Our latest kill chain is a spicy one! Two 0days and a path from the open internet straight to the corporate network. Armadin Director of Capabilities Nick McClendon joins VP of Product Management Greg Heon to walk you through the entire chain: decompiling a cloud backup server's Java application, an auth bypass via a secret value the app returned to its own front end, and a file upload to the web root that landed an undetected web shell running as SYSTEM on a host connected to Active Directory. It's a perfect example of why AI attacks routinely surface issues annual pen testing would never catch. It's also a reminder that tech debt can create real business risk in the AI era. YouTube: Spotify: Apple Podcast: Amazon Music: iHeart Radio: