Hijacking .gov backdoors, Ivanti 0days and a Samsung 0-click vuln

Security Conversations

Three Buddy Problem - Episode 29: Another day, another Ivanti zero-day being exploited in the wild. Plus, China's strange response to Volt Typhoon attribution, Japan blames China for hacks, a Samsung 0-click vulnerability found by Project Zero, Kim Zetter's reporting on drone sightings and a nuclear scare. Plus, hijacking abandoned .gov backdoors and Ukrainian hacktivists wiping a major Russian ISP.

Cast: Juan Andres Guerrero-Saade, Costin Raiu and Ryan Naraine.

Links:

• Transcript (unedited, AI-generated)
• Ivanti Connect Secure zero-day advisory
• Mandiant report on new Ivanti zero-day
• China Daily responds to Volt Typhoon attribution
• Japan warns about Chinese 'MirrorFace' attacks
• Who is MirrorFace?
• Natalie Silvanovich on new Samsung 0-click
• Kim Zetter: Anatomy of a Nuclear Scare
• Backdooring .gov backdoors via $20 domains
• APT32 poisoning GitHub, targeting Chinese security pros
• Ukraine wipes Russian ISP
• Russian internet provider confirms network ‘destroyed’ by Ukrainian hackers
• Mullvad: Quantum-resistant tunnels on desktop VPN
• Fundraiser for Marc Rogers
• CNN: Amit Yoran has died at 54