Back to Blog
Insights

Home Assistant Adds Matter Camera Support, Nordic Unveils New Chip, and Over a Million Set-Top Boxes Found with Backdoors

This week's industry roundup covers Matter camera support in Home Assistant 2026.11, Nordic's new nRF71 series integrating Wi-Fi, Thread, and on-device AI, and Google's investigation into firmware backdoors affecting more than 1.3 million set-top boxes. Other updates include new chips, Matter certifications, and cybersecurity incidents in Europe.

Product Line
IoT Security 
Topic
Industry Insights
Published
2026-11-06
Read Time
10
min read

This week (October 31–November 6, 2026), two smart home developments stand out: Home Assistant added support for Matter cameras, and Nordic introduced a new chip combining Wi-Fi, Thread, and on-device AI. The first allows users to access more devices through a single interface, while the second gives manufacturers of smart locks, gateways, and sensors more development options.

Meanwhile, a set-top box backdoor incident disclosed by Google raised another concern: some devices already contained malicious software when they left the factory.

01 | Home Assistant Adds Matter Camera Support, Making Live Video and Two-Way Audio More Accessible

On November 4, Home Assistant released version 2026.11, adding support for Matter 1.5 cameras. Once compatible devices are connected, users can view live video and snapshots directly from the dashboard, along with the camera's privacy mode status. Live video is streamed between the camera and browser using WebRTC. Read Release Notes

Two-way audio is also available, although it remains a preview feature in Labs. Both the camera and its integration must support two-way communication, and users need to access Home Assistant over HTTPS. Matter Server must also be updated to a version that supports the feature before connecting Matter cameras.

This update gives camera and video doorbell manufacturers a clear interoperability scenario to test. After adding a device, users will care more about whether they can watch live video smoothly, speak to someone at the door, and confirm that privacy mode is enabled than whether the specification sheet simply says "Matter supported."

02 | Nordic Introduces nRF71, Combining Wi-Fi, Thread, and On-Device AI

On November 3, Nordic introduced the nRF71 series of low-power SoCs, integrating Wi-Fi, Bluetooth Low Energy, Thread, and on-device AI capabilities. The series targets applications such as Matter bridges, Thread border routers, smart locks, and industrial sensors. Samples are currently available to selected customers. Read Original Article

Among the first models, the nRF7120 supports dual-band Wi-Fi 6, while the nRF7120E adds tri-band Wi-Fi 6E and an Axon neural processing unit. Separate Wi-Fi and multiprotocol radios allow simultaneous reception, enabling devices to maintain a Wi-Fi connection while listening for Bluetooth or Thread communications.

Products that need to connect to both a home network and low-power accessories may benefit from this design. It could reduce the number of external components, although suitability still depends on power consumption, memory usage, and response times when multiple protocols operate simultaneously. Battery-powered devices, in particular, need to be tested under real-world conditions to evaluate battery life.

03 | More Than 1.3 Million Set-Top Boxes Involved in Botnet, with Some Backdoors Preinstalled in Firmware

On November 2, Google's Threat Intelligence Group disclosed a coordinated operation against the XCPE botnet. According to its investigation, more than 1.3 million set-top boxes were affected, and some devices contained the XCPE backdoor preinstalled in their firmware. The backdoor could load additional malware after the device started. Google said it had updated its device review procedures. Read Investigation

Users may face this risk even without installing unfamiliar apps, because the malicious software was already present before they purchased the device.

The incident is closely related to how brands and contract manufacturers work together. Who supplies and reviews production firmware? How can a factory verify that the file it receives has not been replaced? These processes need clear records. If a problem occurs, manufacturers must also be able to identify which production batches received the affected firmware version.

Firmware checksums, approvals, and programming records can help with traceability, but they cannot replace software content review. Even a properly signed file may contain malicious software from the start.

Industry Briefs

  • ST Introduces STM32G5 for Power and Motor Control. On November 4, ST announced a new generation of mixed-signal MCUs for applications including data center power supplies, robotics, and industrial drives. The series also supports post-quantum cryptography, and initial products are already in production. Read Original Article
  • Infineon Announces RISC-V Automotive MCU Platform. On November 4, Infineon introduced AURIX RC1 for automotive and other real-time control applications. Samples are planned for the first half of 2027. Read Original Article
  • Qingping and TP-Link Products Receive New Matter Certifications. CSA records show a certification date of November 2 for the Qingping Temp & RH Monitor T and November 5 for TP-Link's CentralHub family, which includes the Tapo H500 and H600W. Certification dates do not necessarily indicate product launch dates. Qingping Certification / TP-Link Certification
  • GIIC Introduces OneConnect Smart Home Testing Platform. On November 2, GIIC shared an update on the platform, which launched on October 22. It covers product registration, testing applications, and certificate management for its unified smart home interoperability standards. Read Original Article
  • New Wave of Cyberattacks Targets European Refrigeration Systems. In a joint statement on November 4, ENISA reported additional incidents on November 1–2 and urged organizations to reduce network exposure for affected systems while strengthening information sharing and coordinated response. Read Original Article

This Week's Takeaway

Beyond new product announcements, two developments stand out this week. Home Assistant has brought Matter camera support into its user interface, while Google has revised its device review procedures following the firmware backdoor incident.

The first is about whether products work well for users. The second is about whether the software delivered with those products can be trusted. Device manufacturers need clear ownership of both, even when working under tight product launch schedules.

Further Reading

How can device identities, digital certificates, and firmware versions be linked during manufacturing? Learn more about Snowball Technology's secure factory provisioning solution

Snowball Team
Team Member
LinkedIn
Founded in 2013, committed to driving scalable and sustainable industry growth through a trusted, future-ready security infrastructure. Snowball Technology’s core team comes from NXP’s security services group, bringing over a decade of experience in device security. The company currently has more than 100 employees, with over two-thirds in R&D. Snowball Technology is certified under international standards including ISO 9001, ISO 14001, and ISO 27001.