Researchers at Talos have found Vulnerabilities in Trane thermostats heat up IoT safety concerns  (SC Magazine).  A firmware update is available, kudos to Trane for dealing with this in a timely manner.