Three Buddy Problem
A Coinbase breach with bribes, rogue contractors and a $20M ransom demand
May 16, 2025 · 2 hr 23 min · 101.8 MB
0:00-2:23:34
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Three Buddy Problem - Episode 46: We dig into a Coinbase breach headlined by bribes, rogue contractors and a $20 million ransom demand. Plus, (another!) batch of Ivanti and Microsoft zero-days being exploited in the wild, a new 'Intrusion Logging' feature coming to Android, Apple's iOS 18.5 patches, and the EU announcing its own vulnerability database and software vendor secure-coding pledge.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Links:
- Transcript (unedited, AI-generated)
- Coinbase on $20m ransom demand
- SEC filing on Coinbase breach
- Coinbase Rogue Contractors Bribed to Leak Customer Data
- Ivanti 0day exploit chain (CVE-2025-4427 and CVE-2025-4428)
- Watchtowr blog on new Ivanti 0days
- CISA Known Exploited Vulnerabilities (KEV)
- 'Advanced Protection' comes to Android 16
- Europe launches it own vulnerability database
Juan Andres Guerrero-Saade
twitter.comRyan Naraine
twitter.comCostin Raiu
twitter.comTranscript (unedited, AI-generated)
docs.google.comCoinbase on $20m ransom demand
coinbase.comCoinbase Rogue Contractors Bribed to Leak Customer Data
securityweek.comIvanti 0day exploit chain (CVE-2025-4427 and CVE-2025-4428)
forums.ivanti.comWatchtowr blog on new Ivanti 0days
labs.watchtowr.com'Advanced Protection' comes to Android 16
security.googleblog.comEurope launches it own vulnerability database
enisa.europa.eu