Loading story…
The introduction of the NEO 1X humanoid robot, designed to assist with household chores, has sparked significant concerns regarding cybersecurity and privacy. As an always-connected device operating within private homes, NEO 1X raises questions about the potential for surveillance, unauthorized data collection, and the broader risks associated with integrating advanced robotics into daily life. Experts highlight the need for robust security measures and transparent privacy policies to address these emerging threats as such devices become more prevalent.
In parallel, the discontinuation of support for Google’s Nest Gen 1 and Gen 2 thermostats has led to community-driven efforts to regain control over smart home hardware. The "No Longer Evil Thermostat" project, initiated by a security researcher, offers open-source software to restore and enhance functionality to these devices, which lost remote access and scheduling features after being unpaired from official apps. This development underscores the challenges users face when manufacturers sunset smart home products, as well as the growing movement to liberate devices from corporate restrictions for improved privacy and user autonomy.
Map this exposure pattern across your cloud, code, and identities.
2 events from the most recent confirmed update back to the earliest known activity.
A report highlighted privacy and surveillance concerns surrounding the NEO 1X chore-performing robot, framing it as a device that could potentially spy on users in the home. No earlier concrete incident date was provided in the reference, so the publication date is used.
An open-source effort was reported to remove Google software from discontinued Nest thermostat hardware, restoring functionality and enabling more precise home-heating control. The project was described as a way to revive hardware that had been sunsetted by Google.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
2 references tracked. Mallory keeps watching after this page renders.
securityboulevard.com
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A variety of cybersecurity incidents and trends were reported in early December, including the exposure of zero-day vulnerabilities, new phishing techniques, and the exploitation of smart home devices. Notable events included leaks revealing the use of zero-days by Intellexa to maintain Predator spyware, Google patching multiple security flaws in Chrome and Android (with some actively exploited), and attackers developing new methods to bypass multi-factor authentication in educational organizations. Additionally, there were reports of large-scale breaches, such as the hacking of 120,000 home security cameras in South Korea for illicit purposes, and the abuse of Microsoft Teams notifications for callback phishing attacks. Security experts emphasized the importance of proactive measures to protect both organizations and individuals. Recommendations included updating software promptly, using strong and unique passwords, enabling multi-factor authentication, and researching device security before purchase. The risks associated with smart home devices were highlighted, with advice on securing IoT devices to prevent opportunistic attacks. These developments underscore the evolving tactics of threat actors and the need for continuous vigilance in both enterprise and consumer environments.
Jun 29, 2026
Voice assistants and other smart home devices are generating detailed records that can later be accessed by companies or sought by law enforcement, raising concerns that everyday household technology may become a source of criminal evidence. Reporting highlighted that devices such as Amazon Alexa continuously collect behavioral, audio, and usage data, with wake-word systems capable of false activations that may cause unintended recordings to be uploaded for cloud processing and retention. The coverage pointed to U.S. criminal investigations in Arkansas, Florida, and New Hampshire in which Amazon Echo data was sought or used, underscoring how cloud-stored smart home records can become subpoenaable evidence. It also warned that smart TVs, robot vacuums, smart locks, Fitbits, and even connected water meters can create searchable logs of daily life, and urged users to reduce exposure by inventorying connected devices, limiting unnecessary internet connectivity, understanding whether devices are truly powered off, and keeping at least one room free of smart technology.
Aug 11, 2026
Researchers warned that **embodied AI systems**—including humanoid and quadruped robots—are entering commercial, industrial, military, and critical infrastructure environments with weak security controls that could enable both digital compromise and real-world harm. The report highlighted documented issues in commercially available robots, particularly **Unitree** platforms, including an undocumented **CloudSail** remote-access backdoor, exposed APIs that could disclose device locations and camera feeds, Bluetooth and Wi-Fi provisioning weaknesses that could allow root access, and telemetry sent to external servers in China. The findings describe robots as high-risk **cyber-physical endpoints** because they combine cameras, microphones, radios, cloud connectivity, and physical actuation in a single platform. Researchers said those characteristics could allow wireless propagation, fleet-wide compromise, and even "physical botnets," while **vision-language model** prompt injection could manipulate robot behavior through physical-world inputs. The report urged organizations deploying robots in areas such as manufacturing, nuclear decommissioning, and military operations to strengthen procurement reviews, segment robot networks, monitor vulnerabilities, and prepare continuity plans before insecure architectures become embedded at scale.
Jun 29, 2026