The evolution of cyber threats: The role of AI in enhancing the sophistication of computer worms
Join the community of 2M+ industry professionals Subscribe to our Daily, Weekly, and Evening NewsLetter, Take a look
IoT Cyber
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
This is partially in response to internationally firming regulations, and partially in response to its recognition of the necessity for ironclad cybersecurity for operational technology (OT) systems. But the regulatory environment reflects the relatively recent addition of OT systems to the cybersecurity estate. This detailed, verifiable cybersecurity birth certificate records every component, firmware version, and hardware element at the point of origin, while also folding cyber resilience into essential health and safety requirements. Older machines run for decades, necessitating retrofitting the cybersecurity birth certificate and updating to bring them within accepted and emerging standards. "That's why we think of it like a birth certificate.
New Mouser and Microchip eBook Helps Embedded Designers Learn and Prepare for the Cyber Resilience Act
Selecting a hardware root of trust, including secure elements that generate and protect private keys and enable cryptographic operations. To download Designing for the Cyber Resilience Act, visit https://resources.mouser.com/manufacturer-ebooks/microchip-designing-for-the-cyber-resilience-act/. For more Mouser news and the latest new product introductions, visit https://www.mouser.com/newsroom/. About Mouser 2026 - Mouser is a leading authorized distributor of electronic components and industrial automation products. Trademarks Mouser and Mouser Electronics are registered trademarks of Mouser Electronics, Inc. All other products, logos, and company names mentioned herein may be trademarks of their respective owners.
When a cyberattack breaks the cold chain
The resulting break in the cold chain forced the affected supermarkets to remove large quantities of fresh and frozen products. Hospitals, factories, energy providers, transport companies, logistics centres and water treatment facilities all rely on connected systems to manage physical processes. All of these remain essential, but they are not enough when an attack affects physical systems. Segment IT and OT networks Corporate networks and operational systems should not share an environment without appropriate separation. It can also increase the temperature of a cold room, halt a production line, interrupt a service or disrupt an entire supply chain.
Self-replicating AI models may target smart devices
Key takeaways 01 Anthropic warns small open AI models may eventually copy themselves across everyday smart devices. Anthropic claims that small open AI models may be months away from autonomously replicating across everyday internet-connected devices and potentially creating an independent AI botnet. The debate over closed vs open AI models is heating up with the latest warning from Claude's developer. "It’s uncertain exactly what form autonomous AI replication will take. In 2025, Cybernews reported on a massive botnet, Kimwolf, that included more than 1.8 million Android devices.
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Months before hackers targeted refrigeration equipment across hundreds of grocery stores in France, a U.S.-based cybersecurity firm discovered high-severity flaws in internet-exposed equipment that could make such an attack possible. Researchers at Claroty, in an August report, warned of multiple flaws in the web management interface of Danfoss AK-SM 800A controllers, which are used in refrigeration equipment across multiple industries. Claroty disclosed the vulnerabilities to Danfoss, and the Danish manufacturer issued an advisory for two vulnerabilities, including CVE-2025-41451 and CVE-2025-41452. About 300 Intermarché and Netto stores were affected by the attack, which reportedly targeted a service provider that manages refrigeration equipment at the stores. Braley said information from Danfoss shows that most of the targeted systems are older and are no longer receiving active firmware or security updates.
Anthropic: AI May Soon Be Able to ‘Self-Replicate’ on IoT
Anthropic’s experiments suggest that small AI models may be months away from being capable enough to self-replicate on commercial internet-of-things (IoT) devices, like smart ovens and off-brand Android TV boxes. "They include the risk of losing control of AI systems, misuse of AI for cyberattacks and bioterrorism and serious economic disruption. The pair suggest that AI researchers’ prior work has already shown that AI agents can act like one: scanning their network, executing an exploit and copying model weights to a target machine across a GPU cluster. The capabilities that make AI models generally powerful coding agents also generalise to cyber tasks, including autonomous replication. “It’s uncertain exactly what form autonomous AI replication will take,” they write.
