Intro

Three Buddy Problem - Episode 50: This week, we dissect cyber flashpoints in the Iran-Israel war, revisit the “magnet of threats” server in Iran that attracted APTs from multiple nation-states, and react to Israel's Mossad sneaking explosive drone swarms deep into Iran to support airstrikes.

Plus, Stealth Falcon’s new WebDAV zero-day, SentinelOne’s brush with Chinese APTs, Citizen Lab’s forensic takedown of Paragon’s iPhone spyware, and the sneaky Meta/Yandex trick that links Android web browsing to app IDs.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Links:

• Transcript (unedited, AI-generated)
• Israel-Iran war breaks out
• 'The magnet of threats'
• Mossad set up drone swarm base in Iran
• Stealth Falcon's Exploit of Microsoft Zero Day
• CVE-2025-33053 - WebDAV remote code execution
• CISA, Microsoft warn of Windows zero-day
• China-nexus Threat actors target SentinelOne
• Chinese Espionage Crews Circle SentinelOne
• Citizen Lab: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted - The Citizen Lab
• Meta and Yandex are de-anonymizing Android users’ web browsing identifiers
• Dreadnode Offensive AI Conference
• LABScon Call for Papers