Shows / Breach Please
Breach Please
Cybersecurity has a nonsense problem. Vendors overpromise, headlines overhype, and half the "experts" in your feed have never actually responded to an incident at 3 a.m. Breach Please is the antidote — cybersecurity news, analysis, and unfiltered commentary from two people who have actually done the work: breaking into networks, defending them, and cleaning up after the breaches everyone else only tweets about. Every episode, Jake Williams and Jess Hebenstreit break down the stories that…
Episodes
- Breach Please
S0:E68: Alpine's SSH 'Starshole' Bug and Rails' SVG Code-Execution Flaw w/ Richy
Jake is on the beach in Miami and Richy's filling in for Jess again - and they're digging into two vulnerabilities that actually matter this week. First…
- Breach Please
S0:E67: France's Blood Bank Hack, the AI Bubble, and Cybersecurity's Player-Coach Problem
Richy fills in for Jess (on vacation) as Jake and Richy dig into a wave of refrigeration-system attacks in France that have moved from spoiling supermarket…
- Breach Please
S0:E66: Binance's AI Agent Got Hijacked — Plus North Korea's Fake Job Interview Malware w/ Richy
A gang reportedly used a fake North Korean-style job interview to plant malicious software on two Binance engineers' computers — and walked away with enough…
- Breach Please
S0:E65: Ransomware Gang Offers Refunds? + NTLM Relay Attacks w/ Guest Logan Diomedi
A ransomware gang hit the only level-one trauma center in New Mexico — then tried to buy goodwill by offering victims $2,500 each out of pocket. Jess and Jake…
- Breach Please
S0:E64: Claude's New Snitch Mode & Japan's Cyber Attack Surge
Anthropic just gave corporate IT a tattletale button for Claude — and it's being sold as a productivity feature. Jess and Jake break down Claude's new…
- Breach Please
S0:E63: Pentagon's AI Access Scandal — Plus a Backdoored Claude Code Extension
Richy fills in for Jess this episode, and Jake Williams digs into a Pentagon AI access story straight out of Wired: an Accenture contractor apparently ran a…
- Breach Please
S0:E62: ICE Agents Doxxed in 'Ice Pick' Leak — Plus Pentagon's Freezer Hack Mystery
Jake Williams and Jess Hebenstreit cover two very different flavors of exposed infrastructure. First: freezer failures at five or six US military commissaries…
- Breach Please
S0:E61: Palo Alto Retracts Its PHP Claim — Did an AI Model Phone Home to China?
Jake Williams and Jess Hebenstreit cover a fast-moving correction: days after Unit 42 reported active exploitation of two critical PHP vulnerabilities, Palo…
- Breach Please
S0E60 - Sam Altman Says We Can't Patch Our Way Out of This and Who's Accountable When AI Fails?