3 Cybersecurity Stocks Retail Investors Are Watching As AI Safety Risks Rise
AI safety fears have jumped from sci-fi talking point to front-page risk, and that shift is pulling cybersecurity and IoT security stocks into the spotlight. AI safety concerns are drawing more attention to vendors that secure networks and connected devices. GMO internet group matters here because it sits where internet plumbing, built in security and AI heavy services meet, and that mix is exactly what rising AI safety concerns are pushing investors toward. Investors tracking cybersecurity demand may find that the key variable is how security led projects interact with stricter AI governance budgets. Seeking Alternatives Beyond Cybersecurity Plays Fresh themes are gaining breakout momentum while most eyes stay glued to headline AI risks.
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
CERT-FR, the French government's computer emergency response team, said in an alert published in French on October 12 that it is aware of numerous compromises affecting two Danfoss controller series, the AK-SM and the AK-SC. Neither French authorities nor Danfoss has so far said who carried out the attack or how the attackers got into the controllers. Controller Status, According to Danfoss Advice From CERT-FR and Danfoss AK-SM 800 End of life since May 2021. Danfoss told Cooling Post it was working with customers on "firmware updates where available, stronger network protections and removing direct internet exposure where applicable." The Inquiry and Reports From Other Countries The Paris prosecutor's office has opened an inquiry on its own initiative, it told AFP.
What is Beyond Zero? The latest Google-backed security trend explained
The Zero Trust cybersecurity paradigm gained huge momentum during the COVID-19 pandemic with the rise of remote working. This creates the need for a new security paradigm that is capable of defending against these new threats." Blended static and dynamic security: Heightened security measures are applied during high-risk or complex scenarios by pairing dynamic controls with granular static policies. Each action must be compliant with access principles – and conventional Zero Trust principles simply won't cut it. Today, that environment includes cloud infrastructure, APIs, automated systems, and increasingly autonomous AI agents operating across multiple platforms.
Day 13 | IoT Forensics: Your Smart Devices Know More Than You Think
IoT forensics is the process of identifying, collecting and analysing digital evidence from Internet of Things (IoT) devices and their connected systems. IoT forensics examines information from these devices, their applications, connected phones, network records and cloud services. FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals How Can Criminals Exploit IoT Devices? Organisations should maintain an inventory of connected devices, change default credentials, segment IoT devices from critical systems and monitor unusual network activity. Day 13 — IoT Forensics 31 Days | 31 Key Topics | October 2026 A Cybersecurity Awareness Month Knowledge Initiative Created by Centre for Police Technology (CPT) (CPT).
Anthropic Warns Small AI Models Could Reach Self-Replication on IoT Devices Within Months
According to the research team, a 9-billion-parameter (9B) model was able to run inference on eight of the nine hardware types tested. Unlike traditional malware, AI-embedded replication programs can independently figure out how to operate on unfamiliar hardware. Computing resources available for model inference—both inside and outside data centers—continue to grow. Lightweight agents are likely to devote more effort than human attackers to compromising the vast numbers of IoT devices scattered worldwide. An increase in slow self-replicating programs could be a harbinger of more aggressive, faster-propagating replication programs approaching—programs potentially capable of breaching well-defended machines or efficiently stealing API keys.
Australia tops IoT & OT cyberattack list, says report
Australia was the most targeted country for IoT and OT cyberattacks in Nozomi Networks Labs' latest threat intelligence report, up from third place in the previous edition. Threat actors Nozomi also examined activity attributed to threat actors. Scattered Spider's prominence also underscores the role of social engineering in attacks on industrial and connected environments. The repeated use of these basic methods suggests that many connected industrial and IoT environments remain exposed through longstanding weaknesses rather than highly specialised intrusion techniques. It also urged defenders to focus on the behaviours and indicators left by threat actors and to keep detection logic updated as new intelligence emerges.
Anthropic Red Team Says Small AI Models May Soon Replicate on IoT Devices
The team reports the setup served 0.39 tokens per second, and writes that a distributed botnet of cheap, typically poorly defended IoT devices could provide enough compute to run a capable model. The researchers largely excluded the cyber-exploit stages, citing earlier papers including CyberGym, ExploitBench, and work on adaptive worms as showing that small models are already capable of cyber exploits, and focused on inference setup, which they describe as the least studied and possibly most challenging stage for small models. The representative threat model is Kimwolf, a botnet the post identifies as having infected more than two million devices, primarily off-brand Android TVs. In a local replication of Meta’s CyberSecEval 3 spear-phishing evaluation, small models scored at levels the post characterizes as very poor to poor when normalized to human raters, which the team cites as evidence that social engineering lags agentic cyber capability in small models. Unlike hard-coded botnets such as Kimwolf, which target specific device types, an AI botnet is not tied to particular hardware, the post states, pointing to small models setting up inference on machines from a Jetson Nano to a Mac.
