Who's Hacking Supermarket Fridges in France?

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 116: This week, the buddies dig into a mystery hack that cooked French supermarket fridges, cyberattacks against food supply networks, and why this smells like nation-state sabotage in Europe?

Plus, a fresh Ivanti zero-day chain, Anthropic's self-replicating IoT research and defender-hostile guardrails, Citizen Lab's AdFection spyware-by-ads exposé, Calif's iPhone exploit drops at Hexacon, Grok's surprising enterprise adoption, and spy chips stuffed inside Ledger wallets.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:35 Virus Bulletin 2026 in Seville
6:13 Conference roundup: State of Statecraft, Countermeasure, RE//verse
10:21 French supermarket fridges hacked
22:53 Hacking food supply and the attribution question
33:23 Who patches the fridge?
45:58 Ivanti Connect Secure zero-day chain
53:00 When an AI agent deletes your databases
1:04:34 NCSC edge-device forensics guidance
1:28:06 Anthropic's self-replicating IoT research
1:52:17 Why guardrails lock out defenders
2:04:57 Grok's enterprise play and agent sprawl
2:16:26 Citizen Lab exposes AdFection spyware via ads
2:57:24 Calif burns iPhone exploits at Hexacon
3:06:55 Ledger wallet implants and the grain of rice

• Transcript
• CERT-France: Targeting remote controllers of refrigeration systems
• Investigators hunt French supermarket fridge hackers
• CNN: Cyberattack targets supermarket refrigeration systems in France
• Danfoss, Copeland and Trane address controller security vulnerabilities
• Volexity: Chained Exploitation of Ivanti Connect Secure Zero-Days
• NCSC Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances
• NCSC: Making forensic observability the norm for network devices
• NCSC Ollie Whitehouse podcast
• Anthropic: AI models may be capable of self-replicating
• Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
• Exposing AdFection Executive Summary (Citizen Lab)
• Facebook–Cambridge Analytica data scandal
• Calif displays iPhone 1-click hacks
• Hackers Jailbreak iPhone 18 Pro on Stage, and It Survives a Reboot
• Trezor Wallets Also Compromised with Implants
• Kim Zetter: Who Is Planting Backdoors in Ledger Crypto Wallets?
• Ledger Confirms How ‘Spy Implants’ Steal Crypto From Its Devices
• Joe Grand (Kingpin) slides on reversing Ledger Nano X hardware implant
• The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies
• CTI in Agentic Times (Costin training)
• TLPBLACK