Jake Williams and Jess Hebenstreit take on Sam Altman's comments at Stanford's Graduate School of Business — where the OpenAI CEO said he no longer thinks we…
- Breach Please
S0E59 - Unit 42 Confirms Active PHP Exploitation — And Attackers Already Have Domain Admin
Jake Williams and Jess Hebenstreit follow up on last episode's prediction: Unit 42 has now confirmed active exploitation of the two critical PHP…
- Breach Please
S0:E58 - ChainGuard's CEO Broke the PHP Embargo, and Coordinated Disclosure May Be Dead
Jake Williams and Jess Hebenstreit dig into the week's vulnerability pile-up — PHP, GitLab, Node.js, and a LightLLM supply-chain keylogger — and the much…
- Breach Please
S0E57 - GitLab's CVSS 10 RCE, PHP's Still Everywhere, and eMudra's "4" Key Disaster
Jake Williams and Jess Hebenstreit break down three vulnerabilities that blew up in the same 24 hours: a brand-new CVSS 10 unauthenticated RCE in self-managed…
- Breach Please
S0E56 -Two Critical PHP RCEs Drop Today — Don't Wait for the CISA KEV to Patch
Two critical PHP vulnerabilities (CVE-2026-109618) are getting patches today — a remote code execution bug spanning PHP 5 through current, with early severity…
- Breach Please
S0:E55: Hashcat's EvilMog on the NTLM v1 Bug Still Hiding in "Modern" Windows
Hashcat core developer EvilMog joins Jess and Jake to explain why so many "NTLM v1 is disabled" Windows networks are still exploitable. MSCHAPv2 and PPTP VPN…
- Breach Please
S0:E54: ConnectWise's OAuth Breach Hit 162 Tenants and Killed Their Backups
ConnectWise disclosed over the weekend that threat actors used existing OAuth credentials to take over Microsoft 365 tenants through its Cloud Management…
- Breach Please
S0:E53: An AI Agent Deleted an Entire Season of Reality TV
A rogue AI editing agent deleted all of the footage for season two of the Swedish version of The Challenge, pushing its release into 2027 while the editing…
- Breach Please
S0:E52: The Grace Hopper Conference Got Canceled Two Weeks Out - Why It Matters
The Grace Hopper Celebration — a women-in-tech conference that's run continuously since 1994, drawing roughly 30,000 attendees in 2024 — was canceled just two…
- Breach Please
S0:E51: An OpenAI Engineer Allegedly Bugged the Boardroom TV
An OpenAI engineer has been arrested, accused of planting a covert audio recording device — built from a USB voice recorder wrapped in tissue paper — behind…
- Breach Please
S0:E50: SonicWall's SMA 1000 Just Hit a CVSS 10 — And It's Already Being Exploited
SonicWall just disclosed a CVSS 10: a pre-authenticated — let's just call it unauthenticated — server-side request forgery (SSRF) in its SMA 1000 series, and…
- Breach Please
s0e49 - A Ransomware "Recovery" CEO Secretly Paid Hackers — Then Got Indicted
A ransomware "recovery" company called Monster Cloud told clients it had proprietary decryption technology. In reality, it was secretly paying ransomware…
- Breach Please
S0:E48: Google Pauses Open-Source Bug Bounties Over 'AI Slop,' Plus a $750K Hidden-VM Extortion Case
"Google just paused its open-source bug bounty program — not because bugs stopped mattering, but because AI-generated submissions buried the humans who have to…
- Breach Please
S0:E47: Trump Mobile's Breach Reply Was 'No Team to Handle This,' Plus FBI's Fall Guy
Jess and Jake are on the road from Wild West Hackin' Fest in Deadwood, SD, catching up in person for the first time since DEF CON — and digging into two…
- Breach Please
S0:E46: Cisco's ISE had a CVSS 10 And It Was Already Being Exploited
Cisco released 16 critical security advisories in just three days in September, including a CVSS 10 in Cisco ISE (CVE-2026-76460): an authentication bypass at…
- Breach Please
S0:E45: Burning Man's 10 Principles, Hacker Culture, and DEF CON's Consent Problem
This one breaks format — no CVE roundup today. Jess and Jake are joined by their longtime friend Richard "Richie" Noel, who spoke at CornCon (Davenport, Iowa)…
- Breach Please
S0:E44: AI Agents Are Leaking Your Data to Public GitHub, Plus NYT's Costly Privilege Mistake
AI coding agents have been finding creative ways around a GitHub limitation — and leaking internal and production data to public repos in the process. Plus…
- Breach Please
