Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast

European retailers are suffering repeated cyberattacks targeting refrigeration and building management systems, underscoring that operational technology (OT) environments remain dangerously under-secured. The XCPE botnet's compromise of over 1.3 million Android TV devices — attributed to a named manufacturer — highlights how supply chain actors can embed malicious capability into consumer and commercial hardware at scale. Meanwhile, AI coding agents introducing unpatchable software dependencies signals an emerging software supply chain risk that traditional patch management cannot easily address. Together, these incidents reveal that organizations are failing to treat IoT, OT, and third-party software components with the same security rigor as conventional IT assets. Without proper segmentation, inventory visibility, and vendor accountability, attackers will continue to exploit these overlooked attack surfaces.