By Marcus Bell The gadget sitting on your kitchen counter might be moonlighting as a cyberweapon.
Security researchers have spent the past year quietly documenting how everyday smart home devices—air fryers, robot vacuums, video doorbells, even smart light bulbs—are being swept into botnet armies at a pace that makes the old Mirai attacks look like a dress rehearsal.
The problem isn't that these devices are inherently malicious.
It's that they ship with cheap chips, default passwords, and firmware that almost never gets updated.
Once a device connects to your Wi-Fi, it's a tiny computer running outdated code.
Attackers scan for open ports the way porch pirates scan for unlocked cars.
What makes this wave different is the payload.
Earlier botnets mostly knocked websites offline with traffic floods.
The new generation, tracked under names like Mirai variants and the "Aquabot" family, does something more invasive: it quietly enrolls your devices into relay networks that mask criminal activity, mine crypto on your electricity bill, or stage attacks on critical infrastructure.
Researchers at Georgia Tech recently demonstrated they could hijack a fleet of robot vacuums and use their onboard cameras and microphones to surveil a home.
Here's the part that should make you check your router right now.
Most people never change the default admin credentials on a smart plug or baby monitor.
Manufacturer apps often don't prompt for it.
And when was the last time your smart TV or thermostat pushed a firmware update?
The fix isn't to throw your gadgets in the trash.
It's to treat them like the networked computers they are.
Put your smart devices on a separate Wi-Fi network from your laptop and phone—most modern routers let you spin up a guest network in about two minutes.
Disable features you don't use, like remote access or UPnP.
And if a device hasn't received a security patch in over a year, that's a signal.
The uncomfortable truth is that the companies selling you convenience have little incentive to secure it.
A $25 smart plug has thinner profit margins than a smartphone, so security gets the cheapest possible implementation.
Until regulators force minimum standards—and some countries are starting to—the burden lands on you.
We wired our homes for convenience and forgot that every connected device is a door.
You might be surprised who's on the guest list. **The takeaway:** This isn't a reason to fear technology—it's a reason to stop treating security as someone else's job.
Final Thoughts
The companies won't protect you until it hurts their bottom line, so the two-minute password change is the cheapest insurance you'll ever buy.