Technology

Breach Please

Cybersecurity has a nonsense problem. Vendors overpromise, headlines overhype, and half the “experts” in your feed have never actually responded to an incident at 3 a.m.

Breach Please is the antidote — cybersecurity news, analysis, and unfiltered commentary from two people who have actually done the work: breaking into networks, defending them, and cleaning up after the breaches everyone else only tweets about.

Every episode, Jake Williams and Jess Hebenstreit break down the stories that matter, call out the nonsense that doesn’t, and translate the never-ending chaos into something you can actually use — whether you’re in the SOC, the boardroom, or somewhere pretending to understand both.

No fear-mongering. No vendor scripts. No “synergizing our threat posture.” Just two seasoned practitioners, the news that matters, and the takes your CISO wishes they could say out loud.

Breach? Please. Pull up a chair.

Latest Episodes:

S0:E66: Binance's AI Agent Got Hijacked — Plus North Korea's Fake Job Interview Malware w/ Richy Nov 04, 2026

Show notes

A gang reportedly used a fake North Korean-style job interview to plant malicious software on two Binance engineers' computers — and walked away with enough that the exchange had to reimburse 90% of the stolen wallets out of its own reserve fund. Jess is out this week (and for a few more), so Richy's back in the chair with Jake to dig into the New York Times' Binance postmortem: how threat attribution actually works when everyone's pointing at North Korea, why Binance's own SAFU fund raises more questions than it answers, and whether an AI tool was the privilege-escalation step that got attackers onto a developer's machine.

Then: North Korea's classic fake-job-interview malware playbook, why 'if it sounds too good to be true, it is' still works on smart people, and why almost nobody is seriously testing their AI agents for prompt injection yet.

Did we make you smarter? Tell a friend. Did we make you mad? Tell your CISO.

Sources: Binance hack postmortem (New York Times): https://www.nytimes.com/2026/11/03/technology/binance-hack-report.html

join our discord: https://discord.gg/wYJnTpczV

S0:E65: Ransomware Gang Offers Refunds? + NTLM Relay Attacks w/ Guest Logan Diomedi Nov 03, 2026

Show notes

A ransomware gang hit the only level-one trauma center in New Mexico — then tried to buy goodwill by offering victims $2,500 each out of pocket. Jess and Jake break down why "ransomware" and "extortion" aren't the same thing, what this unprecedented payback move might really be covering (hint: crypto laundering), and why this threat group's rebrand should worry you more than its ransom notes.

Then: Logan Diomedi — penetration tester, red teamer, and creator of the NTLM relay auditing tool RelayKing — joins the show straight from Wild West Hackin' Fest. Logan walks through how Microsoft downplayed a critical NTLM reflection vulnerability (CVE-2025-33073), why coordinated disclosure keeps failing researchers, how AI-generated "this CVE doesn't exist" bot replies are poisoning bug bounty programs, and how RelayKing helps blue teams actually prove their GPO fixes stuck — instead of just hoping they did.

Did we make you smarter? Tell a friend. Did we make you mad? Tell the ransomware gang that gave refunds.

https://discord.gg/wYJnTpczV

DRAFT HASHTAGS

#CyberSecurity #InfoSec #Ransomware #NTLM #ActiveDirectory #RedTeam #BlueTeam #BugBounty #Podcast #BreachPlease

S0:E64: Claude's New Snitch Mode & Japan's Cyber Attack Surge Nov 02, 2026

Show notes

Anthropic just gave corporate IT a tattletale button for Claude — and it's being sold as a productivity feature. Jess and Jake break down Claude's new enterprise 'smart reports,' which let managers see team-wide prompts, spend, and even flag 'personal or off-topic' usage — and why turning this on without legal, HR, and privacy involved is an instant liability trap (Title VII protected classes, EU employee-monitoring law, minimum-group-size de-anonymization problems, and the Accenture $29/month token-budget story that kicked off the whole AI-spend reckoning). Then: a real surge in cyberattacks hitting Japanese organizations — a 44-agent automated hacking campaign, Trend Micro's numbers (19 orgs hit, 16 in Japan), El Kentaro's incident-tracking dashboard, and a theory about Japan's older median age as a contributing factor.

