Navigating Vulnerability Disclosure

Three Buddy Problem - Episode 33: In this episode, we unpack the UK government's secret push for backdoor access to encrypted iCloud data, Apple’s approach to iCloud encryption, and the broader implications for privacy and security on a global scale. Plus, how security agencies handle zero-day vulnerabilities, surveillance spyware and mercenary hacking, and TikTok-powered election disinformation and interference.

From wormable exploits like Eternal Bue to the realities of AI-based spying, the episode offers a detailed look into how government oversight, private sector collaboration, and shifting market forces have reshaped the way we think about cybersecurity.

Cast: Juan Andres Guerrero-Saade, Costin Raiu and Ryan Naraine.

Links:

• Transcript (unedited, AI-generated)
• UK orders Apple to let it spy on users’ iCloud data
• How to turn on Advanced Data Protection for iCloud
• Kim Zetter: US government disclosed 39 zero-days in 2023
• CISA alert on Trimble zero-day exploitation
• France VIGINUM report on foreign digital election interference