Exposed AI and industrial systems keep expanding online
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Friday, October 16th, 2026.
Publicly reachable AI and industrial systems continue to expand faster than many organizations can secure them. Internet scans identified two hundred sixty seven thousand nine hundred fifteen I P addresses running AI-related products in July 2026. That’s a sixty three percent increase in nine months across 44 products.
The same research found about one hundred thirty four thousand industrial control systems online, roughly four percent more than in 2024. Many of those systems also run ordinary web, file-transfer, or remote-access services, giving attackers potentially simpler paths than specialized industrial protocols.
AI orchestration tools may hold credentials and connections to many downstream services, while industrial systems can influence physical processes. About seventy percent of exposed industrial systems were on consumer or mobile networks, making ownership and notification more difficult.
Leaders should require an exposure review before approving internet-connected AI or operational deployments. Defenders should continuously discover public assets and remove interfaces that don’t need direct access. Every supporting layer independently exposed to the internet expands the attack surface.
Inventory internet-exposed AI and industrial services now, then restrict, update, or remove every interface without a documented business need.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
