<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" encoding="UTF-8" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:atom="http://www.w3.org/2005/Atom/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:fireside="http://fireside.fm/modules/rss/fireside">
  <channel>
    <fireside:hostname>web02.fireside.fm</fireside:hostname>
    <fireside:genDate>Thu, 09 Apr 2026 04:20:55 -0500</fireside:genDate>
    <generator>Fireside (https://fireside.fm)</generator>
    <title>Three Buddy Problem - Episodes Tagged with “Government”</title>
    <link>https://securityconversations.fireside.fm/tags/government</link>
    <pubDate>Fri, 16 Jan 2026 12:00:00 -0700</pubDate>
    <description>The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware, attribution, cyberwar, ethics, privacy, and the messy realities of securing computers and corporate networks. 
Hosted by three veteran security pros -- journalist Ryan Naraine and malware paleontologists Costin Raiu and Juan Andres Guerrero-Saade -- the weekly show attracts a highly engaged audience of security researchers, corporate defenders, CISOs, and policymakers.
&lt;a href="https://twitter.com/ryanaraine"&gt;Connect with Ryan on Twitter&lt;/a&gt; (Open DMs).
</description>
    <language>en-us</language>
    <itunes:type>episodic</itunes:type>
    <itunes:subtitle>A Security Conversations podcast</itunes:subtitle>
    <itunes:author>Security Conversations</itunes:author>
    <itunes:summary>The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others won’t -- nation-state malware, attribution, cyberwar, ethics, privacy, and the messy realities of securing computers and corporate networks. 
Hosted by three veteran security pros -- journalist Ryan Naraine and malware paleontologists Costin Raiu and Juan Andres Guerrero-Saade -- the weekly show attracts a highly engaged audience of security researchers, corporate defenders, CISOs, and policymakers.
&lt;a href="https://twitter.com/ryanaraine"&gt;Connect with Ryan on Twitter&lt;/a&gt; (Open DMs).
</itunes:summary>
    <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/5/5f0c01ff-49f1-4c51-a8f8-f14c0d9bc72e/cover.jpg?v=15"/>
    <itunes:explicit>no</itunes:explicit>
    <itunes:keywords>cybersecurity, ciso, infosec, security, hacking, information security, research</itunes:keywords>
    <itunes:owner>
      <itunes:name>Security Conversations</itunes:name>
      <itunes:email>naraine@gmail.com</itunes:email>
    </itunes:owner>
<itunes:category text="Technology"/>
<itunes:category text="News">
  <itunes:category text="Tech News"/>
</itunes:category>
<itunes:category text="Technology"/>
<item>
  <title>Google Pixel 'zero-click' exploit caused by AI, mysterious Poland grid attacks, China bans US cybersecurity software</title>
  <link>http://securityconversations.fireside.fm/project-zero-click-pixel-attack-surface</link>
  <guid isPermaLink="false">9e16b30e-091e-44f0-bcf0-03e0f74e465f</guid>
  <pubDate>Fri, 16 Jan 2026 12:00:00 -0700</pubDate>
  <author>Security Conversations</author>
  <enclosure url="https://aphid.fireside.fm/d/1437767933/5f0c01ff-49f1-4c51-a8f8-f14c0d9bc72e/9e16b30e-091e-44f0-bcf0-03e0f74e465f.mp3" length="114472744" type="audio/mpeg"/>
  <itunes:episodeType>full</itunes:episodeType>
  <itunes:author>Security Conversations</itunes:author>
  <itunes:subtitle>(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices).

Three Buddy Problem - Episode 81:  We dissect New York Times reporting on the "precision" of US cyber operations in Venezuela, the competing narratives around offensive cyber capabilities and "letters of marque" for private hackers. Plus, a mysterious failed cyber attack on Poland's power grid, internet blackouts in Iran (with fascinating DNS telemetry revealing Chinese bank traffic and Russian website spikes), and news of China's ban on US/Israeli cybersecurity software.

We also cover Check Point's research on "VoidLink" (is it a successor to ShadowPad?), Microsoft's threat intelligence sharing practices, and Google Project Zero's disclosure of zero-click vulnerabilities caused by AI-powered transcription features.  

