Bruce Dang on Calif, iOS Exploit Chains, AI Hacker Takeover

About the episode

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem – Episode 120: Calif’s Bruce Dang joins the buddies to cover why his shop refuses to sell a $50 million iPhone exploit chain, the March 2026 moment Mythos started finding real bugs, Lockdown Mode and MIE bypasses, hallucinated crash logs, and why verification is now the real bottleneck.

Plus, Google Project Zero drops a 30-day disclosure deadline mid-show, and the conversation swings to AI-written patches, careers for new hackers, Calif’s plan to be the TSMC of hacking, Jensen Huang’s exit from Nvidia, and where all the GReAT APT reports went.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
2:18 What is Calif? Why burn expensive zero-days?
16:04 OpenAI’s Daybreak Red and the future of pen-testing
18:46 March 2026: the first look at Mythos
30:03 Why iPhones are still hard to hack
33:48 BFU persistence, daily reboots, and Lockdown Mode
44:35 Breaking Apple’s MIE on the M5
54:50 Bruce’s SMB bug workflow and hallucinated crash logs
1:09:11 AI reverse engineering and the future of IDA and Binary Ninja
1:20:10 Patch floods, patch quality, and Rust
1:43:09 Teaching malware analysis when AI does the reversing
1:57:04 Breaking: Project Zero moves to 30-day disclosure
2:06:29 Careers, hiring, and the TSMC of hacking
2:22:24 Nvidia, AI power concentration, and the six-month window
2:42:01 Where are the great APT reports? Shoutouts

Links:

Facebook
Twitter
Linkedin

Bruce Dang on Calif, iOS Exploit Chains, AI Hacker Takeover

About the episode

Share

Tags