bsky.social · 11/12/2024

What is the link between the canceling of the presidential elections in Ro, foreign influence, Russia and TikTok? Episode 24 of the Three Buddy Problem podcast deep dives into the topic with local insights: securityconversations.com/episode/insi...

securityconversations.com

Inside the Turla Playbook: Hijacking APTs and fourth-party espionage - Security Conversations

Three Buddy Problem – Episode 24: In this episode, we did into Lumen/Microsoft’s revelations on Russia's Turla APT stealing from a Pakistani APT, and issues […]

0112

Costin G. Raiu @craiu.bsky.social · 11/12/2024

Help us choose the best security research of 2024:

072

Costin G. Raiu @craiu.bsky.social · 11/12/2024

thanks for the report! Not objecting, just asking - how do you know they were "unpaid" influencers?

000

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 30/11/2024

Three Buddy Problem: Volexity's Steven Adair joins the show 🔥 @stevenadair.bsky.social @craiu.bsky.social @jags.bsky.social Enjoy securityconversations.com/episode/vole...

1239

Reposted by Costin G. Raiu

Bartek Jerzman @handle.invalid · 25/11/2024

If you have not listened to the latest episode #ThreeBuddyProblem 🎙️then it is high time to catch up 😁 #PIVOTcon #PIVOTcon25 was mentioned 🙏🤟💪 Love it! cc: @ryanaraine.bsky.social @craiu.bsky.social @jags.bsky.social

073

Reposted by Costin G. Raiu

Ryan Naraine @ryanaraine.bsky.social · 22/11/2024

A band new Three Buddy Problem episode for your weekend earholes! 🔥 with @craiu.bsky.social @jags.bsky.social We cover Volexity’s discovery of Russian APT Wi-Fi “nearest neighbor attacks,” the Chinese surveillance state, Salt Typhoon realities, and more... LISTEN open.spotify.com/episode/2Bop...

open.spotify.com

Russian APT weaponized nearby Wi-Fi networks in DC, new macOS zero-days, DOJ v Chrome

Security Conversations · Episode

0138