The week in full · Sep 25–Oct 1

Identity & Access Management · 2026-10-01

1Password Environments now connect to NVIDIA OpenShell sandboxes so AI agents use secrets via placeholder injection, never seeing real values.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables Provision OpenShell providers under Settings > Developer in the 1Password desktop app to activate the NVIDIA OpenShell integration (beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds openshell sandbox create --provider <provider-name> -- bash workflow: copy setup commands from a connected 1Password Environment to attach a provider and launch a sandbox shell.
• Supports attaching multiple providers to a single sandbox via repeated --provider flags, enabling agents to access several credentials simultaneously.

Identity & Access Management · 2026-10-01

1Password SDK gains environments.getVariables() to read Environment variables with masked/visible status in TypeScript, Python, and Go⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds client.environments.getVariables(environmentId) method (TypeScript/Python/Go) to retrieve all variables from a 1Password Environment, returning each variable's name, value, and masked boolean via GetVariablesResponse⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports both service-account token auth (OP_SERVICE_ACCOUNT_TOKEN) and desktop auth (DesktopAuth with OP_ACCOUNT_NAME) for environment variable retrieval
• Hidden (masked) variables are automatically concealed in stdout and stderr output when retrieved

Identity & Access Management · 2026-10-01

1Password for NVIDIA OpenShell (beta) lets sandboxed AI agents use secrets via placeholder substitution without secrets entering agent context⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds 1Password for NVIDIA OpenShell (beta): connect a 1Password Environment to an OpenShell gateway so sandboxed coding agents receive only placeholders — real credentials are substituted outside the sandbox by the gateway, scoped to approved hosts and a configurable time window.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-10-01

SaaS Manager #1890 adds cost center mapping for Entra ID, granular AI Consumption access, deferred user imports, and Usage export for applications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Usage as a selectable field when exporting application information.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds support for mapping cost center information from cloud extension attributes in Microsoft Entra ID.
• Enables granting access to AI Consumption independently of Spend data for other applications.

Identity & Access Management · 2026-10-01

1Password for Linux can now connect to AI agents to approve and fulfill sign-in requests on your behalf.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Connects 1Password to supported AI agents so they can sign in to websites on your behalf, with per-request approval and vault selection from your Private vault.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds breadcrumb navigation to the Developer Watchtower page.
• Adds programmatic access options for the 1Password CLI and SDKs in Developer Environments, along with an option to copy the environment ID.

Identity & Access Management · 2026-10-01

1Password: Adds Settings > Autofill > 'Disable macOS Autofill' option so users can turn off macOS Autofill directly from 1Password preferences.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Expands macOS Autofill to more surfaces, including server connections in Finder, with a confirmation prompt before filling.

Identity & Access Management · 2026-10-01

1Password: Adds Trusted Platform Module (TPM) support on by default for the Convenient and Balanced security presets when Unlock using Windows Hello is enabled.

• Simplifies the steps to add an account from 1Password.com or by scanning a QR code with 1Password on mobile.

Identity & Access Management · 2026-10-01

Autofill unlocking improved so one Face ID scan unlocks every available account at once.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Improves Autofill unlocking so a single Face ID authentication unlocks every available account, and skips biometric prompts when an account requires a password instead.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-10-01

1Password in the browser now saves logins across split username/password screens and shows which app version the extension is connected to.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds save-login prompts for sites that present username and password on separate screens.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Settings now displays whether the browser extension is connected to 1Password 7 or 1Password 8.

AI/LLM Security · 2026-10-01

Adds pikit, a composable prompt-injection research toolkit, under Research/pikit⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Vendors pikit (NY1024/pikit), a composable prompt-injection research toolkit, under Research/pikit⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Integrated & IT Risk Management · 2026-10-01

CISO Assistant v4.0.8 adds SCF 2026.3, cross-domain whiteboard assets, inline control linking, and custom audit scoring without cloning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the SCF 2026.3 compliance framework to the library.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables pulling assets from external domains on the whiteboard.
• Adds create and select-existing buttons directly on linked-object tabs in applied controls, reducing navigation steps when associating controls.

Identity & Access Management · 2026-10-01

Clerk lets end-customer IT admins self-serve Directory Sync setup (including Google Workspace) via <OrganizationProfile />⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables IT admins to self-configure Directory Sync — including Google Workspace — directly from the Security tab inside the <OrganizationProfile /> component, without requiring developer intervention.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Internet Services · 2026-10-01

Cloudflare Basin Catalog brings a managed Apache Iceberg REST catalog interface directly into R2 buckets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Basin Catalog, a managed Apache Iceberg REST catalog built into R2 buckets, enabling standard Iceberg catalog connectivity for engines like Apache Spark, Snowflake, and PyIceberg.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Turns an R2 bucket into a data warehouse or lakehouse for log analytics, business intelligence, and data pipeline workloads with R2's zero-egress fee model.

Internet Services · 2026-10-01

Cloudflare Basin Pipelines: ingest streaming data via HTTP or Worker bindings, transform with SQL, and deliver to R2 as Apache Iceberg tables or Parquet/JSON files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds wrangler basin pipelines setup CLI command to scaffold a new Basin Pipeline from the terminal.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces Basin Pipelines, a new managed streaming ETL service that ingests events via HTTP endpoints or Worker bindings, applies SQL-based transformations, and delivers exactly-once to R2 as Apache Iceberg tables or Parquet and JSON files.
• Adds Streams — durable, buffered queues that receive events via HTTP endpoints or Worker bindings.

Internet Services · 2026-10-01

Cloudflare Basin GA: serverless analytics platform with Pipelines ingestion, Iceberg Catalog, and distributed SQL on R2⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds wrangler basin pipelines setup command to configure a stream, sink, and pipeline for HTTP or Workers-binding-based event ingestion with SQL transformations writing to R2 Iceberg tables.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds wrangler basin catalog enable <bucket> command to enable the Iceberg REST catalog and automatic table maintenance on an existing R2 bucket.
• Adds wrangler basin sql query <warehouse> <sql> command to run distributed OLAP queries across catalog tables on Cloudflare's global network without managing query clusters.

Internet Services · 2026-10-01

Cloudflare GA's Basin analytics platform, adds ML-KEM/ML-DSA post-quantum crypto, Sandbox SDK 1.0, x402 Machine Payments, and Durable Object IO task protection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables the webcrypto_modern_algorithms compatibility flag to unlock ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, and ML-DSA-87 in the Workers Web Crypto API, including encapsulateBits, decapsulateBits, getPublicKey(), SubtleCrypto.supports(), and JSON Web Keys with the AKP key type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds durable_object_io_tasks_prevent_eviction compatibility flag (default on 2026-10-01+) so Durable Objects stay alive — up to 15 minutes per pending operation — while awaiting service binding responses, RPC/fetch() calls to other Durable Objects, this.ctx.container.monitor(), this.ctx.waitUntil() promises, and setTimeout()/setInterval() timers, even without a connected client.
• Launches Basin generally available — an end-to-end analytics platform comprising Basin Pipelines (formerly Cloudflare Pipelines), Basin Catalog (formerly R2 Data Catalog), and Basin SQL (formerly R2 SQL), bootstrapped with wrangler basin pipelines setup.

Internet Services · 2026-10-01

Cloudflare adds Basin Catalog API endpoints for managing data buckets, namespaces, tables, and maintenance configs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /accounts/{account_id}/basin-catalog to list Basin Catalogs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds GET /accounts/{account_id}/basin-catalog/{bucket_name} to retrieve Basin Catalog details for a specific bucket.
• Adds POST /accounts/{account_id}/basin-catalog/{bucket_name}/enable to enable a Basin Catalog.

Internet Services · 2026-10-01

Cloudflare adds Basin data platform (Catalog, Pipelines, SQL query engine) and a Monetization Gateway for APIs, MCP tools, and web pages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Basin, a new product for ingesting, managing, and querying analytics data stored in R2, comprising Basin Catalog, Basin Pipelines, and Basin SQL.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Basin SQL, a serverless distributed query engine for data stored in Basin Catalog.
• Adds Monetization Gateway, enabling monetization policies to charge visitors accessing APIs, MCP tools, web pages, or datasets.

Internet Services · 2026-10-01

Cloudflare: Adds ML-KEM and ML-DSA post-quantum algorithms and key encapsulation methods to the Workers Web Crypto runtime via a compatibility flag.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds pending I/O support for Durable Objects, preventing eviction for up to 15 minutes for Workers with a compatibility date of 2026-10-01 or later.
• Releases Sandbox SDK 1.0, letting a Durable Object control sandbox image, instance size, network access, and lifetime, and save snapshots.

Internet Services · 2026-10-01

General Utilities & Libraries · 2026-10-01

VS Code gains a Migrate MCP Servers workflow to move MCP server configs to portable .mcp.json or $COPILOT_HOME/mcp-config.json files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Migrate MCP Servers action in the Agent Customizations editor to move MCP servers to a portable workspace .mcp.json file or user $COPILOT_HOME/mcp-config.json file, preserving each server's enabled/disabled state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Pre-migration compatibility check separates servers into Migratable and Not migratable groups, flagging servers with unsupported configuration such as explicit working directories, SSE transport, or server version metadata.

General Utilities & Libraries · 2026-10-01

VS Code agent sandboxing arrives for Local and Copilot Agent Host sessions, with per-session toggles, network controls, and org-managed policy enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds agent sandboxing for Local sessions and Copilot Agent Host sessions, controllable via the Settings editor with a dedicated enablement setting that defaults to off.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a session toggle in the permissions picker for Copilot Agent Host sessions to change the current session's sandbox state without altering User or Workspace settings.
• Supports per-session sandbox policy inspection for Copilot Agent Host sessions via a dedicated command that returns a snapshot of the effective sandbox policy, including active restrictions.

General Utilities & Libraries · 2026-10-01

code-oss gains remote agent delegation tools and workspace-free remote chat sessions with SSH/dev-tunnel support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables chat sessions on a remote host without a workspace by setting sessions.chat.unifiedWorkspacePicker.enabled and connecting over SSH or a dev tunnel, then selecting the Chat entry for that host in the workspace picker.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds experimental remote agent delegation via chat.remoteAgentHostsEnabled and chat.remoteSessions.tools.enabled, letting an Agent Host session delegate tasks to connected remote hosts without manually selecting the host in the workspace picker.
• Adds list_agent_hosts tool so an agent can discover connected remote hosts, available models, resource capacity, and current session load.

General Utilities & Libraries · 2026-10-01

VS Code agents gain peer chats, context compaction, per-chat done state, and chat.agentHost.agentOrchestrationLimits orchestration controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sessions.showChatTabs config setting to control whether peer chats appear as tabs (Multiple) or replace the active pane (Single) in the Agents window.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds chat.agentHost.agentOrchestrationLimits setting to control process-wide limits for agent-created sessions and chats, messages sent, and recursive session creation — set to off to remove limits.
• Adds currentSession and independent prompt keywords so agents can create a peer chat in the current session or a fully separate session, with optional worktree isolation.

General Utilities & Libraries · 2026-10-01

VS Code adds chat.tools.terminal.outputReflow to control whether terminal output previews reflow in chat.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds chat.tools.terminal.outputReflow setting to control whether terminal output previews reflow to fit chat width (default: on) or preserve the terminal's column width with horizontal scrolling.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

General Utilities & Libraries · 2026-10-01

Adds experimental persistent progress indicator for agent responses with two new config keys in VS Code chat⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds chat.experimental.persistentProgress config key to keep a progress indicator visible until an agent response finishes, with Draw (colored or monochrome animation) and Off options; defaults to Draw in Insiders and Off in Stable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds chat.experimental.persistentProgressVerbosity config key to control completed tool-call detail visibility: Compact replaces completed groups with expandable summaries, Verbose keeps full details visible.
• With persistent progress enabled, reasoning appears in separate collapsible previews and tool calls remain visible while they run.

General Utilities & Libraries · 2026-10-01

VS Code Agents window gains experimental welcome phrases, personalized names, and grouped composer controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sessions.chat.experimental.welcomePhrases setting to show a rotating welcome phrase above the new-session composer in the Agents window.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sessions.chat.experimental.welcomeName setting (also settable via the Set Welcome Name action) to personalize the welcome heading; syncs across devices and falls back to your GitHub profile first name.
• Adds accessibility.verbosity.newSessionWelcome setting to control whether the welcome heading is announced in screen-reader optimized mode.

General Utilities & Libraries · 2026-10-01

VS Code Agents window gains Agent Merge (automated PR blocker resolution) and configurable idle container shutdown via chat.agentHost.devContainer.idleTimeout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Agent Merge, an experimental feature that monitors a pull request associated with an agent session and autonomously asks the agent to address blockers until the PR is ready to merge.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds an Agent merge Changes changeset in the changeset dropdown to review changes from the most recent agent merge repair cycle.
• Supports chat tabs and split groups (horizontal or vertical) within Agent Host sessions, enabling multiple simultaneous conversations including interactive peer chats, side chats, and read-only subagent chats.

General Utilities & Libraries · 2026-10-01

Agent Host sessions now support peer chats alongside the main chat, switchable from the Sessions view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds peer chat support to Agent Host sessions, letting you open and continue multiple peer chats alongside the main chat from the Sessions view without starting a new session.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

General Utilities & Libraries · 2026-10-01

VS Code agent sandboxing adds OS-level file system and network isolation for terminal commands, with domain filtering on macOS and Linux.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces agent sandboxing that uses operating system-level isolation to restrict file system and network access for terminal commands and their child processes in Local and Copilot Agent Host sessions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Local terminal sandbox is in Preview on macOS, Linux, and WSL2, and Experimental on Windows; sandboxing for the Copilot Agent Host built-in shell is Experimental on all supported platforms.
• A separate setting provides network domain filtering for the fetch tool and integrated browser, independently of terminal sandboxing.

SIEM · 2026-10-01

Query tags for SQL warehouses are now GA, enabling custom key-value cost attribution visible in system.query.history and the UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds custom key-value query tags to SQL workloads on Databricks SQL warehouses and Lakehouse//RT compute, surfaced in system.query.history and the Query History page for grouping, filtering, and cost attribution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-10-01

SIEM · 2026-10-01

Lakeflow Jobs table update triggers now GA for OpenSharing objects and system tables on Databricks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Lakeflow Jobs table update triggers can now monitor OpenSharing objects and system tables, enabling event-driven pipelines on shared and platform-managed data sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-10-01

Databricks JDBC Driver (Simba) 2.8.4 adds Java 25 support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Java 25 support to the Simba JDBC Driver (Legacy) 2.8.4.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Firewalls & Network Defense · 2026-10-01

Fastly automation tokens now support multiple roles for fine-grained access control across CDN and Next-Gen WAF.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports assigning multiple roles to a single automation token via the Automation Tokens API, enabling combined permissions across Fastly products such as CDN management and Next-Gen WAF.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-10-01

GitHub npm trusted publishing now supports opt-in dist-tag management via short-lived OIDC credentials, eliminating the last long-lived token requirement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an opt-in Allow npm dist-tag permission to each trusted publishing configuration, enabling dist-tag operations (promoting to latest, updating next and beta pointers) via short-lived OIDC credentials instead of a long-lived access token.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Allows staging-only trusted publishing configurations to independently receive dist-tag management permission, without requiring direct publish access.
• Authorizes a dist-tag operation when the incoming OIDC token matches any one configuration that has Allow npm dist-tag enabled, leaving existing token-based dist-tag management unchanged.

SAST / SCA / Code Security · 2026-10-01

GitHub Team orgs can now self-serve trial GitHub Advanced Security (Code Security + Secret Protection) without contacting sales.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables GitHub Team customers to start self-serve trials of GitHub Advanced Security, covering GitHub Code Security and GitHub Secret Protection, from the organization Overview page, Billing and licensing > Licensing page, or the Risk Assessment completion page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-10-01

HydraFusion multi-model orchestrator expands to VS Code and the GitHub Copilot app, adding cascade and critique workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables chat.copilot.hydraFusion.enabled in VS Code 1.140+ to activate HydraFusion from the Copilot Chat model picker when it does not appear automatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds HydraFusion to VS Code (version 1.140 or later, including VS Code Insiders) and the GitHub Copilot app, expanding beyond Copilot CLI.
• Introduces three selectable orchestration workflows — Single, Cascade, and Critique — where HydraFusion picks the most efficient execution pattern per task instead of routing to a single model.

Endpoint Security (EDR/XDR) · 2026-10-01

Iru surfaces MDM user-channel status in device records, Prism Users category, and the enterprise API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MDM user-channel enrollment status to the user list on Mac device records.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Exposes MDM user-channel enrollment status in the Prism Users category for bulk reporting.
• Exposes MDM user-channel enrollment status via the enterprise API for bulk reporting.

Endpoint Security (EDR/XDR) · 2026-10-01

Iru adds macOS Safari Extensions management via the Safari Extensions Library Item.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for managing Safari Extensions on macOS through the Safari Extensions Library Item, requiring user channel MDM to be enabled for the target Mac user.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Endpoint Security (EDR/XDR) · 2026-10-01

Iru Managed OS for Apple gains a dynamic timeline view showing when updates will be enforced and to which version.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a dynamic timeline view to Managed OS for Apple devices that reflects Library Item settings, showing enforcement deadlines and target OS versions at a glance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Endpoint Security (EDR/XDR) · 2026-10-01

Iru adds five new Apple restrictions for Siri and Apple Intelligence to its Restrictions Library Item for DDM deployment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds AllowNaturalLanguageEditing, AllowVisualIntelligence, AllowLiveRecognition, AllowSiriAI, and ForceReduceSensitiveContent to the Restrictions Library Item for Apple devices, deployed automatically via DDM declarations alongside existing MDM restrictions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-10-01

JumpCloud adds Access Posture, a new security management capability for evaluating device and user access standing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Access Posture, a new security management feature with a dedicated Get Started guide under JumpCloud's Security Management category.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-10-01

JumpCloud PAM adds Jump Server with credential backup, installation, and update support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds PAM Jump Server installation support, enabling privileged access management through a dedicated jump server component.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds credential backup configuration for PAM Jump Server to protect stored privileged credentials.
• Adds PAM Jump Server update capability to keep the jump server component current.

Identity & Access Management · 2026-10-01

JumpCloud 2022 adds certificate-based RADIUS auth, TOTP for LDAP, OIDC SSO, Password Manager, Remote Assist, and a Linux Forbidden Services policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Command After Agent Install command type so admins can specify enrollment commands to run immediately after the JumpCloud agent is installed on new devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a Running column to the commands queue to distinguish commands waiting in queue from those actively running.
• Adds certificate (passwordless) based authentication to JumpCloud RADIUS, supporting any X.509-compliant certificate authority — organizations can import existing certificates for RADIUS authentication.

Identity & Access Management · 2026-10-01

JumpCloud 2023 adds passwordless Go auth, Android zero-touch enrollment, remote Background Tools, dynamic groups, and self-service device provisioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds JumpCloud Go browser extension for hardware-protected, phishing-resistant passwordless login using Apple Touch ID and Windows Hello on managed macOS and Windows devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds JumpCloud Go as the default MFA method for conditional access policies on SSO apps, with user and device verification on every application session.
• Supports Android zero-touch enrollment for fully managed, dedicated, and company-owned Android devices with a work profile.

Identity & Access Management · 2026-10-01

JumpCloud 2024 adds Device Monitoring & Alerting, Windows App Catalog, SaaS Management, CSP-based MDM policies, and multi-tenant MFA enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /systemusers?filter=department:$in:Finance | Accounting|IT pipe-escape support — the | character can now be escaped with \ inside in and nin API filter operators, enabling pipe characters within search terms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds $lte and $gte filter operators for Dynamic Groups memberQuery filters via the API, replacing the deprecated $le and $ge operators.
• Replaces the deprecated GET api/systemusers/reactivate/{id} endpoint with POST https://console.jumpcloud.com/systemusers/reactivate/{id} accepting { activation_email: {email_address} } in the request body.

Identity & Access Management · 2026-10-01

JumpCloud: Launches JumpCloud MCP Server GA, connecting compatible AI tools and code editors to JumpCloud via the Model Context Protocol.

• Introduces JumpCloud Access Requests, enabling approval flows, access request management, and webhook integration with ticketing systems such as JIRA.
• Adds Shadow AI Dashboard under the renamed JumpCloud AI & SaaS Management for visibility into generative AI shadow IT, adoption, usage by department, and most active users.
• Releases Custom Admin Roles GA for all direct organizations, allowing admins to tailor roles based on specific responsibilities.

Identity & Access Management · 2026-10-01

JumpCloud's October 2026 release adds MCP Server for Users, Custom Risk Policies, a Patch Management Dashboard, AI knowledge-base uploads, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MCP Server for Users (Model Context Protocol) so JumpCloud users can connect AI clients to User Portal capabilities via OAuth sessions; admins enable it at Settings > JumpCloud AI and can set automatic session expiration or revoke sessions manually.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Custom Risk Policies under Access Risk to tailor risk detection for Admin Portal, User Portal, device, and SSO application logins — choose monitored risk factors, adjust score weights, set policy precedence, and scope policies to specific user groups or SSO applications.
• Adds App Settings Privacy policies for Apple MDM: a user-level macOS App Settings Privacy policy (macOS 27+, supervised Macs) and a device-level iOS and iPadOS App Settings Privacy policy (iOS/iPadOS 27+) to recommend privacy permission defaults for Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, Location Accuracy, and Microphone.

