Risky Business #855 -- ShinyHunters done sowing, enters reaping phase

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:

• Sacré bleu! Hackers turn up the heat at French supermarket freezers

• ShinyHunters enters “find out” stage

• Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild

• More models “behave badly” (by… doing exactly what we’re telling them to do)

• Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet

• Much, much more…

This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.

This episode is also available on YouTube (youtu.be/S1GjydKzA08)

Show notes

• Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media (therecord.media/cyberattack-disrupts-refridger…)

• Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive (cybersecuritydive.com/news/refrigeration-franc…)

• Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer (bleepingcomputer.com/news/security/retail-gian…)

• Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com (reuters.com/world/hacked-fbi-data-has-sensitiv…)

• Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security (techcrunch.com/2026/09/30/hackers-stole-millio…)

• ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer (bleepingcomputer.com/news/security/shinyhunter…)

• Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com (krebsonsecurity.com/2026/09/dutch-police-arres…)

• Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs (reut.rs/4ebyFGS)

• FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com (krebsonsecurity.com/2026/10/fbi-arrests-founde…)

• Ransomware recovery CEO charged over secret ransom payments | BleepingComputer (bleepingcomputer.com/news/security/ransomware-…)

• Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive (cybersecuritydive.com/news/citrix-upgrades-net…)

• Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer (bleepingcomputer.com/news/security/citrix-admi…)

• Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media (therecord.media/kiteworks-urges-customers-to-s…)

• Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com (arstechnica.com/security/2026/09/attackers-hav…)

• FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media (therecord.media/fortibleed-warning-fbi-secret-…)

• Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer (bleepingcomputer.com/news/security/check-point…)

• Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com (securityweek.com/microsoft-sharepoint-flaw-cve…)

• Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer (bleepingcomputer.com/news/security/hackers-exp…)

• CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer (bleepingcomputer.com/news/security/cisa-ransom…)

• Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com (nytimes.com/2026/10/09/technology/anthropic-ro…)

• An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch (techcrunch.com/2026/10/09/an-anthropic-ai-mode…)

• OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com (bbc.com/news/articles/cw62jje658dlo)

• OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com (wired.com/story/openai-pauses-training-most-po…)

• Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com (nytimes.com/2026/10/09/technology/anthropic-ro…)

• OpenAI agent breached Australian government health website, Albanese says | therecord.media (therecord.media/openai-australia-health-breach)

• Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media (therecord.media/openai-australia-breach-cyber)

• OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com (arstechnica.com/security/2026/10/openai-agents…)

• OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com (nytimes.com/2026/09/29/technology/openai-warni…)

• AI models may be capable of self-replicating without access to a datacenter | (anthropic.com/research/self-replicating-ai)

• South Korean officials believe AI agents were used to hack several banks | therecord.media (therecord.media/south-korean-bank-hacks-ai-age…)

• JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer (bleepingcomputer.com/news/security/jadepuffer-…)

• GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com (anthropic.com/research/glm-5-3-and-the-spread-…)

• New bill would create federal investigative body for AI-driven hacks | cyberscoop.com (cyberscoop.com/new-bill-would-create-federal-i…)

• Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica (arstechnica.com/tech-policy/2026/09/court-rule…)

• Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com (arstechnica.com/security/2026/10/apple-changes…)

• Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer (bleepingcomputer.com/news/google/google-gemini…)

• Bitget hacked via zero-day in third-party security products | BleepingComputer (bleepingcomputer.com/news/security/bitget-hack…)

• Ledger confirms spy chip implant behind wallet …