PEBCAK Podcast: Information Security News by Some All Around Good People

Chris Louie

Weekly Information Security News. Stay up to date on what’s going on in the InfoSec world in about 40 minutes. Join us for InfoSec news and stay for some friendly banter, guest interviews, gadget reviews, tech interview tips, and hilarious dad jokes! New episodes every Monday.

  1. 2d ago

    Episode 278 - PHP Phail, Phished Rings, Fake Encryption, Wedding Crashers

    Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast   Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!   Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448     Phished Rings, Fake Encryption & Wedding Crashers A researcher chained PHP out-of-memory crashes into cookie-leaked pointers and full RCE to win the "Steal My Bitcoin" challenge, only to find the recovered key didn't match the prize wallet. -https://github.com/KillaBoi/StealMyBitcoin-PoC -https://x.com/jamespavur/status/2114501212313653696?s=46   The Knicks' parent company MSG phish-tested staff with a fake "free championship ring" email, then admitted the lure was a mistake and announced $3.7M in real rings. -https://www.dexerto.com/entertainment/new-york-knicks-phished-staff-with-fake-email-over-nba-championship-rings-3421260/ -https://x.com/sulloreport/status/2113457529267380575?s=46   Lenovo's "AES-256 encrypted" ThinkPlus fingerprint USB stick was a plain, unencrypted SD card inside, and AI-assisted reversing cracked four more "secure" drive brands in minutes. -https://hackingpassion.com/lenovo-thinkplus-encrypted-usb-sd-card/ -https://x.com/intcyberdigest/status/2115898968597012674?s=46   A new site lets total strangers pay $25 to $160 for a seat at someone else's wedding, with ID-plus-selfie checks and couple approval required. -https://www.dexerto.com/entertainment/this-website-lets-you-buy-tickets-to-weddings-of-complete-strangers-3418782/   Dad Joke of the Week (DJOW)   Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Brian - https://www.linkedin.com/in/briandeitch-sase/ Glenn - https://www.linkedin.com/in/glennmedina/ Ben - https://www.linkedin.com/in/benjamincorll/

  2. Oct 26

    Episode 277 - Key = 4, Spy Chips, Dodgers Lose, Dirty Dishes

    Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast   Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!   Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448   One of eMudhra's CA private keys was literally the number 4, so Mozilla, Google, and Apple are now blocking eight intermediate certs anyone could have used to forge trusted HTTPS. -https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/   Ledger confirms a spy chip with its own LTE modem and eSIM was hidden inside hardware wallets sold through reseller CryptoBilis, with on-chain sleuths tracking $86M+ drained. -https://x.com/vanshikarsharma/status/2112758601685356549?s=46  -https://x.com/bitcoinnewscom/status/2112703091426406739?s=46 -https://x.com/katexbt/status/2108606937902493909?s=46&t=NHTQV_QQ9nHAc6r3d92fZg -https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/   An LA bar group with 25 locations bet $60K on Kalshi that the Dodgers would miss the World Series, and the hedge nearly doubled when they did. -https://www.reuters.com/sports/la-restaurant-group-used-60000-dodgers-bet-hedge-playoff-risk-kalshi-says-2026-10-16/   Airbnb is banning hosts from making guests wash dishes, strip beds, or start laundry at checkout starting November 20. -https://www.dexerto.com/entertainment/new-airbnb-rules-ban-hosts-from-making-guests-wash-dishes-do-laundry-other-checkout-chores-3420832/ -https://x.com/dexerto/status/2112955939292676436?s=46   Dad Joke of the Week (DJOW)   Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Brian - https://www.linkedin.com/in/briandeitch-sase/ Glenn - https://www.linkedin.com/in/glennmedina/ Ben - https://www.linkedin.com/in/benjamincorll/ Nick - https://www.linkedin.com/in/nickbaumhardt/

  3. Oct 19

    Episode 276 - Defrost and Destroy, Bugged Boardrooms, Flying Cars Before GTA 6

    Welcome to this week's episode of the PEBCAK Podcast!  We’ve got three amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast   Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!   Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448   Freezers Into Ovens: Supermarket Sabotage, a Spy Bug at OpenAI & Tesla's Flying Roadster Hackers hijacked Danfoss refrigeration controllers at hundreds of French supermarkets, running defrost at 50°C (122°F) and spoiling food worth tens of millions of euros. - https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html - https://www.cbc.ca/news/business/france-fridge-hack-smart-devices-food-system-9.7379613 - https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers   A cyber incident at Ahold Delhaize knocked Albert Heijn's apps, deliveries, and distribution centers offline, leaving Dutch shelves short on fresh food. - https://nltimes.nl/2026/10/14/albert-heijn-recovery-underway-cyberattack-damage-likely-tops-eu10-million - https://www.dutchnews.nl/2026/10/albert-heijn-begins-restocking-as-hack-traced-to-foreign-servers/    An OpenAI engineer was arrested for allegedly hiding a toilet-paper-wrapped recording device behind the TV in an executive conference room. - https://www.justice.gov/usao-ndca/pr/saudi-national-arrested-installing-surreptitious-audio-recording-device-openai-san - https://www.bleepingcomputer.com/news/artificial-intelligence/openai-engineer-arrested-for-allegedly-planting-spy-device-in-office/   Tesla finally unveiled the Roadster, complete with SpaceX cold-gas thrusters that let it hop over other Teslas, with production promised for 2028. - https://techcrunch.com/2026/10/15/tesla-reveals-spacex-powered-roadster-that-flies-and-falls-with-style/   Dad Joke of the Week (DJOW)   Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Brian - https://www.linkedin.com/in/briandeitch-sase/ Glenn - https://www.linkedin.com/in/glennmedina/ Ben - https://www.linkedin.com/in/benjamincorll/

  4. Oct 12

    Episode 275 - Dear Claude, Please Write My Confession, Resume Fails, Voice Chat Jails, Deep Fakes and Deep Profiles

    Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast   Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!   Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448   A Fortnite player allegedly dared the FBI to show up at his door over voice chat. Epic reported him, and the FBI obliged three days later. -https://www.dexerto.com/fortnite/fortnite-player-arrested-by-fbi-after-epic-games-report-his-voice-chat-threats-3416033/   A suspected South Korean bank hacker allegedly asked Claude Code to write a résumé bragging about his ARTEX hacking ops, complete with his own phone number and Telegram handle. -https://www.binance.com/en/square/post/10-08-2026-korean-bank-hacker-asked-claude-where-to-sell-stolen-data-crowdstrike-says-375059181193646 -https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/   Microsoft Teams is adding third-party deepfake detection and impersonation warnings to meetings, with general availability slated for November. -https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/   Amazon's "About You" page shows what it has inferred about you from your shopping, and one shopper learned Amazon thinks she has "flat buttocks." -https://www.dexerto.com/entertainment/amazon-users-discover-bizarre-about-you-page-detailing-their-interests-how-to-check-yours-3416457/   Dad Joke of the Week (DJOW)   Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Glenn - https://www.linkedin.com/in/glennmedina/ Ben K. - https://www.linkedin.com/in/ben-k-b7196831/

4.9
out of 5
19 Ratings

About

Weekly Information Security News. Stay up to date on what’s going on in the InfoSec world in about 40 minutes. Join us for InfoSec news and stay for some friendly banter, guest interviews, gadget reviews, tech interview tips, and hilarious dad jokes! New episodes every Monday.

You Might Also Like