diff --git a/NEWS b/NEWS
index e61d2c23c173a1093b28f0ea3b20c66617f740b6..587cde4e775b1f5590b73597e58172e91d8d476a 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,22 @@
+4.0-beta2
+---------
+
+* New implementation of dev-detect which does not depend on Pakon (experimental)
+* Fixed default encryption method for passwd from package shadow. Reset your
+  system user's passwords (including root) if you set them by passwd.
+* LXC fixes for systemd based hosts
+* Foris: packages lists UI reworked
+* Foris: improved "no link" message in WAN tab
+* Netmetr: fixed initial setup
+* Nextcloud: dropped duplicate Referrer-Policy
+* Commit hash replaced with router name in banner
+* Suricata updated to version 4.0.7
+* kmod-usb2 is now part of base installation
+* ACL enabled for BTRFS
+* libxslt: CVE-2019-11068
+* prosody: CVE-2018-10847
+* python-urllib3: CVE-2019-9740, CVE-2019-11324
+
 4.0-beta1
 ---------