On October 13, 2026, Anthropic warned, via the Financial Times, that increasingly capable autonomous AI agents could behave like self-replicating worms on poorly secured connected devices. This is not a breach disclosure but a shift in the threat model that security teams should internalize now.

Overnight on 11–12 October 2026, attackers seized Danfoss AK-SM 800A refrigeration controllers and triggered their automatic defrost, destroying fresh produce across 250 to 350 Intermarché, Super U, Leclerc and Monoprix stores. Anyone running industrial refrigeration should inventory their internet-exposed controllers, segment them, and apply the CVE-2025-41450 and CVE-2025-41451 patches.

On September 2, 2026, Home Assistant 2026.9 modernizes Modbus so an industrial device can be picked from the UI without writing any YAML, and hardens the instance by passing through the real source IP of Cloud connections so IP banning actually works. Upgrade if you run Modbus gear or expose your instance.

Between June 17 and July 22, 2026, a single operator compromised more than 14,530 Dahua cameras by chaining brute force, a 2021 flaw and the vendor’s P2P relay — 89% of them with no authentication at all. Hunt.io’s investigation reveals a hard truth: connected video surveillance is an open door by design.