A destructive cyberattack in Poland raises NATO 'red-line' questions
(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices). Three Buddy Problem - Episode 83: Poland's CERT documents a rare, explicit wiper attack on civilians in a NATO country, including detailed attribution of a Russian government op targeting the electric grid in the heart of winter. We examine why this crosses a long-avoided threshold, why attribution suddenly matters again, and what it says about pre-positioned access, vendor insecurity, and the shrinking gap between cyber operations and acts of war. Plus, another Fortinet fiasco, a new batch of Ivanti zero-days under attack, an emergency patch from Microsoft and the return of the mysterious KasperSekrets account. Cast: Ryan Naraine, Costin Raiu and Juan Andres Guerrero-Saade.
Audio is streamed directly from the publisher (aphid.fireside.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
(Presented by Material Security: We protect your company’s most valuable materials -- the emails, files, and accounts that live in your Google Workspace and Microsoft 365 cloud offices.)
Three Buddy Problem - Episode 83: Poland's CERT documents a rare, explicit wiper attack on civilians in a NATO country, including detailed attribution of a Russian government op targeting the electric grid in the heart of winter. We examine why this crosses a long-avoided threshold, why attribution suddenly matters again, and what it says about pre-positioned access, vendor insecurity, and the shrinking gap between cyber operations and acts of war.
Plus, another Fortinet fiasco, a new batch of Ivanti zero-days under attack, an emergency patch from Microsoft and the return of the mysterious KasperSekrets account.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Links:
- Transcript (unedited, AI-generated)
- Material Security (Use Cases)
- ESET DynoWiper update: Technical analysis and attribution
- Poland CERT on Russian wiper attacks
- Poland blames two Ukrainians allegedly working for Russia for railway blast
- Britain’s New Spy Chief Has a New Mission
- Two New Ivanti 0days Exploited
- Microsoft ships emergency Office patch to thwart attacks
- Analysis of Single Sign-On Abuse on FortiOS
- Fortinet PSIRT: Administrative FortiCloud SSO authentication bypass
- Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
- WhatsApp Strict Account Settings
- China Executes 11 People Linked to Cyberscam Centers in Myanmar
- Singapore to start caning for scammers
- Germany on hacking attacks: "We will strike back, including abroad"
- Acting CISA chief uploaded sensitive files into a public version of ChatGPT
- TLP BLACK
- LABScon 2026
- KasperSekrets