Hot tubs are supposed to be a great way to relax, but that’s a little harder to do when you aren’t in control of them. Thousands of hot tubs running a system made by Balboa Water Group have exploits that can be hacked to allow malicious actors to remotely control them, according to a recent report from the BBC.
The issue, discovered by security researchers at the U.K.-based security firm Pen Test Partners, stems from lapses in a mobile app that enables hot tub owners to control their tubs from their phone. Attackers could theoretically gather information found on public resources to find homes with the vulnerable hot tubs and target them. The malicious actors could use third-party databases to find the GPS location data of a given tub and hijack it. There is no authentication that would prevent the attackers from getting into the system.
Once the attackers have picked their target, they can assume control of the tub remotely. That means they can make the temperature hotter or colder, take over the pumps and jets, and change the lights. The entire attack can be carried out over a smartphone or laptop.
According to the BBC, Balboa Water Group was caught off guard by the report and said it was “surprised” to learn of the vulnerability. The mobile app that gives users the ability to remotely control their hot tub has been available for about five years and users have never reported any issues or hacking attempts, according to the company.
Balboa Water Group is in the process of addressing the security flaw and plans to have it patched up by the end of February — which is a long time to leave a known flaw unpatched and available to exploit. The company is working with its customers to set up individual usernames and passwords so they can secure their apps. It previously opted not to have users set up personal accounts because it wanted to simplify the activation process. While that might have made things more convenient, the decision also exposed users to having their personal time in the hot tub interrupted by hackers.
This post is brought to you in paid partnership with Best Buy.
Technology evolves every day, transforming how we live and work. Our devices are becoming more than tools we use. They are increasingly capable companions that help streamline day-to-day routines and spark creative ideas. If you have been waiting for the right moment to upgrade your tech setup, the Discover Samsung Shopping Event offers an opportunity to explore what connected, AI-powered living can look like.
With AI progressing so fast, it's only a matter of time before we start getting AI companions like the ones we used to see in movies like R2-D2, Wall-E, or Baymax. Now, Singapore-based OKA Technology has unveiled Mori, a cute little AI companion that looks less like a conventional home robot and more like someone turned the Pokémon Foongus into a table lamp.
Mori isn't meant to clean your house or control your smart home, but to serve as what OKA calls a "Nature Companion." It uses subtle movements, warm lighting, nature-inspired sounds, and small reactions to make its presence around the house feel calming rather than distracting. Mori can sit quietly while you read, sway along to music, welcome you when you enter a room, or encourage you to slow down for a moment without requiring a screen or a conversation.
Quick Recap: Life with twins and a pile of bottles