Microsoft's Secret Weapon: The GDID That Caught 'Scattered Spider' Teen

From Three Buddy Problem by Security Conversations

July 4, 2026 · 1h 36m

About this episode

The episode discusses Microsoft's GDID device identifier and its implications, alongside AI developments and cybersecurity issues.

( Presented by Thinkst Canary : Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents. ) Three Buddy Problem - Episode 104 : We discuss the return of Anthropic's Fable 5 from export-control suspension with guardrails so aggressive that spelling "exploit" gets you downgraded. Plus, a debate on AI frontier labs killing businesses at scale, and OpenAI offering equity to the US government. Also, buried on page nine of a 'Scattered Spider' arrest indictment: Microsoft's never-before-detailed GDID device identifier, a persistent Windows fingerprint with massive implications for OPSEC, privacy, and APT tracking. Cast: Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu . Timestamps: 0:00 Cold open: Heat wave in Washington DC 3:45 Fable 5 returns after the 15-day timeout 5:21 "Refined classifiers" and the downgrade-to-Opus mess 8:23 Codex vs. Claude: real-world malware analysis…

People in this episode

Hosts: Juan Andres Guerrero-Saade, Ryan Naraine, Costin Raiu

Topics covered

AI technology
cybersecurity
malware analysis
privacy
business impact of AI
law enforcement

Keywords

GDID
Scattered Spider
Fable 5
AI
cybersecurity
malware
privacy
Microsoft
Thinkst Canary

Mentioned in this episode

Organizations: Anthropic, OpenAI, Microsoft

Products: Fable 5, GDID