ABOUT THIS EPISODE
Jess and Jake dig into new reporting on the NetScaler vulnerabilities patched last weekend — Mandiant now says active exploitation goes back at least three weeks and is tied to state-sponsored actors. They walk through how to prioritize threat hunting after a patch, why "the scope will never be smaller than it is today," and why Apache error logs (not just access logs) are often the fastest way to spot a web shell.
Then: 404 Media's report on a GitHub project that subjects open-weight LLMs to simulated "pain" in psychological-style experiments — and the online debate over whether that means anything about AI sentience. Jess and Jake explain why it doesn't, and why anthropomorphizing language about AI is worth pushing back on even when it's well-intentioned.
Breach Please is a production of and copyright of JWJH Media LLC. All rights reserved. None of this is legal, financial, or security advice. Do your own homework before posting anything or pointing anything we said at prod.
