Salt Typhoon IOCs, Google Floats ‘cyber Disruption Unit’, WhatsApp 0-click Three Buddy Problem podcast

Content provided by Security Conversations. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Security Conversations or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Three Buddy Problem »
Salt Typhoon IOCs, Google floats ‘cyber disruption unit’, WhatsApp 0-click

13h ago 2:24:48

MP3•Episode home

Three Buddy Problem - Episode 60: We dissect a fresh multi-agency Salt Typhoon advisory (with IOCs and YARA rules!), why it landed late, why the wall of logos matters (and doesn’t), and what’s actually usable for defenders: new YARA, tool hashes, naming ambiguity across reports, the mention of Chinese vendors, and a Dutch note that smaller ISPs were hit.

Plus, Costin details his hunting stack and philosophy (historic IOC/malware hoarding, fast pivots, and AI as analyst “wingman”) and a new Chinese APT report that may intersect with LightBasin and the murky PSOA world.

We also debate Google’s proposed “cyber disruption unit” versus Microsoft’s DCU (legal vs. “ethical” takedowns, PR, and business models); react to Anthropic’s report on real attacker use of Claude; note Amazon’s APT29 watering-hole disruption; and close on a fresh WhatsApp-to-ImageIO zero-click chain and practical phone OPSEC.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Links:

178 episodes

#Cybersecurity #Hacking #Information Security #Research #News #Tech News #Security #Tech #Software Development #Security Conversations #CISO #InfoSec