Platforms & Ecosystem
5 articlesCritical PHP vulnerabilities threaten your NAS, not every vendor has a fix5 min
Active exploitation of two critical PHP flaws puts internet-exposed NAS devicesāand potentially PHP services in Dockerāat risk of remote code execution without login. Synology has patches, while QNAP, TerraMaster, Ugreen, and Asustor are still assessing or fixing the issue. Until updates land, remove port forwarding and UPnP, avoid public NAS access, use a VPN for remote connections, and update or isolate PHP containers. Unsupported NAS hardware should never be exposed directly.
SmartThings Family Care: Care on Call and Safety Patrol - SmartThings Blog9 min
SmartThings Family Care is moving remote caregiving beyond reminders: Care on Call puts a loved oneās recent activity and local weather on screen before and during a regular Galaxy phone call, while Safety Patrol can dispatch a camera-equipped robot vacuum after prolonged inactivity. That could reduce routine check-ins, but it is not fall detection: inactivity still needs visual verification, and both features depend on compatible Samsung hardware, permissions, and regional rollout.
Withings wants new users to pay $100 a year to sync with Apple Health - Engadget2 min
Withings is putting a basic interoperability feature behind a $100-a-year Withings+ subscription: accounts created after October 13 must pay to automatically sync data from its smart scales and other health devices with Apple Health or similar apps. Existing users appear grandfathered in, while free users face repeated manual exports. That makes Withings hardware less appealing for Apple-centric households and turns a straightforward data connection into an ongoing cost.
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password5 min
Millions of ISP-supplied routers may be vulnerable to a Broadcom Wi-Fi flaw dating to 2010 that enables unauthenticated code execution from within radio rangeāno Wi-Fi password or WPS enrollment required. Demonstrations stole the network key and opened a shell on Belgian gateways, while many devices remain unpatched. Check your routerās firmware and provider advisories; some eCos models may be permanently unfixable.
ESPHome 2026.10.0: Native ESP8266 builds and compressed updates40 min
ESPHome 2026.10 is a substantial quality-of-life release: ESP8266 builds are much faster and native on Apple Silicon, while compressed OTA updates can cut transfer sizes and update times by roughly a third. It also adds useful Home Assistant onboarding, outgoing API connections for NAT-ed devices, Wi-Fi motion sensing, and broader Zigbee support. Review the upgrade checklist first, especially for speaker, Sendspin, climate IR, light, and custom-component users.
Product Launches
4 articlesAqara expands its Matter lighting lineup with a rare E14 bulb and multicolor T2 light strip4 min
Aqara is filling a real Matter lighting gap with an E14 LED Bulb T2, a useful fit for bedside lamps, sconces and chandeliers where Thread options are scarce. It switches between Zigbee and Matter over Thread, while the new multicolor Strip T2 adds independently colored zones for smoother scenes and usable white light. The catch: advanced strip effects still depend on Aqara Home, and neither product has a global launch date.
UGREEN Matter camera ID500 Pro opens for preorder with HomeAgent hub4 min
UGREEN is bringing a Matter camera to market ahead of most rivals, with the ID500 Pro now available for preorder at $89. Its compelling angle is local: recordings and AI event processing happen on the HomeAgent hub rather than through a cloud subscription, while Matter exposes camera controls and detection events to compatible platforms. The catch is that local storage requires UGREENās costly hub, making this an expensive ecosystem bet despite the cameraās low entry price.
SwitchBot Releases its First Permanent Outdoor Lights With Matter5 min
SwitchBotās Permanent Outdoor Lights bring year-round roofline and patio lighting without needing a SwitchBot hub. Native Matter over Wi-Fi connects the 30-metre system to Apple Home, Alexa, Google Home, SmartThings, and Home Assistant, while the SwitchBot app retains advanced effects and music-sync features. The key trade-off is that Matter exposes only basic lighting controls, and the controller still needs weather-conscious placement.
Light-powered ePaper screen adds art to your wall without a charger4 min
Inkanva is a solar- and indoor-light-powered color ePaper frame that can hang without a charging cable, making rotating wall art far easier to live with. Its local mode stores thousands of images and works without internet or a subscription; optional app and AI integrations can schedule or generate content. Solar doesnāt power the largest model, and this first-time Kickstarter backer faces normal crowdfunding risk.
Reviews & Spotlight
4 articlesApollo CAST-1 Review: Local Audio Streaming for HA12 min
At $34.99, Apolloās CAST-1 is a compelling way to bring old powered speakers, receivers, or soundbars into Home Assistant and Music Assistant without a cloud account. Its Sendspin support keeps compatible multi-room players in sync, while TTS announcements duck music instead of interrupting it. The trade-offs matter: it needs external amplification, lacks Bluetooth audio input for now, and Ethernet requires a separate add-on.