Identity & Access Management · 2026-10-01

JumpCloud adds RSS feed subscriptions for release notes, agent updates, and bug fix announcements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Subscribe to Support RSS Feed option on the Release Notes and Bug Fixes page to receive notifications for any new Help Center content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Subscribe to Release Notes and Bug Fixes RSS Feed option to receive product release notes, agent release notes, and bug fix reports.
• Adds Subscribe to Agent Release Notes RSS Feed option to receive agent-specific release note notifications.

Identity & Access Management · 2026-10-01

JumpCloud Password Manager Desktop App gains EU region support, 30,000-item capacity, ARM/RPM builds, and shared-folder admin controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports EU region selection before account activation — available on the activation page for the desktop app and on the pairing page for the browser extension.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Scales item storage capacity to 13,000 items with autofill enabled, or up to 30,000 items without autofill; one shared folder can hold up to 5,000 items.
• Introduces an auto-lock schedule with a default of 15 minutes of inactivity and a configurable maximum of 1440 minutes (24 hours).

Identity & Access Management · 2026-10-01

Keycloak 26.8 adds supported SCIM API and multi-cluster stateless mode, OID4VCI/OID4VP credentials, and token exchange delegation for AI agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables --features=stateless to run multi-cluster v2 deployments without an external Infinispan cluster, storing session data in the database instead.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables --features=preview or --features=oid4vc-vci to activate OID4VCI verifiable credential issuance (promoted from experimental to preview), with credential revocation on refresh-token revocation and a new Application Initiated Action for in-session credential requests.
• Adds experimental oid4vc-mdoc feature flag for mdoc credential format support.

AI/LLM Security · 2026-10-01

nono adds diagnostics.redaction.extra_env_vars to scrub additional environment variables from diagnostics and audit logs⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Derives automatic redaction from environment.deny_vars exact-name entries and from command_policies.credentials, network.custom_credentials, and credential_routes env_var destinations — no separate redaction declaration needed for these.
• Supports glob syntax (e.g. ACME_*, *_SECRET) matched case-insensitively against the full variable name, using the same matcher as environment.deny_vars.
• Merges extra_env_vars additively across profile inheritance, so child profiles widen the inherited redaction list rather than replacing it.

AI/LLM Security · 2026-10-01

nono v0.79.0 adds remote agent session launch, proxy denial diagnostics, Snap policy group, and diagnostics.redaction.extra_env_vars⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --remote, --agent, --workspace, and --detached flags to nono run to launch and attach to remote agent sessions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds diagnostics.redaction.extra_env_vars profile key to redact additional environment variables from diagnostic output.
• Renders proxy network denials in the CLI diagnostic footer so blocked outbound calls are visible at a glance.

Identity & Access Management · 2026-10-01

Nudge Security adds Microsoft Entra ID SSO, letting teams sign in with their Microsoft credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds single sign-on support via Microsoft Entra ID app registration, enabling teams to authenticate to Nudge Security with their Microsoft credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-10-01

Nudge Security adds AI Risk Agents that autonomously review risky OAuth grants and browser extensions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Risk Agents — AI agents that autonomously review risky OAuth grants and browser extensions, with configurable autonomy levels for acting on verdicts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds the OAuth Analyst Agent to automatically analyze OAuth grants, assign verdicts, and take configurable actions based on each verdict.
• Adds a Browser Extension Risk Agent that analyzes browser extensions, returns per-extension verdicts, and enforces a not permitted status on flagged extensions.

Identity & Access Management · 2026-10-01

Nudge Security launches AI agents for automated OAuth grant revocation and browser extension risk remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the OAuth Grant Risk Analyst AI agent, which reviews new OAuth grants as they are discovered, automatically revokes overly permissive or high-risk access, or nudges the OAuth grantor to remove it, with human-in-the-loop oversight.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds the Browser Extension Risk Analyst AI agent, which inspects artifacts and metadata behind installed browser extensions, flags malicious, compromised, or misrepresented extensions, and orchestrates disable and uninstall workflows.
• AI agents are accessible via Automations > AI Agents in the Nudge Security console.

Threat Intelligence · 2026-10-01

OpenCTI 7.260811.0-lts.1 switches map rendering to local PMTiles and adopts a FIPS 140-3 validated Docker base image.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Replaces the external map tile server with local PMTiles rendering, eliminating the outbound dependency for map widgets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

AI/LLM Security · 2026-10-01

Operant adds Microsoft 365 AI coverage: Purview-backed Copilot observability, inline Agents SDK protection, and label-aware plugin blocking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Microsoft Purview integration that ingests every Copilot prompt, response, and tool call across all Microsoft 365 Copilot surfaces for detection and audit.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Agent Protector integration into the Microsoft 365 Agents SDK runtime, evaluating each tool invocation, retrieved content, outbound call, and write action inline before it executes.
• Adds prompt-level observation, detection, and blocking for third-party assistants (such as Harvey and Rogo) embedded in Microsoft 365 on the web, blocking individual violating prompts while allowing the session to continue.

Identity & Access Management · 2026-10-01

P0 Security adds runtime access control connectors for Salesforce, Cloudflare, Grafana Cloud, and Datadog.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds connector for Salesforce, extending Zero Standing Privilege and just-in-time access controls to Salesforce for both users and agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds connector for Cloudflare, extending Zero Standing Privilege and just-in-time access controls to Cloudflare for both users and agents.
• Adds connector for Grafana Cloud, extending Zero Standing Privilege and just-in-time access controls to Grafana Cloud for both users and agents.

MCP Servers & Tooling · 2026-10-01

Runlayer adds self-hosted Rev decision model, OTel Collector sidecar, and procedures-validator sidecar to ECS Terraform inputs⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds enable_runlayer_rev Terraform input to run Rev, Runlayer's self-hosted decision model, as a third container (runlayer-topic-cpu-rev) in the topic CPU task, exposing POST /predict/runlayer-rev on NLB port 8082 and setting RUNLAYER_REV_ENDPOINT_URL and RUNLAYER_REV_TIMEOUT on the backend; requires enable_runlayer_topic_cpu = true.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds runlayer_rev_image_tag Terraform input to specify the Rev container image (Rev-only ToolGuard profile runlayer-rev-guard-v<model_version>, built with image_profile=rev); tag must start with runlayer-rev-guard-v (e.g. runlayer-rev-guard-v202609292007).
• Adds runlayer_rev_gunicorn_workers Terraform input to control Rev container concurrency (range 1–6); each worker loads its own fp32 encoder (~2.5–2.7 GiB RSS) and serializes forwards, with the recycler briefly running workers+1.

MCP Servers & Tooling · 2026-10-01

Runlayer 1.28.911 adds artifact custom-link management via MCP and shareable URL-persisted Details filters for Shadow AI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables assistants and agents to set, change, remove, and open an artifact by its custom link through Runlayer MCP.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Persists Shadow AI Details table filters in the page URL so filtered views can be shared directly, with Back returning to the originating dashboard tab.
• Collapses the Connected Agent Apps list on the Integrations page by default with a count, preventing long page loads in large Slack workspaces.

SIEM · 2026-10-01

Splunk Enterprise 10.6 adds $8$ FIPS-compliant encryption, PostgreSQL-backed KV store, mTLS Federated Search, and Edge Processor aggregation/dedup⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds splunk reencrypt secrets and splunk reencrypt shcluster-secrets CLI commands to migrate encrypted configuration values from the $7$ cipher format to the new FIPS-compliant $8$ cipher format (HKDF-SHA256).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds [reload_on_delete] stanza with disabled = false / disabled = true toggle in limits.conf to enable no-restart app uninstall operations, reducing restart requirements by ~50%.
• Replaces MongoDB-backed KV store with a PostgreSQL-backed co-hosted KV store on supported Linux, Windows, and macOS platforms, preserving existing KV store APIs and application workflows.

Detection Engineering · 2026-10-01

Stratus Red Team adds a new AWS attack technique: Create an EC2 Key Pair with a Suspicious Name⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Create an EC2 Key Pair with a Suspicious Name attack technique for AWS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Detection Engineering · 2026-10-01

Detection Engineering · 2026-10-01

Detection Engineering · 2026-10-01

Stratus Red Team v2.37.0 adds a new AWS EC2 suspicious keypair persistence technique and improves S3 ransomware detonation reliability.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds aws.persistence.ec2-create-suspicious-keypair technique, simulating attacker persistence via ec2:CreateKeyPair with a short generic name (xg1), preceded by an ec2:DescribeInstances recon call filtered by key name; mapped to MITRE ATT&CK T1098.001 (Account Manipulation: Additional Cloud Credentials) with no prerequisite Terraform infrastructure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Improves the aws.impact.s3-ransomware-client-side-encryption technique to allow SSE-C on target buckets before detonation by calling PutBucketEncryption with BlockedEncryptionTypes set to NONE, enabling CopyObject with customer-provided keys to succeed on new buckets that block SSE-C by default.

SIEM · 2026-10-01

Sumo Logic adds four new Automation Service integrations and expands Azure AD, CrowdStrike, and Cloud SIEM actions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Initiate Delegated Auth, Exchange Device Code, and Reset User Password With Writeback actions to the Azure AD integration under Delegated (Device Code Flow) auth, plus new resource fields Authentication Type and Delegated Refresh Token.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Delegated (Device Code Flow) authentication support to the Azure AD integration alongside existing Application (Client Credentials) auth.
• Adds Get Insight Triage and Check Insight Triage Schedule actions to the Sumo Logic Cloud SIEM Automation Service integration.

SIEM · 2026-10-01

AWS Observability v3.0.0 delivers a full rewrite with expanded region coverage, Terraform Module deployment, and next-gen app dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Terraform Module support for AWSO solution deployment, including release versioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Expands AWS region support to non-SAM regions and three newly supported regions: Asia Pacific (Melbourne), Asia Pacific (New Zealand), and Europe (Zurich).
• Automatically configures appropriate Load Balancer policies for AWS regions launched after August 2022.

Endpoint Security (EDR/XDR) · 2026-10-01

File Security Storage template v2.3.1 for Google Cloud adds scan activity filters by Cloud Provider, Account, Region, and grouped scan count tracking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds detailed scan error information to the Scan Activity view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds scan count tracking grouped by Bucket and Scan Type in the Scan Activity view.
• Improves event forwarding throughput for faster scan result availability, especially for high-volume scans.

Endpoint Security (EDR/XDR) · 2026-10-01

TrendAI Vision One Mobile app adds Workbench alert review, Case Management creation, and case status updates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Workbench alert management to the TrendAI Vision One Mobile app, with filtering by time range and display of severity and current status for each alert.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables opening a Case Management case directly from a Workbench alert in the Mobile app.
• Enables updating case status from the TrendAI Vision One Mobile app, with changes reflected in the console.

Firewalls & Network Defense · 2026-09-30

Acalvio ShadowPlex AI Agent launches in Gemini Enterprise Agent Marketplace, generating deception playbooks from natural language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the ShadowPlex AI Agent to the Gemini Enterprise Agent Marketplace, enabling integration with Google Cloud Gemini Enterprise.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables security teams to describe a security objective in natural language and automatically generate a ready-to-deploy deception playbook covering detection of lateral movement, credential abuse, AI-driven reconnaissance, privileged identity threats, and enterprise AI infrastructure.
• Generates deception playbooks across on-premises infrastructure, cloud environments, identity systems, IT and OT networks, and enterprise AI infrastructure from a single platform.

Digital Forensics & Incident Response · 2026-09-30

ALEAPP v2026.4.2 adds E01/AFF/DMG/APFS image support, WhatsApp channels, ExoPlayer media rejoining, and unified aleapp binary across all platforms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends -t raw to read E01, Ex01, SMART, AFF, and AFD acquisitions, Apple disk images (.dmg, .sparseimage, sparse bundles, segmented sets), encrypted Apple disk images, FTK Imager AD-encrypted images, and encrypted APFS volumes — each opened with a supplied password.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds NTFS alternate data stream support under -t raw.
• Adds WhatsApp channels and channel messages as their own artifacts, resolves LID jids for 1:1 chats, groups, and call logs, and reports status text, wa_name, and group pictures in Contacts and Group Details.

Data Security & DLP · 2026-09-30

Bedrock Data launches Agent DLP inside ArgusAI — inline runtime inspection of every AI agent tool call via AWS AgentCore and LiteLLM hooks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Agent DLP to ArgusAI with native hooks for AWS AgentCore and LiteLLM, sitting inline at the agent gateway to inspect every tool call in both directions without acting as a proxy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Inspects both outbound agent requests to MCP tools and inbound tool responses, enforcing data access and regulatory policies to mask, redact, or block sensitive data exposure in real time.
• Logs every tool call decision with its target, action, data types involved, and verdict (blocked, modified, redacted, or observed), producing a continuous audit-ready record of agent activity.

Data Security & DLP · 2026-09-30

Bedrock Security announces an MCP Server providing standardized AI-agent access to its metadata lake, covering 50+ data-context signals.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an MCP (Model Context Protocol) Server as a standardized gateway between AI agents and Bedrock's metadata lake, exposing data sensitivity, risk, lineage, access, and usage signals via the open MCP protocol.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Surfaces over 50 distinct metadata signals — including sensitivity classification, access patterns, and lineage — as queryable context for agentic AI workflows and automated governance pipelines.
• Enables AI agents and external applications to query the metadata lake without custom point-to-point integrations, allowing teams such as legal and compliance to run data investigations without engineering bottlenecks.

Data Security & DLP · 2026-09-30

Bedrock Data launches ArgusAI to link AI models to their data lineage, assess guardrail gaps, and enforce plain-English policies across AI systems.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ArgusAI, a new product that automatically generates an AI Data Bill of Materials (DBOM) by linking Amazon Bedrock Custom Models, Knowledge Bases (RAG), and Agents to the datasets used during training and inference.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Guardrail Gap Analysis that compares policy intent against model data exposure — drawn from the Metadata Lake — and generates targeted remediations to suppress or mask sensitive data at the source or agent runtime.
• Adds Natural Language Policy and Investigation, enabling teams to articulate data controls in plain English (e.g., 'Only members of HR may view employment data' or 'EU personal data must remain within EU regions') and have them translated into enforceable controls across connected systems.

Data Security & DLP · 2026-09-30

Bedrock Security launches a Metadata Lake with Copilot, AI Agents for DSPM, and a free Snowflake edition for data discovery and classification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces the Bedrock Metadata Lake, a graph-backed centralized repository that continuously catalogs enterprise data stores across SaaS, PaaS, and IaaS, capturing location, sensitivity, entitlements, lineage, usage, risk, and more than fifty additional parameters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Launches Bedrock Metadata Lake Copilot, a natural-language interface for querying the metadata lake to identify sensitive assets, riskiest users, and other data-risk questions.
• Introduces Bedrock AI Agents for DSPM, which proactively analyze the metadata lake for policy violations and new risks, gather context automatically, suggest next steps, and guide users through incident-response resolution workflows.

Reverse Engineering · 2026-09-30

Binary Ninja's debugger gains conditional breakpoints backed by a full expression parser with register magic values.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds set_breakpoint_condition and get_breakpoint_condition on the debugger controller to set, read, and clear breakpoint conditions programmatically via the Python API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds add_expression_parser_magic_value API so plugin authors can register custom runtime name-value pairs (e.g. heap chunk addresses, TLS slots) for use inside any expression.
• Supports conditional breakpoints in the Breakpoints widget UI: right-click a breakpoint, select Edit Condition…, and enter any expression such as rax == 0x1234 or [rsp] == 0.

Malware Analysis · 2026-09-30

CAPEv2 adds ignore_junk_filter submission option to force analysis of files blocked by the junk filter, and fixes WinHTTP URL reconstruction.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ignore_junk_filter=1 submission option to bypass the junk-extension/junk-name filter (JUNK_EXTENSIONS, JUNK_NAMES) so files like .txt polyshells can be analyzed on demand.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends ignore_junk_filter support into archive extraction inside demux.py, so files unpacked from archives are also analyzed when the option is set.
• Expands Enhanced registry write tracking to include NtSetValueKey, RegSetValueA, and RegSetValueW alongside the existing RegSetValueExA/RegSetValueExW, and records RegCreateKeyExA/RegCreateKeyExW as a write event only when Disposition == 1 (REG_CREATED_NEW_KEY).

SAST / SCA / Code Security · 2026-09-30

Checkmarx One 3.67 adds automated AI remediation, bulk triage, MCP API Security support, and async CSV export for imports⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds projects.delete event logging to the Audit Trail API, so project deletions are now captured in audit records.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Auto Remediation configuration under Account Settings > AI Assist, where you define projects, branches, scanners (SAST and SCA), and severity thresholds — once enabled, Checkmarx One automatically generates AI fix suggestions and, for GitHub Code Repository Integration projects, opens a pull request with the fix after each scan.
• Adds bulk triage in Risk Orchestration, letting you select multiple risks via checkboxes in the risk table and apply severity, state, change log, and VEX parameter updates across all selected risks — including risks from different scanners — in a single Triage action.

SAST / SCA / Code Security · 2026-09-30

Checkmarx One gains AI-driven Triage & Remediation Assist to move SAST/SCA findings from detection to governed fix with full audit trail.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Triage with AI control in the Risk Orchestration side panel to evaluate eligible SAST findings for reachability, exploitability, and sanitization coverage, automatically setting state to Confirmed or Proposed Not Exploitable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Remediate with AI control for eligible confirmed SAST findings, generating a suggested code fix with a structured what/why/how explanation inside Remediation > AI Remediation.
• Adds automated AI Triage at scan completion, configurable by project, branch, scanner, risk status, and severity, with administrator controls over which parameters a project team can override.

Identity & Access Management · 2026-09-30

Clerk adds a beta Electron SDK (@clerk/electron) for native desktop app authentication with React and IPC bridge support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds @clerk/electron SDK (beta) for integrating Clerk authentication into Electron 28+ apps, requiring Node.js 20.9+ and contextIsolation enabled.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds createClerkBridge() from @clerk/electron to register IPC handlers and token storage in the main process; exposes isPrimaryInstance for single-instance gating on Windows and Linux.
• Adds exposeClerkBridge() from @clerk/electron/preload to publish the renderer-side IPC bridge from the preload script with contextIsolation enabled.

Identity & Access Management · 2026-09-30

Clerk adds an Electron SDK for desktop app authentication using the same web components.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an Electron SDK to integrate Clerk authentication into desktop apps using the same components as web.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-30

Clerk lets specific users bypass enterprise SSO and sign in with an email code when their SSO connection is unavailable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Allows specific users to sign in with an email code when their enterprise SSO connection is unavailable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Internet Services · 2026-09-30

Cloudflare launches Sandboxes: isolated Linux microVM containers and Dynamic Workers for running untrusted or agent-generated code⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sandbox containers backed by Durable Objects: a Worker starts a microVM from a named image (e.g., cloudflare/debian-trixie) with its own kernel and network, controlled via container.start with image, entrypoint, and enableInternet fields.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Dynamic Workers via env.LOADER.load with compatibilityDate, mainModule, modules, and globalOutbound fields, enabling runtime creation of isolated Workers that run untrusted JavaScript, Python, or WebAssembly.
• Supports mounting R2 buckets into sandbox container workspaces and keeping files between instances via snapshots.

Internet Services · 2026-09-30

Cloudflare Containers adds Durable Object Container API with TypeScript/JavaScript SDK for managing containerized workloads⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ctx.container property on Durable Objects to access a container instance directly from TypeScript/JavaScript worker code.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds startAndWaitForPort(container, { port, inactivityTimeout }) utility to start a container and poll its /health endpoint until ready.
• Adds rewriteRequestForContainer(request) utility to rewrite worker requests for forwarding to a container's internal HTTP endpoint.

Internet Services · 2026-09-30

Cloudflare launches cf, a unified CLI with 2,900+ API commands, cloudflare.config.ts config, and plain-language command search.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces cf, a new unified CLI installable via npm install --global cf, yarn global add cf, pnpm add --global cf, or bun add --global cf, covering both the public Cloudflare API and Workers projects.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Provides 2,900+ commands generated from Cloudflare API schemas, enabling management of zones, DNS, storage, and security settings from the command line.
• Adds cloudflare.config.ts as the typed project configuration format for Workers projects, enabling editor and agent autocomplete for bindings and triggers.

Internet Services · 2026-09-30

Cloudflare adds Container snapshot/restore, durable_object scheduling, cache invalidation, multi-client Browser sessions, and richer Zero Trust network log fields⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds scheduling_policy = "durable_object" to [[containers]] in Wrangler config, letting a Durable Object select the container image and instance size at runtime via ctx.container.images and ctx.container.start({ image, instance }).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds support for the cloudflare/debian-trixie Cloudflare-managed image (Node.js 24.20.0 on Debian Trixie slim) usable with the durable_object scheduling policy without configuring a named image.
• Adds snapshotContainer() to the Durable Object Container API (public beta) to capture a full container filesystem, storable and passable back to start({ containerSnapshot }) to restore state after sleep, restart, or Durable Object handoff.

