Ryan Naraine @ryanaraine.bsky.social · 29/09/2026Some thoughts on signs of Apple pushing EDR tech into iOS 000
Ryan Naraine @ryanaraine.bsky.social · 27/09/2026Cybercriminals understood early that journalists are a valuable resource to name-and-shame victims. 030
Ryan Naraine @ryanaraine.bsky.social · 25/09/2026NEW POD up! www.youtube.com/watch?v=tiO8...youtube.comKernel Exploits in the iOS App Store, ShinyHunters Inside the FBIYouTube video by Three Buddy Problem 132
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 15/09/2026📺 YouTube: www.threebuddyproblem.com 🎧 Spotify (with video): open.spotify.com/show/6dXbRag... 📱 Apple Podcasts: podcasts.apple.com/us/podcast/t... 🎙️Find your podcast platform: pod.link/1414525622 RSS feed: 📖 feeds.fireside.fm/securityconv... 002
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 15/09/2026"That is straight-up fraud." 122
Reposted by Ryan NaraineThe Vertex Project @vertexproject.bsky.social · 16/09/2026Okay, we’ll stop being cryptic. 👀 We pressed a limited-edition Signals & Stories vinyl to celebrate 10 years of The Vertex Project. 💿 There aren’t many and they’re coming to LABScon in your welcome bags. 🙌 See you in Scottsdale. 💚 0145
Ryan Naraine @ryanaraine.bsky.social · 14/09/2026🔥 NEW POD UP: About doomers and death cults 🔥 * YouTube: threebuddyproblem.com * Spotify (with video): open.spotify.com/show/6dXbRag... * Apple Podcasts: podcasts.apple.com/us/podcast/t... * Find your podcast platform: pod.link/1414525622 * RSS feed: feeds.fireside.fm/securityconv... 031
Reposted by Ryan NaraineJHunt🛡️ @jhuntinfosec.com · 14/09/2026This is one of the best rants and an important discussion. Listen up 🔊 011
Reposted by Ryan NaraineJHunt🛡️ @jhuntinfosec.com · 14/09/2026Best place to get yourself some grounding in this "AI is going to kill everyone" nonsense. 001
Ryan Naraine @ryanaraine.bsky.social · 12/09/2026Chit-chatting about LABScon and keynotes with the Decipher homies 👇 022
Ryan Naraine @ryanaraine.bsky.social · 12/09/2026Juanito was on fire this week 🔥🔥 @jags.bsky.social @craiu.bsky.social 110
Ryan Naraine @ryanaraine.bsky.social · 08/09/2026🔥 NEW POD: This week's problem is available on all platforms @craiu.bsky.social @jags.bsky.social @tlpblack.bsky.social 📺 Watch on YouTube 👇 youtu.be/bQ-mpjx07m4?...youtu.beThree Secret AI Civilizations Rose and Fell. Nobody Checked the Logs.YouTube video by Three Buddy Problem 032
Ryan Naraine @ryanaraine.bsky.social · 02/09/2026Costin on ORB botnets and nation-state attribution challenges @craiu.bsky.social @jags.bsky.social @tlpblack.bsky.social 101
Reposted by Ryan NaraineJim Lippard @lippard.org · 01/09/2026Just came across this: bsky.app/profile/meso... 031
Ryan Naraine @ryanaraine.bsky.social · 01/09/2026🧱 We should be doing controlled burns and bricking vulnerable devices used in nation-state botnets. #threebuddyproblem Watch full show www.youtube.com/watch?v=2cWa... 021
Ryan Naraine @ryanaraine.bsky.social · 31/08/2026"AI agent swarms working together, optimizing, sharing findings, that's an unstoppable tsunami..." 053
Reposted by Ryan NaraineJHunt🛡️ @jhuntinfosec.com · 30/08/2026One of the best out there. Look forward to it every week. Go check it out. 001
Ryan Naraine @ryanaraine.bsky.social · 30/08/2026Watch our weekly show on YouTube youtu.be/2cWaxPwyx9c?...youtu.beA Thousand Agents Walk Into Hugging FaceYouTube video by Three Buddy Problem 011
Ryan Naraine @ryanaraine.bsky.social · 30/08/2026NEW POD UP: A thousand agents walk into Hugging Face 🚨 Spotify: open.spotify.com/episode/1CMM... 🎧 Apple Podcasts: podcasts.apple.com/us/podcast/a... ✍ Transcript: docs.google.com/document/d/1... 📺 YouTube: youtu.be/2cWaxPwyx9c?...open.spotify.comA Thousand Agents Walk Into Hugging FaceThree Buddy Problem · Episode 041
