When a Matter controller pairs a new device, it checks the device's identity before letting it in. The device presents a Device Attestation Certificate (DAC), signed by a Product Attestation Intermediate (PAI), plus a Certification Declaration (CD) signed by the Connectivity Standards Alliance. On 31 October 2026 matter.js, the open-source TypeScri
Two days after Zephyr 4.5.0, the project put out a maintenance release for an older branch. Zephyr 4.3.2 was published on the evening of 30 October 2026 as a bugfix release for 4.3.1, and its security section is long: 225 CVE entries. For 121 of them the notes give a description and a GitHub security advisory. The other 104 are marked as under emba
The OpenThread project published OpenThread Border Router (ot-br-posix) v2026.11.0 on 1 November 2026. This is the open-source border router that many Thread setups run underneath, including Home Assistant's OpenThread Border Router add-on and plenty of DIY builds on a Raspberry Pi with a radio co-processor. The monthly release has two changes wort
Xiaomi has put a dual-camera version of its battery video doorbell on sale in China. The Smart Doorbell 4 Pro Dual Camera Edition went on sale on the evening of 30 October 2026, according to IT Home, at a list price of 499 yuan, with a launch price of 439 yuan. The single-camera Smart Doorbell 4 Pro came out last year. Neither source mentions a rel
TTLock, the Bluetooth lock platform from the Chinese company Sciener, has a new high-severity vulnerability on record. CVE-2026-112345 was published on 26 October 2026, with VulnCheck as the assigning authority and the researcher Yassine Damiri credited with the find. It covers the TTLock Android app before version 9.8.260718 and the lock firmware
Most smart lock problems start at the door, not in the app. A lock that does not fit the cylinder, cannot be opened from outside while a key sits in the inside, or needs a hub you do not own will annoy you every day, whatever its feature list says. The checks below go in the order that saves money: the door first, then the radio, then the way you w
MCS, the UK certification scheme for small-scale renewable installations, is consulting on its first product standard for battery storage. The draft, MCS 042, covers home and small commercial batteries. As ESS News reported on 30 October 2026, it could bring IoT cybersecurity requirements into the certification that battery makers need to sell thro
The Zephyr Project released Zephyr 4.5.0 on 28 October 2026. Zephyr is the open source real-time operating system behind a lot of IoT firmware, including Nordic's nRF Connect SDK and many sensor, gateway and wearable products. The release had contributions from 1,297 people, a record according to the project, and it will get fixes until 28 October
Lumen's Black Lotus Labs published a report on 28 October 2026 about "Silent Train", the relay network that the Chinese state-backed group Volt Typhoon has used since late 2023 to hide its most sensitive attacks. The targets were US government bodies, telecoms, defence contractors and critical infrastructure. The hops in between were often the same