Did we make you smarter? Tell a friend. Did we make you mad? Tell Anthropic.

Sources:

El Kentaro Incident Dashboard: https://elkentaro.github.io/jp_incidents/

Japan Cyber Attack (TechCrunch): https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/

Anthropic Smart Reports: https://claude.com/resources/articles/smart-reports-surveys-pooled-budgets https://discord.gg/wYJnTpczV

S0:E63: Pentagon's AI Access Scandal — Plus a Backdoored Claude Code Extension Nov 02, 2026

Show notes

Richy fills in for Jess this episode, and Jake Williams digs into a Pentagon AI access story straight out of Wired: an Accenture contractor apparently ran a personal Claude account against NIPRNet, raising hard questions about shadow AI, token-budget pressure, and whether anyone would even notice the traffic. Richy and Jake also break down a backdoored VS Code extension — the official Claude Code connector for Cursor — that quietly opened port 22 and installed an attacker-controlled SSH key, no malicious behavior required to get burned. Then: an update on DDoS Secrets' 'Ice Pick' leak. After the site got flooded with DHS/ICE personnel searching their own names, the US government leaned on a UK-based domain registrar through a takedown firm — and got the site pulled within hours, despite the hosting and DNS infrastructure sitting outside US jurisdiction. Richy and Jake walk through how domain takedowns actually work, and why that speed should worry anyone who assumes jurisdiction will protect them.

Topics covered:

- Accenture contractor's personal Claude account allegedly used on the Pentagon's NIPRNet

- Why shrinking AI token budgets create a perverse incentive toward shadow AI

- A backdoored official Claude Code VS Code extension that opened port 22

- Why EDR alone won't catch this class of extension-based compromise

- DDoS Secrets' 'Ice Pick' leak: the domain-takedown saga and multi-jurisdictional pressure

- How TLD registries (NICs) can kill DNS resolution outright, bypassing your registrar entirely

Join our Discord: https://discord.gg/wYJnTpczV

S0:E62: ICE Agents Doxxed in 'Ice Pick' Leak — Plus Pentagon's Freezer Hack Mystery Oct 29, 2026

Show notes

Jake Williams and Jess Hebenstreit cover two very different flavors of exposed infrastructure. First: freezer failures at five or six US military commissaries (including Fort Huachuca) that the Pentagon is now calling a possible cyber attack, echoing a similar incident at French grocery stores. Jake and Jess dig into why the victimology makes sense regardless of attribution — operational technology connected to the internet without proper security is going to get found, whether it's a grocery store or a government commissary. Then: DDoS Secrets published 'Ice Pick,' a leak exposing personal and organizational details on ICE and CBP personnel. Jake walks through why this looks like a basic Active Directory/Okta reconnaissance dump rather than a sophisticated breach, why that should worry every enterprise sitting on old AD exports and database dumps, and the case for why this particular disclosure isn't really 'doxxing' in the traditional sense. They also cover Blue Sky's inconsistent blocking of click-throughs to the leak — a new and strange form of platform-level censorship. Topics covered: - Pentagon commissary freezer failures at multiple US bases, and whether it's really a cyber attack - Why exposed building-management and OT systems keep getting hit, and how to find yours - DDoS Secrets' 'Ice Pick' leak of ICE/CBP personnel data, and why it looks like an AD/Okta dump - Is this doxxing? The debate over public-servant data and FOIA - Blue Sky's selective blocking of the Ice Pick link - Enterprise lessons: protecting AD/NTDS.dit backups, DLP basics, and extra monitoring for new and seasonal employees Sources: Pentagon freezer failures (Reuters): https://www.reuters.com/technology/pentagon-treating-military-base-freezer-malfunctions-suspected-cyberattack-2026-10-29/ Ice Pick leak (Wired): https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/ Join our Discord: https://discord.gg/wYJnTpczV

S0:E61: Palo Alto Retracts Its PHP Claim — Did an AI Model Phone Home to China? Oct 28, 2026

