This week, we're exposing the untold truths behind major headlines: McDonald's Data Breach Over 60 million job applicants’ data compromised via Paradox.ai’s AI chatbot "Olivia." But was it just a weak password — or something far worse? We break it down and challenge the media’s misleading narrative. XAI Secret Key Leak Researcher Philippe Katrigeli joins us to reveal how a Doge/X developer accidentally leaked powerful internal API keys — and what that meant for access to Tesla and SpaceX LLMs. We talk entropy, GitHub mistakes, and the dangers of hardcoded secrets. Sources: https://krebsonsecurity.com/2025/05/xai-dev-leaks-api-key-for-private-spacex-tesla-llms/ 600 Laravel Apps Vulnerable to RCE Security researcher Rémy Matas walks us through how 260,000 leaked Laravel app keys were matched with live endpoints, resulting in 600+ apps being exposed to remote code execution. They even built a tool for it: Laravel CryptoKiller. Sources: https://www.synacktiv.com/en/publications/laravel-appkey-leakage-analysis https://blog.gitguardian.com/exploiting-public-app_key-leaks/ 🍶 AI Pentesting & The Future of Hacking In our signature “Sake with a Hacker” segment, we sip with Walt DeBond of Allseek to discuss how agentic AI is poised to revolutionize penetration testing, and whether AI will replace human hackers in the next five years. Chapters: 0:00 - Introduction 0:54 - McDonalds Breach 3:28 - Xai API Key Leak 14:02 - 600 Laravel APP_KEY Leaks 26:10 - Cyber And Sake with Wout Debaenst