Cybersecurity Experts BREAK DOWN the shocking OpenAI Spying Incident, Crypto Backdoors, AND MORE

Welcome to The Low Down, the best show on the internet for hackers

Listen on Spotify!
https://go.lowdownpod.com/spotify

The Low Down is presented by Maze.
LinkedIn: https://www.linkedin.com/company/mazehq/
X: https://twitter.com/Maze_Security

Follow Us!
https://www.instagram.com/lowdown.pod

Heading to OneCon 2026? SentinelOne’s cybersecurity conference runs October 20–22 at the ARIA Resort & Casino in Las Vegas. Use code oc26lowdown for a discount on registration.
https://www.onecon.io/

Today we're talking about:

AI Got Better While We Were Arguing About It
Matt returns from SecTor, Ed explains his monitor-firmware experiment, and we discuss what AI can do for security research—and the human work it still takes.
https://www.youtube.com/watch?v=wIe3eDfGKUo
https://blog.cloudflare.com/cyber-frontier-models/
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/

Your Hardware Wallet Has Extra Hardware
Kim Zetter's reporting reveals seed-stealing Ledger implants, including devices from authorized retailers, and separate Trezor tampering from unauthorized sellers. Who planted them remains unknown.
https://www.zetter-zeroday.com/who-is-planting-backdoors-in-ledger-crypto-wallets/
https://www.zetter-zeroday.com/trezor-wallets-also-compromised-with-implants/

Someone Hacked the Supermarket Fridges
French supermarkets lose food after a cyberattack. We discuss exposed refrigeration controllers, a date-derived login code, and the separate Ahold Delhaize outage.
Reuters report: https://srnnews.com/french-supermarket-chain-intermarche-hit-by-cyberattack-150-stories-targeted/
https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
https://www.pentestpartners.com/security-blog/you-dont-need-a-nation-state-to-warm-up-a-fridge/
https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/

If AI Can Clone Your App, What Are You Selling?
ArtCraft and Reverse Engineer Anything spark a debate about paid software, reliability and support. Fireship's FilmCraft test puts the hype under pressure.
https://www.kdnuggets.com/the-rise-of-ai-software-clones-why-rea-and-artcraft-are-going-viral
https://github.com/morluto/rea
https://www.youtube.com/watch?v=wajoP_5Cpw8

The People You Call After Ransomware
We discuss Edward Dubrovsky's reported arrest and the separate MonsterCloud case. Prosecutors allege MonsterCloud secretly paid attackers while promising special decryption tools. These are allegations, not convictions.
https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/
https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/
https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged

OpenAI Finds a Recorder Behind the TV
An employee is accused of planting a recorder in an executive conference room. We unpack the alleged chatbot trail, a second device and the problem of insider access.
https://www.bbc.com/news/articles/cwg5jq4vlddzo
https://x.com/OpenAINewsroom/status/2110095403198849132

A Jailbreak That Isn't Quite a Jailbreak
hrtowii's iOS research involves Apple's Security Research Device signing system. The author explains the limits and says the bug has been patched.
https://www.hrtowii.dev/blog/making-a-not-jailbreak-in-3-weeks