A 23-year-old in the UK used a cheap radio device to halt four high-speed trains, while separately, owners of expensive robot lawnmowers have discovered the devices can be remotely hijacked to steal Wi-Fi credentials and GPS data, with security vulnerabilities that persist even after firmware updates. The incidents highlight growing gaps in IoT and critical infrastructure security.