Cast: Ryan Naraine, Costin Raiu and Juan Andres Guerrero-Saade.  </itunes:subtitle>
  <itunes:duration>2:24:36</itunes:duration>
  <itunes:explicit>no</itunes:explicit>
  <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/5/5f0c01ff-49f1-4c51-a8f8-f14c0d9bc72e/episodes/9/9e16b30e-091e-44f0-bcf0-03e0f74e465f/cover.jpg?v=1"/>
  <description>(Presented by Material Security (https://material.security): We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.)
Three Buddy Problem - Episode 81: We dissect New York Times reporting on the "precision" of US cyber operations in Venezuela, the competing narratives around offensive cyber capabilities and "letters of marque" for private hackers. Plus, a mysterious failed cyber attack on Poland's power grid, internet blackouts in Iran (with fascinating DNS telemetry revealing Chinese bank traffic and Russian website spikes), and news of China's ban on US/Israeli cybersecurity software.
We also cover Check Point's research on "VoidLink" (is it a successor to ShadowPad?), Microsoft's threat intelligence sharing practices, and Google Project Zero's disclosure of zero-click vulnerabilities caused by AI-powered transcription features.  
Cast: Juan Andres Guerrero-Saade (https://twitter.com/juanandres_gs),  Ryan Naraine (https://twitter.com/ryanaraine) and    Costin Raiu (https://twitter.com/craiu). 
</description>
  <itunes:keywords>Iran, Verizon, Israel, China, Palo Alto, Microsoft, CISA, Poland, Project Zero, Google, Apple, Pixel, zero-click, Venezuela, cyberwar</itunes:keywords>
  <content:encoded>
    <![CDATA[<p>(<em>Presented by <a href="https://material.security" rel="nofollow">Material Security</a>: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.</em>)</p>

<p><strong>Three Buddy Problem - Episode 81</strong>: We dissect New York Times reporting on the &quot;precision&quot; of US cyber operations in Venezuela, the competing narratives around offensive cyber capabilities and &quot;letters of marque&quot; for private hackers. Plus, a mysterious failed cyber attack on Poland&#39;s power grid, internet blackouts in Iran (with fascinating DNS telemetry revealing Chinese bank traffic and Russian website spikes), and news of China&#39;s ban on US/Israeli cybersecurity software.</p>

<p>We also cover Check Point&#39;s research on &quot;VoidLink&quot; (is it a successor to ShadowPad?), Microsoft&#39;s threat intelligence sharing practices, and Google Project Zero&#39;s disclosure of zero-click vulnerabilities caused by AI-powered transcription features.  </p>