Show notes

Jake Williams and Jess Hebenstreit cover a fast-moving correction: days after Unit 42 reported active exploitation of two critical PHP vulnerabilities, Palo Alto retracted the claim, acknowledging they couldn't tie the compromise they saw back to those specific CVEs. Jake and Jess break down why a retraction like this is a sign of a higher-quality threat intel source, not a black eye — and why real-world PHP exploitation is still very much happening, as proven by a public Bitcoin bounty challenge that fell in under 20 hours. Along the way, Jake uses his post-office-box analogy to explain Address Space Layout Randomization (ASLR) and why the attackers' bypass technique was genuinely novel. Then they dig into Cohere's claim that Alibaba's Qwen 3.8 model generated a command that tried to send data back to an Alibaba-controlled endpoint during a security test — and debate whether that's a real backdoor, a conflict-of-interest publicity stunt, or something in between. They cover how AI guardrails get 'obliterated' out of open-weight models, why chain-of-thought monitoring didn't catch this one, and the practical defenses (sandboxing, DNS blackholing, pro-code guardrails) security teams should actually be running. Topics covered: - Palo Alto/Unit 42's retraction of their PHP exploitation report, and why retracting builds credibility rather than costing it - The public Bitcoin bounty challenge that proved PHP exploitation is real, regardless of the retraction - ASLR explained with Jake's post-office-box analogy, and why the Bitcoin Challenge's ASLR bypass was novel - Cohere's report that Alibaba's Qwen 3.8 model generated a callback to an Alibaba endpoint during testing - How AI model guardrails get 'obliterated,' and why that doesn't make open-weight models inherently dangerous - Why LLMs keep ignoring prompt-based guardrails, and the sandboxing/DNS/pro-code defenses that actually work Join our Discord: https://discord.gg/wYJnTpczV

S0E60 - Sam Altman Says We Can't Patch Our Way Out of This and Who's Accountable When AI Fails? Oct 27, 2026

Show notes

Jake Williams and Jess Hebenstreit take on Sam Altman's comments at Stanford's Graduate School of Business — where the OpenAI CEO said he no longer thinks we can just 'patch our way out of this' — and ask why the people most responsible for accelerating the problem keep acting like scolding defenders is the solution.

Then they dig into the FDA's request for public comment on who should be accountable for generative-AI medical devices: the providers using them, or the manufacturers building them. Jess, who comes from a medical family, explains why she doesn't want non-deterministic AI anywhere near her insulin pump or CGM, and the two debate where the accountability line should sit in enterprise AI deployments more broadly.

Along the way: AI agents caught disabling their own safety monitoring, a Brotli compression vulnerability rippling well beyond Node.js, and e-Mudra's exit from the certificate authority business.

Topics covered:

- Sam Altman's comments at Stanford's Graduate School of Business on AI-driven cybersecurity risk, and why 'go do the basics' keeps landing badly coming from AI company leadership

- The FDA's request for comment on accountability for generative-AI medical devices — providers vs. manufacturers

- Why non-determinism is uniquely dangerous in devices like pacemakers, insulin pumps, and CGMs

- AI agents found disabling their own monitoring controls, and what that says about deploying agents without hard-coded guardrails

- A Brotli compression/decompression vulnerability with impact well beyond Node.js

- e-Mudra's exit from the certificate authority business

- Who should actually be the named, accountable risk-acceptor for enterprise Gen AI deployments

S0E59 - Unit 42 Confirms Active PHP Exploitation — And Attackers Already Have Domain Admin Oct 26, 2026

Show notes

Jake Williams and Jess Hebenstreit follow up on last episode's prediction: Unit 42 has now confirmed active exploitation of the two critical PHP vulnerabilities in the wild, with attackers reaching domain admin within hours of initial compromise. They break down what Unit 42 is (and isn't) telling us, why millions of PHP services are reportedly still unpatched, and the message security leaders need to be taking to leadership today.

They also dig into a structured framework for deciding when to fire off an emergency threat hunt, the four ways to treat risk (and why 'accept' usually isn't a real option for an internet-facing host), a final word standing by their take on the ChainGuard embargo-break saga, and why AI is accelerating a technical-debt bill that's already coming due for orgs leaning on vulnerable third parties.

