On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:

• Sacré bleu! Hackers turn up the heat at French supermarket freezers
• ShinyHunters enters “find out” stage
• Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild
• More models “behave badly” (by… doing exactly what we’re telling them to do)
• Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet
• Much, much more…

This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.

Show notes:

Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media https://therecord.media/cyberattack-disrupts-refridgeration-in-france

Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive https://www.cybersecuritydive.com/news/refrigeration-france-cyber/832858

Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack

Hacked FBI data has sensitive information about employees’ intelligence roles | reuters.com https://www.reuters.com/world/hacked-fbi-data-has-sensitive-information-about-employees-intelligence-roles-2026-09-23

Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security https://techcrunch.com/2026/09/30/hackers-stole-millions-of-us-military-personnel-records-during-months-long-data-breach

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation

Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs https://reut.rs/4ebyFGS

FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm

Ransomware recovery CEO charged over secret ransom payments | BleepingComputer https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive https://www.cybersecuritydive.com/news/citrix-upgrades-netscaler-exploitation/831502

Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media https://therecord.media/kiteworks-urges-customers-to-stop-using-systems-incident

Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com https://arstechnica.com/security/2026/09/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media https://therecord.media/fortibleed-warning-fbi-secret-service

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer https://www.bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks

Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release

CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer https://www.bleepingcomputer.com/news/security/cisa-ransomware-gangs-now-exploiting-critical-teamcity-flaw

Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com https://www.nytimes.com/2026/10/09/technology/anthropic-rogue-ai-agents.html?smid=url-share&unlocked_article_code=1.HlE.1PKS.g3Tq-SNSM2ww

Find full show notes at http://risky.biz/RB855