Cybersecurity Today

France Blames Iran for Supermarket Fridge Sabotage, Vanderbilt Restores Systems After Cyberattack, and Microsoft Patches 1,235 Flaws
France has formally blamed Shahid Kaveh, a cyber unit linked to Iran's Revolutionary Guard, for an October sabotage campaign that hijacked Danfoss and Dixell refrigeration controllers in roughly 700 French supermarkets, spoiling food, causing fires, and prompting potential sanctions as similar attacks spread across Europe.
Vanderbilt University is restoring services after a hacking incident claimed by the BYOD ransomware gang, with key systems back online while allegations of stolen research data and over one million Social Security numbers remain unconfirmed.
Japan's Nitori disclosed a breach potentially exposing 37.6 million customer records as Japan rolls out a major cybersecurity package.
Microsoft's November Patch Tuesday fixes 1,235 vulnerabilities, including an exploited Outlook zero-day leaking NTLM hashes.
Cambodian cybercriminals using AI pentesting tools to attack banks worldwide
Belgium warns of Entra ID SMS sign-in abuse. The episode closes with Remembrance Day reflections.
00:00 Headlines And Intro
00:33 France Blames Iran Fridge Sabotage
02:19 Host Take And Wider Spillover
03:19 Vanderbilt Ransomware Disruption
04:54 BYOD Backstory And Prior Victims
05:51 Nitori Breach And Japan Cyber Surge
07:08 Japan Emergency Cyber Package
07:46 Microsoft Patch Tuesday Outlook Zero Day
08:59 AI Pentesting Tool Hits Banks
11:04 Belgium Warns On SMS Sign In
11:56 Why SMS Sign In Exists And Phaseout
13:37 Remembrance Day Closing Tribute
14:37 Sign Off And Next Episodes

French Bank Loses $133M in Crypto Laundering, Chainalysis Breach Deepens, OpenSSH 'SSH Hole' Exploited
Cybersecurity Today host David Shipley reports a $133M theft from French bank Crédit Mutuel Arkéa after attackers entered via an unnamed third-party provider, moved funds from the bank's own accounts, and laundered them into USDC/USDT; investigators say delays allowed millions to be washed before the bank disclosed the incident.
Chainalysis says its breach exposed usernames, password hashes, and live tokens for all customers, prompting it to take major tools and portals offline while requiring IP allowlisting, password resets, and API key rotation.
Apiiro found Claude Code's "don't ask again" behavior can store secrets in plaintext in settings.local.json committed to public GitHub. A newly disclosed OpenSSH flaw on musl-based systems without PAM was exploited within hours.
A British soldier was court-martialed after ignoring phone-security orders and being blackmailed.
00:00 Top Cyber Headlines 
00:38 French Bank Crypto Heist
03:11 Chainalysis Breach Fallout
04:43 Claude Code Secret Leaks
06:40 OpenSSH SSH Hole Exploits
08:55 Soldier Sextortion Court Martial
11:02 Wrap Up and Sign Off

Do We Still Need Cybersecurity Awareness Month in the Age of AI Agents and Deepfakes? (Denis Villeneuve, Kyndryl Canada)
Recorded after a brutal October of rapid-fire zero-days, Cybersecurity Today host David Shipley asks whether Cybersecurity Awareness Month still matters; Denis Villeneuve, who leads cyber resilience and connectivity at Kyndryl Canada, argues it does—and should be continuous.
They discuss how awareness must evolve beyond phishing to address AI's speed, cognitive risk, and "shadow AI," using a 20/60/20 framework for goal-setting, automation, and validation while stressing that responsibility can be delegated but accountability cannot. Denis explains that deepfakes may counterfeit faces or voices but shouldn't defeat resilient business processes, advocating strong approvals, callbacks, and even code words. The conversation covers AI agent governance, overprivileged identities, tech debt, vendor maturity, modernization delays, and the need for guardrails, human-in-command controls, and tested remediation plans—"basics at speed" to make AI-driven change trustworthy.
00:00 Black October Opens
01:32 Meet Denis Villeneuve
04:07 Cyber Awareness Every Month
05:40 AI Speed And Cognition
09:00 Deepfakes And Process
12:17 Shadow AI Basics
14:35 Agents In The Wild
17:42 Identity For Every Agent
21:57 Making Compliance Not Suck
26:10 2027 CISO Priorities
28:33 Genie Coefficient And Models
34:08 Burnout And Hope
36:04 Closing Thanks

French Blood Bank Refrigeration Hacked, AI Tools Hit India's Banks, DreamHost Breach, Extradition, and Malware That "Values" Victims
Cybersecurity Today host David Shipley reports France's National Blood Service (EFS) says a November 2 cyberattack manipulated cold-storage settings at three sites via its refrigerator supplier's remote monitoring software, but alarms and staff response prevented product loss and collections continued as ANSSI and the Health Ministry assist; the incident follows a wider wave of attacks that overheated supermarket refrigeration across France and later multiple European countries.
India's CERT warns an AI-assisted actor "Crafty Falcon" is repeatedly breaching fintechs, lenders, payment firms, and crypto exchanges through exposed test environments and shared credentials, using AI tools including Artex—while a backdoored Artex build was found on dozens of internet-facing consoles.
DreamHost reports an intruder exploited a file manager flaw for about two months, harvesting FTP/SFTP credentials from logged-in users.
A Canadian was extradited over alleged university supercomputer crypto-mining. Cisco Talos details Volta AutoDoxer, an info-stealer that uses AI to rank victims' monetizable assets.
00:00 Top Stories Rundown
00:32 Blood Bank Fridge Hack
02:06 Supermarket Cooling Campaign
03:12 AI Tools Hit Indian Finance
04:40 Artex Tool Backdoor Twist
05:50 DreamHost File Manager Breach
07:19 Canadians Crypto Mining Case
08:53 Volta AutoDoxer AI Dossiers
10:27 Weekend Show Preview
11:02 Closing Thanks And Contact

Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking
Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began with a June supply-chain compromise and escalated via a fake hiring process that delivered poisoned developer tools, leading to access to the internal wallet signing service and abuse of Ethereum EIP-7702
The episode also covers refrigerator system attacks spreading across European retailers and suppliers via vulnerable controllers, with the Pentagon treating similar August U.S. commissary outages as suspected cyberattacks.
Barracuda urges patching two flaws that can be chained for root control if admin interfaces are exposed.
Researchers link Chinese state-linked attackers to chaining PHP-to-shell bugs and a kernel exploit to gain root on Palo Alto firewalls.
Finally, Mandiant details "LLM jacking," where criminals steal API keys or cloud tokens to run up AI bills rapidly.
00:00 Today's Cyber Headlines
00:34 Binance Heist via Fake Hiring
03:52 Fridge Hacks Spread in Europe
05:46 Pentagon Probes US Spoilage
07:03 Barracuda Root-Takeover Flaws
08:44 PHP to Shell Hits PAN-OS
09:51 Disclosure Drama and Exploits
11:15 LLM Jacking Drains AI Budgets
12:58 Wrap Up and Sign Off