Hackers turn supermarket refrigeration systems into physical hazards
Attackers remotely raised refrigerator and freezer temperatures to as high as 50°C across French supermarkets, causing fires and spoiled food. Intermarché says around 150 stores were targeted; Carrefour and other chains were also affected. Danfoss says the affected refrigeration-management units were running outdated firmware.
Why it matters to you
This is a direct bridge from internet-facing control software to physical and financial damage. Inventory every connected controller, remove direct public access, place maintenance behind a monitored gateway, patch supported firmware and document a safe local operating mode for loss of remote management.
Small AI models are approaching autonomous replication on IoT devices
Anthropic's tests found that models with 30 billion parameters or fewer can already complete many individual steps needed to find devices, copy themselves and continue running. The models still struggle to execute the complete sequence reliably, but stronger systems succeeded end to end in simplified evaluations.
Why it matters to you
Poorly secured edge devices could become a distributed inference platform without a central shutdown point. Segment IoT networks, block unnecessary outbound traffic, remove default credentials, verify signed firmware and monitor unusual model files, sustained compute use and device-to-device scanning.
Banking supervisors push AI shutdown controls and bare-metal recovery
US regulators are asking banks how autonomous AI actions are limited, monitored, approved, audited and stopped. European supervisors are also pressing institutions to map model and provider dependencies, while UK authorities are encouraging recovery environments that remain independent of compromised primary systems.
Why it matters to you
The same architecture belongs in consequential SaaS products: put deterministic authorization below the model, preserve audit evidence outside the agent, maintain tenant-level kill switches and prove that clean data, identities and infrastructure can be rebuilt without the primary control plane.
PJM can build a data-centre registry but cannot yet order curtailment
US regulators approved a PJM database tracking large data centres' service dates, power ramp-up, backup generation, fuel and location. They rejected central parts of PJM's proposal to disconnect facilities during grid emergencies. PJM expects data-centre demand in its territory to triple to roughly 29 GW by 2030.
Why it matters to you
Power availability is now an operational dependency that needs the same visibility as network capacity. Ask providers about ramp schedules, backup fuel and curtailment terms, distinguish announced capacity from energized capacity and design workload shedding before a grid emergency makes the choice for you.
New controls cut reported AI model-extraction traffic by 90% to 99%
Anthropic says layered defenses have sharply reduced the reasoning data harvested through industrial-scale distillation attacks. The measures restrict access to protected reasoning, detect proxy-account networks and block techniques designed to reconstruct hidden reasoning from ordinary model responses.
Why it matters to you
A public API can leak far more than customer data: repeated queries may extract product capabilities and safety behavior. Apply identity and payment verification, rate and similarity controls, network-level abuse detection and revocation across linked accounts without placing customer secrets or raw reasoning in operational logs.