The CIO Authority: AI Tuesday, October 13, 2026

Hackers heated French supermarket fridges to as much as 50C. A consulting firm says AI models it tested in a lab went from a network foothold to a moving robotic arm in minutes. Today we ask what AI does to the old, unpatched equipment nobody’s watching. Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack Publication: The Guardian | Author: Reuters in Paris Synopsis: Prosecutors say a large-scale attack hit connected refrigerators at several major French retailers, with reported food losses and fires. Intermarché’s owner says about 150 stores were affected, with fridges heated for six hours and all food discarded. Coopérative U also reported being hit. France’s cybersecurity agency is investigating, and a source in the prime minister’s office says it identified a vulnerability in Danfoss software. Danfoss says the affected units were running outdated firmware. Ahold Delhaize reported a separate “security issue,” and it’s unclear whether the two are linked. No attacker has been named, and the report doesn’t mention AI. Link: https://www.theguardian.com/world/202... AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody’s ready Publication: The Register | Author: Jessica Lyons Synopsis: Booz Allen Hamilton’s OT lab tested two unnamed frontier models in eight scenarios in a lab modeled on a manufacturing plant. The models met the objective in all eight, including finding and moving a robotic arm within minutes, and going from perimeter compromise to actions inside an industrial control network in just over 16 minutes. Testers required human approval before any exploit or physical action. Booz Allen says obscure protocols and specialized OT knowledge are no longer meaningful barriers. This is a lab test, not a reported real-world attack. Link: https://www.theregister.com/security/... Microsoft blames a configuration change for Exchange Admin Center tumble Publication: The Register | Author: Richard Speed Synopsis: Exchange Admin Center returned “Internal Server Error” for admins on October 12. Microsoft says a recent configuration change caused unexpected HTTP responses, and rolling it back restored service the same day. The Register lists earlier configuration-change incidents in SharePoint Online, Outlook for iOS, and Microsoft 365. A preliminary post-incident report is due within two business days. Link: https://www.theregister.com/saas/2026... Windows 11’s easiest account bypass gets the Microsoft boot Publication: The Register | Author: Richard Speed Synopsis: Microsoft closed a loophole that let consumers skip the Microsoft account requirement during Windows 11 setup by clicking “Learn More.” It was reportedly patched server side. Harder workarounds remain. The article covers personal-use setup, not managed deployments. Link: https://www.theregister.com/os-platfo... AI Tuesday: The weakest link AI doesn’t create new weaknesses in old equipment. It finds the old ones faster. Four checks for this week: Inventory every connected device that isn’t a laptop or server. Check firmware currency and vendor support status. Check internet exposure and network segmentation. Measure how fast you’d detect and isolate a problem. Lab results and vendor statements are attributed as reported. The French attack has no named attacker and no reported AI involvement. For general informational purposes only. Not professional, legal, financial, or IT/cybersecurity consulting advice. Opinions are the host’s own, not any employer’s. News referenced above is credited to its original source; trademarks belong to their respective owners.