The Connectivity Standards Alliance has published three short documents on Zigbee 4.0 in October 2026: a Benefits one-pager on October 15, a Features Overview on October 21 and a Features Deep Dive on October 27. None of them is a new specification. They are the first plain summaries of what the alliance actually changed in Zigbee 4.0, and they say
LR2021-SDR is an open-source project by Samuel Reynolds (SAMS0N1TE). It turns the Semtech LR2021 LoRa transceiver into a software-defined radio (SDR). On 27 October 2026 the author relicensed it under the MIT licence. The same day he merged firmware changes for transmitting at up to 1 million samples per second. CNX Software first described the pro
CISA revised its advisory ICSA-26-267-02 on Eufy robot vacuums on 27 October 2026. Update A changes the affected versions and the fix. The original advisory from 24 September told owners of both the Omni C20 and the Omni X10 Pro to install version 1.6.4. The revised one gives a separate fixed version for each model and narrows which flaws affect th
Home Assistant OS 18.4 was published on 27 October 2026 at 13:42 Polish time, and by the evening the stable update channel was offering it to every board, from generic x86-64 to Raspberry Pi 4. The release notes call it a bugfix and security release and end the summary with "All users are encouraged to upgrade."
Aqara has started a pre-launch trial for two security products it showed at IFA 2026 in September: the battery-powered Camera G510 and the Security Station M410. The trial was announced on the Aqara Forum on 26 October 2026. Sixty testers in the EU, the UK and a few neighbouring countries will be able to buy the two devices as a kit for 49.99, befo
Three vulnerabilities in Yoosee smart cameras built on the Grain Media GM8135S chip were published in the US National Vulnerability Database on October 26, 2026. They affect firmware up to and including 21.00.01.36, possibly other versions too. The vendor, Shenzhen Gwell Times, has not responded to the researcher and has not released a fix. The res
Home Assistant now limits how much data a client can send to the parts of its API that work without a login. A pull request merged into the development branch late on 26 October 2026 caps those requests at 64 KiB. Until now they inherited limits meant for something else entirely: 16 MiB for HTTP requests and 4 MiB for the first WebSocket message.
Z-Wave JS UI 11.25.2 came out on 26 October 2026 with one real fix. Since 11.25.0, some installations with HTTPS turned on would not start at all: the Docker container restarted over and over and the log showed ERR_SSL_EE_KEY_TOO_SMALL ("ee key too small"). The new version repairs most of those setups on its own, but it also makes the custom certif
The second release candidate of Home Assistant OS 18.4 went out on 23 October 2026 at 23:15 Polish time. Most of it is security housekeeping on top of RC1: Linux kernel 6.18.58, Buildroot 2025.02.19 and Go 1.27.3. The change worth testing is a fix for a common USB Bluetooth adapter, the Realtek RTL8761B with USB ID 0bda:a728, which the release note
