SafeBreach, Inc.

Welcome back to the Cyber Resilience Brief, a Safe Breach podcast.

I'm your host, Tova Dvorin, and with me as always is our favorite offensive cybersecurity expert, Adrienne Culley.

Today, an AI agent, a government health portal, and apparently a very flexible interpretation of the word no.

But until next time, stay safe.

Stay safe with SafeBreach.

The Cyber Resilience Brief is a SafeBreach podcast.

Executive produced by Adrian Culley and Dilva Dvorin.

Music produced by Saar Dresner.

Hosted, edited, and compiled on Riverside.

For more about SafeBreach and how you can validate your security controls across your entire IT infrastructure, visit us at www.safebreach.com. That's www.safebreach.com.

At this point, NetScaler is having a pretty terrible season.

Welcome to the Cyber Resilience Brief, a SafeBreach podcast.

I'm your host, Tova Dvorin, and with me as always is Adrian Culley, and this is our episode on the Citrix NetScaler vulnerabilities.

[upbeat music] Adrian, Australia's ACSC has just flagged CVE-2026-88771 and 88772.

They're validating that the logging pipeline would actually catch the post-exploitation technique chain from that box if it had been hit.

That's the exercise most teams have never run, because until this week, there wasn't a reason to.

It's the same discipline SafeBreach customers apply when they validate detection against a specific technique chain rather than assuming a control works because it's installed.

But the principle isn't platform-specific.

But until next time, stay safe.

Stay safe with SafeBreach.

The Cyber Resilience

Brief is a SafeBreach podcast.

Executive produced by Adrian Culley and Jova DeVoren.

Music produced by Sar Dresner.

[upbeat music] It's Breach, a SafeBreach podcast.

I'm your host, Tova Dvorin, and with me as always is our resident AI and offensive cybersecurity expert, Adrian Culley.

Adrian, this one has almost everything you could ask for in a cyber story.

The ones who handle this well test the whole chain on a schedule.

A vishing-led credential compromise, multi-factor authentication registration, token abuse across a SaaS tenant, bulk exfiltration.

That's how SafeBreach customers approach it, but the principle holds whatever you run.

The useful question here is not so much do we own something that should stop this, it's much more have we actually watched our controls stop this exact ch- attack chain recently?

Exactly that, and for European listeners, there's a regulatory edge.

That's adversarial exposure validation applied to a new asset class.

And it's the work we do at SafeBreach every day against conventional controls.

The principle matters more than any tool, that somebody has to actually attack the boundary to know it holds and re-attack it every time the model underneath gets smarter.

And Adrian, what should people watch for over the next 12 months?