Topic
Security of internet-connected embedded devices—alarm panels, meters, routers, cameras—often shipped with cellular modems and used for years.
Hackers pushed fridge and freezer temperatures to as high as 50 degrees Celsius in hundreds of French supermarkets overnight, The Cyber Express reported. The attack used no new exploit and hit ageing devices still online years after their manufacturer ended support.
Reality
Energize Lab left the cloud service behind its Eiliko robot toy unprotected, exposing 13 million conversations, The Verge reported. For buyers and builders of companion toys, the first test is whether one account can read another's records.
Reality
Anthropic's Frontier Red Team ran a Gemma model across 15 chained TV boxes, each too weak to run it alone, in research on AI worms. Scientific American reports the work suggests a worm may not need data-center GPUs but stops short of showing the full threat.
Reality
Anthropic researchers had GLM-5.2 complete a full replication chain on all eight $55 TV-box test nodes in four of five runs. They say no current model is both small and capable enough to spread in the wild, and that gap could close by the end of 2026 at the current pace.
Perspective Coverage
11 publishersReality
Three chained webOS flaws give a same-network attacker root on certain LG smart TVs without a PIN, according to an SSD Secure Disclosure advisory. LG has issued a fix, but only two models were tested.
Reality
Anthropic's Frontier Red Team says small open-weight models may be months from copying themselves across cheap IoT devices without a data center. The one full-cycle success, by GLM-5.2, came on eight emulated devices with the hacking step kept trivial.
Perspective Coverage
6 publishersReality
Anthropic ran Gemma4-26B-A4B across 15 off-brand Android TV boxes at about $55 each to test whether an AI worm could host itself on IoT gear. Its researchers theorize a working worm could follow by year end. Unmanaged devices need an owner now.
Perspective Coverage
5 publishersReality
Nozomi Networks Labs reports persistent abuse of weak or default credentials and exposed industrial and IoT assets between June and August 2026. Faster exploit cycles and botnets that generate opportunistic traffic add volume on top, the vendor says.
Reality
Anthropic said Monday its experiments suggest small AI models may be months from self-replicating on IoT devices such as smart ovens. End-to-end replication worked only in simplified tests with some security steps removed, so the date rests on a trend line.
Perspective Coverage
11 publishersReality
Anthropic's new report puts AI worms on poorly secured IoT devices months away if models keep improving, Futurism reports. The one test described ran a lightweight model across 15 smart TV boxes with 4 GB of RAM each.
Reality
Rome's Exein says its valuation is up thirtyfold in two years and first-half recurring revenue up fourfold, and its first foundation models are due in the first quarter of 2027, two quarters after the round closed.
Perspective Coverage
4 publishersReality
Justice says Chinese state operators laundered intrusions through infected routers and cameras in more than 130 countries since 2018. Source geography has been unreliable for years.
Perspective Coverage
7 publishersReality
CISA lists 14 CVEs in two Botslab G980H dashcam firmware lines, including session flaws that can give an attacker on the camera's network privileged access. Botslab has not answered CISA, so operators have no fix date to plan around.
Reality
Asus is the biggest name so far through the Conditional Approval process that the Defense and Homeland Security departments run. Applicants hand over a component-level supply chain report and a time-bound plan to build the router in the US.
Reality
UMass Amherst measured 61,500 dead Android IoT companion apps and found 38.4% of their data flows point at servers that are unreachable, blocklisted or under new ownership, against under 1% in maintained apps.
Reality
Michigan State researchers found six weaknesses in the lost and stolen device machinery at three major U.S. carriers, where an anonymous prepaid account and a target's IMEI are enough to strand a phone or an alarm panel.
Reality