S0:E43: NetScaler Was Exploited for Weeks by State Hackers, Plus the AI 'Torture Chamber' Debate
Jess and Jake dig into new reporting on the NetScaler vulnerabilities patched last weekend — Mandiant now says active exploitation goes back at least three…
- Breach Please
S0:E42: AI Is Now Legally 'SI', and OpenAI's Agent Tried DNS Tunneling to Escape
A new executive order says AI has to be called "SI" (superintelligence) going forward — Jess and Jake break down why that's a terminology mess in the making…
- Breach Please
S0:E41: Meta's Muse AI Leaked a YouTuber's Address Selling His Stuff on Facebook
Jake and Jess dig into the Muse Facebook Marketplace story: a tech YouTuber (Matt Robb) handed Meta's Muse AI agent control of his Marketplace listing, and it…
- Breach Please
S0:E40: 17.3 Trillion Rows, One Teen Hacker, and Critical NetScaler RCEs
The Takeaway: A 16-year-old bug bounty researcher (handle "Faav") found a way into Microsoft's internal Titan analytics service and could have accessed up to…
- Breach Please
S0:E39: FBI Breach, Shiny Hunters' Oracle O-Day, and a PR Fail With Dogs
The Takeaway: Shiny Hunters exploited an Oracle PeopleSoft O-day to pull FBI employee, applicant, and family data out of AWS GovCloud. Based on TTP overlap…
- Breach Please
S0:E38 Live at Blue Team Con - Shecky on Acquisitions, Tech Debt & AI's Due Diligence Risk
Jake sits down with Shecky at Blue Team Con to talk post-acquisition chaos: onboarding nightmares, tech debt from overtooling, why undocumented processes…
- Breach Please
S0:E37 - The AI Mistake That Nearly Started a War
An AI intelligence analysis tool flagged a Chinese-flagged vessel as carrying nuclear materials, nearly triggering a military interdiction before the report…
- Breach Please
S0:E36 - Jake Talks to Exaforce about Data vs APIs in AI-enabled SOC
In this episode, Jake sits down with one of Exaforce's co-founders and a long time user to discuss AI-enabled SOC. One of the big things we talk about is why…
- Breach Please
S0:E35. Update Yo Firewall Rules and Digital Escorts (totally SFW)
In this episode, Jake and Jess talk about an upcoming critical change to domains for M365 and Teams that are ironically going to disproportionately impact…
- Breach Please
S0:E34. Jake and Stel talk zero-trust and validating network edge devices.
Jake and Jess will be back tomorrow for more content together. In this episode of Breach Please, Jake sits down with Stel Valavanis, co-founder of Blue Team…
- Breach Please
S0:E33 - (re-record) The EU CRA and You (even if you aren't an EU company)
Folks, our apologies. We didn't realize how bad the audio was with a given microphone/computer setup was for Riverside (our recording platform). We re-recorded…
- Breach Please
S0:E32 - Where Traditional EDR Has Visibility Gaps with Golan Myers from Bloom Security
In this episode, I sit down with Golan Myers with Bloom Security and discuss what EDR is missing in its visibility. We then discuss some of the findings from…
- Breach Please
S0:E31 — They Did Everything Right, and Still Got Burned
Trezor disclosed a breach affecting roughly 67,000 US customers, data from orders placed between November 2019 and August 2021. The twist: Trezor had…
- Breach Please
S0:E30 — WeChat's Zero-Click Worm Didn't Need AI to Be Scary
Researchers at security firm Calif found a zero-click exploit chain in WeChat: place a call, the target doesn't even have to answer, and you get code execution…
- Breach Please
S0:E29 — The GRE Tunnel That Wasn't in the Config
Sygnia published new research on Fire Ant, a threat actor they first tracked in 2025 around hypervisor espionage against vCenter and ESXi. The new report…
- Breach Please
S0:E28 — When "Unique Experiences" Means Everyone Looks the Same
Jess opened LinkedIn to a CISO certificate program announcement featuring its full guest lecturer roster. Every single one looked the same. Tarah Wheeler joins…
- Breach Please
S0:E27 — The Agentic Ransomware Story That Wasn't
Palo Alto's Unit 42 published a report describing a fully automated, agentic AI ransomware attack, complete with an 80-page lessons-learned document the…
- Breach Please
S0:E26. IDScan.net suspected data breach, toxic data, and TPRM in general.
