Skip to main content

THE SOTH JOURNAL

News from the connected home

Ideas, know-how, and a little inspiration for your connected home.

WORTH A CLOSER LOOK

News from the connected home

Google and partners take down XCPE, a backdoor preinstalled on more than 1.3 million Android set-top boxes that took orders over MQTT

On 2 November 2026 Google Threat Intelligence said that last week it and its partners dismantled XCPE, a botnet built from more than 1.3 million Android set-top boxes in over 200 countries. The partners were Japan's National Police Agency, Lumen, HUMAN Security, Plume, Synthient and Trend Micro's TrendAI. Google says with high confidence that the b
Nov 2, 2026
3
min read

Australia's grid now lets a home EV charger or battery have its own settlement point behind the main meter

On 1 November 2026 the National Electricity Market (NEM), the grid that covers Queensland, New South Wales, the ACT, Victoria, South Australia and Tasmania, started the main release of its Flexible Trading Arrangements. From now on an EV charger, a home battery or another controllable device can be metered and settled separately from the rest of th
Nov 2, 2026
3
min read

ESPHome's ESPectre Wi-Fi motion sensing gets live threshold, detection and on/off controls, no reflash needed

ESPectre, the component that turns an ESP32 and an ordinary Wi-Fi access point into a motion sensor, can now be tuned from Home Assistant while it runs. Francesco Pace's pull request was merged into the ESPHome dev branch on 2 November 2026 (just after midnight Warsaw time), with the documentation update merged alongside it. It is not in a stable r
Nov 2, 2026
3
min read

A second wave of attacks on supermarket refrigeration controllers hits stores in seven European countries

Supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland found their fridges and freezers warming up on the night of 1-2 November 2026. Inside some cabinets the temperature climbed to 50°C. It is the second wave in three weeks: on 11 October up to 700 supermarkets in France were hit the same way, with losses put at
Nov 2, 2026
3
min read

Seven WAVLINK routers and access points get command injection CVEs with public exploits and no fixes listed

Seven OS command injection vulnerabilities in WAVLINK routers, mesh units and access points were published on 1 and 2 November 2026. All of them came through VulDB, each links to a proof-of-concept write-up on GitHub (six of the seven by a researcher using the name pipiyyb), and each record says the exploit is public. The records say WAVLINK was co
Nov 2, 2026
3
min read

Code in HomeView Software 27.2 suggests Apple's smart display can work as a HomeKit Secure Video camera

Apple's HomeView smart display may get a second job as a security camera. Reddit user pdfu found settings text in HomeView Software 27.2 describing a mode that turns the display's built-in camera into a HomeKit Secure Video camera. AppleInsider and The Verge reported the find on 1 November 2026. Apple has said nothing about the feature, and HomeVie
Nov 2, 2026
2
min read

Raspberry Pi 5 16GB goes up by $80 to $385, and 16GB Compute Module 5 boards rise by $40

Raspberry Pi raised prices on its highest-memory boards on 2 November 2026. In a post signed by Eben Upton, the company says the 16GB Raspberry Pi 5 now costs $80 more, at $385, and every 16GB variant of Compute Module 5 goes up by $40. The new CM5 prices are listed in the product brief on the Compute Module 5 page rather than in the post itself.
Nov 2, 2026
2
min read

Homematic IP app 3.9.13 adds geofencing, CarPlay and Android Auto, while the Android rollout runs late

eQ-3 started rolling out version 3.9.13 of the free Homematic IP app on 27 October 2026. The update makes the system react to where people are, puts the app on car screens and adds a second way to regain admin access after a phone is lost. The iOS release is going to plan. eQ-3 says the Android release through Google Play is delayed and will be rol
Nov 2, 2026
2
min read