The disappointing death of big-game APT reporting

From Three Buddy Problem by Security Conversations

May 10, 2026 · 2h 3m

About this episode

The episode discusses the decline of APT reporting and malware documentation, alongside recent security issues in major software.

( Presented by TLPBLACK : A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals. ) Three Buddy Problem - Episode 97 : We discuss the disappearing art of Windows APT paleontology, the absence of complex malware documentation, and why so much threat-intel research has slipped behind paywalls and into private rooms. Plus, a surge in AI-discovered bugs in Firefox and Chrome, a rough week for Linux security flaw disclosures, and the usual Ivanti and Palo Alto zero-day bulletins that ship without a single IOC. Cast: Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu . Timestamps: 0:00 - Introductory banter 1:17 - Inside TLP-Red: writing hashes by hand 3:57- fast16 fallout and the threat intel trust collapse 9:17 - The death of cyber paleontology on Windows 14:49 - Mobile is the new paleontology frontier 15:48 - When threat intel went private: the CrowdStrike effect 23:29 - Falling sideways into intelligence brokerage 36:05 -- AI, Easter eggs, and the loss of malware artistry 47:22 -- Will the Frontier Labs publish threat intel? 51:43 -- fast16 follow-up reports coming 1:09:38 - Mythos…

People in this episode

Hosts: Juan Andres Guerrero-Saade, Ryan Naraine, Costin Raiu

Topics covered

cybersecurity
APT reporting
malware documentation
threat intelligence
AI in security
Linux security
zero-day vulnerabilities

Keywords

APT
malware
threat intelligence
AI bugs
Linux security
zero-day
CrowdStrike

Mentioned in this episode

Organizations: CrowdStrike, Ivanti, Palo Alto, Firefox, Chrome, Linux

Books & works: Three Buddy Problem