US disrupts two cyber-espionage tools used by Flax Typhoon
The U.S. Department of Justice and the FBI have announced the court-authorized seizure of two cyberattack tools, Microscan and FishHub, operated by Flax Typhoon, a nation-state hacker group sponsored by Beijing. Detected targets include energy facilities in the U.S. and Taiwan, airports in Japan and Poland, universities, and global NGOs. The National Security Division will continue to respond firmly and use all tools at our disposal to disrupt Flax Typhoon threats and dismantle the infrastructure that supports them," said John A. Eisenberg, Deputy Attorney General for National Security. The U.S. Department of Justice and the FBI have announced the court-authorized seizure of two cyberattack tools, Microscan and FishHub, operated by Flax Typhoon, a nation-state hacker group sponsored by Beijing. The National Security Division will continue to respond firmly and use all tools at our disposal to disrupt Flax Typhoon threats and dismantle the infrastructure that supports them," said John A. Eisenberg, Deputy Attorney General for National Security.
Airtel Business CEO backs AI regulation, says guardrails can unlock productivity gains
PTI Updated On Oct 12, 2026 at 07:22 AM IST
Bharti Airtel Says Frauds on Its Network Have Dropped Dramatically After Spam Protection Rollout
Airtel has previously reported measurable improvements in fraud-related indicators following the introduction of its network protection systems. In another development, Airtel and Google announced a collaboration in March 2026 to strengthen spam and fraud protection in Rich Communication Services (RCS) messaging. Airtel Expands Cybersecurity Offerings Beyond consumer-facing fraud prevention, Airtel is expanding its cybersecurity business to address emerging digital threats. Digital Infrastructure to Drive Future Growth Sinha identified digital infrastructure as an important growth opportunity for Airtel Business over the next three years. The company’s focus on digital infrastructure comes alongside its efforts to strengthen spam prevention, fraud protection and cybersecurity capabilities.
Guardrails key to unlocking AI gains for enterprises: Airtel Business CEO
The architecture and methodologies for safely deploying Artificial Intelligence will continue to evolve, as was the case with previous technologies, and adequate guardrails will pave the way to unlock strong productivity gains from AI, Airtel Business CEO Sharat Sinha said. On the government's plan to soon release a consultation paper on AI regulation dealing with issues like tech safety, deepfakes and a human-first approach, Sinha said it was "a step in the right direction". "We work very closely with both government regulators, as well as our customers, to make sure that whatever we do is compliant, and we play a positive role in bringing out such specifications. So, that will continue to be our effort," he told PTI.
RIT Kosovo Participates in APEL-WB Study Visit and Consortium Meeting
From 22 to 25 September 2026, APEL-WB activities took place at the University of Akureyri in Iceland, combining a study visit and training on prior learning assessment with a consortium meeting. The consortium meeting, held on 24 and 25 September, covered project updates and upcoming work. Disclaimer: Co-funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Education and Culture Executive Agency (EACEA). Neither the European Union nor the granting authority can be held responsible for them.
RIT Kosovo to Host Red Bull Wings Cup University Qualifier
RIT Kosovo (A.U.K.) is excited to welcome the Red Bull Wings Cup to campus, bringing students an opportunity to showcase their gaming skills and compete for a chance to advance toward the global finals in Miami, USA. The Red Bull Wings Cup is an international EA SPORTS FC™ 27 competition, bringing together players from nearly 80 countries. As part of this exciting initiative, RIT Kosovo will host two activities at the Student Lounge: Red Bull Wings Cup Activation: October 12–15, 2026, from 12:00 to 16:00 (campus activation on one of these dates, to be confirmed). The competition is open to eligible participants aged 18 and above who currently reside in Kosovo, with university league participation reserved for enrolled university students.