Supposedly 25k WiFi-enabled CCTV cameras that were compromised used to launch a DDoS attack on an online jewelry retailer:
formatting link
Reminds me of a teardown of a D-Link WiFi home automation box that ran Linux and was easily rooted with a stack overflow exploit:
formatting link