Reposted by Ryan NaraineJim Lippard @lippard.org · 30/08/20261:39:15 JAGS advocates again for "brickerbot", bricking unsupported IoT devices used to provide malicious ORB networks. I've made the same point a few times: bsky.app/profile/lipp... bsky.app/profile/lipp... bsky.app/profile/lipp... 111
Reposted by Ryan NaraineJim Lippard @lippard.org · 30/08/2026The show brings up this one: www.nobelprize.org/prizes/chemi...nobelprize.orgNobel Prize in Chemistry 2024The Nobel Prize in Chemistry 2024 was divided, one half awarded to David Baker "for computational protein design", the other half jointly to Demis Hassabis and John Jumper "for protein structure predi... 101
Reposted by Ryan NaraineJim Lippard @lippard.org · 30/08/2026And this, that seems more aspirational than reporting an outcome: pmc.ncbi.nlm.nih.gov/articles/PMC...pmc.ncbi.nlm.nih.govAI-powered drug discovery for neglected diseases: accelerating public health solutions in the developing worldThe emergence of artificial intelligence (AI) in drug discovery represents a transformative development in addressing neglected diseases, particularly in the context of the developing world. Neglected... 101
Reposted by Ryan NaraineJim Lippard @lippard.org · 30/08/2026At 1:26 in, @ryanaraine.bsky.social wants to hear about AI health discoveries, there are at least a couple examples: www.bbc.com/future/artic...bbc.comThese diseases were thought to be incurable. Now AI is unlocking new treatmentsArtificial intelligence is rapidly inventing new drugs for diseases from Parkinson's disease and antibiotic-resistant superbugs to rare lung conditions. 121
Reposted by Ryan NaraineJim Lippard @lippard.org · 30/08/2026At just over an hour in, JAGS says the fragmented Android platform is impossible to defend and reiterates from earlier this show that a set of standard heavily AI-vetted open source libraries would be beneficial. youtu.be/2cWaxPwyx9c?...youtu.beA Thousand Agents Walk Into Hugging FaceYouTube video by Three Buddy Problem 231
Ryan Naraine @ryanaraine.bsky.social · 17/08/2026🔥 NEW POD ALERT securityconversations.com/episode/a-ti... Three Buddy Problem – Episode 109: The buddies dig into a new White House memo handing vetted private companies real offensive cyber authorities. Available on all platforms @craiu.bsky.social @jags.bsky.socialsecurityconversations.comA tiny 12 KB Windows backdoor, one victim, and a dead domain - Security Conversations(Presented by State of Statecraft: A security and intelligence conference that brings together multiple disciplines, backgrounds, and nationalities to share research into the covert activities […] 101
Reposted by Ryan NaraineAlex Brown 🇵🇸 (they/them) @bookjockeyalex.bsky.social · 20/05/2026There are eleventy thousand podcasts out there. One out of every three dudes has a podcast with his buddy. It cannot be that hard to find a podcast on a topic you're interested in. 1243
Reposted by Ryan NaraineShy Aberman (he/him) @aberman.com · 08/08/2026Perhaps a few months ago, one of the hosts of The Three Buddy Problem podcast said that Grok was very capable for his info processing and reverse engineering uses, but since then it has fallen behind, maybe far behind. 021
Reposted by Ryan NaraineJim Lippard @lippard.org · 09/08/2026I agree with the guys on the Three Buddy Problem podcast this week: the frontier labs need to be spending more time on training on defense (and doing it themselves) instead of so much on offense. www.youtube.com/watch?v=YY9d...youtube.comInside OpenAI’s Black Hat ConfessionYouTube video by Three Buddy Problem 141
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 08/08/2026Spotify (with video) open.spotify.com/episode/0T4V...open.spotify.comInside OpenAI's Black Hat ConfessionThree Buddy Problem · Episode 011
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 08/08/2026YouTube www.youtube.com/watch?v=YY9d...youtube.comInside OpenAI’s Black Hat ConfessionYouTube video by Three Buddy Problem 112
