Three Buddy Problem
An 'extremely sophisticated' iPhone hack; Google flags major AMD microcode bug
Feb 15, 2025 · 1 hr 25 min · 69.3 MB
0:00-1:25:12
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Three Buddy Problem - Episode 34: We dig into the latest exploited Apple iPhone zero-day (USB Restricted Mode bypass), an AMD microcode flaw so serious it’s not being fully disclosed, a barrage of Patch Tuesday updates, the helpless nature of trying to defend corporate networks, Russian threat actor movements, and fresh intel from Rapid7, Volexity, and Microsoft.
Cast: Juan Andres Guerrero-Saade, Costin Raiu and Ryan Naraine.
Links:
- Transcript (unedited, AI-generated)
- Apple iOS 18.3.1 zero-day bulletin
- Apple Says iPhone USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack
- Quarkslab: Analysis of USB Restricted Mode bypass (CVE-2025-24200)
- ZDI Patch Tuesday recap (exploited Windows 0days)
- The BadPilot campaign (Seashell Blizzard subgroup)
- Rapid7 on PostgreSQL zero-day linked to BeyondTrust 0days
- PostgreSQL 0day advisory (CVE-2025-1094)
- Google partial disclosure of high-risk flaw in AMD microcode
- AMD SEV Confidential Computing Vulnerability (CVE-2024-56161)
- Fortinet documents another exploited 0day
- Storm-2372 conducts device code phishing campaign
- CrowdStrike on malware naming schemes
Juan Andres Guerrero-Saade
twitter.comCostin Raiu
twitter.comRyan Naraine
twitter.comTranscript (unedited, AI-generated)
docs.google.comApple iOS 18.3.1 zero-day bulletin
support.apple.comQuarkslab: Analysis of USB Restricted Mode bypass (CVE-2025-24200)
blog.quarkslab.comZDI Patch Tuesday recap (exploited Windows 0days)
zerodayinitiative.comThe BadPilot campaign (Seashell Blizzard subgroup)
microsoft.comPostgreSQL 0day advisory (CVE-2025-1094)
postgresql.orgFortinet documents another exploited 0day
fortiguard.fortinet.comStorm-2372 conducts device code phishing campaign
microsoft.comCrowdStrike on malware naming schemes
crowdstrike.com