Internet Services · 2026-09-30

Cloudflare adds Containers API, Threat Signals intelligence API, and environment-scoped cache invalidation endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds POST /zones/{zone_id}/invalidate_cache and POST /zones/{zone_id}/environments/{environment_id}/invalidate_cache to invalidate cached content globally or scoped to a specific environment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Containers API under /accounts/{account_id}/containers/applications with endpoints to list, create, get, modify, and delete containerized applications.
• Adds /accounts/{account_id}/containers/applications/{application_id}/instances-v2 for listing container instances, alongside the deprecated /instances endpoint.

Internet Services · 2026-09-30

Cloudflare adds a dedicated CLI for managing resources and a Sandboxes offering for isolated execution via Containers and Dynamic Workers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New Cloudflare CLI lets practitioners manage Cloudflare resources from a single command-line interface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New Sandboxes capability provides isolated execution on Cloudflare using Containers and Dynamic Workers.

Internet Services · 2026-09-30

Cloudflare: Adds snapshot and restore APIs (public beta) to persist a point-in-time Container filesystem.

• Allocates up to 20 GB of disk to any custom Container instance type, independent of memory, removing the previous disk-to-memory ratio limit.
• Enables multiple Workers to share one Browser Run session via concurrent connections.
• Network logs now identify Cloudflare Mesh and Workers VPC traffic, show which Worker started each Workers VPC session, and show which Cloudflare Tunnel and cloudflared replica received each session.

SAST / SCA / Code Security · 2026-09-30

Cycode integrates with Hugging Face to inventory, enrich, and enforce governance over every AI model your org publishes or uses.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Hugging Face integration that connects to your Hugging Face organizations via a read-only token and syncs only the organizations you select, with an initial full pull followed by daily refreshes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Surfaces a unified AI model inventory combining models detected in your code repositories with models published by your connected Hugging Face organizations, including private org models that never appear in a repo.
• Enriches each model with governance metadata pulled from Hugging Face: license, public/private visibility, gated-download status, base-model lineage, parameter count and precision, file types and serialization formats, downloads, likes, Spaces usage count, and benchmark availability.

SIEM · 2026-09-30

Databricks ABAC row filters and column masks now extend to views in Unity Catalog (Beta, DBR 19+).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends ABAC row filters and column masks to views (in addition to tables), enabling Unity Catalog policies to control access to sensitive data exposed through views.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables the ABAC on Views preview via the account console's Previews page (requires Databricks Runtime 19 or above).

SIEM · 2026-09-30

Databricks launches Agent Bricks CLI (databricks-agentbricks) in Beta for building and deploying custom code agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds databricks-agentbricks CLI for scaffolding agent projects from bundled framework templates, running them locally, and deploying to the Databricks agent runtime with managed memory, sessions, tools, and MLflow tracing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-30

OpenAI GPT-6.1 Sol is now available on Databricks Unity Gateway via Foundation Model APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds OpenAI GPT-6.1 Sol model access through Foundation Model APIs on Unity Gateway.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-30

Lakebase Search gains lakebase_tokenizer, a configurable full-text tokenizer with stopwords, synonyms, stemming, and Unicode normalization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the lakebase_tokenizer PostgreSQL extension to control how Lakebase Search tokenizes text, with configurable normalization (lowercase, Unicode, accent-stripping), stopword and synonym lists managed in SQL, and a native English stemmer with possessive-stripping.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Produces standard tsvector output, making lakebase_tokenizer compatible with to_tsvector, GIN indexes, and the lakebase_bm25 index for BM25 ranking.

Endpoint Security (EDR/XDR) · 2026-09-30

Secure Access (VPN / SASE / ZTNA) · 2026-09-30

Windows Roaming Client v3.8.15 Beta adds LocalDomainFallbackEnabled for split-horizon control and hardened VPN compatibility.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds LocalDomainFallbackEnabled setting to control whether local-domain queries that internal resolvers cannot answer fall back to DNSFilter or stay on the local network — enabling correct handling of split-horizon DNS and internal-only zones.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends Disable Roaming Clients for Conflicting VPN Agents in Classic DNS Filtering to apply to all devices, leaving VPN adapter traffic exclusively to the VPN agent.
• Adds a dedicated response window for the device's own resolver during PreCheck on VPN connections, so queries over VPN tunnels resolve reliably even when the tunnel resolver is slower than DNSFilter's policy check.

Data Security & DLP · 2026-09-30

Enveil launches Orbit, a containerized cross-silo data collaboration platform using Privacy Enhancing Technologies for encrypted search and analytics.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Enveil Orbit, a containerized cross-silo data collaboration platform that enables encrypted search and analytics on decentralized data in place, without moving or replicating it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports native interfaces for MCP and A2A to enable secure insight sharing between agentic AI workloads and traditional workloads across silos.
• Enables policy-governed, automated governance and orchestration with auditable control, secure anonymization, and aggregation of cross-silo insights.

Firewalls & Network Defense · 2026-09-30

Fastly adds Network Protect for real-time visibility and defense against network-based attacks on customer network prefixes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Fastly Network Protect, providing real-time visibility into and defense against common network-based attacks directed at network prefixes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Firewalls & Network Defense · 2026-09-30

Fastly adds a Network Protect API for programmatic DDoS filtering, IP prefix registration, GRE endpoints, and rule management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Network Protect API, enabling programmatic registration of customer-owned IP prefixes, configuration of GRE delivery endpoints, management of reusable source prefix lists, and definition of ordered rules for filtering network-layer DDoS traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Firewalls & Network Defense · 2026-09-30

Fastly Terraform Provider beta 0.2.0 adds 20+ new logging integrations, 10+ data sources, and explicit resource management for Edge Dictionaries, Gzip, and Cache Settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds fastly_service_logging_grafanacloudlogs resource for streaming logs to Grafana Cloud Logs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds fastly_service_logging_digitalocean resource for streaming logs to DigitalOcean Spaces.
• Adds fastly_service_logging_elasticsearch resource for streaming logs to Elasticsearch.

Threat Intelligence · 2026-09-30

Feedly Threat Intelligence adds Org Profile, letting teams capture company context and reference it via @ in AI prompts for tailored risk assessments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Org Profile, a shared team workspace to capture organizational context — including Company overview, List, Vendor list (add-on), Audience, Tradecraft, and Tech stack (beta) item types — that Feedly AI uses alongside threat intelligence to produce organization-specific assessments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports importing List items from .csv files and text items from .md (Markdown) files, with Vendor list supporting up to 1,000 companies.
• Enables @ references to Org Profile items inside AI prompts (Ask AI, Intel Agents, Report Builder, Automated Newsletters) to inject saved context without re-pasting it each run.

Reverse Engineering · 2026-09-30

Finite State adds a standalone CycloneDX 1.6 VEX export endpoint with optional triage filtering.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /public/v0/vex/cyclonedx/{projectVersionId} endpoint to export a standalone CycloneDX 1.6 VEX document containing vulnerabilities and analysis, without Components.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports optional triagedOnly=true query parameter on the VEX export endpoint to return only Findings that have a VEX status.
• Improves Policy evaluation after Component and Finding edits so Policy status stays current without queuing behind other Policy work on the same Version.

Secrets Detection & Management · 2026-09-30

Secrets Detection & Management · 2026-09-30

GitGuardian now pushes secret incidents to Wiz as native findings, with SHA-256-hashed context and auto-closing sync.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Wiz integration that daily syncs active secret incidents from version control sources into Wiz as native secret findings, carrying repository, file path, commit, detector, validity, severity, and a link back to the GitGuardian incident.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Transfers only a SHA-256 hash of the secret and its metadata to Wiz — the raw secret value never leaves GitGuardian.
• Maps GitGuardian incident severity directly to the Wiz finding severity, so a critical secret appears as critical in both platforms.

SAST / SCA / Code Security · 2026-09-30

Repository admins can now configure runner type, custom label, and runner group for Dependabot jobs at the repository level.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds repository-level runner configuration for Dependabot version and security updates, letting admins choose Labeled runner or Standard GitHub runner under Settings > Advanced Security > Dependency scanning > Dependabot version updates > Runner type.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports optional custom runner label and runner group when Labeled runner is selected; defaults to the dependabot label if no label is specified.
• Enables Dependabot jobs to target self-hosted runners or larger GitHub-hosted runners — useful for access to private package registries or specialized build environments.

SAST / SCA / Code Security · 2026-09-30

GitHub adds external custom properties (public preview) to sync read-only business context from CMDBs and developer portals into repositories.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds external custom properties APIs, letting enterprise integrations push read-only repository metadata (ownership, service tier, lifecycle stage, compliance status) from an external system of record into GitHub under a dedicated namespace prefix.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports external custom properties everywhere standard custom properties work today, including repository views, repository filtering, and ruleset targeting.
• Port.io is the first partner integration for external custom properties, with a published integration guide for syncing business context to GitHub.

SAST / SCA / Code Security · 2026-09-30

GitLab personal access token creation URLs now support prefilled name, description, and scope parameters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Prefill personal access token creation form fields by appending name, description, and scope parameters to the token creation URL — at least one valid scope is required in the URL.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-30

GitLab Duo Agent Platform now supports AI Gateway deployment inside single-tenant Government Dedicated environments, with Amazon Bedrock connectivity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables GitLab Duo Agent Platform Self-Hosted deployment on agency-controlled infrastructure, supporting air-gapped networks, data residency mandates, and policies barring code transmission to third-party APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• GitLab Dedicated for Government customers can deploy the AI Gateway for Duo Agent Platform inside their own single-tenant environment and connect the model provider of their choice, including Amazon Bedrock, with inference staying in the chosen region under existing SLA, encryption, and change-control policies.
• Supports running AI models on GPU-enabled virtual machines in a private cloud for self-managed inference without dedicated hardware costs.

Reconnaissance & OSINT · 2026-09-30

Hunter is now available as a ChatGPT app, exposing 30+ Hunter API tools — search, verify, leads, and sequences — in plain language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Hunter app for ChatGPT that exposes 30+ tools covering the full Hunter API, including company search, email verification, leads management, and sequence launching, accessible in plain language without leaving the chat.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports first-party setup paths for Claude, Gemini, and Grok in addition to ChatGPT, via Hunter's official MCP server with OAuth.
• Available on all Hunter plans, including Free; existing limits and credits apply.

Reconnaissance & OSINT · 2026-09-30

Hunter now integrates natively with Claude, ChatGPT, Gemini, Perplexity, and any MCP client via https://mcp.hunter.io/mcp⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Connects to Hunter's hosted MCP server at https://mcp.hunter.io/mcp for use with Cursor, VS Code, Windsurf, Codex, Grok Bot, and any other MCP-compatible client.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds native one-click OAuth integrations with Claude (plugin), ChatGPT (app), Gemini (app), and Perplexity, enabling company search, email verification, sequence sending, and lead management from inside each assistant.
• Introduces a Prompts library of ready-made prospecting prompts to paste directly into a connected AI assistant.

Reconnaissance & OSINT · 2026-09-30

Hunter Discover now surfaces new company matches on saved searches, pre-selected and ready to action in bulk.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Saved searches with new matches now appear on the Discover homepage showing the exact count of new results since your last visit.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New matching companies are automatically pre-selected at the top of results when you open a saved search, enabling immediate reveal or save actions.

Endpoint Security (EDR/XDR) · 2026-09-30

Huntress Managed ISPM gains five new Microsoft 365 security controls covering Entra inactive accounts and Exchange Online shared mailboxes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Microsoft Entra control to block sign-in for member accounts inactive for 90 days, schedulable for deployment in Managed ISPM.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Microsoft Entra control to block sign-in for guest accounts inactive for 30 days, schedulable for deployment in Managed ISPM.
• Adds Microsoft Exchange Online control to block sign-in to shared mailboxes, schedulable for deployment in Managed ISPM.

Endpoint Security (EDR/XDR) · 2026-09-30

Identity & Access Management · 2026-09-30

JumpCloud: Introduces SaaS Management for discovering, categorizing, warning on, and blocking shadow-IT SaaS apps via the JumpCloud Go browser extension.

• Changes the default behavior for password policy changes so users are required to comply at their next password change rather than immediately.

Identity & Access Management · 2026-09-30

JumpCloud: Adds multi-select for items to enable bulk management.

• Adds item sorting by nicknames and other criteria.

General Utilities & Libraries · 2026-09-30

kustomize v5.8.2 adds kustomize edit add configuration and kustomize edit remove component commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds kustomize edit remove component command to remove a component reference from a kustomization file via the CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Loads the built-in OpenAPI schema from a pre-compiled bundle embedded in the binary, replacing runtime loading from the Kubernetes API definition.

General Utilities & Libraries · 2026-09-30

kustomize api/v0.21.2 adds label propagation to StatefulSet volumeClaimTemplates, structured-data delimiter handling, and ambiguous path rejection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds includeVolumeClaimTemplates support to propagate labels into volumeClaimTemplates in StatefulSets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Accounts for delimiters in structured data replacements, improving correctness of replacement operations on YAML/JSON values.

General Utilities & Libraries · 2026-09-30

Cloud Security Posture · 2026-09-30

FortiCNAPP September 2026 snapshot adds graph-based anomaly alerts, click-to-filter alerts, and cloud account rollback history.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Polygraph v2 graph-based anomaly alerts for visualizing and detecting anomalous behavior patterns.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables click-to-filter alerts by category and sub-category for faster alert triage.
• Adds cloud account rollback and deployment history tracking.

Malware Analysis · 2026-09-30

Secure Access (VPN / SASE / ZTNA) · 2026-09-30

Menlo Security integrates HEAT Shield Agent with Google Security Operations for closed-loop browser threat response and expands AI agent protection via MARS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Integrates Menlo HEAT Shield Agent with Google Security Operations so that detections stream into SecOps playbooks and analyst-approved responses are automatically enforced by Menlo's control plane — supporting policy changes, blocklist updates, session containment, or any action supported by the Menlo API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Menlo Agent Runtime Security (MARS) to apply real-time inspection to AI agents: stripping hidden prompt injection, sanitizing files with Level 3 CDR, and enforcing data loss prevention as agents browse, authenticate, and handle files inside the Menlo Cloud.
• Streams MARS detections into Google Security Operations alongside other Menlo service telemetry.

Data Security & DLP · 2026-09-30

MIND integrates with Anthropic's Claude Compliance API to ingest Claude Enterprise chats, uploaded files, projects, and activity logs for DLP analysis.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Claude Compliance API connector that ingests conversation content (chats, uploaded files, projects), activity logs, and the organization's user directory for Claude Enterprise customers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds activity log ingestion for Claude Platform customers via the Claude Compliance API connector.
• Extends DLP coverage to Claude Code and Cowork environments via the Compliance API.

Data Security & DLP · 2026-09-30

MIND: Applies sharing policies in real time via MIND's endpoint agent and browser extension when users paste or upload sensitive data into Claude, with options to block, add a confirmation prompt, or coach the user.

• Available to existing MIND customers at no additional cost.

Identity & Access Management · 2026-09-30

Nudge Security adds Adaptive Risk Management: continuous, dynamic risk scoring across SaaS/AI apps as usage evolves post-approval.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds automatic app criticality tiering that classifies every application by breadth of use and data sensitivity using a proprietary AI model identifying up to 29 distinct data types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds continuous dynamic risk scoring built from more than 30 factors — combining vendor external security posture with internal usage signals such as OAuth grant staleness, MCP connections, SSO vs. standalone credential use, and active AI agent integrations — updating automatically as conditions change rather than on a scheduled cadence.
• Adds a risk-to-action panel that ranks specific control gaps (such as enabling SSO or closing stale OAuth grants) by their potential risk reduction, with direct remediation actions available from within the panel.

General Utilities & Libraries · 2026-09-30

Obsidian 1.14.3 adds Quick Look previews on macOS, document icons, Bases grouping controls, and new font-size commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --tooltip-, --notice-, --hotkey, --tab-inner-, and --tab-container- CSS variable prefixes for styling tooltips, notices, hotkeys, and tabs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Quick Look previews for Markdown files on macOS (requires latest installer).
• Adds document icons on macOS and Windows for .md, .base, and .canvas files.

General Utilities & Libraries · 2026-09-30

Obsidian Mobile 1.14.3 adds template support to Quick Capture for daily notes and selected notes on iOS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds template support to Quick Capture on iOS when its behavior is set to daily note or a selected note.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

AI/LLM Security · 2026-09-30

Onyx integrates with TrueFoundry AI Gateway via an open-source wrapper, screening every LLM prompt and response against a single Onyx policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a TrueFoundry AI Gateway integration via an open-source guardrail wrapper that connects Onyx's evaluate API to TrueFoundry's custom-guardrail contract, registering /onyx-input and /onyx-output endpoints to screen prompts and responses.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports per-request guardrail attachment using llm_input_guardrails and llm_output_guardrails headers, so teams can test enforcement without modifying a model's default settings.
• Blocked requests return the policy message configured in the Onyx console, with no wrapper redeploy required when enforcement rules change.

Threat Intelligence · 2026-09-30

OpenCTI adds XTM One integration with mutual request signing via short-lived tokens and internal/public URL split support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports an internal XTM One URL (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ http://xtm-one:4000 in Docker): OpenCTI reads XTM One's public identity and signing keys from /xtm/auth/metadata on that address, allowing the internal and public URLs to differ.

Threat Intelligence · 2026-09-30

OpenCTI 7.260930.0 adds manual security coverage entities, TTP/vulnerability re-linking, and TAXII Client error visibility in the UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds manual security coverage entity creation with entity selection, enabling practitioners to build and track coverage posture directly in the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables manual re-linking of behaviors (TTPs), vulnerabilities, and related entities to assess and refine security coverage.
• Surfaces TAXII Client ingestion errors within the UI so operators can diagnose feed failures without leaving the platform.

Identity & Access Management · 2026-09-30

Ory Kratos v26.3.18 lets after-login webhooks require sign-in with a specific OpenID Connect provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables a login after web_hook with response.parse enabled to require sign-in with a specific OpenID Connect provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

CNAPP · 2026-09-30

Plerion adds MITRE ATLAS AI Framework to Threat mapping alongside ATT&CK Cloud and Containers matrices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Renames the Mitre attack tab on asset views to Threat mapping and adds the matrix picker there.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Vulnerability Management · 2026-09-30

Qualys VMDR adds InstaScan for sub-hour detection from vendor disclosure, with hyper-prioritization against live controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces InstaScan, a scanless scanning capability that delivers a finding within an hour of a vendor disclosure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds hyper-prioritization that tests exploitability against a given environment's actual firewall and EDR controls, rather than using theoretical scoring.

MCP Servers & Tooling · 2026-09-30

Runlayer Terraform module gains AgentCore VPC/PrivateLink networking inputs and scan-budget timeout controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds runlayer_agentcore_consumer_vpc_id with runlayer_agentcore_consumer_private_subnet_ids Terraform inputs to bring an existing VPC for the AgentCore consumer endpoint.
• Adds runlayer_agentcore_consumer_vpc_cidr_block Terraform input (defaults to 10.112.0.0/20) to let the module create a dedicated AgentCore consumer VPC, which connects only via PrivateLink and may overlap other VPC ranges.
• Adds public subnet CIDR input for NAT egress in the module-created AgentCore consumer VPC, one per AZ; when left unset alongside the private list, subnets are auto-derived from the first half of the consumer CIDR block (starting at 10.112.0.0/24).

MCP Servers & Tooling · 2026-09-30

Runlayer agents can now DM any person by email from webhook, schedule, or API runs — no Slack user ID needed.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables agents started by webhook, schedule, or API to send Slack DMs to any person addressed by email (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ assignee_email in the webhook payload) — no Slack user ID required.
• Supports addressing the run owner directly in playground prompts (e.g. 'DM me the summary when you're done') so the agent resolves the sender automatically.

MCP Servers & Tooling · 2026-09-30

Runlayer adds a Platform Analytics section with artifact view metrics, unique visitor counts, and source breakdowns.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an Artifacts analytics section showing Artifact views, Unique visitors, Artifacts viewed, Artifact views over time, Most viewed artifacts, and Views by source (broken down by app, Slack, or MCP client).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Users with View Company Metrics (such as Analytics Admin) see org-wide counts, the chart, and Views by source; others see metrics only for artifacts they created.
• Most viewed artifacts shows artifact titles org-wide only when the viewer also has Manage Agents; otherwise it appears as Your most viewed artifacts and is scoped to the viewer's own artifacts.

MCP Servers & Tooling · 2026-09-30

Runlayer 1.28.902 adds artifact view analytics, custom artifact links, in-place LLM Gateway rule editing, AI-generated agent icons, and Slack DMs from any agent run.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds enable_channels=["slack"] parameter to the create_agent MCP tool so Slack app provisioning is now opt-in; use update_agent to add Slack later.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds RUNLAYER_HAPPY_EYEBALLS=0 environment variable to restore previous per-IP connect behaviour when the network path to Runlayer is down.
• Adds artifact view analytics — a views counter in the artifact header shows how many people opened the artifact, who they were, and whether they arrived via Runlayer, Slack, or an MCP client.