<p><strong>Cast:</strong> <a href="https://twitter.com/juanandres_gs" rel="nofollow">Juan Andres Guerrero-Saade</a>,  <a href="https://twitter.com/ryanaraine" rel="nofollow">Ryan Naraine</a> and    <a href="https://twitter.com/craiu" rel="nofollow">Costin Raiu</a>.</p><p>Links:</p><ul><li><a title="Transcript (unedited, AI-generated)" rel="nofollow" href="https://docs.google.com/document/d/14CwFDiK41p3VK3jeEiHVs9xK0oIF1iVs8midU-nvX7k/edit?tab=t.0">Transcript (unedited, AI-generated)</a></li><li><a title="Sponsor: Material Security" rel="nofollow" href="https://material.security/product">Sponsor: Material Security</a></li><li><a title="Cyberattack in Venezuela Demonstrated Precision of U.S. Capabilities " rel="nofollow" href="https://www.nytimes.com/2026/01/15/us/politics/cyberattack-venezuela-military.html">Cyberattack in Venezuela Demonstrated Precision of U.S. Capabilities </a></li><li><a title="Massive cyberattack on Polish power system in December failed, minister says  " rel="nofollow" href="https://www.reuters.com/sustainability/climate-energy/massive-cyberattack-polish-power-system-december-failed-minister-says-2026-01-13/">Massive cyberattack on Polish power system in December failed, minister says  </a></li><li><a title="What happened in Poland? (Ruben Santamarta)" rel="nofollow" href="https://www.linkedin.com/pulse/what-happened-poland-part-i-ruben-santamarta-bknye/">What happened in Poland? (Ruben Santamarta)</a></li><li><a title="Costin Raiu: What’s Happening in Iran?" rel="nofollow" href="https://medium.com/@costin.raiu/whats-happening-in-iran-93cc103863ab">Costin Raiu: What’s Happening in Iran?</a></li><li><a title="Verizon just had a big outage. Here’s what we know" rel="nofollow" href="https://www.npr.org/2026/01/15/nx-s1-5678889/verizon-outage-what-happened">Verizon just had a big outage. Here’s what we know</a></li><li><a title="Beijing tells Chinese firms to stop using US and Israeli cyber products" rel="nofollow" href="https://www.reuters.com/world/china/beijing-tells-chinese-firms-stop-using-us-israeli-cybersecurity-software-sources-2026-01-14/">Beijing tells Chinese firms to stop using US and Israeli cyber products</a></li><li><a title=" MS Patch Tuesday CVE-2026-20805 (exploited in the wild)" rel="nofollow" href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805"> MS Patch Tuesday CVE-2026-20805 (exploited in the wild)</a></li><li><a title="VoidLink: The Cloud-Native Malware Framework" rel="nofollow" href="https://research.checkpoint.com/2026/voidlink-the-cloud-native-malware-framework/">VoidLink: The Cloud-Native Malware Framework</a></li><li><a title="Microsoft disrupts global cybercrime subscription service" rel="nofollow" href="https://blogs.microsoft.com/on-the-issues/2026/01/14/microsoft-disrupts-cybercrime/">Microsoft disrupts global cybercrime subscription service</a></li><li><a title="Project Zero: A 0-click exploit chain for the Pixel 9 " rel="nofollow" href="https://projectzero.google/2026/01/pixel-0-click-part-1.html">Project Zero: A 0-click exploit chain for the Pixel 9 </a></li><li><a title="Joint statement from Google and Apple" rel="nofollow" href="https://blog.google/company-news/inside-google/company-announcements/joint-statement-google-apple/">Joint statement from Google and Apple</a></li><li><a title="Sean Plankey re-nominated to lead CISA " rel="nofollow" href="https://cyberscoop.com/sean-plankey-re-nominated-to-lead-cisa/">Sean Plankey re-nominated to lead CISA </a></li><li><a title="TLPBLACK" rel="nofollow" href="https://tlpblack.net/">TLPBLACK</a></li><li><a title="DistrictCon Agenda" rel="nofollow" href="https://www.districtcon.org/agenda">DistrictCon Agenda</a></li><li><a title="Ekoparty Miami  " rel="nofollow" href="https://ekoparty.org/miami/">Ekoparty Miami  </a></li><li><a title="The Thinking Game (Full Documentary)" rel="nofollow" href="https://www.youtube.com/watch?v=d95J8yzvjbQ">The Thinking Game (Full Documentary)</a></li></ul>]]>
  </content:encoded>
  <itunes:summary>
    <![CDATA[<p>(<em>Presented by <a href="https://material.security" rel="nofollow">Material Security</a>: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.</em>)</p>

<p><strong>Three Buddy Problem - Episode 81</strong>: We dissect New York Times reporting on the &quot;precision&quot; of US cyber operations in Venezuela, the competing narratives around offensive cyber capabilities and &quot;letters of marque&quot; for private hackers. Plus, a mysterious failed cyber attack on Poland&#39;s power grid, internet blackouts in Iran (with fascinating DNS telemetry revealing Chinese bank traffic and Russian website spikes), and news of China&#39;s ban on US/Israeli cybersecurity software.</p>

<p>We also cover Check Point&#39;s research on &quot;VoidLink&quot; (is it a successor to ShadowPad?), Microsoft&#39;s threat intelligence sharing practices, and Google Project Zero&#39;s disclosure of zero-click vulnerabilities caused by AI-powered transcription features.  </p>

