Displaying 2 items of Three Buddy Problem with the tag "salt typhoon".
-
Inside the Turla Playbook: Hijacking APTs and fourth-party espionage
December 7th, 2024 | 1 hr 47 mins
ai, apt research, nation-state, salt typhoon, turla, zero-day
Three Buddy Problem Episode 24: In this episode, we dig into Lumen/Microsoft’s revelations on Russia's Turla APT stealing from a Pakistani APT, and issues around fourth-party espionage and problems with threat actor attribution. We also discuss Citizen Lab’s findings on Monokle-like spyware implanted by Russian authorities, the slow pace of Salt Typhoon disinfection, the Solana web3.js supply chain attack affecting crypto projects, and the Romanian election crisis over Russian interference via TikTok.
Cast: Juan Andres Guerrero-Saade, Costin Raiu, Ryan Naraine.
-
Typhoons and Blizzards: Cyberespionage and national security on front burner
October 11th, 2024 | 1 hr 9 mins
apt29, ivanti, midnight blizzard, salt typhoon, zero-day
Three Buddy Problem Episode 16: We break down the new GCHQ advisory on the history and tactics of Russia’s APT29, the challenges of tracking and defending against these sophisticated espionage programs, the mysterious Salt Typhoon intrusions, the absence of technical indicators (IOCs), the risks of supply chain attacks. We also touch on the surge in zero-day discoveries, the nonstop flow of exploited Ivanti security bugs, and why the CSRB should investigate these network edge device and appliance vendors.
Cast: Juan Andres Guerrero-Saade (SentinelLabs), Costin Raiu (Art of Noh) and Ryan Naraine (SecurityWeek).