Three Buddy Problem China exposing Taiwan hacks, Paragon spyware and WhatsApp exploits, CISA budget cuts
32 snips
Mar 21, 2025 Katie Moussouris, CEO of Luta Security and a pioneer in vulnerability disclosure, joins the conversation to shed light on crucial cybersecurity topics. They delve into China's recent exposure of Taiwan's APT actors and the implications of naming such entities. The discussion also covers the troubling rise of spyware, particularly relating to Paragon and WhatsApp. With a nod to the fragmented exploit markets, Moussouris highlights the urgent need for budget support for CISA amidst tightening financial constraints, emphasizing the broader impacts on cybersecurity.
AI Snips
Chapters
Transcript
Episode notes
China Exposing Taiwan Hacks
- China's MSS released a report exposing alleged Taiwanese APT actors, a significant shift from their usual threat intelligence.
- This coordinated effort with private companies, like ANTIY, mimics Western intelligence practices and may signal increased government involvement.
Quality of Chinese APT Research
- The report's quality is similar to past Chinese reports, focusing on malware and methodology resembling typical Chinese APT activity.
- This raises questions about whether it's a cultural difference, a translation issue, or intentional mimicry to blend in.
Ethics and Perils of APT Research
- Juan Andres Guerrero-Saade recalls a previous discussion about the ethics and perils of APT research.
- He points out how the internet's perceived globalization created a false sense of non-patriotic intelligence production, which is now gone.