<p><strong>Cast:</strong> <a href="https://twitter.com/juanandres_gs" rel="nofollow">Juan Andres Guerrero-Saade</a>,  <a href="https://twitter.com/ryanaraine" rel="nofollow">Ryan Naraine</a> and    <a href="https://twitter.com/craiu" rel="nofollow">Costin Raiu</a>.</p><p>Links:</p><ul><li><a title="Transcript (unedited, AI-generated)" rel="nofollow" href="https://docs.google.com/document/d/14CwFDiK41p3VK3jeEiHVs9xK0oIF1iVs8midU-nvX7k/edit?tab=t.0">Transcript (unedited, AI-generated)</a></li><li><a title="Sponsor: Material Security" rel="nofollow" href="https://material.security/product">Sponsor: Material Security</a></li><li><a title="Cyberattack in Venezuela Demonstrated Precision of U.S. Capabilities " rel="nofollow" href="https://www.nytimes.com/2026/01/15/us/politics/cyberattack-venezuela-military.html">Cyberattack in Venezuela Demonstrated Precision of U.S. Capabilities </a></li><li><a title="Massive cyberattack on Polish power system in December failed, minister says  " rel="nofollow" href="https://www.reuters.com/sustainability/climate-energy/massive-cyberattack-polish-power-system-december-failed-minister-says-2026-01-13/">Massive cyberattack on Polish power system in December failed, minister says  </a></li><li><a title="What happened in Poland? (Ruben Santamarta)" rel="nofollow" href="https://www.linkedin.com/pulse/what-happened-poland-part-i-ruben-santamarta-bknye/">What happened in Poland? (Ruben Santamarta)</a></li><li><a title="Costin Raiu: What’s Happening in Iran?" rel="nofollow" href="https://medium.com/@costin.raiu/whats-happening-in-iran-93cc103863ab">Costin Raiu: What’s Happening in Iran?</a></li><li><a title="Verizon just had a big outage. Here’s what we know" rel="nofollow" href="https://www.npr.org/2026/01/15/nx-s1-5678889/verizon-outage-what-happened">Verizon just had a big outage. Here’s what we know</a></li><li><a title="Beijing tells Chinese firms to stop using US and Israeli cyber products" rel="nofollow" href="https://www.reuters.com/world/china/beijing-tells-chinese-firms-stop-using-us-israeli-cybersecurity-software-sources-2026-01-14/">Beijing tells Chinese firms to stop using US and Israeli cyber products</a></li><li><a title=" MS Patch Tuesday CVE-2026-20805 (exploited in the wild)" rel="nofollow" href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805"> MS Patch Tuesday CVE-2026-20805 (exploited in the wild)</a></li><li><a title="VoidLink: The Cloud-Native Malware Framework" rel="nofollow" href="https://research.checkpoint.com/2026/voidlink-the-cloud-native-malware-framework/">VoidLink: The Cloud-Native Malware Framework</a></li><li><a title="Microsoft disrupts global cybercrime subscription service" rel="nofollow" href="https://blogs.microsoft.com/on-the-issues/2026/01/14/microsoft-disrupts-cybercrime/">Microsoft disrupts global cybercrime subscription service</a></li><li><a title="Project Zero: A 0-click exploit chain for the Pixel 9 " rel="nofollow" href="https://projectzero.google/2026/01/pixel-0-click-part-1.html">Project Zero: A 0-click exploit chain for the Pixel 9 </a></li><li><a title="Joint statement from Google and Apple" rel="nofollow" href="https://blog.google/company-news/inside-google/company-announcements/joint-statement-google-apple/">Joint statement from Google and Apple</a></li><li><a title="Sean Plankey re-nominated to lead CISA " rel="nofollow" href="https://cyberscoop.com/sean-plankey-re-nominated-to-lead-cisa/">Sean Plankey re-nominated to lead CISA </a></li><li><a title="TLPBLACK" rel="nofollow" href="https://tlpblack.net/">TLPBLACK</a></li><li><a title="DistrictCon Agenda" rel="nofollow" href="https://www.districtcon.org/agenda">DistrictCon Agenda</a></li><li><a title="Ekoparty Miami  " rel="nofollow" href="https://ekoparty.org/miami/">Ekoparty Miami  </a></li><li><a title="The Thinking Game (Full Documentary)" rel="nofollow" href="https://www.youtube.com/watch?v=d95J8yzvjbQ">The Thinking Game (Full Documentary)</a></li></ul>]]>
  </itunes:summary>
</item>
  </channel>
</rss>
