Connected cooling systems become a cross-sector cyber target
A cyberattack affected cold-storage monitoring and control systems at three French blood-service facilities and supermarket refrigeration across eight European countries. French authorities said blood supplies were protected because staff received alerts, disabled remote access and moved stock to unaffected refrigerators.
Why it matters to you
Connected facilities need the same segmentation and incident planning as servers. Inventory every remotely managed controller, restrict vendor access, keep temperature telemetry independent of the control path and rehearse a manual transfer procedure before an outage threatens critical stock.
India warns AI agents can compromise payment systems at machine speed
India's cybercrime agency warned banks, lenders, fintechs and payment companies that attackers are using AI agents to exploit unpatched or misconfigured systems and target automated fund-disbursement and transfer APIs. It recommended transaction limits, beneficiary-name checks and monitoring for unusually rapid activity.
Why it matters to you
A SaaS payment workflow can turn one stolen credential into many transfers before a person reacts. Enforce per-transaction and daily limits, require step-up approval for new beneficiaries, rate-limit sensitive APIs and alert on automation-speed sequences rather than only unusual totals.
US bank regulator says AI risk depends on what a system can do
The US Office of the Comptroller of the Currency issued its first AI guidance for bank examiners. It directs them to use existing risk frameworks and assess consequences and deployment context—not model sophistication—because a simple agent allowed to initiate transactions may create more risk than an advanced internal-only model.
Why it matters to you
This is a sound pattern for SaaS governance: classify AI features by permissions, data reach and reversibility. Put human approval, spending limits and action-level logs around consequential tools, while keeping low-impact summarisation under lighter controls.
PJM faces multi-gigawatt shortfalls as data-centre demand outruns supply
PJM, the grid serving 13 US states and Washington, DC, projects capacity shortfalls of 6.5 gigawatts in 2027–28 and 6.8 gigawatts in 2028–29. More than 100 gigawatts of generation has been approved, but only about 25 gigawatts has been built as permitting, equipment and financing slow delivery.
Why it matters to you
A planned data-centre region is not usable capacity until power and interconnection are secured. Ask providers for energisation dates, curtailment terms and backup-power assumptions, then keep workloads portable across regions whose power risks are not correlated.
Google credit support underpins a 401-megawatt Anthropic campus
TeraWulf secured a Google credit backstop to support financing for a Kentucky data-centre project leased to Anthropic. The planned campus carries roughly 401 megawatts of critical IT load, with initial operations expected in the second half of 2027 under a 20-year lease.
Why it matters to you
AI capacity increasingly depends on financial guarantees as well as chips, networks and electricity. When assessing a provider, separate operational capacity from financed plans and map the guarantors, long-term tenants and construction dependencies behind each promised region.