Talk to usTalk to usAnnouncements, releases and milestones from across the platform.
Firmware 1.164.2 adds Matter 1.4.1 and concurrent Zigbee and Matter operation in bridgeless mode, which removes the choice between keeping a Hue Bridge and moving to Matter.
FCC and UL filings point to a doorbell, three cameras, a floodlight cam, a deadbolt, a thermostat and a temperature sensor — designed jointly, sold under LG's brand, with Matter and Thread expected across several.
The 2026.10 release adds independent audible and visual alarm switches for Matter leak sensors, one-touch locking policy for locks, blind travel-time calibration, and frequency and power factor from power-measuring devices.
ULTRALOQ has shipped three Matter-over-Thread locks, two of them Aliro-certified, plus a $299.99 model that fuses BLE, UWB ranging and radar to decide whether you are actually walking to the door.
Group addressing moves out of provisional status and becomes the recommended way to command many devices at once, which ends the staggered response that has made Matter look worse than Zigbee in demos.
The Thread Group board has approved work to put Thread's IP-based mesh on a Sub-GHz PHY, aimed at commercial and industrial networks rather than the home. No bands, no dates, and a new brand name to come.
Murrelektronik's AAS Edge Client exposes an unauthenticated REST API on TCP 18000 that will accept writes to Asset Administration Shell data. There will be no patch; the advice is to remove it.
CVE-2026-87121 is an out-of-bounds write in the lwIP MQTT client, versions 2.0.1 through 2.2.1, scored 9.8. The fix is a source commit, which means every downstream vendor has to rebuild.
ICSA-26-279-06 covers six flaws in end-of-life Hitachi Energy RTU500 firmware, including unauthenticated firmware upload and a VxWorks debug service documented in 2010. Dragos reported the new findings.
Seven flaws in the N-Tron 700 Series, four critical on CVSS v4.0: hard-coded admin credentials that persist after new accounts are created, plaintext passwords retrievable over unauthenticated SNMP, and unsigned firmware updates.
ICSA-26-272-02 lists ten flaws in Toptech TMS7 7.6.3, headed by an unauthenticated POST that exports arbitrary database tables, plus an upload endpoint that will run PHP.
Cloudera's index puts 82 percent with visibility into where data resides and 58 percent with it fully governed — which is the gap most AI pilots fall into.
Tell us what you're building and we'll help you scope the first deployment.