About this episode

The episode discusses the legacy of legendary malware hunter Sergey Mineev, recent iOS exploit discoveries, and various cybersecurity issues including Microsoft's FedRAMP problems and AI policy developments.

( Presented by Thinkst Canary : Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching ’em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents. ) Three Buddy Problem - Episode 90 : We remember GReAT teammate Sergey Mineev, the legendary malware hunter behind discoveries like Equation Group and Project Sauron (Remsec), including stories about his methods and why he was the best to ever do it. Plus, another in-the-wild iOS exploit kit discovery and a long overdue conversation about Apple's responsibility to hundreds of millions of users on older iOS versions; the ProPublica Microsoft/FedRAMP bombshell, Interlock ransomware sitting on a Cisco zero-day, the White House AI policy framework, and Supermicro co-founder $2.5 billion AI chip smuggling bust. Cast: Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu . Links: Transcript Thinkst Canary Equation Group: The Crown Creator of Cyber-Espionage The Project Sauron APT Google: The…

People in this episode

Hosts: Juan Andres Guerrero-Saade, Ryan Naraine, Costin Raiu

Topics covered

• APT hunting
• malware discovery
• iOS exploits
• cybersecurity
• AI policy
• ransomware

Keywords

• APT hunter
• malware
• iOS exploit kit
• Microsoft FedRAMP
• ransomware
• AI policy
• cybersecurity

Sponsors

Thinkst Canary

Mentioned in this episode

Organizations: Apple, Microsoft, ProPublica, Cisco, Supermicro

Products: iOS, DarkSword

More episodes of Three Buddy Problem

• Mark Dowd on AI hacking, exploit chains, zero-day sales · April 24, 2026 · 2h 2m
• The Angry Spark APT Mystery: A Year-Long Backdoor, One Victim, Zero Attribution · April 18, 2026 · 2h 35m
• The Claude Mythos, Project Glasswing Shockwave · April 10, 2026 · 2h 35m
• LLMs writing exploits, engineers losing skills, and a case for the generative OS · April 3, 2026 · 2h 20m
• Jeremy Banon: Personal Exec Compromise as Corporate Incident · April 1, 2026 · 36 min
• Google's Cyber Disruption Unit; Coruna is Triangulation, US Bans Foreign-Made Routers · March 28, 2026 · 2h 32m

Explore listener stats, chart rankings, contacts and more on the Three Buddy Problem podcast page.