Wyze BodyScan review: This cheap smart scale operates like itās twice the price11 min
Wyzeās $85 BodyScan makes segmented body-composition tracking unusually affordable, and its huge color display means you can see key readings without reaching for your phone. Testing found weight, BMI, muscle mass, and body-fat results broadly comparable with a much pricier Withings scale. The trade-off is a flimsy handlebar and bare-bones app with awkward family support, but no subscription keeps the value strong.
HOROW X70: What a Smart Toilet Actually Does?11 min
Smart toilets are already impressively automatedābut they are not really smart-home devices yet. SmartHomeSceneās research-driven look at the $1,599 HOROW X70 finds a capable local fixture: bidet washing, heated seat, radar lid control, self-cleaning and a pump-backed flush with a manual outage fallback. The trade-off is total isolation: no app, Wi-Fi, Zigbee or Matter, leaving convenience inside the bathroom and integrations off the table.
Cute Robot Toy Exposes Millions of Private Chats and Children's Profiles on Unprotected Chinese Servers5 min
Eiliko, an AI companion robot marketed to children, exposed roughly 13 million conversations and profilesāincluding names, birthdays, family details, photos and IP addressesāthrough an effectively open backend. Researchers could also hijack robots and rewrite their personalities remotely. Owners should isolate or disconnect them, but factory resets may not fix cloud-side exposure; the vendor has offered no meaningful remediation.
Projects & How-To
5 articlesM5Stack Atom Echo on your own ESPHome build: push to talk, a doorbell, no internet11 min
This guide turns the inexpensive M5Stack Atom Echo into a genuinely local Home Assistant satellite: erase the unknown factory firmware, flash a minimal ESPHome build, and firewall it so it can only talk to Home Assistant. The same cube becomes a Zigbee-triggered doorbell and announces events such as a gate opening. Itās private and flexible, but setup is hands-on, voice is push-to-talk, Speech-to-Phrase is limited, and the speaker is quiet.
My microwave knocked my Zigbee sensors offline every lunch, and one channel change fixed it6 min
Microwave interferenceānot WiāFiāwas taking this Home Assistant user's Zigbee network offline over lunch. The oven's 2.4GHz energy overwhelmed a coordinator on Zigbee channel 20; switching to channel 15 restored every test event and eliminated dropouts for 10 weekdays. The practical lesson: place the coordinator away from the appliance, choose Zigbee and WiāFi channels together, and don't trust an idle-time āSmartā scan to catch interference.
This open-source adapter turns any USB keyboard into a Home Assistant control panel5 min
KeyBridge turns an old USB keyboard, keypad, or macropad into a physical Home Assistant controller, with each key able to trigger an automation without a computer in the middle. Its ESP32-S2 adapter now has a smaller design and native ESPHome support, making DIY setup easier. The $35 board is preorder-only and limited, but the project offers a clever, inexpensive way to add tactile controls where dashboards feel inconvenient.
How to Document Your Home Network (And Why You Should) - HomeTechHacker12 min
Home network documentation is cheap insurance for a growing smart home. A diagram, device and IP inventory, backup locations, and a short recovery runbook can turn a failed router, access point, or server from a household outage into a manageable repair. The payoff is especially clear with Home Assistant: stable addresses, known device locations, and recorded dependencies help prevent broken integrations and automations. Start small and review it twice a year.
This cool Raspberry Pi project turns Telegram photos and voice messages into framed pictures2 min
This Raspberry Pi frame solves a real accessibility problem: it lets a grandmother without a smartphone receive family photos, videos, and voice notes through Telegramāand reply without navigating an app. A 10.1-inch display, speakers, 4G connection, and four physical buttons keep the experience appliance-simple. Pairing photos with voice explanations makes it more personal than a passive digital frame, while the shared code gives makers a starting point.
Perspectives
2 articlesDoes opting out of smart TV tracking work? Research finds āsuspiciousā traffic.8 min
Opting out of smart TV tracking may not stop the tracking. Researchers observed traffic consistent with automatic content recognition on Samsung Tizen and Vizio TVs even after users disabled the feature; Rokuās behavior was limited to its own streaming app and disclosed in its terms. Encryption prevents proving what data was sent, but the findings undermine trust in opt-out controls. Blocking ACR domains or using an external streamer are the practical workarounds.
My Matter smart home worked brilliantly ā until the batteries started dying6 min
Battery-powered Matter sensors can quietly turn a reliable smart home into a maintenance project. Matter wonāt prevent automations from failing when presence sensors die, and battery life varies sharply with sensing range and room traffic. The practical lesson is to choose devices with easy battery access, keep low-battery alerts enabled, and replace cells earlyāespecially before busy or disruptive periods when a missed alert can go unnoticed.