Nov 6, 2026 · 36 min
Third-party breaches turn cyber risk into an operations problem
The Department of Know: LLM jacking, Asia rocked by Amadeus, freezers still getting hacked
The episode connects overlooked physical systems, AI abuse, and supplier dependencies to the practical challenge of prioritizing security risks.
- 1Internet-connected freezers and blood-bank equipment show how cyber failures can become physical and health risks.
- 2LLM jacking can create enormous cloud bills, making API-key protection, monitoring, and usage controls essential.
- 3The Amadeus breach highlights how airline security depends on third-party identity, contracts, and data-retention practices.
Don't miss
The panel connects LLM jacking and stolen API keys to million-dollar cloud bills, turning an abstract AI threat into a concrete operational risk.
The brief
Sarah Lane hosts Jason Thomas and David Nolan through a fast tour of cyber risk, from internet-connected freezers and blood-bank equipment to airline data exposure.
The panel argues that asset inventory remains foundational: missing removable media, embedded systems, and obscure Linux flaws become harder to manage when organizations lack visibility.
On cybersecurity AI, the discussion favors practical fit, integration, and cost over novelty—especially as attackers use stolen API keys to hijack models and trigger runaway cloud bills.
The Amadeus breach brings the stakes into focus: airline customer data can be exposed through a critical technology provider, making third-party controls and data retention central security concerns.
The closing advice is pragmatic: improve AI visibility, prioritize the highest-impact risks, and make steady progress with the resources and teamwork already available.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.