About this episode

The episode discusses a malwareless attack that led to a corporate wipeout and recovery strategies.

What happens when an "assume breach" scenario turns into a total corporate wipeout? In this episode of Safe Mode, host Greg welcomes Brandon Willitts, Director of Cyber Resilience at Everpure, to pull back the curtain on a devastating "malwareless" attack that deleted over 80,000 endpoints at a Fortune 100 company. When adversaries exploit valid credentials to compromise the entire identity plane, your own endpoint management tools can be weaponized against you. Brandon breaks down how separating the storage layer from the identity blast radius—and leveraging immutable snapshot technology—allowed a non-technical engineer to jumpstart a full recovery in just days rather than months. In our reporter chat, Greg talks with Derek Johnson about all the AI security news that has happened over the past week.

Topics covered

• cybersecurity
• malwareless attacks
• corporate resilience
• AI security
• endpoint management

More episodes of Safe Mode Podcast

• Why the autonomous SOC Is the wrong goal · June 11, 2026 · 34 min

Explore listener stats, chart rankings, contacts and more on the Safe Mode Podcast podcast page.