S0:E43: NetScaler Was Exploited for Weeks by State Hackers, Plus the AI 'Torture Chamber' Debate

Breach Please · Oct 1, 2026 · 41m

Jess and Jake dig into new reporting on the NetScaler vulnerabilities patched last weekend — Mandiant now says active exploitation goes back at least three weeks and is tied to state-sponsored actors. They walk through how to prioritize threat hunting after a patch, why "the scope will never be smaller than it is today," and why Apache error logs (not just access logs) are often the fastest way to spot a web shell.

Then: 404 Media's report on a GitHub project that subjects open-weight LLMs to simulated "pain" in psychological-style experiments — and the online debate over whether that means…