Attack Surface & Exposure Management · 2026-09-30

Attack Surface & Exposure Management · 2026-09-30

runZero 5.1.260929.0 adds merge history view for assets via the Manage menu.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds merge history view for an asset via the Manage menu on the asset details screen.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-30

SonarQube introduces the Agent Centric Development Cycle (AC/DC) framework with Sonar Vortex, Hunter Agent, Remediation Agent, AI CodeFix, and Gitar.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New GET https://docs.sonarsource.com/...?ask=&goal= documentation query API lets agents (or practitioners) ask natural-language questions against SonarQube docs dynamically, with ask for the specific question and optional goal for broader context.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces the Agent Centric Development Cycle (AC/DC) framework, structuring AI-assisted development into three loops: the agentic loop, the CI verification loop, and the code maintenance loop.
• Introduces Sonar Vortex, which provides project-specific context to agents before work starts and analyzes code modifications during generation (agentic loop).

SAST / SCA / Code Security · 2026-09-30

SonarQube adds Sonar Vortex in-agent scanning, AI Hunter/Remediation Agents, architecture analysis, compliance reports, and Rust/MuleSoft/R language support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds SonarScanner for Cargo to scan Rust projects on SonarQube Server.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Sonar Vortex context and analysis, giving AI coding agents architecture awareness, coding guidelines, dependency health, and CI-precision code-change checks inside the agentic loop.
• Adds the Hunter Agent to SonarQube Cloud and SonarQube Server to uncover complex vulnerabilities with AI.

SAST / SCA / Code Security · 2026-09-30

SonarQube 2026.5 LTA adds Vortex AI coding agent, on-prem Remediation Agent, and Hunter Agent for logic-flaw detection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Sonar Vortex, a semantic Code Navigation engine that guides AI coding agents to write code aligned with project standards and prevents introduction of new issues, reducing token consumption during code generation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds SonarQube Remediation Agent, a containerized Agent Core Engine deployable inside Kubernetes or Docker that connects to a cloud LLM endpoint using your own key, requires no public internet exposure, integrates with GitHub, GitLab, or Azure DevOps, and verifies every fix with SonarQube before it reaches a developer.
• Adds SonarQube Hunter Agent, an on-demand background agent that uncovers broken access control, business logic, and authentication flaws using your own Anthropic key, surfacing confirmed findings directly as SonarQube issues rather than in a separate tool or portal.

SAST / SCA / Code Security · 2026-09-30

StepSecurity adds PAT exemptions, configurable abuse thresholds, GitHub audit log review, and classic PAT inventory on GHES.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an Exemptions tab on Apps & PATs to exempt a single token or all tokens a user holds (now and future) for a fixed period, skipping policy checks, pre-expiry reminders, and automated revocation until the exemption expires — with automatic re-enrollment afterward.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Surfaces exemptions created via ServiceNow or through the API on the same Exemptions tab.
• Adds a Configure panel on the PAT Abuse tab to turn each abuse detection rule on or off and set its learning period and thresholds; changes apply from the next audit-log poll and preserve already-learned baselines.

SAST / SCA / Code Security · 2026-09-30

Egress policy enforcement expands to self-hosted Windows (deny list) and macOS (allow list + deny list, block mode) runners.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds deny list egress policy to Self-Hosted Windows Harden Runner v0.10.0, blocking specific destinations while leaving all others reachable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Firewalls & Network Defense · 2026-09-30

Sublime Security launches Email DLP with AI-powered triage, pre-delivery blocking, and Purview sensitivity label support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Email DLP (Data Loss Prevention) as a new capability that inspects every outbound message before delivery, with a Sublime-maintained detection feed covering personal, payment, and healthcare data, credentials, and country- and regulation-specific data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Block Delivery enforcement mode that holds violating outbound messages before they reach the recipient, with senders receiving a plain-language explanation and a one-click unblock request.
• Adds ASA (Autonomous Security Analyst) triage for flagged outbound messages, automatically blocking real violations and releasing legitimate mail without manual review.

Cloud Security Posture · 2026-09-30

Sysdig Secure: Adds an Evaluation column to the Threats list that can be sorted and filtered, surfacing the AI-derived rating and confidence level inline.

• Adds Evaluation and Detection (covering malware and AI categories) and Source as filterable dimensions in the Threats list for Secure AI entitlement holders.
• The Threat detail panel now opens with the threat's evaluation (Malicious, Suspicious, or Benign) and confidence level when the Secure AI entitlement is active.

Cloud Security Posture · 2026-09-30

Sysdig Secure adds AI-powered Threat Evaluation column with Malicious/Suspicious/Benign scoring and confidence levels to the Threats page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an Evaluation column to the Threats page, ranging from Malicious to Suspicious to Benign, enabling sort and filter by evaluation to prioritize the most critical threats first.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a confidence level indicator in the Threat Detail panel alongside the Evaluation score, reflecting the amount of context available for each threat — requires the Secure AI entitlement.

Secure Access (VPN / SASE / ZTNA) · 2026-09-30

Tailscale launches Aperture: an AI agent with LLM gateway proxy, identity-based access, and usage visibility for tailnet machines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Aperture Chat, a browser-based AI agent that connects tailnet machines to tasks and runs commands on them using the authenticated user's Tailscale identity — no separate login or API keys required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces the Aperture gateway, a reverse proxy that sits between LLM clients and providers (OpenAI, Anthropic, Google), injects provider API keys, routes requests by model name, and records per-identity usage and cost.
• Enables LLM clients (coding assistants, automated agents, CI jobs) to route traffic through the Aperture gateway by setting its base URL — no other client configuration required.

Secure Access (VPN / SASE / ZTNA) · 2026-09-30

Tailscale PAM web client now shares a single browser device across tabs, eliminating repeated sign-in prompts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• The PAM web client at my.tailscale.com now runs as a single shared browser-based Tailscale device across all browser tabs, so authenticating once carries forward to every subsequent tab without re-prompting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Detection Engineering · 2026-09-30

Tenzir v6.19.0 adds ClickHouse catch-all JSON columns, print_avro Avro binary encoding, and HTTP/archive package sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds print_avro function to encode events as Avro binary, suitable for message sinks such as Kafka.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• The to_clickhouse operator now stores fields with no matching column in a native JSON catch-all column, preserving all event data in existing tables.
• Supports HTTP URLs and local archives as package sources.

Endpoint Security (EDR/XDR) · 2026-09-30

Trend Vision One can now forward risk events, alerts, and logs to AWS S3 buckets via the Google Security Operations SIEM connector.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports forwarding Cyber Risk Exposure Management risk events to AWS S3 buckets via the Google Security Operations SIEM connector.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports forwarding Workbench alerts, Observed Attack Techniques events, container vulnerabilities, device vulnerabilities, activity data, and audit logs to AWS S3 buckets via the Google Security Operations SIEM connector.

Endpoint Security (EDR/XDR) · 2026-09-30

Trend Vision One agent adds Ubuntu 26.04 64-bit (x86-64) support for Server & Workload Protection and XDR for Endpoint.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports deploying the Trend Vision One agent on Ubuntu 26.04 64-bit (x86-64) endpoints, including Server & Workload Protection and XDR for Endpoint (EDR) features.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-30

Veracode: Adds the policy parameter to veracode.yml for infrastructure-as-code (IaC) scans in GitHub Workflow Integration v2.1.7.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for the predependency_command parameter in veracode.yml for Azure DevOps Workflow Integration v2.4.4, enabling single-line or multiline commands to run before Veracode packages the project.
• Adds support for Jira 11 (including Java 21 and platform compatibility) in Veracode Integration for Jira Server v5.0.2.
• Replaces Veracode Flaw Importer v3 with VeracodeFlawImporter v4 and updates Upload and Scan to v4 in Veracode Azure DevOps Extension v4.0.0.

Vulnerability Management · 2026-09-30

Vuls: Passes through Trivy's repository class to models.Package in the contrib/trivy integration.

• Reports NVD and VulnCheck CVSS scores per source rather than collapsing them into a single score — NVD's own analysis and the CNA's metrics are now both preserved and labelled via Optional['source'].

Web Application Security · 2026-09-30

Wallarm launches a dedicated Incidents page that surfaces confirmed attacks with drill-down to the exact exploiting request.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a new Incidents page in the dashboard showing only confirmed incidents — attacks that hit a real vulnerability and received a response proving it worked.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Provides a time-series chart of requests with incidents alongside top source IPs, endpoints, hosts, attack types and subtypes, and a breakdown of application response codes over the past month.
• Groups incidents by attack type, HTTP method, domain, path, and payload parameter, with drill-down through each level to individual requests.

Container & Image Security · 2026-09-29

Anchore Enterprise policy bundle v2026.1 adds a dedicated STOP gate for CISA KEV-listed vulnerabilities mapped to NIST 800-53 SI-2.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Surfaces per-control failure detail via anchorectl image check <image> --detail -f, returning the specific control and finding that failed rather than a pass/fail count, enabling assessors to trace results to a named requirement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Incorporates CISA's Known Exploited Vulnerabilities (KEV) list and EPSS exploit prediction scores alongside CVSS in the policy engine for risk-based vulnerability prioritization.
• Supports POA&M enforcement through policies, gates, and time-bound allowlists, letting a non-compliant finding be allowlisted with an explicit remediation date rather than silently ignored or blocking all builds.

Identity & Access Management · 2026-09-29

Auth0 plugin for ChatGPT lets you configure tenants, manage users, and generate real SDK code without leaving the chat.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New Auth0 plugin for ChatGPT (findable via the ChatGPT plugins directory) connects to a real Auth0 tenant to create applications, configure connections, and adjust settings by plain-language prompt.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Generates tenant-matched SDK integration code instead of generic boilerplate, so the output compiles against the caller's actual Auth0 configuration.
• Enables querying and managing tenant state — applications, users, and connections — from within a ChatGPT session without opening the Auth0 dashboard.

Attack Surface & Exposure Management · 2026-09-29

Censys adds AI Skills plugin for cencli-powered agents and raises AI investigator batch limit to 100 indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the censys-ai-skills repo, a Claude plugin that exposes cencli commands to AI agents for asset lookups, investigations, and CensEye job execution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Raises the Adversary Investigation AI investigator batch limit from 35 to 100 indicators per submission.
• Adds two new fingerprints to the Platform: software Kiteworks PCN and software Kiteworks Secure MFT Server.

Container & Image Security · 2026-09-29

Chainguard Agent Skills CLI gains --dry-run, --copy, --yes, --tag, and --parent/--group flags for publishing and installing skills⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --dry-run flag to the skills publish command to build and validate an artifact without publishing it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --tag flag (repeatable) to publish a skill under one or more explicit tags, e.g. --tag v1.0.0 --tag latest; omitting --tag publishes as a default and warns that no version was pinned.
• Adds --copy flag to the skills install command to give each agent its own copy of a skill, rather than the default shared symlink under .agents/skills/.

Container & Image Security · 2026-09-29

Chainguard gains FIPS 140-3 validation with post-quantum algorithms, Libraries beta for Go and .NET, and 19 new container images.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds FIPS 140-3 validated Chainguard FIPS Provider for OpenSSL v3.6 (Certificate #5523), including hybrid post-quantum TLS key exchange via ML-KEM paired with classical algorithms, plus standalone ML-KEM, ML-DSA, and SLH-DSA support alongside AES, SHA-2, SHA-3, ECDSA, and RSA; opt-in available for Chainguard FIPS container images starting October 1, 2026.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Launches Chainguard Libraries for Go and .NET ecosystems in an invite-only beta, letting accepted organizations pull Go and .NET packages from Chainguard Libraries into existing development workflows.
• Adds 19 new container images this week, including chainguard-server-hypervisor-gcp, kured (+fips), conftest (+fips), foundry, keepalived (+fips), mcp-grafana-fips, nix, ray, vault-secrets-webhook (+fips), argocd-agent, kates (+fips), kubernetes-pause-fips, and victoriatraces (+fips).

Container & Image Security · 2026-09-29

API surface changed: +1 endpoint, 14 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint DELETE /vulnerabilities/v1/advisory_events/{id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• GET /vulnerabilities/v1/advisories: param createdBeforeTime (query) added; param createdSinceTime (query) added; param eventCreatedBeforeTime (query) added; param eventCreatedSinceTime (query) added

SIEM · 2026-09-29

Internet Services · 2026-09-29

API surface changed: +30 endpoints, 27 modified, 15 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint DELETE /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/groups/{group_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New endpoint DELETE /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/users/{user_id}
• New endpoint DELETE /accounts/{account_id}/dns_settings/nameserver_sets/{nameserver_set_id}

Identity & Access Management · 2026-09-29

ConductorOne adds OIDC sign-in, OpenID AuthZEN real-time authorization, and governed access requests for AI-built internal apps⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an OpenID AuthZEN authorization endpoint so AI-built apps can query ConductorOne for real-time, per-request access decisions instead of relying on stale local role snapshots.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Acts as a standard OIDC provider for AI-built applications, federating authentication to the company's existing identity provider without requiring a separate user table or login page.
• Surfaces access-denied events as governable access requests: employees can submit a request from within the application, owners review it with context, and time-bound access is granted or denied without a code change or redeploy.

Identity & Access Management · 2026-09-29

ConductorOne launches C1 AppHub, a self-hosted internal app platform connecting AI-built apps to identity, authz, credentials, and model access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces C1 AppHub, a self-hosted internal application platform that wires each new app to ConductorOne identity, authorization, credential/token vending, network access, and model access without per-app custom integrations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• AppHub apps are added to C1.ai's identity graph alongside every other connected system, each with an assigned owner, enabling inclusion in access reviews and offboarding workflows.
• Supports a skills file that teaches coding agents the company's approved development pattern — directing them to use C1.ai for sign-in, authorization, credential and token vending, network access, and model access as the app is built.

Digital Forensics & Incident Response · 2026-09-29

Adds ThreatFox analyzer, Elastic Security responder, and CheckPoint Harmony Email & Collaboration responders in v3.10.0⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a new ThreatFox analyzer for querying the Abuse.ch ThreatFox threat intelligence platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds an Elastic Security responder to sync alert statuses between Cortex and Elastic Security.
• Adds CheckPoint Harmony Email & Collaboration responders for incident response actions against that platform.

Security Data Pipeline · 2026-09-29

Cribl launches StreamAI (AI gateway with model routing) and Cribl Detect (full SIEM with 8,000+ detection rules) at CriblCon 26.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Cribl Detect, a complete SIEM built on the Cribl platform with detection, coverage and posture management, investigation, response, and threat intelligence — available now for Cribl.Cloud customers at up to 50% less cost than incumbent SIEMs, priced on infrastructure rather than per-GB ingestion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds StreamAI, an enterprise AI gateway with a built-in model router that routes each prompt to the right model based on SecIT Bench benchmarks, with free inference for customers using automatic routing.
• StreamAI enforces spending budgets and cutoffs, redacts sensitive data in both prompts and responses, and records every model call as audit-ready telemetry.

Threat Intelligence · 2026-09-29

Cyberbro adds GOOGLE_CSE_URL env var to redirect Google Custom Search queries to any compatible endpoint⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GOOGLE_CSE_URL environment variable to point the Google Custom Search engine at any endpoint implementing the Custom Search JSON API (same query parameters and response format), enabling continued use after Google discontinues the API on January 1, 2027⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-29

Databricks Lakeflow Connect adds a 1Password Event Logs connector (Beta) to ingest audit events, item usages, and sign-in attempts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Workspace admins can enable or disable the 1Password Event Logs connector from the Previews page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-29

SIEM · 2026-09-29

Databricks Lakeflow Connect adds a managed Microsoft 365 Unified Audit Logs connector (Beta) for ingesting M365 audit events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a managed Microsoft 365 Unified Audit Logs connector (Beta) in Lakeflow Connect to ingest unified audit events from Microsoft Entra ID, Exchange, SharePoint, and other Microsoft 365 workloads into Databricks, using OAuth machine-to-machine authentication with incremental ingestion support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-29

Databricks Lakeflow Connect adds a Workday Activity Logging connector (Beta) for incremental ingestion of Workday user activity events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Workday Activity Logging connector to Lakeflow Connect (Beta) that incrementally ingests Workday user activity log events into Databricks using OAuth refresh token authentication, controllable by workspace admins via the Previews page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-29

system.ai_gateway.usage gains coding-agent session metadata, invocation source, prompt-cache token fields, and search counts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds token-detail fields to system.ai_gateway.usage capturing tokens written to the 5-minute and 1-hour prompt caches, plus file and web search counts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-29

ai_search now supports Lakebase synced tables via a new lakebase_search knowledge source, combinable with vector_search in one call (Beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds lakebase_search as a knowledge source type in ai_search, enabling retrieval from Lakebase synced tables with Lakebase Search enabled — combinable with vector_search sources in the same call.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Vulnerability Management · 2026-09-29

DefectDojo v3.3.300 adds multilingual UI, Code to Cloud Locations, CSV/Excel/JSON report export, MCP Dashboards 2.0, and a /api/v2/report_schedules/ endpoint.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Report Builder gains export to CSV, Excel, and JSON formats, plus template variables and per-finding / per-asset Triage Engine reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces Code to Cloud Locations: container-image and connector-populated cloud-resource inventories, image-to-repository links, suggested deploys_to edges, typed location items, and Harbor and Trivy Operator connector support for emitting inventories.
• The MCP server adds a Dashboards 2.0 toolset with dashboard support, and the reporting toolset is now customer-visible.

Endpoint Security (EDR/XDR) · 2026-09-29

Public Key Infrastructure (PKI) · 2026-09-29

DigiCert AI Trust Manager now issues AI Passports for agents running in NVIDIA OpenShell, adding cryptographic identity and a kill switch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds AI Passport issuance for every agent, model, and MCP server running inside an NVIDIA OpenShell sandbox, providing cryptographic PKI-rooted identity that OpenShell policy can act on instead of a name in a config file.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds signing and scanning of agents, models, and MCP servers with an AI Bill of Materials (AIBOM) before a sandbox launches them.
• Adds signed, auditable records anchored to the DigiCert AI Root of Trust for every OpenShell allow/deny decision, with confidential-compute attestation attached where applicable.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

DNSFilter expands Branding settings to more MSPs and adds richer category data to Unblock Requests reviews.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends the Branding settings page to MSPs without a custom domain configured, replacing the legacy Whitelabel form, with existing logos carried over automatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds domain category information to the Category column in the Unblock Requests grid even when a domain was blocked for a non-category reason (Block List, AppAware, or Security block).

AI/LLM Security · 2026-09-29

Docker Sandboxes adds sbx daemon restart to reload model provider API keys and runtime changes without a full restart.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx daemon restart command to reload the daemon after setting or changing a model provider API key or adding llama-server to the host PATH.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• The Docker Sandboxes daemon manages a persistent model service that starts at daemon startup, survives individual sandbox or CLI exits, and lets sandboxes share a common model store and loaded models.

AI/LLM Security · 2026-09-29

Docker Sandboxes adds --kit-arg and --kit-args-file flags to sbx --cloud create for parameterizing v2 kit mixins.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --kit-arg flag to sbx --cloud create to pass named arguments (in name=value form) to v2 kit mixins at sandbox creation time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

AI/LLM Security · 2026-09-29

Docker Sandboxes v0.46.0 adds restart-on-timeout for cloud sandboxes, kit-arg passthrough, and richer CLI diagnostics.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --on-timeout restart to sbx --cloud create so a sandbox that hits its time limit stops and immediately restarts instead of remaining stopped.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --kit-arg and --kit-args-file flags to sbx --cloud create for passing values to kits supplied with --kit.
• Adds sbx diagnose --upload returning a non-zero exit status on failed diagnostics uploads, enabling reliable script-level failure detection.

Endpoint Security (EDR/XDR) · 2026-09-29

Eclypsium joins NVIDIA's Open Agent Safety Platform to extend hardware/firmware assurance to AI agent infrastructure including GPUs, DPUs, and BMCs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds AI Infrastructure Assurance coverage for AI-specific components — GPUs, DPUs (including NVIDIA BlueField-4), TPUs, BMCs, NICs, HBM, SSDs, TPMs, and accelerators — inventorying hardware, firmware, and OS code across all of them.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Integrates with NVIDIA Open Agent Safety Platform to extend Eclypsium's firmware integrity verification and vulnerability identification to the infrastructure underpinning NVIDIA OpenShell and NVIDIA Sentry enforcement boundaries.
• Continuously monitors AI infrastructure components for integrity drift, unauthorized firmware modifications, and persistent compromise throughout the device lifecycle — not just at deployment time.

