Who’s Hacking Supermarket Fridges in France?

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem – Episode 116: This week, the buddies dig into a mystery hack that cooked French supermarket fridges, cyberattacks against food supply networks, and why this smells like nation-state sabotage in Europe?

Plus, a fresh Ivanti zero-day chain, Anthropic’s self-replicating IoT research and defender-hostile guardrails, Citizen Lab’s AdFection spyware-by-ads exposé, Calif’s iPhone exploit drops at Hexacon, Grok’s surprising enterprise adoption, and spy chips stuffed inside Ledger wallets.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:35 Virus Bulletin 2026 in Seville
6:13 Conference roundup: State of Statecraft, Countermeasure, RE//verse
10:21 French supermarket fridges hacked
22:53 Hacking food supply and the attribution question
33:23 Who patches the fridge?
45:58 Ivanti Connect Secure zero-day chain
53:00 When an AI agent deletes your databases
1:04:34 NCSC edge-device forensics guidance
1:28:06 Anthropic’s self-replicating IoT research
1:52:17 Why guardrails lock out defenders
2:04:57 Grok’s enterprise play and agent sprawl
2:16:26 Citizen Lab exposes AdFection spyware via ads
2:57:24 Calif burns iPhone exploits at Hexacon
3:06:55 Ledger wallet implants and the grain of rice

Links:

• Transcript
  
• CERT-France: Targeting remote controllers of refrigeration systems
  
• Investigators hunt French supermarket fridge hackers
  
• Volexity: Chained Exploitation of Ivanti Connect Secure Zero-Days
  
• NCSC Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances
  
• NCSC: Making forensic observability the norm for network devices
  
• NCSC Ollie Whitehouse podcast
  
• Anthropic: AI models may be capable of self-replicating
  
• Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
  
• Facebook–Cambridge Analytica data scandal
  
• Calif displays iPhone 1-click hacks
  
• Trezor Wallets Also Compromised with Implants
  
• Kim Zetter: Who Is Planting Backdoors in Ledger Crypto Wallets?
  
• The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies
  
• CTI in Agentic Times (Costin training)
  
• TLPBLACK