Cybersecurity Experts BREAK DOWN the shocking OpenAI Spying Incident, Crypto Backdoors, AND MORE

Welcome to The Low Down, the best show on the internet for hackers Listen on Spotify! https://go.lowdownpod.com/spotify The Low Down is presented by Maze. LinkedIn: https://www.linkedin.com/company/mazehq/ X: https://twitter.com/Maze_Security Follow Us! https://www.instagram.com/lowdown.pod Heading to OneCon 2026? SentinelOne’s cybersecurity conference runs October 20–22 at the ARIA Resort & Casino in Las Vegas. Use code oc26lowdown for a discount on registration. https://www.onecon.io/ Today we're talking about: AI Got Better While We Were Arguing About It Matt returns from SecTor, Ed explains his monitor-firmware experiment, and we discuss what AI can do for security research—and the human work it still takes. https://www.youtube.com/watch?v=wIe3eDfGKUo https://blog.cloudflare.com/cyber-frontier-models/ https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/ Your Hardware Wallet Has Extra Hardware Kim Zetter's reporting reveals seed-stealing Ledger implants, including devices from authorized retailers, and separate Trezor tampering from unauthorized sellers. Who planted them remains unknown. https://www.zetter-zeroday.com/who-is-planting-backdoors-in-ledger-crypto-wallets/ https://www.zetter-zeroday.com/trezor-wallets-also-compromised-with-implants/ Someone Hacked the Supermarket Fridges French supermarkets lose food after a cyberattack. We discuss exposed refrigeration controllers, a date-derived login code, and the separate Ahold Delhaize outage. Reuters report: https://srnnews.com/french-supermarket-chain-intermarche-hit-by-cyberattack-150-stories-targeted/ https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers https://www.pentestpartners.com/security-blog/you-dont-need-a-nation-state-to-warm-up-a-fridge/ https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/ If AI Can Clone Your App, What Are You Selling? ArtCraft and Reverse Engineer Anything spark a debate about paid software, reliability and support. Fireship's FilmCraft test puts the hype under pressure. https://www.kdnuggets.com/the-rise-of-ai-software-clones-why-rea-and-artcraft-are-going-viral https://github.com/morluto/rea https://www.youtube.com/watch?v=wajoP_5Cpw8 The People You Call After Ransomware We discuss Edward Dubrovsky's reported arrest and the separate MonsterCloud case. Prosecutors allege MonsterCloud secretly paid attackers while promising special decryption tools. These are allegations, not convictions. https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/ https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/ https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged OpenAI Finds a Recorder Behind the TV An employee is accused of planting a recorder in an executive conference room. We unpack the alleged chatbot trail, a second device and the problem of insider access. https://www.bbc.com/news/articles/cwg5jq4vlddzo https://x.com/OpenAINewsroom/status/2110095403198849132 A Jailbreak That Isn't Quite a Jailbreak hrtowii's iOS research involves Apple's Security Research Device signing system. The author explains the limits and says the bug has been patched. https://www.hrtowii.dev/blog/making-a-not-jailbreak-in-3-weeks