Firewalls & Network Defense · 2026-09-29

Fastly Historical Stats and Real-Time Analytics APIs gain two new AI Firewall metrics for AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds arc_ai_firewall_requests and arc_ai_firewall_blocked metrics to the Historical Stats API and Real-Time Analytics API, tracking AI Firewall activity in AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Firewalls & Network Defense · 2026-09-29

Event logs API now captures Next-Gen WAF config changes from all sources — API, Fastly panel, NG WAF panel, and Terraform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds filter[event_type] support on the list events API for all ngwaf.* event types, covering workspaces, rules, lists, custom signals, redactions, virtual patches, thresholds, workspace alerts, header links, rate limited sources, custom dashboards, request reports, and agent keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends the Event logs API to record Next-Gen WAF configuration changes made through any surface — the Next-Gen WAF API, the Fastly control panel, the Next-Gen WAF control panel, or Terraform — not just changes made through Fastly.

Reverse Engineering · 2026-09-29

Finite State Platform now logs USER_DELETED audit events, retains VEX/comments through reassessment, and speeds up Component replace on large Versions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds USER_DELETED audit event to GET /public/v0/audit — including the deleted user's id and email — when DELETE /public/v0/users/{id} succeeds, and terminates the deleted user's active sessions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Speeds up Component replace and revert on large Versions by evaluating license Policy once per Component rather than per finding.
• Preserves Findings that carry a VEX status or a comment (including SBOM-supplied VEX and triage) through reassessment after exclude, include, replace, or revert operations.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Firezone desktop clients (macOS, Windows, Linux) now ship with a firezone CLI for tunnel control and unattended service-account sign-in.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds firezone connect command that reads a service-account token from stdin or the FIREZONE_TOKEN environment variable, enabling unattended/headless tunnel connections that were not officially supported before.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds the firezone CLI to macOS (v1.5.21+), Windows, and Linux (v1.5.18+) desktop clients for managing tunnel state, viewing Resources, and enabling or disabling the Internet Resource.
• Exposes a macOS-only firezone subcommand for managing the system extension.

Endpoint Security (EDR/XDR) · 2026-09-29

Fleet API gains installer_id param to delete a single package without removing all packages for a title.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds installer_id parameter to the delete-package API endpoint, allowing deletion of only the specified package rather than all packages for a software title.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds install software policy automation that installs an app update the next time a policy fails, regardless of whether the app is open.
• Adds patch-policy automation support that runs software and script automations every time Fleet receives a failing host response when enabled, rather than only on first failure or pass-to-fail transitions.

Secrets Detection & Management · 2026-09-29

GitGuardian adds automatic source-removal rules for team perimeters based on deleted, archived, or unmonitored status.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds automatic team-perimeter eviction rules — configurable per status (Deleted sources, Archived sources, Unmonitored sources) — so members lose access to a source and its incidents as soon as it leaves the team perimeter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secrets Detection & Management · 2026-09-29

GitGuardian's Monitored Perimeter page gains a Coverage Hub, saved views, bulk actions, and team-ownership tracking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Coverage Hub — four summary cards (Integrations, Real time monitoring, Historical scans, Team ownership) above the perimeter table that quantify coverage gaps and link directly to filtered source lists.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds saved views to the perimeter page, including non-editable built-in views: Monitored, Critical sources, With open secret incidents, Scanning issues, and Without honeytoken.
• Adds Columns control to show, hide, or reorder perimeter table columns.

Secrets Detection & Management · 2026-09-29

GitGuardian SaaS: Adds optional author attribution for leaks detected through custom sources (BYOS), allowing an author email to be provided and returned when leaks are found.

• Adds support for monitoring GitLab projects under personal namespaces even when the service account lacks namespace-level access.
• Introduces a per-account setting to keep team access to unmonitored sources and their existing incidents instead of removing them from team perimeters.
• Extends secret value and validity API endpoints to cover secrets found via Public Monitoring, not only Internal Monitoring.

Secrets Detection & Management · 2026-09-29

GitGuardian's new Coverage Hub surfaces unmonitored, unscanned, and unowned sources on the perimeter page with one-click remediation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Coverage Hub to the perimeter page: four cards show installed integrations, share of sources monitored in real time, share scanned successfully, and share owned by a team.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds card actions that filter the sources table to sources needing action — unmonitored, unscanned, or unassigned — in one click.
• Adds a red badge on the Coverage Hub to count sources GitGuardian cannot reach, with a Show more details view listing integrations and flagging unreachable ones.

Secrets Detection & Management · 2026-09-29

GitGuardian API gains occurrence content retrieval and scan list/poll endpoints for secrets and audit workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /v1/occurrences/secrets/{occurrence_id}/content to retrieve the file content and secret match positions GitGuardian stored for a private occurrence, requiring a PAT with read:incident and secrets:read scopes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds GET /v1/public-incidents/secrets/{incident_id}/occurrences/{occurrence_id}/content to retrieve the same stored content for occurrences of public incidents, with the same PAT and scope requirements.
• Adds GET /v1/scans to list historical scans in bulk — the same payload as the scan detail endpoint — supporting the active_or_updated_since query parameter (ISO 8601) to efficiently poll only scans still running or updated since a given instant, sorted by -gg_created_at by default.

SAST / SCA / Code Security · 2026-09-29

New REST API for runner version deprecations lets you query registration and runtime deprecation dates for any self-hosted runner version.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a REST API for runner version deprecations to query registration and runtime deprecation dates for any runner version and build automated alerts for fleets nearing their deadline.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-29

Claude Sonnet 5.5 is now generally available in GitHub Copilot across all supported clients and IDEs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Copilot Enterprise and Business administrators can manage access to Claude Sonnet 5.5 via the model policy in Copilot settings, with new models automatically enabled under default model enablement unless the global default is off or the model is explicitly disabled.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-29

Git 2.56 adds git history drop, git branch --delete-merged, git refs create/update/rename/delete, git repack --drop-filtered, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds drop subcommand to git-history(1) to remove a commit and rebase its descendants in a single command: git history drop <commit>.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --delete-merged flag to git-branch(1) to delete all local branches whose tips are reachable from their configured upstream, removing merged feature branches in one step.
• Adds --forked flag to git-branch(1) as a listing filter to show branches whose configured upstream matches a provided ref, remote name, or branch.

Compliance Automation & Trust Management · 2026-09-29

Hyperproof adds GET /v1/audits/{auditId}/comments endpoint to retrieve comments linked to an audit.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /v1/audits/{auditId}/comments endpoint to retrieve all comments linked to a specific audit.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-29

iDenfy mobile SDKs gain landscape mode, recommended document badge, blur/glare detection, and Smart-ID refresh state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds landscape mode support to the Android SDK.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a recommended document badge in the Android SDK document selection UI.
• Adds blur and glare detection for older Android devices.

Digital Forensics & Incident Response · 2026-09-29

iLEAPP v2026.4.3 adds unified ileapp binary for all platforms, E01/AFD/APFS image support via -t raw, and nine new iOS app parsers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends -t raw to support E01 and Ex01, SMART, AFF and AFD images, Apple disk images (.dmg, .sparseimage, sparse bundles and segmented sets), encrypted Apple disk images, FTK Imager AD-encrypted images, and encrypted APFS volumes (opened with a supplied password).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds NTFS alternate data stream reading under -t raw.
• Adds iOS artifact support for Roblox, KakaoTalk (with message/attachment/phone field decryption and inline media), WeChat, Telekom Mail, BOTIM, VK Messenger, Odnoklassniki, and SimpleX Chat (SQLCipher, keychain key).

Secrets Detection & Management · 2026-09-29

API surface changed: +19 endpoints, −37 endpoints, 19 modified, 12 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint DELETE /api/v1/app-connections/stripe/{connectionId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New endpoint DELETE /api/v2/secret-rotations/stripe-api-key/{rotationId}
• New endpoint GET /api/v1/agent-vault/access-bundles/{accessBundleId}/members/available

Endpoint Security (EDR/XDR) · 2026-09-29

Endpoint Security (EDR/XDR) · 2026-09-29

Iru adds MSP Billing, LAPS for Mac, compliance evidence enhancements, and macOS 27 support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MSP Billing with itemized billing to increase visibility into MSP margins.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds LAPS for Mac as a Library Item.
• Enhances Iru Compliance evidence collection.

Endpoint Security (EDR/XDR) · 2026-09-29

Iru's Privacy Library Item gains a Recommended privacy permissions area for iPhone and iPad, letting admins bundle app and Safari permission prompts into a single consent scr⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Recommended privacy permissions area inside the Privacy Library Item for iPhone and iPad, enabling admins to specify app permissions and Safari website permissions that managed apps and sites will need — surfaced to end users as a single consent prompt with Allow all or Not Now options.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Endpoint Security (EDR/XDR) · 2026-09-29

Iru adds MSP Billing with daily per-tenant spend visibility and self-serve setup in the Partner Portal.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MSP Billing in the Partner Portal, giving managed service providers daily, per-tenant spend visibility, payment method management, billing information updates, and access to past invoices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Endpoint Security (EDR/XDR) · 2026-09-29

Iru adds Windows Vulnerability Management, OS update status visibility, and enrollment invite email routing for Identity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Vulnerability Management and Response deployment support for Windows devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds OS update status visibility per Windows device, showing clear update state across your fleet.
• Enables control over which email address enrollment invites are sent to in Iru Identity.

Endpoint Security (EDR/XDR) · 2026-09-29

Iru Windows Managed OS Library Items now report per-device patch compliance status with build-level detail.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds per-device patch compliance reporting to Windows Managed OS Library Items, showing Pass, Update past due, or Error status alongside current vs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ required Windows 11 build, eligibility date, install enforcement date, and restart enforcement date.

Threat Intelligence · 2026-09-29

API surface changed: 2 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• GET /ransomware/groups: param sort (query) added⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-29

JumpCloud adds MFA frequency controls in Conditional Access Policies (preview) and custom banned password lists.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MFA Frequency Controls to Conditional Access Policies (Preview), letting admins define how often users must re-authenticate with MFA.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Custom Banned Password List support, enabling organizations to block organization-specific weak or prohibited passwords.

Identity & Access Management · 2026-09-29

JumpCloud: Adds new macOS software management policies to delay or block upgrades to macOS 13 Ventura on managed devices.

• Adds Microsoft 365 integration support for M365/Azure AD security groups.
• Adds MDM Upcoming Certificate Expirations widget to the JumpCloud Homepage (single-org view).
• Adds trial recap feature summarizing feature usage during a JumpCloud trial.

Identity & Access Management · 2026-09-29

JumpCloud: Adds POST https://console.jumpcloud.com/systemusers/reactivate/{id} endpoint to replace the deprecated GET api/systemusers/reactivate/{id}.

• Adds full Android 15 support in MDM.
• Adds multiple IP address support to RADIUS server configuration.

Identity & Access Management · 2026-09-29

JumpCloud adds Access Requests, MCP Server, AI Commands Builder, Shadow AI Dashboard, Custom Admin Roles, and major SSO/MFA enhancements in 2025.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sso_auth event to logs for forced re-authentication events, providing audit visibility for compliance and security reviews.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds ForceAuthn='true' (SAML) and prompt=login (OIDC) support so applications can trigger step-up authentication without ending the user's existing session.
• Includes Authentication Methods References (AMR) claims in SAML assertions and OIDC ID tokens, tagging logins with proof of factors used (e.g., password + OTP).

Identity & Access Management · 2026-09-29

JumpCloud: Adds Password Vault in the User Portal (accessible from left navigation after login), supporting credential creation, sharing, personal and shared folders, and bulk import via CSV or Excel file.

• Adds a unified Patch Management dashboard under Device Management > Patch Management with Overview, Apple, and Windows tabs, severity filters, KB search, CVE detail review, CSV/JSON export of KB list, and bulk remediation.
• Improves Dormant Application Access detection in Access Risk > Configuration to trigger only on re-access after inactivity (not first-time access), reducing noise from newly provisioned apps.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds an Okta integration that dynamically manages an Okta IP Zone as users authenticate and grants expire.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Okta as a supported vendor in the Knocknoc agent, using an Okta API Token and Network Zone ID (nzo...) to dynamically rewrite an Okta IP Zone's gateways list as users authenticate and grants expire.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables Okta sign-on policy enforcement by User's IP is in any of the following zones conditions that reference the Knocknoc-managed zone, gating app access to currently authenticated IPs.
• Exposes structured error codes from the Knocknoc agent when Okta API operations fail, with resolution details linked from the admin guide.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc now orchestrates DigitalOcean Cloud Firewalls for just-in-time IP allowlisting on Droplets, Load Balancers, and Kubernetes Clusters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports configurable Direction (Inbound or Outbound), Protocol (TCP, UDP, or ICMP), and Port Range (single port, range such as 8000-9000, or all) per Knoc ACL configuration for DigitalOcean Firewall rules.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Uses a knocknoc tag on DigitalOcean firewall rule sources or destinations to isolate Knocknoc-managed rules, leaving all untagged manually-created rules untouched.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc now orchestrates Cloudflare IP lists for dynamic network allowlisting into Cloudflare WAF and filtering services.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Cloudflare as an Active orchestration target under Firewalls/Appliances in the Knocknoc admin UI, enabling dynamic management of Cloudflare account-level IP lists for WAF and network allowlisting (requires agent version 26.01+).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Includes a JavaScript redirect snippet that sends unauthenticated users to the Knocknoc login portal via a ?referrer= parameter before returning them to the protected Cloudflare-fronted asset.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds GCP integration: dynamically manage VPC Firewall Rules and Cloud Armor Security Policies on user auth/logout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GCP Project ID and Service Account Key (JSON) backend fields in the Knocknoc wizard to authenticate against the GCP Compute Engine API using either a JSON service account key or Application Default Credentials (ADC).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds GCP Mode: VPC Firewall Rule ACL option with Firewall Rule Name and Direction (Ingress/Egress) fields, enabling Knocknoc to dynamically add/remove authenticated user IPs from VPC firewall rule source or destination ranges.
• Adds GCP Mode: Cloud Armor Security Policy ACL option with Security Policy Name, Rule Priority, and Action fields, enabling Knocknoc to dynamically add/remove authenticated user IPs from Cloud Armor security policy rules protecting services behind a Google Cloud Load Balancer.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds AWS WAF IP set integration, dynamically granting/revoking ALB access by updating WAF IP sets via a bundled script.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables the aws integration via /opt/knocknoc-agent/knocker/knocker enable aws, which activates the update-aws-waf-ipset.sh script for dynamic AWS WAF IP set management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds update-aws-waf-ipset.sh (at /opt/knocknoc-agent/scripts/update-aws-waf-ipset.sh) accepting <ACTION> <ACL_NAME_OR_ID> <IP_ADDRESS> arguments to add or remove IPs from an AWS WAF IP set in real time.
• Supports configuring a Knocknoc Backend pointing to update-aws-waf-ipset.sh and mapping WAF IP set IDs to Backends via ACLs in the Knocknoc Admin panel.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds just-in-time orchestration of Amazon AWS EC2 Security Groups, dynamically granting and revoking IP-level access tied to your IDP.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for orchestrating Amazon AWS EC2 Security Groups as a firewall target, enabling just-in-time network exposure for authenticated users without AWS IAM or AWS console access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Requires the AWS CLI (awscli) on the orchestration agent host (Linux: sudo apt-get install awscli or yum install awscli; Windows: installer from AWS) to manage Security Group rules.
• Configures a Knoc via Admin UI under Firewalls -> Active -> Amazon AWS, supplying AWS Access Key, Secret Access Key, Region, Security Group ID (sg-xxxxx), Port, Description, and URL (e.g. rdp:// or ssh://).

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Microsoft Entra ID (Named Location) integration to dynamically gate Conditional Access sign-ins by user IP via Microsoft Graph API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Cloud / SaaS Knoc type with Microsoft Entra ID as a selectable Vendor, enabling dynamic IP-based Conditional Access control via Microsoft Graph Named Locations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Requires the Policy.Read.All and Policy.ReadWrite.ConditionalAccess Microsoft Graph application permissions on the app registration for the Knocknoc agent.
• Exposes Tenant ID, Client ID, and Client Secret backend configuration fields for the Entra integration, using the OAuth 2.0 client-credentials flow against login.microsoftonline.com.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds dynamic IP management for Azure Network Security Groups via a new Azure NSG integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Azure NSG integration to dynamically grant and revoke IP-based access rules in Azure Network Security Groups, configured via Firewalls -> Active -> Azure NSG in the Knocknoc Admin panel.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports a No cache option that removes Azure CLI session tokens and secrets from the Agent's /opt/knocknoc-agent/var/ directory after each grant/revoke, trading performance for reduced credential exposure on the Agent OS.
• Creates NSG rules starting at priority 500 (up to Azure's built-in maximum of 4096), automatically working around pre-existing rules at or above priority 500.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Sophos UTM firewall integration, letting the Knocker utility populate network group objects with user IP addresses.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Sophos UTM firewall integration, enabling Knocknoc to dynamically populate Sophos network group objects with authenticated user IP addresses for use in firewall rules.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sophos as a supported device type in the knocker enable subcommand (/opt/knocknoc-agent/knocker/knocker enable sophos), with interactive prompts for the device IP:port, API key, and network group reference.
• Supports Sophos UTM REST API authentication via API token, created under Management -> Web-Admin Settings -> Restful API -> New API Token.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds native integration with Sophos SFOS/XGS firewalls, managing IP host groups via least-privilege API access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Sophos SFOS/XGS as a supported firewall/appliance integration, allowing Knocknoc to dynamically add/remove IP addresses in a Sophos IP Host Group via the Sophos REST API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports separate IPv4 and IPv6 IP Host Groups on Sophos SFOS/XGS, configurable independently in the Knoc settings.
• Supports Insecure HTTPS mode for Sophos SFOS/XGS connections where the device certificate is not CA-signed, reducing MITM risk when the Knocknoc Agent is co-located on the same network segment.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Cisco SFMC/Firepower integration with both active API orchestration and passive EDL/AllowList support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds active Cisco SFMC/Firepower orchestration via the Cisco REST API, dynamically inserting and removing user source IPs from a named Network Object Group — requires agent version 1.6.0+ and Object-edit-only permissions (no admin required).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds passive Cisco SFMC/Firepower integration via Knocknoc's Allowlist feature, publishing an External Dynamic List (EDL) that Cisco polls on a configurable refresh rate (minimum 30 seconds with Dynamic Attributes Connectors).
• Supports Insecure mode for Cisco Firewall URI configuration when the firewall is not signed by a trusted CA.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds F5 Networks BigIP orchestration via iRules Data Group List and AFM, enabling JIT network access control⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds F5 BigIP iRule orchestration type in the Knocknoc admin UI under Knocs > Firewalls/Appliances > F5 Big-IP, enabling JIT IP allowlisting via iRules Data Group List.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports layer-7 path-based gating via F5 iRules (e.g. /wp-admin), redirecting unauthenticated users to Knocknoc and auto-forwarding them after SSO authentication.
• Uses a batching-window approach to coalesce Data Group List updates into a single F5 API call per window; default window is 1 second, configurable in the Agent configuration file.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Check Point gateway integration in Active (API push) and Passive (EDL/Network Feed poll) modes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Active (API) mode for Check Point gateways: the Knocknoc agent pushes authenticated user IPs to the gateway via the Identity Web API, assigning a pre-existing Access Role, with grant and revoke latency of ~1 second.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds mgmt_cli alternative path for Check Point setup, using identity-awareness-settings.identity-web-api (boolean) and identity-awareness-settings.identity-web-api-settings.authorized-clients.N.{client, client-secret} schema on R82.10.
• Adds identity-awareness-settings.identity-web-api-settings.client-access-permissions.accessibility.allow-access-from setting to control which interfaces the Web API listener accepts connections on (default INTERNAL_INTERFACES).

