An AI agent deleted an entire season of a reality TV show's footage.
Today on Breach Please @malwarejake.bsky.social & @secitup.bsky.social talk how it happened, the confused-deputy problem with AI agents, and why BofA trusts AI to find vulns but not patch them.
@breachplease-fm.bsky.social
@breachplease-fm.bsky.social
Grace Hopper canceled 2 weeks out.
Today on Breach Please: the economy/AI/anti-DEI factors in play, @wired.com's women in tech survey, and a McKinsey partner's cringe LinkedIn take on the "glass cliff."
youtu.be/WTMIFHC7mHs
#WomenInTech
@malwarejake.bsky.social @secitup.bsky.social
An OpenAI eng allegedly bugged the exec conference room TV w/ a USB recorder wrapped in tissue paper.
Today's episode: the FBI complaint, chatbot logs, and what real counter-surveillance sweeps look like.
youtu.be/NKVLKLvFse8
#infosec #insiderthreat
@malwarejake.bsky.social @secitup.bsky.social
50 episodes of Breach Please! Thank you for listening.
@secitup.bsky.social and @malwarejake.bsky.social are launching a Breach Please Discord for the community soon.
Also today: a CVSS 10 SSRF in SonicWall’s SMA 1000, already being exploited.
youtu.be/XGLNChUSjeU
um actually.... it's only 1 now
'ransomware recovery' co was secretly paying hackers for decryptors; telling clients it had its own tech. The CEO just got indicted.
Today on Breach Please: the Monster Cloud scandal, ➕ notes from @wildwesthackinfest.bsky.social
youtu.be/YXjh5FySnXI
@malwarejake.bsky.social @secitup.bsky.social
Attackers exploited an Atlassian flaw two hours after its proof of concept appeared. Meanwhile, a botnet mines crypto on 3,400 servers, hiding commands in adversarial poetry. Is your infrastructure safe? #Cybersecurity #InfoSec
Citrix NetScaler zero-days are under global attack just days before the CISA deadline. Can an AI agent chain two flaws to breach DIVD in under 24 hours? Atlassian systems were also targeted within hours of a PoC. #Cybersecurity #InfoSec
Find me today @wildwesthackinfest.bsky.social and get some @breachplease-fm.bsky.social stickers, tshirt, or coffee I roasted!
no new episode today. @secitup.bsky.social and @malwarejake.bsky.social were busy working on their RSAC submission.
Later today we're talking to @grifter801.bsky.social about his CFP Review App he announced @wildwesthackinfest.bsky.social yesterday
New Episode Alert!
EP 180: Conti
Most hackers quietly fade away. #Conti did not. How did one of the most feared ransomware gangs collapse in the messiest, most public way possible?
Trump Mobile's breach response: "We have no team to handle this." 😂
New Breach Please is up ➕ the FBI just publicly blamed a contractor for its own "Shiny Hunters" hack.
@malwarejake.bsky.social and @secitup.bsky.social catch up in person in Deadwood
My friend and yours @malwarejake.bsky.social doing a great job teaching AI Risk Assessment at @wildwesthackinfest.bsky.social
Peep the class mascot in the corner
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks.
Citrix zero-days exploited globally for weeks before patch? And an AI agent just chained two Zammad flaws to breach DIVD. Are we safe?
Lead sheet at: www.thehotdrop.live/blog/the-hot-drop-for-10-05-2026
Tomorrow and Wednesday, our class mascot at @wildwesthackinfest.bsky.social will be Pr-AI-rie Dog.
kinda looks like a naked molerat
We were... all over the board with this one, but it turned out to be a great episode. That's what I love about going unscripted: you end up in valuable places you never would have on script.
if you haven't. please subscribe to Breach Please on youtube. Jess and Jake are a fantastic duo who tackle infosec and hacker community topics from their deep experience. if you like Defensive Security Podcast and Glass of 0J, youll like them for sure.