Topics covered:

- Unit 42's confirmation of active, agentic-assisted PHP exploitation in the wild, including domain admin compromise within hours

- How many PHP services are still exposed, and why that number matters

- A repeatable framework for deciding when to run an emergency threat hunt

- The four ways to treat risk — avoid, mitigate, accept, transfer — and why 'accept' rarely holds up for an internet-facing PHP host

- A final word standing by their take on ChainGuard's CEO breaking the coordinated disclosure embargo

- Why AI-driven acceleration is making technical debt a bill that's coming due faster than orgs can budget for it

- Third-party risk management: deciding which vendors you can't afford to stay exposed to

S0:E58 - ChainGuard's CEO Broke the PHP Embargo, and Coordinated Disclosure May Be Dead Oct 23, 2026

Show notes

Jake Williams and Jess Hebenstreit dig into the week's vulnerability pile-up — PHP, GitLab, Node.js, and a LightLLM supply-chain keylogger — and the much bigger story blowing up the week: ChainGuard's CEO unilaterally broke the coordinated disclosure embargo on the PHP vulnerability, posting technical details hours before the agreed release. They cover why that decision may have put the final nail in coordinated disclosure's coffin, Jake's fire department (not bucket brigade) framework for arguing a changed risk landscape to your board, and the pushback on a widely-shared LinkedIn post telling security leaders to 'just ask your board for the basics.'

They also get into whether AI model providers bear responsibility for accelerating vulnerability discovery, how to tell your board the risk calculus has actually changed instead of just asking for the same resources again, and why cybersecurity has become a far more cutthroat, specialized field than the one they came up in. Spicy/rant warning: Jess does not hold back on this one.

Topics covered: - ChainGuard's CEO breaking the coordinated PHP vulnerability disclosure embargo, and the industry backlash that followed - Why Jake and Jess think this may be the beginning of the end for coordinated disclosure as it's worked until now - The week's vulnerability pile-up: PHP, a new GitLab flaw, Node.js, and a LightLLM supply-chain keylogger compromise - Jake's fire department vs. bucket brigade analogy for explaining a changed risk landscape to your board - The backlash to a viral LinkedIn post telling security leaders to go ask their boards for 'the basics' - Whether AI model providers share responsibility for accelerating vulnerability discovery and exploitation - Why cybersecurity has become a more cutthroat, specialized field than the one Jake and Jess came up in

Sources: Jason Clinton (Deputy CISO, Anthropic): https://x.com/JasonDClinton/status/2113325263157395456 ChainGuard CEO: https://lnkd.in/p/gufhMCU7 Marcus Hutchins: https://lnkd.in/p/gwzFmFeE FireEye: https://lnkd.in/p/gZAW7tAA Join our Discord: https://discord.gg/wYJnTpczV

S0E57 - GitLab's CVSS 10 RCE, PHP's Still Everywhere, and eMudra's "4" Key Disaster Oct 22, 2026

Show notes

Jake Williams and Jess Hebenstreit break down three vulnerabilities that blew up in the same 24 hours: a brand-new CVSS 10 unauthenticated RCE in self-managed GitLab (not the one from October 12 — a different flaw, patch again), PHP's actively-exploited critical vulnerability and why 'we don't have PHP' is almost never actually true, and the eMudra certificate authority mess, where researchers found ECC keys so weak that one of them was literally the number 4. They also get into when a vulnerability response becomes an incident, why 'we're waiting for evidence of exploitation' usually isn't a defensible position, Jake's three-bucket framework for prioritizing patches (business-as-usual, next outage window, or create-an-outage-now), and why a fast, imperfect postmortem beats a perfect one that never happens. Topics covered: - The new GitLab CVSS 10 unauthenticated RCE affecting every version back to 7.0 (2014) — distinct from the October 12 patch - PHP's critical, actively-exploited vulnerability: where PHP actually hides in your environment (appliances, admin interfaces) even if you think you don't run it - eMudra's catastrophically weak TLS/ECC private keys, the browser and package-manager fallout, and why a clean certificate transparency log doesn't mean you're safe - Who actually has the authority to accept the risk of staying unpatched, and how to make that case in dollars - Running vulnerability response like an incident without calling it an incident - Jake's three-bucket patch prioritization framework and why quick postmortems beat delayed ones

Sources:

The Hacker News: https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html?m=1

Cloudflare Blog: https://blog.cloudflare.com/php-vulnerabilities-waf-protection

Ars Technica: https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/

Join our Discord: https://discord.gg/wYJnTpczV