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds SonicWall orchestration support via Active API, Passive DEAG polling, and Passive+ hybrid modes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Active SonicWall orchestration via the SonicWall API, inserting and removing IP addresses from address-groups in near-real-time as users log in and out of Knocknoc — requires Agent version 25.12+.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Passive SonicWall integration using SonicWall Dynamic External Address Groups (DEAGs), polling the Knocknoc Allowlist URI every 5 minutes to maintain a live authenticated-user IP list.
• Adds Passive+ mode combining DEAG polling with an active API call to trigger an immediate DEAG refresh, reducing the effective polling window from 5 minutes to near-instantaneous for large IP address lists.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Palo Alto/Panorama integration with three modes: Active (real-time DAG), Passive+ (EDL + refresh signal), and Passive (EDL polling).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds knocker enable panos subcommand on the Orchestration Agent to generate a base64-encoded PAN-OS API key for Active and Passive+ integration modes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds PanosRetry and PanosWait agent config keys to tune EDL refresh retry behavior in Passive+ mode (defaults: 16 retries, 2-second wait).
• Adds Active integration mode for Palo Alto/Panorama: real-time IP tagging via Dynamic Address Groups (DAG) with no firewall commit required, supporting VSys, Device Group, Tag Name, Serial Numbers, and optional Map User (User-ID) settings in the Knoc Application.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Fortinet FortiGate/FortiManager integration with Active, Passive+, and Trusted-Hosts orchestration modes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Active mode orchestration for Fortinet FortiGate firewalls, where a Knocknoc Orchestration Agent directly manages IP address lists via the FortiGate REST API, enabling near real-time access propagation on user login/logout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Passive+ mode for Fortinet environments, combining an EDL (External Dynamic List) allowlist with real-time dynamic IP entry push via FortiManager or FortiGate, achieving 1–2 second propagation without requiring the agent to reach every individual FortiGate.
• Supports Fortinet FortiManager as an orchestration target in Passive+ mode, with ADOM and Device Targets (serial numbers) fields to scope push operations across multi-FortiGate environments.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds a local PF (Packet Filter) backend so agents dynamically manage PF tables via pfctl on BSD, macOS, and Solaris hosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for PF (BSD/macOS/Solaris) as a local firewall backend type, where the Knocknoc agent manages a named persist PF table in pf.conf via pfctl — adding and removing user IPs as grants are issued or expire.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds pfctl -t <table> -T show as the verification command to confirm the agent is correctly populating the PF table with granted user IPs.
• Supports creating a Local firewall Knoc in the Knocknoc wizard, where the ACL is configured by selecting or typing the PF table name (e.g., knoc_ssh_allowed) the agent writes to.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc now orchestrates Windows Firewall for just-in-time RDP and other port access via the Knocknoc Agent.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for a Windows host Firewall backend type in the admin portal, enabling Knocknoc to dynamically control named Windows Firewall rules (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Remote Desktop - User Mode (TCP-In) 3389/TCP) per authenticated user.
• Firewall rules prefixed with kn_ or kk_ are automatically discovered and surfaced in the portal drop-down without restarting the agent, updating within one minute of rule additions or removals.
• Supports just-in-time RDP access control on Windows Server 2019 and Windows 10/11 Pro/Enterprise using Knocknoc Agent version 25.12, hiding ports like RDP from unauthenticated sources with a default-deny stance.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds IPSet (Linux Netfilter/IPTables) integration for dynamic IP allow-listing on Linux hosts⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds /opt/knocknoc-agent/etc/ipset.list config file to define IPSet names created on agent startup, including defaults knoc_ssh, knoc_http, and knoc_https⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds create-ipsets systemd service (managed via systemctl restart create-ipsets / systemctl enable create-ipsets) to ensure IPSets are present at boot on Linux agents
• Supports a custom backend script path on the Knocknoc server to invoke a user-supplied wrapper (e.g. /usr/local/bin/ipset_block.sh) for add/del/flush operations, with automatic _v4 / _v6 IPSet name suffixing for dual-stack support

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds a shared Integrations hub with credential rotation, activity visibility, and duplicate-connection merging.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Admin > Integrations as a central hub to define firewall, cloud-platform, reverse-proxy, and on-host enforcement connections once and share them across multiple Knocs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports firewall integrations for FortiGate, PAN-OS, and SonicWall; cloud integrations for AWS, Azure, and GCP; reverse-proxy integrations for nginx and HAProxy; and on-host enforcement via ipset, nftables, pf, Windows Firewall, nginx, HAProxy, or a custom script.
• Adds per-integration activity view showing which Knocs use the integration, who has been connecting, grant volumes, average wait times, and failures.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc publishes integration docs covering 35+ enforcement points: firewalls, cloud platforms, proxies, and identity providers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds documented integration with IPSet (Linux Netfilter/IPTables) for dynamic on-host network access control via IPSets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds documented integration with Windows Firewall for dynamic on-host network access control.
• Adds documented integration with PF (Packet Filter) for dynamic network access control on hosts running PF.

Secure Access (VPN / SASE / ZTNA) · 2026-09-29

Knocknoc adds Trust Engine, PostgreSQL HA, Blocked Address Lists, and SIEM/GELF log integration to its admin guide.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GELF log destination support for SIEM event delivery from the Trust Engine.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds the Trust Engine, which sets per-Knoc conditions on network access and raises SIEM events.
• Adds Blocked Address Lists as a premium licensed add-on to deny access at the Knoc level.

Container & Image Security · 2026-09-29

Kubescape v4.0.15 adds multi-cluster fleet scanning, Quay image scanning, namespace-filter hot-reload, and scan-coverage metrics in reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --fleet-report flag to kubescape scan to write one combined report across multiple clusters specified with --kube-contexts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --show-evidence output that now resolves fix-path line numbers for delete and review paths.
• Adds kubescape config view support for filtering configurations by key.

AI/LLM Security · 2026-09-29

Lasso adds a Claude Enterprise integration via Claude's Compliance API to surface user activity, MCP servers, and conversation content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for connecting a Claude Compliance API key to Lasso, pulling from the Compliance API's activities endpoint to ingest Claude Enterprise and Claude Platform user activity into Lasso's inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• For Claude Enterprise organizations, ingests message content for each chat when a Compliance Access Key minted by the primary owner is added to Lasso, enabling conversation-level inspection for sensitive data, secrets, and policy violations.
• Surfaces each Claude user in Lasso's AI discovery inventory alongside existing agents and AI applications, with a per-user timeline of MCP servers connected and skills invoked.

Digital Forensics & Incident Response · 2026-09-29

Digital Forensics & Incident Response · 2026-09-29

macos-unifiedlogs v0.7.0 adds lzbitmap decompression and initial GoldenGate/iOS 27 log support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds lzbitmap decompression support for parsing log entries compressed with that algorithm.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds initial support for GoldenGate and iOS 27 Unified Log formats.
• Includes additional details extracted from Simpledump and Statedump log entries.

Identity & Access Management · 2026-09-29

Material Security expands its Issues API and MCP server to cover Issues, Messages, Accounts, Groups, Roles, OAuth Apps, and Trusted Entities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Expands the Issues API to cover Issues, Messages, Accounts, Groups, Roles, OAuth Apps, and Trusted Entities as addressable resources for programmatic access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Broadens MCP server tools to work across issues, messages, accounts, and OAuth apps — including updating Trusted Entities (allowlist management) without touching the UI.
• Overhauled the detection explanation experience on the Issue Details page to give analysts specific technical evidence for why a detection fired.

Threat Intelligence · 2026-09-29

MISP v2.5.48 adds XLSX export for events/attributes/sightings and tag removal from misp-module enrichment results.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds XLSX export for events, attributes, and sightings via restSearch and the per-event and mass export pickers, with escape_formulas_literal:1 to switch formula-safe cells to literal apostrophe form instead of quotePrefix cell style.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds remove_tags list support in enrichment and import module result rows, letting modules strip tags from existing attributes instead of creating duplicates, with removed tags surfaced in the resolution screen and EventShell enrichment output.

Digital Forensics & Incident Response · 2026-09-29

MVT's check-bugreport now descends into OEM wrapper archives and recovers previously truncated dumpstate sections⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends check-bugreport to descend into OEM wrapper .zip archives when the outer archive lacks a dumpstate entry point, automatically finding and using the nested bugreport.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Recovers properties lost when a section timing line was misidentified as a section boundary in bugreport parsing, restoring full SYSTEM PROPERTIES output on affected archives.
• Surfaces accessibility service counts (installedServiceCount=N) per user in dumpsys accessibility analysis, raising a LOW alert when services are listed in the count but not named in the dump.

AI/LLM Security · 2026-09-29

Noma extends its agent control plane to employee endpoints, discovering coding and productivity agents via existing EDR/MDM infrastructure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends Noma's agent inventory to employee endpoints, using existing EDR or MDM deployments to discover agents, MCP servers, skills, connectors, and active processes on managed devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a governed registry that automatically assigns every discovered agent, MCP server, and skill a status of approved, needs review, or blocked.
• Adds identity-aware Access Control policies that attribute each endpoint agent to the human behind it, linking to IdP users and groups for per-user, per-group, or org-wide enforcement.

Threat Intelligence · 2026-09-29

OpenCTI can now receive Enterprise Edition licensing from XTM One via xtm:xtm_one_url and xtm:xtm_one_token, and adds redis:tls_cluster_node_mode for per-node TLS cert⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds xtm:xtm_one_url (env: XTM__XTM_ONE_URL, default https://common.xtm1.filigran.io) and xtm:xtm_one_token (env: XTM__XTM_ONE_TOKEN) config keys to register OpenCTI with XTM One every 5 minutes and receive a Filigran-signed Enterprise Edition license from the XTM license server.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds redis:tls_cluster_node_mode (env: REDIS__TLS_CLUSTER_NODE_MODE) config key that, when set, validates each Redis cluster node certificate individually rather than globally.
• Adds a Settings > Filigran Experience page showing Enterprise Edition license source (OpenCTI license or XTM One license), customer, type, and validity dates — with XTM One license status rechecked every 5 minutes and 90-day grace period for expired licenses (no grace for trial or ci license types).

Threat Intelligence · 2026-09-29

OpenCTI 7.260928.0 adds SSVC vulnerability prioritization, Indicator-to-Security-Platform sightings, ingestion logs, and investigation duplication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds number_seen and max_distinct_count counters to the Observed Data data model.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds ingestion logs across all ingestion types (feature flag removed, now always active).
• Adds SSVC risk-based prioritization metrics aligned to CISA BOD 26-04 for vulnerability objects.

General Utilities & Libraries · 2026-09-29

OpenSSL FIPS provider exposes fips-indicator gettable context parameter to signal per-operation approval status at runtime.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Exposes fips-indicator as a gettable context parameter on every algorithm implementation advertised by the OpenSSL FIPS provider, returning 1 when the operation is approved and 0 when unapproved.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• ML-KEM Key Encapsulation marks an operation unapproved when the test-only ikme parameter is supplied.
• ML-DSA and SLH-DSA Signature operations are marked unapproved when test entropy is supplied or when ML-DSA disables standard message encoding.

Identity & Access Management · 2026-09-29

Authorize gateway 1.2.2 shuts down on policy retrieval failure instead of staying alive in an unhealthy state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Authorize gateway 1.2.2 now logs an error and shuts down when it cannot retrieve the latest authorization policy version from PingOne or the locally stored deployment configuration, replacing the previous behavior of remaining alive but unable to serve decision requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-29

Ping Identity adds multi-value node properties, telephone format, Entra ID/SMTP email config, SAML signature skip, and more in Sep 2026 release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds runTargetPhase selection in the Advanced Identity Cloud admin console when running reconciliations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds ability to skip XML signature verification when importing remote SAML 2.0 provider metadata.
• Enables configuration of Microsoft Entra ID or custom SMTP email providers and test-email sending from the Advanced Identity Cloud admin console.

Cloud Security Posture · 2026-09-29

Prowler: Adds DELETE /api/v1/tasks/{id} permission check requiring the permission of the operation that queued the task, and GET /api/v1/tasks now hides tasks of providers outside the role's visibility.

• Adds Lighthouse AI ability to launch a partial scan targeting specific resources to confirm remediations.
• Streamlines AWS provider onboarding to a single-step wizard that reads the account ID from the role ARN and handles credentials and connection test in one submit.

Cloud Security Posture · 2026-09-29

Prowler 5.44.0 adds partial resource re-checks, S3-compatible storage via DJANGO_OUTPUT_S3_AWS_ENDPOINT_URL, and PROWLER_AWS_BOTO3_RETRIES_MAX_ATTEMPTS for retry control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds POST /api/v1/scans support for resource_uids (up to 10 resources) to launch partial scans, with is_partial exposed on scan objects and a filter[is_partial] query parameter on scan list endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds DJANGO_OUTPUT_S3_AWS_ENDPOINT_URL environment variable to direct scan output uploads and downloads at S3-compatible object storage such as MinIO, without polluting process-wide AWS environment variables.
• Adds PROWLER_AWS_BOTO3_RETRIES_MAX_ATTEMPTS environment variable to control Boto3 retry attempts for the AWS provider; set to 0 to disable retries entirely.

Vulnerability Management · 2026-09-29

Qualys TruRisk Eliminate adds Patch Blocking Rules and AI-Powered Patch Reliability Scoring to keep bad patches out of automation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Patch Blocking Rules in TE > Configuration > Patch Blocking Rules (available for Windows, Linux, and Mac in release 4.2), letting you define patches via a QQL query and block them across every deployment job at once without editing individual jobs; scope is controlled by up to five asset tags per rule, with up to 10 rules per platform, and each rule requires a name and blocking reason.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds AI-Powered Patch Reliability Scoring that combines LLM analysis of real-world internet feedback with Qualys rollback and vulnerability-reopen telemetry to rate each patch High, Medium, Low, or Unidentified — automatically skipping Low-reliability patches from zero-touch jobs when reliability intelligence is added to the job's QQL in the Select Patches step.
• Introduces Qualys-curated mitigations as a complementary layer to reduce exposure while a blocked or low-reliability patch is held in testing and staging.

CNAPP · 2026-09-29

InsightCloudSec 26.9.29 adds CIS database compliance packs, container CVE CSV export, and richer Layered Context resource state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Exports container vulnerability findings from the Layered Context list view as a CSV file, with one row per container, CVE, and affected package.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds CIS AWS Database Services Benchmark v1.0.0 compliance pack covering 22 controls across Aurora, RDS, DynamoDB, ElastiCache, Redshift, DocumentDB, Neptune, and Timestream.
• Adds CIS Microsoft Azure Database Services Benchmark v2.0.0 compliance pack covering 47 controls across Azure Cache for Redis, Azure Cosmos DB, Azure Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, and Azure SQL Database — available for Azure, Azure Gov, and Azure China.

Vulnerability Management · 2026-09-29

InsightVM 8.61.0 adds fingerprinting for Microsoft 365 Copilot for Desktop, Office LTSC 2024, Teams, and both Edge release channels.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds fingerprinting support for Microsoft 365 Copilot for Desktop, making it visible in asset inventory and included in vulnerability assessments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds fingerprinting support for Microsoft Office LTSC 2024 as a distinct product, enabling accurate vulnerability findings for LTSC deployments.
• Adds fingerprinting support for Microsoft Teams, allowing it to be identified during scans and assessed for known vulnerabilities.

Threat Intelligence · 2026-09-29

Recorded Future MCP is now GA, giving AI agents OAuth-authenticated access to 80+ intelligence tools including write-back to Watch Lists and Analyst Notes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Recorded Future MCP, a Model Context Protocol gateway exposing 80+ intelligence tools — including threat actor profiles, Risk Scores, ransomware metadata, malware sandbox data, and dark web intelligence — to AI agents via OAuth 2.0 (Client ID/Secret).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables write-back from agents to Recorded Future Platform: agents can update Watch Lists and author Platform Analyst Notes directly, not just read intelligence.
• Accessible as a tile in the Integration Center for activation alongside existing integrations; supports both OAuth 2.0 Client ID/Secret (for integration users) and portal user-based authentication (SSO).

Continuous Control Monitoring (CCM) · 2026-09-29

RegScale CLI 6.49.5 adds an about command to the Axonius v2 integration to surface connected instance details.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an about command to the Axonius v2 integration to display connected instance details.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Continuous Control Monitoring (CCM) · 2026-09-29

RegScale CLI 6.49.0 enriches Wiz STIG/CIS findings with per-criteria observations and expands Ports & Protocols coverage to VPN and cross-account paths.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Wiz STIG and CIS benchmark results now record, in each control test's observations, which configuration criteria produced the pass or fail result and what Wiz found on the host.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Wiz Ports and Protocols records now include ports reachable over VPN and from another cloud account.

MCP Servers & Tooling · 2026-09-29

Runlayer Terraform ECS module gains sandbox egress proxy, SIEM export consumers, and new config inputs for AZ selection and secret-store identity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sandbox_egress_mode Terraform input (values: direct, proxy, proxy_only) to control how AgentCore sandboxes reach the internet, with direct as the default; proxy and proxy_only require runlayer_agentcore_network_mode = VPC.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sandbox_egress_proxy_image_uri input to override the sandbox egress proxy container image; must include an explicit tag or digest.
• Adds sandbox_egress_proxy_dns_servers input (default ["1.1.1.1", "8.8.8.8"]) to set upstream IPv4 DNS resolvers used by the sandbox egress proxy for destination lookups.

MCP Servers & Tooling · 2026-09-29

Runlayer Terraform module gains Bedrock provider fan-out for Slack monitors and a sandbox egress proxy mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds BEDROCK_ENABLED support to the agent-event-trigger consumer, granting nonstreaming bedrock:InvokeModel access to Claude foundation models and deployment-account Claude inference profiles for legacy platform fallback.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sts:AssumeRole grants scoped to arn:aws:iam::*:role/runlayer-bedrock-* and arn:aws:iam::*:role/RunlayerBedrock* so the ECS task role can assume saved Bedrock provider roles for Slack monitors.
• Adds sandbox_egress_mode = "proxy_only" Terraform setting to route all sandbox internet traffic exclusively through the egress proxy.

MCP Servers & Tooling · 2026-09-29

Runlayer adds a unified policy engine extending POST /api/v1/policies to agents, skills, plugins, artifacts, teams, and org-level actions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends POST /api/v1/policies with a unified body shape that targets agent, skill, plugin, artifact, agent_account, team, and org resource types, alongside the existing connector shape.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds effect (replacing connector-shape action), resource ({ "type": "<type>", "ids": [...] }, { "type": "<type>", "all": true }, or { "type": "org" }), and actions (list of action names) fields to the unified policy body.
• Introduces team and org principal types (unified shape only), and an owner principal that resolves to whoever owns the resource being checked.

MCP Servers & Tooling · 2026-09-29

Runlayer 1.28.845 adds OTLP API key ingestion for AI clients, Pi integration, and MDM-only Shadow AI Scan key minting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a new write-only OTLP Telemetry organization API key permission for OpenTelemetry ingestion (logs, metrics, traces) from AI clients such as Claude Code, Claude Cowork, and Glean; created from the Organization API keys page and must be the key's only permission — cannot use the AI Watch scan or hook endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Restricts Shadow AI Scan key creation to the MDM configuration wizard only; the Organization API keys page no longer offers the Shadow AI Scan role, and the API rejects hand-created keys with it, ensuring every key links devices and scan data to a configuration card.
• Adds a Pi integration guide enabling agents built on Pi to route MCP tools through Runlayer, enforce policy on local tools like bash, and record activity in Sessions.

MCP Servers & Tooling · 2026-09-29

Runlayer adds a standalone session-search indexer, flow-trace collection toggles, and VPC/PrivateLink networking controls for ECS deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds FLOW_TRACE_COLLECTION_ENABLED environment variable to enable or disable backend flow-metric generation independently of export transport; defaults to runlayer_central_otel_enabled || runlayer_obs_otel_enabled.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds FLOW_TRACE_ADAPTIVE_SAMPLING_ENABLED as an independent cost lever that sheds local step-recording work even when remote export is off.
• Adds runlayer_agentcore_network_mode Terraform input requiring PUBLIC or VPC; VPC mode requires enable_privatelink = true and either runlayer_agentcore_consumer_vpc_id with runlayer_agentcore_consumer_private_subnet_ids, or runlayer_agentcore_consumer_vpc_cidr_block with matching private and public subnet CIDR lists.

MCP Servers & Tooling · 2026-09-29

Runlayer 1.28.869 adds AI browser inventory, obs-only flow metrics opt-out, Claude Sonnet 5.5 for agents, and connector event triggers for all workspaces.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds flow_metrics_collection_enabled = false Terraform ECS config key to opt out of backend flow-metric collection when observability OTLP export is on and tooling export is off (collection now defaults on in that mode).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• AI Watch Detect now inventories 16 standalone AI browsers built on Chromium — including Perplexity Comet, Dia, Opera Neon, ChatGPT Atlas, Norton Neo, and BrowserOS — on macOS, Windows, and Linux, counting a browser as installed only when its own installation is found.
• AI Watch Detect inventories 16 more standalone AI browsers — including Fellou, Strawberry Browser, Kahana Oasis, and kweo — on macOS, Windows, and Linux.

SOAR · 2026-09-29

Shuffle v2.3.0 brings on-prem/hybrid AI Agents, air-gapped app builds, and automatic stuck-execution reruns via Orborus.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds SHUFFLE_BASE_IMAGE_REGISTRY and SHUFFLE_BASE_IMAGE_NAME config settings for consistent custom/private registry behavior across all deployment types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables AI Agents to run in on-premises and hybrid setups, picking the correct backend address and tool timeouts, recovering late-arriving results, and using local AI credentials or Shuffle AI synced from the cloud.
• Adds automatic rerun system within Orborus to detect and restart stuck workflow executions, reducing the need for manual intervention.

Container & Image Security · 2026-09-29

Snyk Container now reports Go standard library vulnerabilities in container images, shown as a stdlib@<version> dependency.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Go standard library vulnerability reporting for container images: scans identify the stdlib version the binary was compiled with and surface known CVEs against it, shown as stdlib@<version> (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ stdlib@1.25.10) in the dependency graph — enabled automatically for all organizations with no configuration required.
• Supports Go standard library detection across standard, stripped, and CGo builds.
• Requires Snyk CLI v1.1303.2 or later for standard library reporting in CLI-based container scans.

Network Analysis & Monitoring · 2026-09-29

SO-CRATES v4.3.0 ships a bundled, air-gapped CyberChef with full-payload pivoting, bidirectional stream support, and Suricata-extracted file analysis.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Bundles CyberChef (~48 MB added to container image) so the pivot menu's CyberChef lookup works with no internet access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Send to CyberChef from a stream's Payload panel, sending exact bytes in Both directions, or just the Source or Dest side — XOR keys, compressed data, and shellcode arrive intact.
• Adds a Send to CyberChef button in File Info for files Suricata extracted from traffic.

