(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.)

Three Buddy Problem - Episode 83: Poland's CERT documents a rare, explicit wiper attack on civilians in a NATO country, including detailed attribution of a Russian government op targeting the electric grid in the heart of winter. We examine why this crosses a long-avoided threshold, why attribution suddenly matters again, and what it says about pre-positioned access, vendor insecurity, and the shrinking gap between cyber operations and acts of war.

Plus, another Fortinet fiasco, a new batch of Ivanti zero-days under attack, an emergency patch from Microsoft and the return of the mysterious KasperSekrets account.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Links:

Transcript (unedited, AI-generated)
Material Security (Use Cases)
ESET DynoWiper update: Technical analysis and attribution
Poland CERT on Russian wiper attacks
Poland blames two Ukrainians allegedly working for Russia for railway blast
Britain’s New Spy Chief Has a New Mission
Two New Ivanti 0days Exploited
Microsoft ships emergency Office patch to thwart attacks
Analysis of Single Sign-On Abuse on FortiOS
Fortinet PSIRT: Administrative FortiCloud SSO authentication bypass
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
WhatsApp Strict Account Settings
China Executes 11 People Linked to Cyberscam Centers in Myanmar
Singapore to start caning for scammers
Germany on hacking attacks: "We will strike back, including abroad"
Acting CISA chief uploaded sensitive files into a public version of ChatGPT
TLP BLACK
LABScon 2026
KasperSekrets

Comment mieux dormir, avec le chercheur en neurosciences Thomas Andrillon

InPower par Louise Aubery

Rythmes sociétaux et horaires scolaires

The AI-powered Podcast Player