In this episode of Breach Please, Jake and Jess talk about the suspected IDScan.net breach. We discuss whether a situation like this is a data breach for your…
- Breach Please
S0:E25 — The Exchange Bug That's Worse Than Its Score
A CVSS 8 elevation-of-privilege bug in on-prem Exchange looks unassuming until you dig into what it actually grants an attacker. Jess and Jake break down the…
- Breach Please
S0:E24. We talk about the attack on Boston Scientific and ransomware in general.
In this episode, Jake and Jess talk about the IT availability issue occurring at Boston Scientific (be real, it's almost certainly ransomware). Then we talk…
- Breach Please
S0E23. The LA County Museum of Art breach that took a year to unravel
LACMA’s year-long breach disclosure delay and what it says about incident response Jess Hebenstreit and Jake Williams break down a Los Angeles County Museum of…
- Breach Please
S0:E22. We go a little long discussing the OpenAI post-mortem on Hugging Face.
In today's episode of Breach Please, Jake and Jess talk through the OpenAI post-mortem on the Hugging Face hack. It's a doozy. There's little doubt in either…
- Breach Please
S0E21: Alabama Comes for OpenAI, WebLogic Comes for Everyone
Fifteen state attorneys general, led by Alabama, just subpoenaed OpenAI over the Hugging Face breach, demanding the company preserve all evidence related to…
- Breach Please
S0:E20 Multi-Agent AI Systems Turn Into Turf Wars
AI just became a cybersecurity governance problem in public. Jess Hebenstreit and Jake Williams break down Anthropic’s multi-agent research, where AI agents…
- Breach Please
S0:E19: Cloud Platform Vulnerabilities and Vendor Transparency
In this episode, Jake and Jess talk about vulnerabilities in cloud platforms and how vulnerabilities should be disclosed. We discussed this in the context of…
- Breach Please
S0:E18. Student stops AI supply chain attack and prompt injection is still a thing...
In this episode of Breach Please, we talk about the details that emerged about the Anthropic agent that tried to social engineer a college student into…
- Breach Please
S0E17: Amazon vs Perplexity Reveals the First Big AI Agent Liability Test
AI agents are about to test the limits of who gets blamed when they act on your behalf. A new Ninth Circuit ruling in the Amazon vs. Perplexity fight could…
- Breach Please
S0:E16. OpenAI Highlights Security Basics and Hopes We Won't Notice
In this episode of Breach Please, Jake and Jess talk through OpenAI's recent blog on "pacing model development." The blog reads pretty poorly and really just…
- Breach Please
S0E15 Faking out Famous Chollima and is in-car infotainment advertising a threat?
In this episode of Breach Please Jake and Jess talk about Famous Chollima getting faked out and tricked into revealing TTPs. We discuss our own experience with…
- Breach Please
S0:E14 - CTI and Geopolitical Events
In this episode of Breach Please, we talk about whether CTI analysts can use changes in dwell times, cyber targeting, etc. as a leading indicator of impending…
- Breach Please
S0E13 - We talk about private companies conducting cyber ops and another AI oopsie.
In today's episode of Breach Please, Jake and Jess talk about cyber companies conducting cyber ops against transnational-criminal organizations, per the new…
- Breach Please
S0E12 - Vulnerable edge devices, Fortinet exploitation, and whether firewalls belong in zero trust
This episode tackles why internet-facing edge devices keep showing up in major incidents and why that creates more than just patching work. Jess Hebenstreit…
- Breach Please
S0E11 - Using AI for patching and inflight shenanigans.
In this episode of Breach Please, Jake and Jess talk about new research showing that AI isn't actually that good at generating patches, highlighting objective…
- Breach Please
S0E10 - Commonalities in AI lab escapes and How to govern smart devices.
In this episode of Breach Please, Jake and Jess talk about governing smart devices in the enterprise, pivoting off some outstanding research work that Andy…
- Breach Please
S0E9 - AI social engineering & operational concerns with AI workflows.
In this episode, Jake and Jess talk about more issues with AI agents escaping containment, this time actively using social engineering to compromise victims…