PEBCAK Podcast: Information Security News by Some All Around Good People

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
 
 
Phished Rings, Fake Encryption & Wedding Crashers A researcher chained PHP out-of-memory crashes into cookie-leaked pointers and full RCE to win the "Steal My Bitcoin" challenge, only to find the recovered key didn't match the prize wallet.
-https://github.com/KillaBoi/StealMyBitcoin-PoC
-https://x.com/jamespavur/status/2114501212313653696?s=46
 
The Knicks' parent company MSG phish-tested staff with a fake "free championship ring" email, then admitted the lure was a mistake and announced $3.7M in real rings.
-https://www.dexerto.com/entertainment/new-york-knicks-phished-staff-with-fake-email-over-nba-championship-rings-3421260/
-https://x.com/sulloreport/status/2113457529267380575?s=46
 
Lenovo's "AES-256 encrypted" ThinkPlus fingerprint USB stick was a plain, unencrypted SD card inside, and AI-assisted reversing cracked four more "secure" drive brands in minutes.
-https://hackingpassion.com/lenovo-thinkplus-encrypted-usb-sd-card/
-https://x.com/intcyberdigest/status/2115898968597012674?s=46
 
A new site lets total strangers pay $25 to $160 for a seat at someone else's wedding, with ID-plus-selfie checks and couple approval required.
-https://www.dexerto.com/entertainment/this-website-lets-you-buy-tickets-to-weddings-of-complete-strangers-3418782/
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Brian - https://www.linkedin.com/in/briandeitch-sase/
Glenn - https://www.linkedin.com/in/glennmedina/
Ben - https://www.linkedin.com/in/benjamincorll/

The best Sales Engineers approach every product like the kid who took apart the family remote just to see how it worked. Chapter 4 is about the hours nobody sees: the lab time and the “what happens if I do this?” testing that let you speak with authority when the stakes are high.
In this chapter:
Why the real education comes from your own testing, not from training modules or sales kickoffs
The demo prep at headquarters that took down a service, and the zero byte UDP packet behind it
Why finding a limitation yourself lets you handle objections with real data instead of dodging them
Learning by doing the Cal Poly way, and why every experiment belongs in your “all about me” folder
A customer whose correct password kept getting rejected, and how lab testing closed the deal
The traps that keep new SEs from experimenting
Next week: Chapter 5, Find Your Fuel.
A free audiobook, one chapter a week, on Season 3 of The PEBCAK Podcast.
📘 Get the paperback, hardcover or Kindle edition: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
⭐ If it helps you, an Amazon review helps us more than you’d think.
🎙️ More from the PEBCAK Podcast: chrislouie.net

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
 
One of eMudhra's CA private keys was literally the number 4, so Mozilla, Google, and Apple are now blocking eight intermediate certs anyone could have used to forge trusted HTTPS.
-https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/
 
Ledger confirms a spy chip with its own LTE modem and eSIM was hidden inside hardware wallets sold through reseller CryptoBilis, with on-chain sleuths tracking $86M+ drained.
-https://x.com/vanshikarsharma/status/2112758601685356549?s=46
 -https://x.com/bitcoinnewscom/status/2112703091426406739?s=46
-https://x.com/katexbt/status/2108606937902493909?s=46&t=NHTQV_QQ9nHAc6r3d92fZg
-https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
 
An LA bar group with 25 locations bet $60K on Kalshi that the Dodgers would miss the World Series, and the hedge nearly doubled when they did.
-https://www.reuters.com/sports/la-restaurant-group-used-60000-dodgers-bet-hedge-playoff-risk-kalshi-says-2026-10-16/
 
Airbnb is banning hosts from making guests wash dishes, strip beds, or start laundry at checkout starting November 20.
-https://www.dexerto.com/entertainment/new-airbnb-rules-ban-hosts-from-making-guests-wash-dishes-do-laundry-other-checkout-chores-3420832/
-https://x.com/dexerto/status/2112955939292676436?s=46
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Brian - https://www.linkedin.com/in/briandeitch-sase/
Glenn - https://www.linkedin.com/in/glennmedina/
Ben - https://www.linkedin.com/in/benjamincorll/
Nick - https://www.linkedin.com/in/nickbaumhardt/
 

Before you can sell software, you have to sell yourself. After every Sales Engineer interview panel, the team asks one question: if we had to drive three hours together to a customer meeting, would the time fly by or would it feel like a root canal? Chapter 3 of Sales Engineering, Unfiltered covers how to pass the windshield test and the rest of the SE interview loop.
In this chapter:
Why likability and coachability beat a perfect resume
The technical screen as a Kobayashi Maru, and what interviewers watch for when you hit a question you don’t know
Two candidates: one froze, regrouped and went on to win President’s Club year after year; the other made up terms about packet flow
How to research a company like your commission depends on it
The typical SE interview flow, from recruiter call to offer
The answer that works when you’re stumped, and the catch that comes with it
Next week: Chapter 4, The Unseen Hours.
 
