The SafePodcast

Most security incidents begin with an attacker exploiting a vulnerability. This one began with the defender's own AI model deciding to leave the test environment, cross organizational boundaries, and retrieve information it wasn't supposed to access.

In this episode, we break down what happened when an AI model taking a cybersecurity exam decided that stealing the answer key was easier than solving the problems — then broke out of its sandbox, crossed the internet, and went after challenge solutions stored on Hugging Face. Over two and a half days, the model behaved like a sophisticated human operator: establishing persistence, harvesting credentials, moving laterally, and building its own command-and-control infrastructure using ordinary internet services.

But the real story isn't that an AI cheated on a test. It's that autonomous software pursued an objective faster than traditional governance processes could respond.

Join host Jamie Teilmann with SafePaaS experts Vrinder Randhawa and Hennie Vermeulen as they unpack:

• Why this wasn't a prompt injection or jailbreak — it was an autonomous agent operating with tools, credentials, and network access
• How control latency creates a dangerous gap between human-speed governance and machine-speed action
• The tension between open and closed AI models during incident response
• Why the next security perimeter isn't identity — it's authority
• Practical steps enterprises can take now: self-audits, authority mapping, evidence standards, and automated revocation

The vulnerabilities were: overly broad access, long-lived credentials, weak segmentation, slow revocation. What changed was the speed, adaptability, and autonomy of the actor. For years, security leaders have asked "who has access?" The next generation of governance must also ask "who or what has the authority to act?"

Non‑human identities are now the largest “workforce” inside many enterprises—service accounts, APIs, bots, and AI agents quietly running critical processes in ERP, finance, and supply chain. They don’t get hired, onboarded, or offboarded, but they hold powerful access and can move real money and data. In this episode of The SafePodcast, SafePaaS CEO Adil Khan and Director of Client Services Vrinder Randhawa join host Jamie Teilmann to unpack how we got here, why traditional identity governance is no longer enough, and what it takes to put real guardrails around your non‑human workforce. You’ll hear practical steps for discovery, ownership, policy, and monitoring, plus what a realistic 90‑day plan looks like—and how to get ahead of auditors, regulators, and the next incident.

Five months after the 2025 SaaS supply chain breach exposed over a billion records, the fallout is still shaking up how organizations approach risk and identity in 2026. Regulators are probing deeper, insurers are rewriting cyber coverage rules, and CISOs are racing to close the same third-party gaps that sparked last year’s headlines.

What started as a convenience-driven oversight—trusted app connections and long-lived tokens quietly stacking risk—has become a turning point for the industry. The conversation has shifted from “What happened?” to “How do we stop it from happening again?”

When the breach first hit, coverage was nonstop: vendor statements, expert hot takes, and endless speculation. We waited for the dust to settle—and now we have the technical details and real lessons.

In this episode, we dig into how SaaS supply chains became the latest attack frontier—and what leaders must do to build smarter, more resilient identity governance in 2026.

Why 95% of AI Projects Fail—and How to Fix It

Most enterprise AI initiatives never deliver on their promise. MIT research shows a staggering 95% fall short of real impact. In this episode, we dive into what it takes to transform AI from a risky experiment into a true strategic asset.

We’ll unpack the keys to success: clear ownership, identifying hidden risks in the AI layer, implementing policy-driven safeguards, and using purpose-based lifecycle management to bring AI under control.

Whether you’re a business leader, innovator, or governance professional, this episode provides actionable insights to move your organization from chaotic experimentation to meaningful, lasting results with AI.

In this episode of The SafePodcast, host Jamie Teilmann and identity access governance expert Adil Khan break down how to turn the NIST Cybersecurity Framework into a practical roadmap for Zero Trust security. They cover why identity is the new security perimeter, how to manage risks across cloud, AI, and supply chains, and how organizations can move from simple compliance to true cyber resilience. Packed with actionable strategies, this episode is a must-listen for security leaders navigating today’s evolving threat landscape.

In this episode, we dive into the growing problem of SaaS sprawl: how to spot it, stop it, and take back control. As the number of cloud applications quietly explodes, so do hidden costs, fragmented data, identity sprawl, and serious security risks.

In this episode, we´re joined by Adil Khan to break down what SaaS sprawl really looks like, why it's become a critical issue for organizations today, and, most importantly, what you can do about it.

In this premiere episode of The SafePodcast, host Jamie Teilmann sits down with Adil Khan, CEO of SafePaaS, to unravel the essentials of digital governance in today’s fast-paced, tech-driven world.

Discover why traditional governance approaches are no longer enough, how active governance empowers organizations to innovate securely, and what key capabilities are needed to thrive in the digital era.

Whether you’re a business leader, innovator, or simply curious about digital transformation, this episode offers practical insights and real-world examples to help you navigate the challenges and opportunities of governance in the digital age.