Mark Dowd on AI hacking, exploit chains, zero-day sales

From Three Buddy Problem by Security Conversations

April 24, 2026 · 2h 2m

About this episode

Mark Dowd discusses the implications of AI on offensive research and the exploit market.

( Presented by TLPBLACK : A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals. ) Three Buddy Problem - Episode 95 : Vigilant Labs director Mark Dowd joins the show to shed light on the state of offensive research, the economics of the exploit market, and why "Mark Dowd in a box" isn't quite the threat the AI hype machine suggests. He talks through the daily stresses of running an offensive shop, how AI is reshaping vulnerability discovery, exploit development, and the pricing of full exploit chains. Plus, thoughts on Lockdown Mode and Apple's MIE, whether mitigations actually work or just push attackers toward less access, the rise of HarmonyOS and the Balkanization of device security, persistence, baseband attacks, GrapheneOS, and Samsung Knox. We discuss customer vetting and OpSec fears, policymakers who've never written an exploit, and the strange afterlife of The Art of Software Security Assessment, the 20-year-old book now possibly training data for the very tools coming for his job. Cast: Mark Dowd , Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu…

People in this episode

Hosts: Juan Andres Guerrero-Saade, Ryan Naraine, Costin Raiu

Guest: Mark Dowd

Topics covered

AI hacking
exploit chains
vulnerability discovery
offensive research
cybersecurity economics
device security

Keywords

AI
exploit market
vulnerability
offensive research
cybersecurity
Lockdown Mode
baseband attacks
customer vetting

Mentioned in this episode

Organizations: Vigilant Labs, Apple, HarmonyOS, GrapheneOS, Samsung Knox

Books & works: The Art of Software Security Assessment