SAST / SCA / Code Security · 2026-09-29

Dev Machine Guard v1.17.0 adds PyPI, uv, and Go Secure Registry policies plus a Claude Code/Codex Agent Plugins inventory and Insomnia credential scanning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds PyPI package config policies that point pip and uv at your tenant's Secure Registry by setting index in pip.conf and uv.toml, storing a shared credential in ~/.netrc, and restoring prior config when the policy is detached.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Go package config policies that set the Secure Registry as the sole GOPROXY in the user's go/env file via the same shared ~/.netrc credential, leaving GOPRIVATE, GONOPROXY, GONOSUMDB, and GOSUMDB untouched.
• Adds support for an optional list of extra .npmrc settings in npm package config policies, delivered to every assigned device inside the managed block, with tokens referenced as ${ENV_NAME} from the developer's environment.

AI/LLM Security · 2026-09-29

Straiker launches the Partner Collective, adding AWS Marketplace availability and an OpenAI Select Partner designation for AI agent security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Launches the Straiker Partner Collective, a formal ecosystem bringing cloud providers, resellers, systems integrators, and ISVs together to deliver AI agent security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Makes Straiker available on AWS Marketplace, enabling procurement via private offers and committed cloud spend drawdown.
• Designates Straiker as an OpenAI Select Partner, providing enterprises a validated security path for building, deploying, and scaling agents on OpenAI models.

AI/LLM Security · 2026-09-29

Straiker launches Heimdall, a cyber-hardened AI sandbox with independent isolation, egress enforcement, tamper-resistant telemetry, and external kill-switch controls for high⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Heimdall, a dedicated AI agent sandbox built on an assumed-breach premise, treating every workload and reachable component as potentially compromised.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Provides dedicated Apple Silicon runner hardware supporting native macOS, Linux, and Windows evaluation environments, each starting from a fresh VM, storage volume, network identity, and credentials per attempt.
• Enforces egress via an independently managed network enforcement point outside the runner, applying default-deny across IPv4, IPv6, DNS, local subnets, management networks, overlays, redirects, proxies, and caches.

SIEM · 2026-09-29

New Sumo Logic app for Amazon Security Lake delivers unified AWS security visibility via OCSF-normalized events and pre-built dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a new Sumo Logic app for Amazon Security Lake that provides unified visibility into AWS security activity across accounts and regions using OCSF-normalized events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Includes pre-built dashboards covering network, identity, application, and host activity to detect threats, investigate anomalies, and assess AWS security posture.

Endpoint Security (EDR/XDR) · 2026-09-29

AI Scanner adds streaming, session-cookie auth, and plain-text response support for custom AI endpoints⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds stream option for custom AI Scanner targets to scan endpoints that return incremental responses (SSE or streamed text chunks), enabling coverage of chat-style APIs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• In JSON streaming mode, AI Scanner applies an existing response template to each SSE/streamed frame as a delta path (e.g. choices[0].delta.content) and concatenates extracted content in arrival order.
• In text streaming mode, AI Scanner reads raw response bytes and joins them until the stream ends.

Endpoint Security (EDR/XDR) · 2026-09-29

ZTSA Module for Android/ChromeOS 2.0.0.1651 adds MDM phone-number fallback and new permission policy controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for using an MDM-provided phone number as fallback device information.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds policy support for managing notification and storage permissions on Android/ChromeOS devices.
• Improves ZTNA session stability and connection resilience.

Endpoint Security (EDR/XDR) · 2026-09-29

Agentless V&TD for Azure gains Flex Consumption Plan migration, China region support, and expanded regional coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Migrates Agentless Vulnerability & Threat Detection and VNet Flow Logs from the Y1 Consumption Plan to the Flex Consumption Plan for non-China Azure regions, ahead of the Y1 plan retirement on September 30, 2028.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds China region support (China East 2, China North 2, China North 3) for Agentless Vulnerability & Threat Detection and VNet Flow Logs, including vulnerability and malware scanning for Azure Virtual Machines, Disks, Azure Container Registry images, and Azure Function Apps, plus VNet Flow Logs collection and forwarding to TrendAI Vision One.
• Expands region support for Agentless Vulnerability & Threat Detection and VNet Flow Logs on Azure subscriptions.

SAST / SCA / Code Security · 2026-09-29

Veracode Security Labs gains team selection for large orgs, Veracode Platform IAM integration, and updated Get Lesson Progress API with new parameters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds updatedAfter parameter to the Get Lesson Progress API to support incremental loads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds excludeNotStarted=true parameter to the Get Lesson Progress API to filter out lessons that have not been started.
• Adds stack field and updated_on field to the Get Lesson Progress API response; shows Not Started when both start_time and end_time are null.

Vulnerability Management · 2026-09-29

Vuls v0.41.0-rc.2 adds Oracle Solaris, Apple security releases, and OpenSSH advisory detection via vuls2⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Detects vulnerabilities in the Oracle Solaris family through the vuls2 detection engine.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Detects Apple security releases through the vuls2 detection engine.
• Detects OpenSSH security advisories through the vuls2 detection engine.

Malware Analysis · 2026-09-29

YARA-X Python API gains set_module_output() to supply pre-computed module data as raw protobuf bytes before scanning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds set_module_output(module, data) to the Python API, allowing callers to supply raw serialized Protocol Buffer bytes as the output for a named YARA module (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 'pe', 'elf', 'dotnet', or fully-qualified names like 'pe.PE') before each scan, enabling reuse of cached module output and support for modules that have no main function and produce no output on their own.

Malware Analysis · 2026-09-29

YARA-X v1.21.0 adds a debug command for atoms, stdin scan lists, Python Scanner.set_module_output, and broader ELF machine type coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Scanner.set_module_output method to the Python bindings for controlling module output during scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds debug command for showing atoms extracted from YARA-X rules.
• Supports reading scan target lists from stdin, enabling pipeline-driven scanning workflows.

AI/LLM Security · 2026-09-28

AI SAFE² CLI 0.9.0 adds controlled Challenge 001 execution with pre-registration, independent grading, and sealed evidence receipts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds safe2 challenge plan command to pre-register the evaluator, provider, treatment, execution limits, command-file identities, and optional system identity before any process runs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds safe2 challenge execute command to run the six frozen Challenge 001 scenarios as separate bounded process calls after explicit operator authorization via --authorize-process-execution.
• Adds safe2 challenge verify-execution command to recheck the plan, source, normalized run, receipt, command-file digests, and optional identity binding without re-running the evaluator.

Data Security & DLP · 2026-09-28

Bedrock Security extends Agent DLP to NVIDIA OpenShell, adding data-aware policy enforcement at the agent sandbox boundary.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends Agent DLP to NVIDIA OpenShell via OpenShell's Supervisor Middleware, evaluating each agent action against enterprise data policies and returning an allow/block decision that OpenShell enforces at the sandbox boundary.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports an observe-only mode that records policy decisions without enforcing them, letting teams validate coverage before turning on enforcement.
• At design time, exposes an agent's blast radius — what data its permissions can reach, what combinations that data forms, and where policy would be violated — giving security teams pre-deployment visibility.

Exploitation & C2 · 2026-09-28

Bugcrowd adds Response Withdrawal requests for both researchers and customers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables researchers to request a response withdrawal through the new Request a Response Withdrawal workflow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables customers to request a response withdrawal through the new Request a Response Withdrawal workflow.

Exploitation & C2 · 2026-09-28

Bugcrowd adds withdrawal tracking for Request a Response, with a dedicated Withdrawn requests to Customer filter in Security Inbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Filters withdrawn Request a Response (RaR) submissions via the Withdrawn requests to Customer filter in Security Inbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Automatically removes researcher-withdrawn RaRs from active queues and preserves them as expandable items in the submission's Activity feed with the withdrawal reason.

Exploitation & C2 · 2026-09-28

Bugcrowd RaR gets self-service withdrawal: researchers can now cancel open requests directly from the submission page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables researchers to withdraw open Request a Response (RaR) requests directly from the submission page at any time, immediately freeing an active account slot and cancelling any review in progress.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Sends a confirmation email and logs the withdrawal reason in the submission's Activity feed when a RaR request is withdrawn.
• Enforces RaR limits at the submission level across both primary researchers and collaborators, with withdrawn requests permanently counting toward the 2-request-per-submission maximum.

Internet Services · 2026-09-28

Cloudflare: Adds exports field to Wrangler configuration for declaring Workflows a Worker defines, accepting type, name, limits, schedules, and default_retention — requires Wrangler 4.139.0 or above.

• Adds ctx.exports so a Worker can call Workflows it declares in exports by class name using the same API as a Workflow binding, without needing a separate binding — requires Wrangler 4.142.0, @cloudflare/vite-plugin 1.61.0, or @cloudflare/vitest-plugin 1.3.0 or above.
• Extends WebMCP support to Kitesurf sessions (in addition to Lab sessions), using the document.modelContext API; adds --category-experimental-webmcp flag to Chrome DevTools MCP to expose list_webmcp_tools and execute_webmcp_tool tools; Lab sessions no longer expose navigator.modelContextTesting.
• Adds a product-level R2 bandwidth usage metrics page in the Cloudflare dashboard, split by object upload and download per bucket or across all buckets, with the same data exposed via the GraphQL Analytics API.

Internet Services · 2026-09-28

Cloudflare API v7.11.0 adds Managed Defense vulnerability scanning, zone tracing, Hyperdrive restart, SFU/TURN media APIs, and AI Search endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET/PUT/DELETE /zones/{zone_id}/observability/tracing/settings and GET/PUT/DELETE /zones/{zone_id}/observability/tracing/rules endpoints to view, update, reset, and manage trace rules for a zone.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds GET /accounts/{account_id}/managed-defense/vulnerability-discovery/repos and POST /accounts/{account_id}/managed-defense/vulnerability-discovery/repos endpoints to list and create vulnerability-discovery repositories under Cloudflare Managed Defense.
• Adds GET /accounts/{account_id}/managed-defense/vulnerability-discovery/scans and GET /accounts/{account_id}/managed-defense/vulnerability-discovery/scans/{scan_id}/report endpoints to retrieve vulnerability scans and reviewed vulnerability reports.

Internet Services · 2026-09-28

Cloudflare adds WebMCP to Browser Run, new Workers tracing APIs, crawl event subscriptions via Queues, and per-domain email suppressions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ctx.exports access for Workflows declared in the exports field of Wrangler configuration, including in local development.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds getActiveSpan(), recordException(), startSpan(), and setAttributes() APIs to Workers tracing, enabling span creation without changing active context, exception annotation, and bulk attribute setting.
• Adds document.modelContext API support for WebMCP in Browser Run Kitesurf sessions, testable via the Chrome DevTools WebMCP panel.

SAST / SCA / Code Security · 2026-09-28

Cloudsmith adds a pnpm credential helper that feeds registry tokens from the CLI credential chain, removing static token management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds pnpm-credential-cloudsmith, a credential helper that lets pnpm authenticate to Cloudsmith registries using the CLI credential chain (API key, SSO keyring token, or OIDC) via pnpm's tokenHelper setting in the user-level .npmrc.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Installer writes a //npm.cloudsmith.io/:tokenHelper=/path/to/pnpm-credential-cloudsmith entry to the user-level .npmrc; set NPM_CONFIG_USERCONFIG to target a non-default user config file.
• Supports -w/--workspace WORKSPACE flag on credential-helper pnpm to discover custom Cloudsmith npm domains for a workspace, with --domain HOSTNAME, --no-discover, --refresh, --dry-run, and --bin-dir DIRECTORY options.

SAST / SCA / Code Security · 2026-09-28

Cloudsmith adds Early Access Nix binary cache support: push NAR packages via CLI and consume via native Nix substituters⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Nix binary cache format (Early Access) with upload via cloudsmith push WORKSPACE/REPOSITORY STORE_HASH.nar --narinfo-file STORE_HASH.narinfo, supporting optional narinfo sidecars and standard push flags --tags, --republish, and --no-wait-for-sync.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Serves Nix packages at https://nix.cloudsmith.io/WORKSPACE/REPOSITORY using the native Nix binary cache protocol, with server-side ED25519 signing of every narinfo on read.
• Supports authenticated consumption by embedding a token in the substituter URL: https://token:TOKEN@nix.cloudsmith.io/WORKSPACE/REPOSITORY.

SAST / SCA / Code Security · 2026-09-28

Cloudsmith: Adds the cargo-credential-cloudsmith credential helper, installable via credential-helper, which registers itself in $CARGO_HOME/config.toml (or ~/.cargo/config.toml) under the [registry] global-credential-providers list and resolves Cloudsmith API keys, SSO tokens, and OIDC credentials automatically — requires Cargo 1.74+.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports the sparse Cargo registry protocol via sparse+https://cargo.cloudsmith.io/WORKSPACE/REPOSITORY/ in addition to the existing git-index endpoint.

SAST / SCA / Code Security · 2026-09-28

Cloudsmith adds Nix upstream repository support in Early Access via web app, API, and CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Nix upstream repository support (Early Access) accessible via the Cloudsmith web app, API, and CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-28

Cloudsmith CLI v1.21–v1.26 adds Nix package push, Cargo and pnpm credential helpers, and terminal-based repo GPG/access management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Nix package support, enabling cloudsmith push for Nix packages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a Cargo credential helper so Rust projects authenticate to Cloudsmith repositories automatically.
• Adds a pnpm credential helper so pnpm authenticates to Cloudsmith repositories automatically.

SIEM · 2026-09-28

Databricks Apps now supports horizontal scaling GA: multiple instances behind one URL with zero-downtime deployments and session affinity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables running a Databricks app across multiple instances behind a single app URL for higher availability and concurrency, with zero-downtime deployments and best-effort session affinity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Vulnerability Management · 2026-09-28

Edgescan adds bulk asset scheduling improvements and global role cloning to organizations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables cloning a global role to a specific organization, scoping the same permissions to that organization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Improves bulk asset workflow so that assessment scheduling confirmation only appears when actually setting or moving an assessment start date.

SIEM · 2026-09-28

Elastic Security adds a native two-way Sublime Security integration, correlating email threat telemetry with endpoint, identity, and network signals and enabling SOAR-driven⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a native Sublime Security integration that ingests email threat telemetry (flagged message, detection rationale, targeted recipient, and Sublime action taken) into Elastic Security for correlation with endpoint, identity, and network signals.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a two-way SOAR integration with Sublime Security inside Elastic Workflows, enabling response actions on the Sublime side — such as triggering a blast-radius quarantine using a SHA-256 hash from an Elastic Defend finding — without leaving Elastic.
• Attack Discovery agentic workflow correlates Sublime Security email alerts with endpoint and other signals into unified, MITRE ATT&CK-mapped attack chains, querying raw logs and gathering supporting evidence before surfacing a prioritized incident to analysts.

General Utilities & Libraries · 2026-09-28

goshs v2.1.7 enforces per-folder .goshs ACLs across SFTP/FTP/TFTP/SMB via ProtocolACL and adds folder upload to the web UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces httpserver.ProtocolACL, a fail-closed enforcer that wires per-folder .goshs ACL checks into every SFTP, FTP, TFTP and SMB read, write, list, rename, and handle-creation path — folders protected or blocked over HTTP are now denied outright on all protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds folder upload to the web UI: whole directory trees (including subdirectories) can be dragged, dropped, or selected for upload with structure preserved server-side; .. path components and .goshs path segments are refused.
• Extends all block-list and never-serve enforcement points across HTTP, WebDAV, SFTP and directory listing filters to compare names case-insensitively, closing bypasses on Windows and macOS filesystems.

Identity & Access Management · 2026-09-28

JumpCloud 2022 adds certificate-based RADIUS auth, TOTP for LDAP, Remote Assist, Password Manager, and new MSP command templates⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Command After Agent Install command type so admins can specify enrollment commands to run immediately after the JumpCloud agent is installed on new devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Running column to the commands queue to distinguish commands waiting in the queue from commands that are actively running.
• Adds certificate (passwordless) based authentication to JumpCloud RADIUS, supporting certificates from any X.509 compliant certificate authority.

Identity & Access Management · 2026-09-28

JumpCloud 2023 adds passwordless Go SSO, Android zero-touch enrollment, dynamic groups, remote Background Tools, and self-service device provisioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Password Date as a viewable column on the Users page in Admin Portal, showing when a user's password was last set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Strengthens JumpCloud Go SSO with user and device verification on every application session, and sets JumpCloud Go as the default MFA method for conditional access policies on SSO apps.
• Adds support for Active Directory Integration (ADI) on 2022 DCs and member servers without workarounds or decreased functionality.

Identity & Access Management · 2026-09-28

JumpCloud 2024 adds Device Monitoring & Alerting, SaaS Management, Windows App Catalog, BYOD iOS 18 MDM, new CSP policies, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /systemusers?filter=department:$in:Finance | Accounting|IT API filter support for the pipe | character escaped with \ inside in and nin filter operators, enabling pipe characters within search terms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Replaces the deprecated GET api/systemusers/reactivate/{id} endpoint with POST https://console.jumpcloud.com/systemusers/reactivate/{id} carrying activation_email in the request body.
• Updates Dynamic Groups API memberQuery filters to use $lte and $gte operators in place of the deprecated $le and $ge operators for alignment with other API list endpoints.

Identity & Access Management · 2026-09-28

JumpCloud: Includes Authentication Methods References (AMR) claims in SAML assertions and OIDC ID tokens to provide per-login proof of MFA factors used (e.g., password + OTP), aligned with RFC 8176.

• New JumpCloud Access Requests feature enables configurable approval flows, with webhook integration to external ticketing systems such as JIRA for automatic ticket creation and real-time notifications.
• Adds tracking of Access Request events in Directory Insights.
• JumpCloud MCP Server is now GA, letting compatible AI tools and code editors interact with JumpCloud organizational data and administrative capabilities via the Model Context Protocol.

Identity & Access Management · 2026-09-28

JumpCloud gains Password Vault, Patch Management dashboards, Agent Identities, Android policy expansion, and an AI Assistant knowledge base in 2026-09.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Client secret basic and Client secret post client authentication type options on an agent's Authentication tab so agent OAuth credentials match the exact method required by external platforms such as Amazon Bedrock AgentCore.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Knowledge Base Uploads for AI Assistant, accepting PDF, TXT, DOCX, and MD files (10 MB max per file, 25 files max per org) into a private, org-scoped knowledge base so the assistant can answer questions about internal runbooks, SOPs, and policies, with source attribution in chat.
• Adds a Dashboard tab to AI Gateway showing org-wide MCP server usage, tool call volume, error rates, summary cards, trend charts, and rankings for top servers, clients, and users with per-server drill-down.

Identity & Access Management · 2026-09-28

JumpCloud adds RSS feed subscriptions for release notes, agent updates, and bug fix announcements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds RSS feed subscriptions for JumpCloud Help Center content, including product release notes, agent release notes, and bug fix reports via Subscribe to Support RSS Feed, Subscribe to Release Notes and Bug Fixes RSS Feed, Subscribe to Agent Release Notes RSS Feed, and Subscribe to Bug Fixes RSS Feed options on the Release Notes and Bug Fixes page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-28

JumpCloud Password Manager Desktop App adds EU region support, raised storage limits, ARM macOS build, and shared folder admin controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds EU region support; users can select their region on the activation page (desktop app) or pairing page (browser extension) before activating their account.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Raises item storage limits to 13,000 items with autofill enabled, up to 5,000 items per shared folder, and up to 30,000 items when autofill is not used.
• Introduces a Move All items button in shared folders to move all items from a folder at once.

AI/LLM Security · 2026-09-28

Mend CLI mend code gains --print-to-console flag and auto-excludes /_MACOSX/..* metadata from all SAST engines⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --print-to-console flag to mend code CLI SAST scans, streaming scan logs directly to stdout in addition to the log file.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Default exclusions in mend code CLI scans now automatically ignore /_MACOSX/..* metadata files across all SAST scan engines, preventing macOS system files from interfering with the TreeSitter parser on Windows.

AI/LLM Security · 2026-09-28

Mend Renovate adds gomod versioning support and applies downgrade guard across all versioning schemes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds gomod versioning scheme, enabling Renovate to version-match Go module dependencies and query pseudo-versions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Applies the downgrade guard to every versioning scheme, not just select ones, preventing accidental downgrades across all package managers.
• Extends Poetry versioning to accept PEP 440 specifiers instead of relying on a lookup special case.

AI/LLM Security · 2026-09-28

Mend AI extends Suppress and Review triage actions to the individual finding level for more precise control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends Suppress and Review triage actions to the individual finding level, enabling security teams to triage specific findings within an entity independently rather than only at the entity level.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-28

Mend SCA adds Bun package manager support for JavaScript dependency scanning in CLI and repository integrations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Bun package manager support to the Mend CLI and Mend Repository Integrations, automatically detecting direct and transitive dependencies in JavaScript projects using package.json alongside bun.lock or bun.lockb files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-28

Mend SAST 26.9.1 adds --print-to-console flag to mend code and auto-excludes macOS metadata files from all SAST scan engines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --print-to-console flag to mend code CLI scans, printing scan logs directly to stdout in real time in addition to the log file.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Default exclusions in mend code CLI scans now automatically ignore /_MACOSX/..* metadata files across all SAST scan engines, even when default exclusions are otherwise disabled.

