Daily OT Security News: October 20, 2026

Source-date note: This edition draws on sources published or updated from July 16 through October 19, 2026, plus 2025 vendor advisories. It is a daily briefing, not a claim that every development occurred today. Each item identifies its source dates; dates described as search-indexed were not displayed in the opened article body. 1. Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes Source dates: Industrial Cyber, October 19, 2026; Digitalisation World, October 14, 2026 (search-indexed); Claroty Team82 research, August 9, 2026; Danfoss advisories, March 24 and August 1, 2025; CERT-FR alert, October 12, 2026, updated through October 16. News briefing: Claroty Team82 reported that researchers used Anthropic Claude Sonnet 4.6 through Cursor to reproduce three previously disclosed Danfoss AK-SM 8xxA refrigeration-controller vulnerabilities. On a laboratory device, they chained two flaws to obtain root-level command execution in about 28 minutes at roughly $6 in AI usage. The work started with public CVE identifiers, firmware and analysis tools; researchers redirected the agent after…