Three Buddy Problem

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.) Three Buddy Problem - Episode 102: Software export controls expert Katie Moussouris joins the show to unpack the US government's abrupt move to suspend access to Anthropic's most powerful models over a so-called "jailbreak" that, on reading the paper, turned out to be a model doing exactly what defenders are supposed to do. We dig into the export-control chaos, the chemical-weapons framing of cybersecurity, the China question, and why Microsoft just resurrected a disclosure term the industry buried fifteen years ago. Cast: Katie Moussouris, Juan Andres Guerrero-Saade and Ryan Naraine. Costin is traveling. Timestamps: 0:00 - Introductory banter 1:00 - Export Controls: Fable 5 and Mythos 5 suspended 3:40 - The Anthropic–USG relationship and USG’s surveillance claim 9:40 - Self-owns, doomsday cults, and why the guardrails are "so broad" 12:42 - What the Amazon paper actually says ("fix this code") 20:33 - The chemical-weapons framing problem 23:39 - The China question and the SK Telecom angle 41:17 - Why hasn't the paper been published? 57:01 - "Free Fable": are Chinese models only months behind? 1:00:13 - The unforgiving internet and the security poverty line 1:11:18 - Microsoft brings back "responsible disclosure" (and threatens researchers) 1:29:04 - Luta Security, the AI bug flood, and shout-outsLinks:Transcript Katie Moussouris | LinkedIn JAGS on NPR: Can computer hackers get inside your mind? Anthropic Statement on the USG Export Controls Moussouris: Fable 5 Export Controls Harm US Cyber Defense Anthropic's Fable Backlash (David Sacks podcast) AI imaging company Midjourney tackles MRI scanning Microsoft Threatens Vuln Researchers Microsoft blog on CVD and POC publications TLPBLACK LABScon CFP Luta Security

(Presented by TLPBLACK: High-fidelity threat intelligence and research tools for modern security teams. From curated Passive DNS and real-time C2 monitoring to actionable IOC feeds and daily malware samples, we help defenders detect, hunt, and disrupt threats faster, with seamless integration into SIEM and SOAR workflows.) Huntress threat intelligence analyst Greg Linares shares insights on the modern ransomware ecosystem, including how crews operate like businesses and why Akira, Medusa, RansomHub, and Qilin cause so much damage. Plus, signs of overlap between ransomware and nation-state activity, what “time to ransom” really means for defenders, and why techniques like ClickFix and credential theft keep working at scale. The conversation also covers the surge in RMM tool abuse, how “living off the land” attacks can unfold without traditional malware, and the basic defenses smaller organizations can prioritize.Links:TLPBLACK Transcript Huntress 2025 Cyber Threat Report Microsoft: Think before you Click(Fix) Akira Ransomware CISA: Protecting Against Malicious Use of Remote Monitoring and Management Software Ep9: The blurring lines between nation-state APTs and the ransomware epidemic Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines

(Presented by TLPBLACK: High-fidelity threat intelligence and research tools for modern security teams. From curated Passive DNS and real-time C2 monitoring to actionable IOC feeds and daily malware samples, we help defenders detect, hunt, and disrupt threats faster, with seamless integration into SIEM and SOAR workflows.) Three Buddy Problem - Episode 86: We dig into GitLab’s explosive look at North Korea’s “Contagious Interview” APT operation, the scale of fake IT worker infiltration, and what it means for companies chasing cheap talent. Plus, a fresh batch of already-exploited Ivanti and Dell zero-days, the return of Apple’s shutdown logs, and thoughts on addictive AI coding agents affecting human purpose. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.Links:TLPBLACK GitLab exposes North Korean malware tradecraft Beyond the Backdoor: How Contagious Interview Is Surgically Tampering with MetaMask Wallets (Seongsu Park) Critical Vulnerabilities in Ivanti EPMM Exploited Dell RecoverPoint for Virtual Machines Zero-Day Dell Bulletin - RecoverPoint for Virtual Machines Hardcoded Credential Vulnerability Critical Dell bug exploited for two years OpenAI intros Lockdown Mode and Elevated Risk labels in ChatGPT OpenAI is rebranding Aardvark Anthropic Claude Code Security Jason Lang: Real Human Concerns In The Age of AI JAGS' batteries-included Claude Code SDLC config RE//verse Conference NEBULA:FOG 2026 | AI x Security Hackathon