S0:E31 — They Did Everything Right, and Still Got Burned
Trezor disclosed a breach affecting roughly 67,000 US customers, data from orders placed between November 2019 and August 2021. The twist: Trezor had repeatedly requested and received written assurance that this data was deleted, in line with their contract and data policy. It wasn't. Jess and Jake use this as a real-world case study in third-party risk management, why "right to audit" is often a paper tiger control nobody budgets to actually use, and why this is the exact kind of story to proactively brief leadership on before it happens to you.
Second half: a wave of CVEs in PaperCut, the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.