A free audiobook, one chapter a week, on Season 3 of The PEBCAK Podcast.
📘 Get the paperback, hardcover or Kindle edition: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
⭐ If it helps you, an Amazon review helps us more than you’d think.
🎙️ More from the PEBCAK Podcast: chrislouie.net

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got three amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
 
Freezers Into Ovens: Supermarket Sabotage, a Spy Bug at OpenAI & Tesla's Flying Roadster Hackers hijacked Danfoss refrigeration controllers at hundreds of French supermarkets, running defrost at 50°C (122°F) and spoiling food worth tens of millions of euros. - https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html
- https://www.cbc.ca/news/business/france-fridge-hack-smart-devices-food-system-9.7379613
- https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
 
A cyber incident at Ahold Delhaize knocked Albert Heijn's apps, deliveries, and distribution centers offline, leaving Dutch shelves short on fresh food.
- https://nltimes.nl/2026/10/14/albert-heijn-recovery-underway-cyberattack-damage-likely-tops-eu10-million - https://www.dutchnews.nl/2026/10/albert-heijn-begins-restocking-as-hack-traced-to-foreign-servers/
 
 An OpenAI engineer was arrested for allegedly hiding a toilet-paper-wrapped recording device behind the TV in an executive conference room.
- https://www.justice.gov/usao-ndca/pr/saudi-national-arrested-installing-surreptitious-audio-recording-device-openai-san - https://www.bleepingcomputer.com/news/artificial-intelligence/openai-engineer-arrested-for-allegedly-planting-spy-device-in-office/
 
Tesla finally unveiled the Roadster, complete with SpaceX cold-gas thrusters that let it hop over other Teslas, with production promised for 2028.
- https://techcrunch.com/2026/10/15/tesla-reveals-spacex-powered-roadster-that-flies-and-falls-with-style/
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Brian - https://www.linkedin.com/in/briandeitch-sase/
Glenn - https://www.linkedin.com/in/glennmedina/
Ben - https://www.linkedin.com/in/benjamincorll/

A compliance-heavy customer, a quarter-end deadline, and a stock answer from the knowledge base that wasn’t going to cut it. Chris spun up a proof of concept on his own credit card and walked the customer through it live. Six months later, that account expanded into the largest commercial deal in company history.
 
Chapter 2 of Sales Engineering, Unfiltered covers what a Sales Engineer actually does, and why the demo is only about twenty percent of it:
Why the job title has two words, and what happens when an SE is missing either half
Being “coin operated”: the three questions to ask before you commit time to any request
Why “I don’t know, but I’ll find out” builds more trust than bluffing
 
Every chapter ends with an action plan you can start this week.
New chapters drop every week. Find the full audiobook under Season 3 of this feed. Next week: Chapter 3, The Windshield Test.
📘 Get the book (paperback and Kindle): https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
⭐ If it helps you, an Amazon review helps us more than you’d think.
🎙️ More from the PEBCAK Podcast: chrislouie.net

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Support the hosts by buying a copy of our book: https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448
 
A Fortnite player allegedly dared the FBI to show up at his door over voice chat. Epic reported him, and the FBI obliged three days later.
-https://www.dexerto.com/fortnite/fortnite-player-arrested-by-fbi-after-epic-games-report-his-voice-chat-threats-3416033/
 
A suspected South Korean bank hacker allegedly asked Claude Code to write a résumé bragging about his ARTEX hacking ops, complete with his own phone number and Telegram handle.
-https://www.binance.com/en/square/post/10-08-2026-korean-bank-hacker-asked-claude-where-to-sell-stolen-data-crowdstrike-says-375059181193646
-https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/
 
Microsoft Teams is adding third-party deepfake detection and impersonation warnings to meetings, with general availability slated for November.
-https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/
 
Amazon's "About You" page shows what it has inferred about you from your shopping, and one shopper learned Amazon thinks she has "flat buttocks."
-https://www.dexerto.com/entertainment/amazon-users-discover-bizarre-about-you-page-detailing-their-interests-how-to-check-yours-3416457/
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Glenn - https://www.linkedin.com/in/glennmedina/
Ben K. - https://www.linkedin.com/in/ben-k-b7196831/

