A connected Keurig quietly shipped roughly a terabyte of data in ten days. A Lavazza machine asked for access to your contacts and call logs. These are coffee makers — wired into the same internet as everything else in your home.
a Keurig sent in 10 days
IoT attacks per day
smart devices with a critical flaw
Reported by TechRadar: a US household found their Keurig transmitting roughly a terabyte of data over ten days (attributed to a bug), while a Lavazza machine requested permissions for contacts and call logs. Separately, IoT malware attacks surged sharply in 2025, and by common estimates around one in four smart-home devices ships with at least one critical vulnerability.
A coffee maker has no business touching your contacts. But once a device is on the internet, its data path and its permissions are only as trustworthy as the vendor's worst day — a bug, a breach, or a quiet policy change. Convenience becomes exposure on the same wire.
Fridge, coffee maker, camera, speaker — each faces outward, 24/7.
An appliance asking for contacts is a data business in a kitchen disguise.
Their breach, their bug, their policy change — becomes yours.
The quiet rule among people who actually run infrastructure: never connect the things you care about to the internet. If it doesn't need an outside line, don't give it one.
Intelligence that stays in the room.
Aura runs entirely on-device — it hears only you, with no cloud to breach, no account to leak, and no server that ever receives a word you say. Nothing leaves the room.