Three Buddy Problem·Oct 18, 2026·3h 26m

Who's Hacking Supermarket Fridges in France?

Download audio Show notes Apple Podcasts Spotify

Show notes

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 116: This week, the buddies dig into a mystery hack that cooked French supermarket fridges, cyberattacks against food supply networks, and why this smells like nation-state sabotage in Europe?

Plus, a fresh Ivanti zero-day chain, Anthropic's self-replicating IoT research and defender-hostile guardrails, Citizen Lab's AdFection spyware-by-ads exposé, Calif's iPhone exploit drops at Hexacon, Grok's surprising enterprise adoption, and spy chips stuffed inside Ledger wallets.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:35 Virus Bulletin 2026 in Seville
6:13 Conference roundup: State of Statecraft, Countermeasure, RE//verse
10:21 French supermarket fridges hacked
22:53 Hacking food supply and the attribution question
33:23 Who patches the fridge?
45:58 Ivanti Connect Secure zero-day chain
53:00 When an AI agent deletes your databases
1:04:34 NCSC edge-device forensics guidance
1:28:06 Anthropic's self-replicating IoT research
1:52:17 Why guardrails lock out defenders
2:04:57 Grok's enterprise play and agent sprawl
2:16:26 Citizen Lab exposes AdFection spyware via ads
2:57:24 Calif burns iPhone exploits at Hexacon
3:06:55 Ledger wallet implants and the grain of rice

Links:

← Previous

Katie Moussouris on AI-as-malware, the monitoring gap, and an NTSB for AI

( Presented by TLPBLACK : A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals. ) Three Buddy Problem - Episode 116 : This week, the buddies dig into a mystery hack that cooked French supermarket fridges, cyberattacks against food supply networks, and why this smells like nation-state sabotage in Europe? Plus, a fresh Ivanti zero-day chain, Anthropic's self-replicating IoT research and defender-hostile guardrails, Citizen Lab's AdFection spyware-by-ads exposé, Calif's iPhone exploit drops at Hexacon, Grok's surprising enterprise adoption, and spy chips stuffed inside Ledger wallets. Cast: Juan Andres Guerrero-Saade , Ryan Naraine and Costin Raiu . Timestamps: 0:00 Introductory banter 1:35 Virus Bulletin 2026 in Seville 6:13 Conference roundup: State of Statecraft, Countermeasure, RE//verse 10:21 French supermarket fridges hacked 22:53 Hacking food supply and the attribution question 33:23 Who patches the fridge? 45:58 Ivanti Connect Secure zero-day chain 53:00 When an AI agent deletes your databases 1:04:34 NCSC edge-device forensics guidance 1:28:06 Anthropic's self-replicating IoT research 1:52:17 Why guardrails lock out defenders 2:04:57 Grok's enterprise play and agent sprawl 2:16:26 Citizen Lab exposes AdFection spyware via ads 2:57:24 Calif burns iPhone exploits at Hexacon 3:06:55 Ledger wallet implants and the grain of rice Links: Transcript CERT-France: Targeting remote controllers of refrigeration systems Investigators hunt French supermarket fridge hackers Volexity: Chained Exploitation of Ivanti Connect Secure Zero-Days NCSC Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances NCSC: Making forensic observability the norm for network devices NCSC Ollie Whitehouse podcast Anthropic: AI models may be capable of self-replicating Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware Facebook–Cambridge Analytica data scandal Calif displays iPhone 1-click hacks Trezor Wallets Also Compromised with Implants Kim Zetter: Who Is Planting Backdoors in Ledger Crypto Wallets? The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies CTI in Agentic Times (Costin training) TLPBLACK