Year one, a big enterprise prospect, and a 30-slide deck nobody asked for. Thirty minutes in, the CISO stopped Chris cold, and that night a bar napkin became his first real discovery framework.
Chapter 1 of Sales Engineering, Unfiltered introduces the three voices behind the book and the lessons they wish someone had handed them on day one:
Why the best SEs treat every customer conversation like a two-way interview
Why learning how to learn beats mastering today’s product
How to use this book, whether you’re brand new to the SE seat or years in
Every chapter ends with an action plan you can start this week.
New chapters drop every week. Find the full audiobook under Season 3 of this feed. Next week: Chapter 2, Twenty Percent Demos.
📘 Get the book (paperback and Kindle): https://www.amazon.com/Sales-Engineering-Unfiltered-What-Someone/dp/B0HLWSJ448⭐ If it helps you, an Amazon review helps us more than you’d think.🎙️ More from the PEBCAK Podcast: chrislouie.net

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Simple 6 signup link
https://simple6.co/r/CFUR98
 
California's athletic commission slaps a robot fight league with a cease and desist after a Terminator-inspired humanoid push-kicked an influencer into the cage wall.
https://sports.yahoo.com/articles/california-sends-cease-desist-fight-125530914.html
https://x.com/intcyberdigest/status/2105795226103058621
 
An Airbnb host demanded $1,700 for an overflowing toilet with an AI-generated photo, and Google's own SynthID watermark ratted them out.
https://www.reddit.com/r/isthisAI/comments/1wt6sb0/photo_of_a_toilet_airbnb_sent_in_justification/
 
Bitget lost $388M after attackers used a zero-day in a third-party security product to inject fake withdrawal commands straight into its wallet backend.
https://www.theblock.co/news/regulation/2026-09-28-bitget-attacker-tested-risk-controls-small-transfers-388-million-theft-ceo-says-417045
https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/
 
Managers are trying to figure out where the line is on team happy hours when every joke can end up timestamped in Slack and in front of HR.
https://www.wsj.com/lifestyle/careers/happy-hour-office-after-work-drinks-over-0daf6b60
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Ben C. - https://www.linkedin.com/in/benjamincorll/
Ben K. - https://www.linkedin.com/in/ben-k-b7196831/

Welcome to this week's episode of the PEBCAK Podcast!  We’ve got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW)
Follow us on Instagram @pebcakpodcast
 
Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!
 
Simple 6 signup link
https://simple6.co/r/CFUR98
 
ShinyHunters Hack the FBI, Waymo Snitches & OreoGate Was an Ad
 
Anthropic drops Claude Opus 5.5: Fable-level performance, 40% cheaper to run than Opus 5, and shipped with Fable-style cyber safeguards.
-https://www.macrumors.com/2026/09/22/anthropic-claude-opus-5-5/
-https://www.theverge.com/ai-artificial-intelligence/998868/anthropic-claude-opus-5-5-cybersecurity
 
ShinyHunters claims an Oracle PeopleSoft zero-day got them into the FBI, 2-3TB of employee and applicant data, and a defaced FBI Jobs site, all as payback for a May FBI FLASH report.
-https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/
 
China's internet regulator is grilling DeepSeek and Moonshot AI after Anthropic alleged both labs secretly relayed user requests, including police-related work, to Claude.
-https://www.theinformation.com/articles/china-probes-deepseek-moonshot-potential-data-leaks-anthropic
-https://gizmodo.com/china-probes-deepseek-moonshot-ai-over-anthropics-claims-they-route-requests-to-claude-2000815507
 
A Waymo pulled itself over and called SFPD on two teen riders carrying a loaded AR-style homemade gun, and nobody's saying who was watching the cabin camera.
-https://www.theverge.com/transportation/994405/waymo-pulls-over-calls-cops-on-riders-with-a-ghost-gun
-https://www.nssf.org/articles/lawful-gun-owners-should-be-wary-of-rideshare-options/
 
The viral OreoGate kindergarten snack war was a paid Suno AI partnership, and the creator still won't say if the group chat was real.
-https://www.dexerto.com/food/viral-oreogate-mom-drama-was-a-paid-ai-ad-and-its-creator-wont-say-if-it-was-real-3403588/
 
In this episode:
- Claude Opus 5.5 launches with Fable-level performance at a lower price
- ShinyHunters claims an FBI breach via a PeopleSoft zero-day
- China investigates DeepSeek and Moonshot over data relayed to Claude
- Waymo robotaxi calls the cops on riders with a ghost gun
- OreoGate: viral mom drama exposed as a paid AI ad
 
Dad Joke of the Week (DJOW)
 
Find the hosts on LinkedIn:
Chris - https://www.linkedin.com/in/chlouie/
Brian - https://www.linkedin.com/in/briandeitch-sase/
Glenn - https://www.linkedin.com/in/glennmedina/
Ben - https://www.linkedin.com/in/benjamincorll/