Why read this
This month, the market started selling autonomous decisions at the edge — and federal investigators published exactly how attackers are already standing on the bridge those decisions travel across. If your organization is buying intelligence for its devices, this edition is about the question nobody put in the purchase order: who secured the path the intelligence rides on?
Every edition of The Imperative & The Important uses two lenses. The Imperative is what happened this month that demands a reaction. The Important is what will still be true after the headlines fade.
First, the acronym. The Artificial Intelligence of Things (AIoT) is the convergence of artificial intelligence with connected devices — sensors, controllers, and gateways that no longer just report conditions but evaluate them and act. A programmable logic controller (PLC) is the industrial computer that runs valves, pumps, and production lines. Keep both in mind; this story is about what happens when the first is installed on top of the second.
The Imperative
1. The market is now selling “Decisions as a Service.” Research and Markets’ new AIoT outlook for 2026–2030 describes agentic AI moving connected systems from static thresholds and predefined workflows to goal-directed autonomy — systems that evaluate real-time conditions, anticipate consequences, and act with limited human intervention. The report expects utilities and energy providers to lead adoption, and frames AI-powered operational decisions as a product you can buy through an API (Research and Markets via GlobeNewswire). Business impact: autonomy is no longer a pilot project — it is a line item, and the sectors buying it first run physical infrastructure.
2. The front door to the edge is standing open. Forescout’s August scan found 4,407 internet-exposed Rockwell Automation and Allen-Bradley PLCs worldwide — 2,844 in the United States — and more than 70 percent of the US-exposed controllers were reachable through cellular modems deployed without a private Access Point Name (APN) or virtual private network (VPN). Nineteen of the 22 exposed controllers in cities hit by the July water-utility attacks were still running firmware vulnerable to a flaw patched nine years ago (The Hacker News). Business impact: no exploit was required — attackers changed addresses and set passwords on controllers that were simply reachable. A cellular modem without isolation is not connectivity; it is an unlocked entrance.
3. The attacks are aimed at the same layer the intelligence lives on. New reporting on the FBI and Environmental Protection Agency (EPA) advisory details attackers modifying controller logic so operator screens displayed normal readings while altered code ran silently — and deploying the IOCONTROL backdoor, which converts compromised edge routers and cellular IoT gateways into persistent command-and-control proxies that hide inside ordinary MQTT device traffic (IoT M2M Council). The same month, Siemens disclosed a maximum-severity CVSS 10.0 flaw in its Simatic IoT2050 — the Industry 4.0 gateway sold to bridge factory floors and cloud AI — allowing an unauthenticated remote attacker to execute code with elevated privileges (IoT News Digest). Business impact: the gateway class of device that carries AIoT decisions is the same class attackers are converting into infrastructure of their own.
The Important: The Decision Moved to the Edge Before the Security Did
Last week’s AIoT edition argued that the model joins the attack surface — that an inventory listing devices but not the models running on them is a 2020 inventory for a 2026 problem. This month’s evidence adds the sequel: the industry is shipping autonomy over a bridge it never secured.
Put the two storylines side by side. One set of vendors is selling goal-directed agents that will close valves, balance grids, and reroute fleets. One set of investigators is documenting that the cellular links, gateways, and controllers those agents depend on are reachable from the public internet, running nine-year-old firmware, and in some cases already hosting someone else’s software. An autonomous decision made on a compromised data path is not autonomy. It is delegation to whoever controls the path.
The discipline transfers directly from the post-quantum migration playbook:
Discovery — inventory every cellular link, gateway, and edge device, and record which ones carry or execute autonomous decisions. The undocumented modem a contractor installed in 2019 is now a decision channel.
Agility — prove you can isolate or replace a compromised gateway remotely, without halting operations. If cutting one edge device off the network requires a truck roll and a production stop, your incident response has a physics problem.
Governance — assign a named owner for every autonomous action class. When an AIoT system acts on manipulated data, “the algorithm did it” will not satisfy a regulator, an insurer, or a board.
The Imperative changes weekly. The Important is your homework either way.
Three Questions for Your Board
How many of your connected devices reach the internet through a cellular modem — and how many of those links have a private APN or VPN? If nobody can produce the count, the count is the project.
Have you tested how fast you can isolate a compromised edge gateway without stopping operations? Tested, not assumed. The water-utility operators who cut cables by hand found out the hard way.
Who owns each class of autonomous decision your systems make? Name a person, give them the inventory and the isolation drill, and put a date on the first report.
The Imperative & The Important is the briefing from Carl’s Corner — timely developments and the durable ideas underneath them, across post-quantum cryptography, IoT and OT security, cybersecurity, and enterprise AI.
Sources
Research and Markets via GlobeNewswire — AI of Things (AIoT) Solutions Market Outlook Report 2026–2030: https://www.globenewswire.com/news-release/2026/08/12/3343764/28124/en/ai-of-things-aiot-solutions-market-outlook-report-2026-2030-agentic-ai-and-iot-convergence-accelerates-autonomous-decision-making-across-global-industries.html
The Hacker News — Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water-Utility Attack Cities: https://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.html
IoT M2M Council — FBI Issue Warning on IoT & OT Vulnerabilities: https://iotm2mcouncil.org/iot-library/news/iot-security-public-policy/fbi-issue-warning-on-iot-ot-vulnerabilities/
IoT News Digest — Issue 2633 (Siemens Simatic IoT2050 CVSS 10.0 advisory; Forescout exposure data): https://iotdigest.substack.com/p/iot-news-digest-2633