Disconnect them immediately. This one is far worse than initially thought.
arstechnica.com
Open garage doors anywhere in the world by exploiting this “smart” device
A universal password. Unencrypted user data and commands. What could go wrong?