Reposted by Ryan NaraineAndrew Case @attrc.bsky.social · 20/07/2026Thank you to @jags.bsky.social for the @volexity.com shout out in the latest Three Buddy Problem episode! If you aren't performing memory forensics in your environments, then you cannot make any definitive claims on whether you are compromised! podcasts.apple.com/us/podcast/h... 054
Ryan Naraine @ryanaraine.bsky.social · 03/08/2026A direct .mp3 download link for your flights to Vegas. Remember to hydrate ✊ aphid.fireside.fm/d/1437767933...aphid.fireside.fm 001
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 01/08/2026Transcript docs.google.com/document/d/1...docs.google.comThree Buddy Problem -- Episode 107 transcriptEpisode 107: The Three Buddy Problem Proofpoint's Greg Lesnewich on Laundry Bear, ‘Half-Click’ Exploits, and Magnets of Threats Guest Buddy: Greg Lesnewich, Principal Threat Research Engineer, Proo... 031
Reposted by Ryan NaraineDrew @bugfire.io · 01/08/2026This was outstanding! Also loved to hear the backstory on Greg breaking into the industry and his relationship with the buddies. 121
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 01/08/2026Like and sub on YouTube youtu.be/p3g84LJ6Faw?...youtu.beGreg Lesnewich on ‘Half-Click’ Exploits and Magnets of ThreatsYouTube video by Three Buddy Problem 031
Reposted by Ryan NaraineRyan Naraine @ryanaraine.bsky.social · 01/08/2026This weekend's problem is 3.5 hours of threat-hunting nerdery with Greg Lesnewich. We talk 'half-click' exploits, APTs hacking email infra, and tracking those 'magnets of threats' 📡 podcasts.apple.com/us/podcast/t...podcasts.apple.comProofpoint's Greg Lesnewich on Laundry Bear, ‘Half-Click’ Exploits, and Magnets of ThreatsPodcast Episode · Three Buddy Problem · July 31 · 3h 27m 373
Ryan Naraine @ryanaraine.bsky.social · 01/08/2026This weekend's problem is 3.5 hours of threat-hunting nerdery with Greg Lesnewich. We talk 'half-click' exploits, APTs hacking email infra, and tracking those 'magnets of threats' 📡 podcasts.apple.com/us/podcast/t...podcasts.apple.comProofpoint's Greg Lesnewich on Laundry Bear, ‘Half-Click’ Exploits, and Magnets of ThreatsPodcast Episode · Three Buddy Problem · July 31 · 3h 27m 373
Reposted by Ryan NarainePatrick Howell O’Neill @patrickhowelloneill.com · 21/07/2026this is one of the most insane security incidents I can recall 2155
Reposted by Ryan NaraineJoseph Menn @joemenn.bsky.social · 21/07/2026This is amazing. OpenAI was internally testing a program in cyber capabilities. The program escaped containment and broke into Hugging Face so it could score higher. Zero-days, the whole schmear. Yikes.openai.comOpenAI and Hugging Face partner to address security incident during model evaluationOpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders. 43323
Ryan Naraine @ryanaraine.bsky.social · 21/07/2026"The AI is not the end game. These models are not the final product..." @craiu.bsky.social @jags.bsky.social 042
Ryan Naraine @ryanaraine.bsky.social · 20/07/2026"Not to pile on, but this was your moment..." - @jags.bsky.social 001
Ryan Naraine @ryanaraine.bsky.social · 20/07/2026"Back in the day when we looked at the Duqu 2 incident, they were moving in a very slow fashion, maybe pivoting into another system once a day. They wouldn't pivot into more than one or two systems a day, specifically to avoid triggering alerts." 131
Reposted by Ryan NaraineJim Lippard @lippard.org · 15/07/2026Kim Zetter on this topic today: www.zetter-zeroday.com/tracking-pet...zetter-zeroday.comTracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking CybercriminalsAny time a member of The Com gets arrested, there’s a good chance Allison Nixon played a role in it. Nixon is chief research officer at the cyber investigations firm Unit221B, named after the apartmen... 021
Reposted by Ryan NaraineDecipher @deciphersec.bsky.social · 15/07/2026Great stuff from the Buddies this week, as usual. 011
