Skip to main content

THE SOTH JOURNAL

Security

Ideas, know-how, and a little inspiration for your connected home.

WORTH A CLOSER LOOK

Security

eufy SoloCam E50 goes on sale for $229.99: two 4K lenses, 12x hybrid zoom, mmWave radar and local microSD storage on solar power

Anker's eufy brand has put the SoloCam E50 on sale in the US. The outdoor camera was first shown in late September, and MacSources reported its official launch on 29 October 2026. eufy's store sells it as the "S340 Next-Gen" for $229.99, and positions it as the outer perimeter layer of the company's Edge 5.0 security system: a camera meant to watch
Oct 30, 2026
3
min read

Home Assistant 2026.11 will offer to update old HTTPS encryption settings, and the recommended choice is now Intermediate v6

Anyone who points Home Assistant at its own SSL certificate, instead of putting it behind a reverse proxy, will see a new repair after updating to 2026.11. It offers to switch the HTTP server to a newer set of TLS rules. On 29 October 2026, a day before the second beta, the developers changed which set that repair recommends: Intermediate v6, which
Oct 29, 2026
3
min read

Bitdefender and NETGEAR 2026 IoT report: TVs, smart plugs and NAS drives account for two-thirds of vulnerability observations in home networks

Bitdefender and NETGEAR published their 2026 IoT Security Landscape Report on 28 October 2026. It is based on telemetry from roughly 10.4 million home routers protected by the two companies, collected from January to September 2026: 5.4 billion security events and about 1.2 billion vulnerability observations.
Oct 29, 2026
3
min read

ADT to be taken private by OpenAI-backed Thrive Holdings in a $15.3 billion deal and become the base of its smart home security business

ADT, the US home security company that claims the country's largest network of smart home security professionals, announced on 29 October 2026 that it will be acquired by Thrive Holdings. The deal is all cash: $10.00 per share, which values ADT at about $7.6 billion in equity value and $15.3 billion in enterprise value. That is a 45.6% premium over
Oct 29, 2026
2
min read

CVE-2026-59177: the ESPHome add-on once exposed its dashboard to the whole LAN without a password, and ESPHome 2026.6.1 or newer is safe

The National Vulnerability Database published CVE-2026-59177 on October 28, 2026. It covers a flaw in ESPHome Device Builder, the dashboard behind the ESPHome add-on for Home Assistant, which let any device on the local network open the dashboard with no credentials. The bug is not new. ESPHome fixed it in June and published the advisory (GHSA-vv4j
Oct 29, 2026
3
min read

AiDot's ESP32-based Linkind and OREiN Matter plugs and bulbs can be hijacked from the local network through SSDP and UPnP parsing bugs

Two CVEs published on October 22 and 27, 2026 describe buffer overflows in the firmware of AiDot smart home devices, sold under the Linkind and OREiN brands. CVE-2026-78846 lets any device on the local network corrupt a plug's or bulb's memory with one crafted discovery reply. CVE-2026-78845 gives remote code execution to an attacker who controls o
Oct 29, 2026
3
min read

IP cameras without the cloud: RTSP, ONVIF and recording on your own hardware

Most home cameras are sold as a pair: the camera and the manufacturer's app, with clips stored in the vendor's cloud. That works until the subscription price goes up, the service shuts down or someone finds a hole in it. In October 2026 CERT-UA warned that attackers were reaching Dahua cameras through the Easy4IP cloud feature by guessing serial nu
Oct 29, 2026
9
min read