Every week, Carlos Cardal Alves, CISO and founder of CRS Consulting, takes the week's most significant breach, strips it down to the mechanism that made it possible, maps it to the regulatory exposure, and hands you one action to take before the next one lands.
No jargon for its own sake. No vendor pitches. Just the breach and the lessons thereof.
In this Audio Overview episode, expert host Carlos Alves breaks down how cybercriminals are bypassing traditional corporate defenses by weaponizing third-party vendor access and management software across the global retail and service sectors
4 Oct 2026
Episode 8 - How Hackers Weaponize Your Security Tools
In this podcast we examine how centralized management platforms and third-party security appliances have become the single biggest attack vector for modern intrusions.
17 Sept 2026
Episode 7 - Targetting availability instead of confidentiality
In this episode of "Hackers target DNA and physical infrastructure," we examine a critical paradigm shift in modern threat intelligence: attackers pivoting away from traditional, reversible data theft toward irreversible genetic exposure and direct operational control over physical infrastructure
18 Aug 2026
Episode 6 - Weaponizing the Shipping Lane
In this episode, we trace the alarming lifecycle of the CEVA Logistics breach, showing how a single, invisible link in the supply chain disrupted the entire European e-commerce sector
18 Aug 2026
Episode 5 - Facts vs Friction
How a legacy, unmonitored credential in a connected SaaS tool, Guey, created an open, standing doorway directly into the LastPass environment
18 Aug 2026
Episode 4 - Human Voice + AI = Security Bypass
In this episode of "How Human Voices and AI Bypass Security," we dismantle the illusion of the digital fortress and expose the human-centric and systemic vulnerabilities threatening modern organizations
29 Jul 2026
Episode 3 - Why hackers prefer to target people rather than code
Think encryption is enough? Think again, in our newest podcast episode, 'Why hackers target people instead of code,' we do a deep dive into why having the best in the world is no longer enough.
We break down the psychological tactics behind the Odido breach where no AI was needed, just confidence.
14 Jul 2026
Episode 2 - Third Party Breaches During July'26 First Week
In this episode, we explore why the traditional corporate firewall is dead and the real security battleground is your supply chain. Analyzing five major global incidents from the 1st week of July, we expose the cascading dangers of relying blindly on third-party vendors. We dive into how six independent internet providers were compromised through one shared telecom platform, why a peripheral marketing vendor breach gave hackers the perfect disguise to target Deutsche Bank, and how a missing public record from Microsoft accidentally hid an active software exploit from automated IT scanners.
We also examine the alleged leak of digital master keys from IT infrastructure builder Accenture and the terrifying rise of "JADEPUFFER", an autonomous AI agent that hacked an unpatched server and rewrote its own code to bypass defenses in just 31 seconds.
The takeaway message: Static compliance checklists and annual vendor spreadsheets are failing. Tune in to learn why continuous vendor testing is the only way to survive when cyberattacks are moving at machine speed
6 Jul 2026
The Hidden Master Keys
This podcast is a deep-dive discussion about Episode 1, specifically highlighting how trusted third parties serve as primary attack vectors. The discussion also covers JavaScript injections and the unverified claims against the Council of Europe, emphasizing the need for rigorous vendor inventories
1 Jul 2026
Episode 1 - They Never Touched The Front Door
Episode 1 - The Door You Forgot You Left Open
Coverage window: breaches logged through 01 July 2026
Three confirmed breaches. Three different targets. One pattern: not one attacker knocked on the front door. Every breach came through a trusted third party, a forgotten credential, a hijacked package, an injected script. This is the episode that sets the tone for The Breach Desk: Breach Mechanisms, not Headlines.
#TheBreachDesk #CyberSecurity #DataBreach #CISO #CyberRisk #GRC #DORA #NIS2 #GDPR #OperationalResilience #ThirdPartyRisk #SupplyChainSecurity #RansomWare #ThreatIntelligence #InfoSec #CyberLeadership #BoardAdvisory #SecurityStrategy #DataProtection #npm #OpenSource #PasswordSecurity #OAuth #EURegulation #CRS
Contact The Breach Desk
Guest appearances
Does not typically book guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of The Breach Desk?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
