Firmware to Root in 30 Minutes: How AI is Changing Threat Intelligence

Claroty Team82 demonstrates that an AI coding agent (Anthropic’s Claude Sonnet 4.6) reproduced previously disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers in roughly 28 minutes for about $6, chaining an authentication bypass and command injection to achieve root access on a lab device; publicly available firmware and CVE information and thousands of internet-exposed devices increase the practical attack surface and shorten the time between disclosure and exploitability, with real-world incidents in France illustrating potential operational and financial impacts.