A new category of pocket-sized e-ink readers has emerged in 2026, led by Xteink's X3 and X4 models, competing not with traditional e-readers but with smartphones by offering distraction-free reading during brief moments like checkout lines. These devices use magnetic phone-case attachment and stripped-down designs to optimize for quick reading sessions rather than hours of use, though some manufacturers like Xteink have begun restricting custom firmware despite community expectations for openness.
PortButler is a macOS tool for sending files to devices via serial connection without network access. It supports multiple transfer protocols (XMODEM, YMODEM, ZMODEM, and a custom base64-text method), includes timestamped logging for boot diagnostics, and can pace data transmission to prevent buffer overruns.
A researcher discovered two security vulnerabilities in the ESP32-C6's Wi-Fi stack through binary analysis: a remote pre-association heap overflow in beacon reconstruction and a missing bounds check in hardware-accelerated AES-GCM. Both were reported to Espressif under coordinated disclosure, fixed in ESP-IDF, but received no CVE or advisory, highlighting challenges in securing proprietary closed-source connectivity firmware across the industry.
Panasonic released Lumix S9 firmware version 2.1, enabling more functions on the Lens Fn button and adding MP4 (Lite) recording up to 4K60. Updates also include new versions of Lumix Lab and Lumix Flow apps, with firmware for other Lumix S-series cameras focusing on flash performance improvements.
FeeTech's STS3215 servo has factory-default ID=1, making it impossible to distinguish multiple servos on a daisy-chained bus. Engineers discovered a race condition vulnerability that allows selective targeting of individual servos, enabling ID assignment without disconnection. They developed utilities for servo diagnostics, repair, and rapid recalibration during arm assembly.
DroidPutter is an open-source tool that enables Android phones to run Cardputer apps on an ESP32-S3 microcontroller via USB OTG. Apps are built on demand from GitHub, flashed wirelessly from the phone, and mirrored to the phone's display while using the phone's keyboard, GPS, and screen as the Cardputer's interface.
A multi-year project to develop custom firmware (SMK) for the NuPhy Air60 keyboard has progressed from initial reverse engineering to a stable, multi-device implementation. The developer created associated tools including sinowisp for flashing and hidra for browser-based programming, expanding support across various keyboards and microcontrollers while overcoming challenges like wireless protocol documentation and 8051 architecture constraints.
Sony released PS5 firmware version 26.06-14.00.00 with enhanced PSSR image quality as default for PS5 Pro, a voice chat speaker indicator, and new Community Activity widgets showing trending and top games. The update also includes Bluetooth management changes and general performance improvements.
Rockbox and Doom have been successfully ported to run on iPod nano 3rd generation devices. The port is currently under review, with some flash models not yet supported.
A developer integrated NAM A2-Lite, a compact neural amp model, directly into an iRig HD X audio interface by repurposing its NXP Cortex-M7 microcontroller. The guitar signal now runs through amp modeling on the device itself at 48 kHz, eliminating the need for external computers while maintaining real-time performance within tight memory and processing constraints.
EchoMuse is an open-source firmware replacement for Amazon Echo Dot 2nd Generation that transforms it into a local Home Assistant voice assistant and media player, featuring wake word detection, music playback, Bluetooth proxy capabilities, and a fleet management dashboard—all without cloud connectivity or telemetry.
Cody Ho and Niklas built a fully OpenGL ES 3.0 compliant GPU driver for Apple's M4 Mac Mini and MacBook Neo in about one month by reverse engineering the AGX firmware ABI and user-space components using a hypervisor. The driver achieves high performance, running Minecraft at 200fps and supporting WebGL in browsers, and involved clean-room development techniques without accessing Apple binaries.
A developer describes successfully running a NES emulator on a Xiaomi Mi Band 4 fitness tracker by discovering a buffer overflow vulnerability in the device's resource decompression code, allowing arbitrary code execution through a specially crafted firmware update sent over Bluetooth.
A researcher demonstrates how electromagnetic fault injection (EMFI) attacks, previously considered lab-grade, are now accessible to hobbyists using budget hardware like the FaultyCat clone (~30€). The article details improvements to EMFI tooling, including custom injection probes and modified firmware, making hardware attacks feasible with limited resources.
A technical guide for installing Armbian Linux on the ZTE B860H set-top box using a microSD card and HDMI boot dongle. The process involves flashing an Armbian image and U-Boot bootloader to the microSD card, then booting the device without requiring prior root access.
Check Point and academic researchers discovered critical vulnerabilities in smart bulbs including Philips Hue and TP-Link Tapo models that enable attackers to inject malware into home networks through buffer overflows and credential theft. Millions of IoT devices are publicly exposed on Shodan, and attackers exploit known CVEs at scale; users should update firmware, isolate smart bulbs on separate networks, and replace devices with unpatched vulnerabilities.
Apple released new firmware (build 9A348) for AirPods Pro 3 and other AirPods models to support iOS 27, adding features like custom EQ, Siri AI, Precision Finding, and GymKit support. Some features are exclusive to AirPods Pro 3 while others are available across select models.
A developer replaced postmarketOS with Ubuntu on a Lenovo IdeaPad Duet Chromebook after a failed system update, attempting a weekend firmware hacking project to get Ubuntu running on the ARM64 tablet by swapping the rootfs partition.
Apple released firmware for AirPods Pro 2, Pro 3, AirPods 4, and AirPods Max 2 to support new iOS 27 features including a redesigned AirPods interface, Adaptive mode slider, custom EQ, and Siri AI compatibility. Users can update by connecting their AirPods to a powered Apple device, with installation taking several hours.
MCUHex is a browser-based tool for flashing and debugging STM32 microcontrollers over SWD without requiring IDE installation. Users install a lightweight tray app that bridges their browser to a debug probe, enabling firmware flashing, live variable monitoring, and source-level debugging directly from a web interface.