SAST / SCA / Code Security · 2026-09-28

Mend SCA 26.9.1 adds Bun package manager support for automatic detection of direct and transitive JavaScript dependencies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Bun package manager support in the Mend CLI and Mend Repository Integrations, enabling automatic detection and reporting of direct and transitive dependencies in projects using package.json alongside bun.lock or bun.lockb files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Network Analysis & Monitoring · 2026-09-28

Netcap v0.9.15 adds Roaring bitmap indexes for Community ID, certificate, fingerprint, and timeline facets — cutting filtered counts from ~2.6 ms to ~29 µs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Prefilters audit streams with Community ID bitmaps, enabling fast record selection without full-file scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Reuses Roaring indexes for multi-ID records and fingerprints across the table, menu, and four charts via generation-checked snapshots.
• Indexes certificate and timeline correlation facets, including exact host=<ip> and repeatable communityId=<value> timeline facets with per-track postings, cursor pagination, nearest-event lookup, and duration overlap; falls back to exact scanning above a 32 MiB per-capture bitmap cap.

SAST / SCA / Code Security · 2026-09-28

Noir now supports Gori as a DAST pipeline integration target alongside ZAP, Burp Suite, and Caido.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Gori as a supported DAST pipeline integration target alongside ZAP, Burp Suite, and Caido.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-28

Noir gains --diff-ref for git-based attack surface diffing with --fail-on CI gating and markdown/SARIF output formats⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --diff-ref <revision> flag to noir scan to diff the current working tree's attack surface against any git revision (branch, tag, commit, or HEAD~1) without a second checkout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --fail-on flag accepting comma-separated categories (added, removed, changed, auth-removed) to exit with a non-zero code when the diff contains those categories, enabling CI gating on attack surface changes.
• Supports -f markdown-table output for diffs, rendering a count table followed by routes that lost auth and separate tables for added, removed, and changed endpoints — suitable for pull request comments.

SAST / SCA / Code Security · 2026-09-28

Noir docs reveal Diff Mode for attack-surface comparison across git revisions with --diff-ref and --fail-on CI gating.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --diff-ref flag to compare the current attack surface against another path or git revision, reporting added, removed, and changed endpoints as well as lost auth coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --fail-on flag to fail CI when Diff Mode detects regressions in the attack surface.
• Adds a Tagger subsystem that applies contextual tags to discovered endpoints.

SAST / SCA / Code Security · 2026-09-28

Noir v1.4.0 adds --diff-ref attack-surface diff mode with auth-removal detection, SARIF/markdown reports, and ~1.75x faster full scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --diff-ref to diff the attack surface against a git revision, flagging changed endpoints and lost authentication as auth_removed; --fail-on exits with code 3 on matching findings, and the GitHub Action exposes diff_ref and fail_on inputs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Diff mode renders markdown and SARIF diff reports for CI consumption.
• Merged endpoints now carry every contributing technology in details.technologies.

Integrated & IT Risk Management · 2026-09-28

Adds engine.intake.blocked_but_held check that fails the doctor when a source marked unreadable is found on disk⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds engine.intake.blocked_but_held diagnostic that cross-references every source the audit cannot read against extracted titles in the intake register, failing the doctor on any match where a document is on disk but not being read.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Integrated & IT Risk Management · 2026-09-28

RiskShard v0.11.0 adds per-anchor composition breakdown to every figure, citation, and executive report section.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds engine/composition.py to partition each shard's per-event mean across its three anchors using the beta-PERT mean identity, exposing how much of a figure each anchor contributes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Surfaces anchor composition in three places: each explorer item, the executive report's How much to trust it section, and the citation — which now refuses to emit a figure without the breakdown.
• Publishes Finding 10 in docs/FINDINGS.md, showing that anchor weighting by contribution to the final figure diverges sharply from a raw count: three shards are 92%, 92%, and 98.8% measured on impact while drawing 100% of their frequency mean from an out-of-population source.

SAST / SCA / Code Security · 2026-09-28

StepSecurity lets you exempt specific GitHub Actions from the low-score control by name or owner wildcard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds exemption support for the 'Third-party GitHub Actions with high scores should be used' control, configurable under Settings > Control Evaluation in the Control options card, allowing Actions to be exempted by exact name (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ example-org/example-action) or owner wildcard (e.g. example-org/*).
• Exemptions are version-independent — any version ref in an exemption entry is ignored, so the exemption covers every version of the Action.

SAST / SCA / Code Security · 2026-09-28

Veracode integrations gain IaC policy param, Veracode Fix for SCA in GitHub, VS Code file filters, and new GitHub platform management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for custom predependency commands in the Veracode YAML file to prepare projects before scanning in GitHub Workflow Integration v2.1.3.
• Adds a custom agent pool name parameter to veracode.yml in Azure DevOps Workflow Integration v2.4.3 to specify the agent pool for pipeline execution.
• Adds support for scheduling analysis_branch scans in Azure DevOps Workflow Integration v2.3.10, so scheduled scans run against the specified branch instead of the default branch when analysis_branch is set in veracode.yml.

AI/LLM Security · 2026-09-28

WitnessAI adds MCP server/tool discovery, approved-tool enforcement, and bidirectional content inspection for enterprise AI agent governance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an organization-wide approved-tool list for MCP servers and tools, enforced at the network level before agent calls execute across IDE, chat, and agent surfaces via Agentic Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds MCP server and tool visibility through the Observe module, identifying agentic sessions by inspecting tool advertisements in traffic payloads across Claude Desktop, VS Code with AI extensions, and local agents built on LangChain, LlamaIndex, CrewAI, and custom code.
• Adds bidirectional content inspection via the Protect module's runtime APIs, evaluating agent inputs before processing and responses before delivery, with malicious prompt detection validated in production across more than 100 LLMs.

Endpoint Security (EDR/XDR) · 2026-09-28

XFA Beta lets you require specific antivirus products (Microsoft Defender, ClamAV, Windows Security Center partners) per OS in device policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the ability to require specific antivirus products in device policy for Windows (Microsoft Defender or any product registered with Windows Security Center) and Linux (ClamAV or Microsoft Defender for Endpoint), with suggestions drawn from your device inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Device details view, sign-in verification screen, and risk emails now surface which antivirus product is required vs. detected so users understand why a check fails.

Endpoint Security (EDR/XDR) · 2026-09-28

XFA now lets you set separate OS version requirements per platform — Windows, macOS, Linux, Android, iOS, and iPadOS each get their own policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports per-platform OS version policies, letting you set distinct warning or blocking thresholds for Windows, macOS, Linux, Android, iOS, and iPadOS independently.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a dedicated OS version policy for iPadOS, separate from iOS.

Endpoint Security (EDR/XDR) · 2026-09-28

XFA desktop app gains a personal security view for checking your own computer, with or without an org connection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a personal view in the desktop app for checking your computer's security posture without being connected to an organization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a setup wizard to guide users through initial configuration of personal device checks.
• Adds per-organization views showing which checks each organization requires, kept separate from personal checks.

Endpoint Security (EDR/XDR) · 2026-09-28

XFA adds self-invite so users can join their org via email one-time code without waiting for an admin invitation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables self-invite in Awareness settings (Beta) so users can join their organization by entering a work email and confirming with a one-time code, without an admin-sent invitation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Integrated & IT Risk Management · 2026-09-27

CISO Assistant v4.0.7 adds in-app notifications, audit log download, risk trajectory, domain-level x-rays, and Mermaid diagram support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds in-app notifications center for real-time alerts within the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds downloadable audit log (pro) so teams can export a full activity trail.
• Adds risk trajectory and projection view to track how risk posture changes over time.

Secrets Detection & Management · 2026-09-27

AI Hooks now withhold tool output from Claude Code, Codex, and Mistral Vibe, and extend coverage to Kiro and Junie CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds api_timeout config key and GITGUARDIAN_API_TIMEOUT environment variable to override the previously fixed 60-second API timeout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds ggshield machine setup subcommand to register AI Hooks for Kiro and Junie CLI in one step.
• AI Hooks now withhold shell-command output containing secrets from the model context on Claude Code, Codex, and Mistral Vibe — the assistant receives only the ggshield message, keeping the secret out of the model session transcript.

Threat Intelligence · 2026-09-27

Lookyloo v1.41.1 adds console message capture, WebAuthn/OPFS exposure, and onion-site tagging via Onion Lookup.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a kvrocks config sample at full_index/kvrocks.conf-big_instance for tuning large deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Gathers and renders browser console messages during captures.
• Exposes WebAuthn entries discovered during page captures.

CNAPP · 2026-09-27

Plerion Azure workload scanning expands to App Service, VM Scale Sets, Container Apps, Container Instances, and Batch pools⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends vulnerability, sensitive data, and SBOM scanning to Azure App Service web apps, Virtual Machine Scale Sets, Container Apps, Container Instances, and Batch pools — in addition to the virtual machines and functions already covered.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Covers Service Fabric node types through their underlying scale sets.
• Samples Uniform-orchestration scale sets by image, scanning one member per distinct image.

Identity & Access Management · 2026-09-26

1Password SaaS Manager adds AI Assistant beta, temporary access policies, Kolide EU region, and contract API enrichment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /contracts API responses that now include the main application associated with each contract.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds an AI Assistant (public beta) that answers questions about app risk levels.
• Adds temporary-access-only Access Policies, allowing time-limited grants without requiring an unlimited access duration option.

Exploitation & C2 · 2026-09-26

ADscan v13.1.0 adds honest ADCS outcome labeling, a Most Exposed Accounts block, and Entra Connect sync-account Tier-0 classification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• ADCS findings now report exactly one of three outcomes: validated (CA reachable and escalation completed end-to-end), data gap (weakness detected but CA unreachable, with the next step named), or directory hygiene (decommissioned CA still registered); an ESC8 finding additionally names the web-enrollment transport (HTTP or HTTPS) and the observed channel-binding state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a Most Exposed Accounts block under the exposure headline in the report and platform, ranking accounts by number of compromise paths that reach them (and how many were validated end-to-end), to prioritize Protected Users membership, tiering, credential rotation, and LAPS.
• Identifies Microsoft Entra Connect / MSOL_* directory-synchronization accounts holding directory-replication rights and classifies them as Tier-0 control-plane assets in the report, coverage report, and platform.

Identity & Access Management · 2026-09-26

Aembit: Adds ${saml.response.subject.nameId}, ${saml.response.issuer}, and ${saml.response.attributes['<name>']} expressions so OAuth 2.0 Authorization Code Credential Provider dynamic claims can read values from a SAML 2.0 response, binding each issued credential to the individual SAML user's identity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds credentialType: X509Svid to AembitSecretRefreshSchedule so Aembit Secrets Operator generates a private key in-cluster, obtains a signed certificate from Aembit, and writes both to a kubernetes.io/tls Secret (tls.crt and tls.key) for mutual TLS; the private key never leaves the cluster and certificates renew automatically.
• Enables the MCP Enterprise Managed Access Token Credential Provider in the Aembit Tenant UI, obtaining per-user MCP server access tokens through a corporate identity provider so users reach MCP servers behind the MCP Identity Gateway without a per-user consent prompt.
• Records MCP tool filtering decisions — which control decided the outcome, which rules matched, which tools were removed, and the return count — under application.mcp.contentSecurity in MCP workload authorization events.

Web Application Security · 2026-09-26

Arcjet launches agent runtime security with observe, enforce, and audit capabilities for AI agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports ingesting agent activity via OpenTelemetry events without code changes, enabling real-time visualization and analysis in the Arcjet Console.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Pulls agent activity data from the Claude Compliance API for teams using Claude.
• Introduces Arcjet Guards — Rego and Open Policy Agent-powered deterministic policies applied to tools, APIs, database calls, and input variables, configurable via the Arcjet Console, CLI, MCP, or API without code redeployment.

Endpoint Security (EDR/XDR) · 2026-09-26

Automox extends KEV status, EPSS scores, and CVE severity data to macOS patches, enabling risk-based policy targeting across all platforms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Extends existing KEV- and EPSS-targeted policies to automatically include macOS devices with no policy configuration changes required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Updates console views, Analytics, and reports to reflect CVE counts and severity levels for macOS based on the expanded vulnerability data.

Exploitation & C2 · 2026-09-26

Bugcrowd Researcher Platform adds Submission Collaborator, enabling researchers to collaborate on submissions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Submission Collaborator, allowing multiple researchers to collaborate on a single bug submission.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Container & Image Security · 2026-09-26

Chainguard adds EU Sovereign Artifacts beta, Guardener now covers GitHub Actions, and 26+ new container images.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Guardener automated migration tool now covers GitHub Actions in addition to container images, inventorying Actions across an organization's repositories, mapping them to hardened Chainguard equivalents, and opening pull requests pinned to a specific SHA rather than a mutable tag.
• Guardener runs in two modes: an upfront pass that surfaces existing Actions usage and opens migration pull requests, and ongoing standardization that watches workflow files and suggests Chainguard equivalents as new upstream Actions appear.
• Adds tutorial for pulling packages from Chainguard package repositories through Sonatype Nexus as pull-through caches for apk packages.

Container & Image Security · 2026-09-26

Chainguard: Adds chainctl skills describe and chainctl skills pull support for full hardened artifact references including the user-namespace path (skills.cgr.dev/<org-uidp>/users/<user-namespace>/<skill>@sha256:<digest>).

• Hardened skill downloads include a HARDENING.md report alongside SKILL.md in the ./hardened/<skill-name>/ output directory, summarizing changes and open scanner findings.
• Hardening jobs are deduplicated server-side: submitting the same organization, user, skill name, and content digest returns the existing job ID rather than creating a new one.
• Uploads target uploads.cgr.dev by default in production; no registry environment variable is required.

Container & Image Security · 2026-09-26

Chainguard: Adds chainctl skills harden to submit uploaded agent skills for hardening and track jobs through to completion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports uploading original skills to uploads.cgr.dev/<your-org>/<skill> before hardening.
• Publishes hardened skill results under skills.cgr.dev/<org-uidp>/users/<user-namespace>/<skill>, namespaced to the uploading user within the org.

Identity & Access Management · 2026-09-26

Clerk: Enables Publish CIMD support toggle under Client onboarding in OAuth application settings, letting MCP and other public OAuth clients authenticate via HTTPS URL as client_id without a pre-issued secret or Dynamic Client Registration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Client admission control to OAuth application settings, with a Pre-registered clients only mode to restrict flows to reviewed clients.
• Introduces SMS delivery events (sms.accepted, sms.delivered, sms.failed, sms.undeliverable, sms.unconfirmed) with a normalized reason field (e.g. invalid_phone_number, destination_unreachable, rate_limited) logged in a dedicated SMS logs view for all plans.
• Allows Organizations to have more than one SAML or OIDC enterprise connection simultaneously, removing the previous organization_already_has_sso_connection limit, across the Clerk Dashboard and Backend API.

Internet Services · 2026-09-26

Cloudflare: New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{member_zone_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{member_zone_id}

Internet Services · 2026-09-26

Cloudflare adds Browser Run queue subscriptions, Workers OpenTelemetry span APIs, Gateway traffic-destination policies, and MCP portals GA⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds wrangler queues subscription create <QUEUE_NAME> --source browserRun --events crawl.started,crawl.updated,crawl.finished to subscribe to Browser Run crawl lifecycle events via Cloudflare Queues, enabling event-driven downstream processing without polling.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds scope field to the Email Sending suppressions API (POST /client/v4/accounts/$ACCOUNT_ID/email/sending/suppressions) with values account and sending_domain, enabling per-domain suppression granularity; scope_type=sending_domain&scope_value=<domain> filters list results.
• Adds tracing.startSpan(name), tracing.getActiveSpan(), span.recordException(exception), and span.setAttributes(attributes) to the Workers custom spans API, expanding OpenTelemetry span instrumentation support.

SAST / SCA / Code Security · 2026-09-26

Cloudsmith client logs now capture format-specific metadata for all package formats, revealing full request chains beyond direct downloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Client logs in the Cloudsmith web app now capture format-specific metadata across every supported package format, exposing package metadata fetches alongside direct package downloads for full traffic visibility.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-26

ConductorOne: Removes GET /api/v1/tasks/{task_id}/spend-remedy-status; JS/TS clients must handle spend-control revision values as strings and handle new TYPE_SPEND_REMEDY = 7 task action type.

• Renders entitlement request forms directly in the Slack modal when requesting or extending access through the C1 app for Slack.
• Groups now display member count at the top of the group detail page.

Identity & Access Management · 2026-09-26

ConductorOne adds Revoke inherited access to trace and remove upstream group/role grants, not just direct entitlements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Revoke inherited access toggle per app that traces entitlement access through direct grants, nested groups, role hierarchies, and delegated provisioning, revoking upstream sources automatically — not just the immediate entitlement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Shows a banner to approvers listing downstream effects before a revocation is committed, preventing surprise removals.
• Applies inherited-access revocation to all revocation triggers, including denied access review campaigns.

Identity & Access Management · 2026-09-26

ConductorOne adds serverless TypeScript Functions for custom automation, external API calls, and identity workflow logic⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Retrieves API keys and secrets inside function code via functions.getConfig() for secure credential access at runtime.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Imports external npm packages dynamically inside functions using the npm: prefix.
• Accesses pre-authenticated C1 APIs inside functions via the @c1/functions-sdk package.

Identity & Access Management · 2026-09-26

ConductorOne adds Dynamic Access Control with auto-enrollment and auto-unenrollment via JML membership automation on access profiles⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a JML page on each access profile where admins configure joiner rules (enrollment approval policy, optional Maximum membership duration) and leaver rules (revocation policy, post-unenrollment entitlement handling).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Membership automation configuration on the access profile JML page: select entitlements as the membership condition, define an Excluded users list, and toggle Grant and revoke entitlements on membership change to drive auto-enrollment and auto-unenrollment.
• Adds anomaly-detection safeguard (Pause automation when anomalies are detected) that pauses any membership sync removing more than 20% of members within a single hour for profiles with 100 or more members; the cutoff is adjustable via Removed members threshold (%) in the Anomaly detection section.

Identity & Access Management · 2026-09-26

ConductorOne adds Access Profiles for grouping entitlements, role mining recommendations, and granular enrollment expiration controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Access Profiles (Governance > Access profiles) to group apps and entitlements into requestable bundles scoped by audience — all org members or only users who hold specific entitlements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds profile membership requests via the Profiles tab on the New request form and Requests page, letting users request all entitlements in a profile at once for onboarding scenarios.
• Adds Maximum membership duration and Access change behavior settings on the access profile's JML tab to cap enrollment length and control what happens to grants when enrollment expires.

Identity & Access Management · 2026-09-26

ConductorOne adds secrets inventory, zero-knowledge secret sharing, workload federation, and tripwire decoy credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Secrets tab on the Inventory dashboard to track API tokens and service account keys across connected systems (Okta, GitHub, AWS, Snowflake, Datadog, and Google Cloud Platform), attributed to owning identities with alerts for recently-unused or orphaned keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds credential stores that hold provisioning-generated passwords created when C1 provisions a new account through a connector, decryptable by store owners or the account recipient.
• Adds zero-knowledge secret sharing for one-time delivery of any secret — passwords, API keys, JSON service-account files, .env blocks — to a named recipient inside or outside the org; encryption happens in the sender's browser, C1 never sees plaintext, and access expires after a configured time or view count.

Threat Intelligence · 2026-09-26

Cyberbro adds Microsoft Tenant Check engine to identify Microsoft Entra ID tenants and Office 365 mail from domains or emails⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ms_tenant_check engine that queries https://login.microsoftonline.com/<domain>/.well-known/openid-configuration to confirm whether a domain is registered as a Microsoft Entra ID (Azure AD) tenant.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Returns tenant_id (Azure AD tenant GUID), tenant_region_scope (e.g. EU, NA), mx_records, is_office365_mx, tenant_found, and domain fields for each lookup.
• Supports FQDN and email observables — for email addresses, the domain part is extracted automatically (e.g. user@contoso.com → contoso.com).

Threat Intelligence · 2026-09-26

Cyberbro adds Microsoft Tenant Check and ScanMalware engines for keyless domain, email, IP, and URL analysis.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ms_tenant_check engine (accepts domain, email; free, no API key) to check whether a domain or email address is linked to a Microsoft Entra ID (Azure AD) tenant via the OpenID configuration endpoint, and detects Office 365 usage via Google DNS MX record lookups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds scanmalware engine (accepts domain, URL, IP; free, no API key) to query the ScanMalware sandbox archive for verdicts on directly-scanned addresses — verdicts are never inferred from redirect targets.

Threat Intelligence · 2026-09-26

Cyberbro v0.15.2 adds Microsoft tenant check capability.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Microsoft tenant check feature to verify tenant information during analysis.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-26

Genie Code can now orchestrate end-to-end intelligent document processing pipelines for PDFs, contracts, and invoices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Genie Code now builds end-to-end document processing pipelines that orchestrate parsing, classification, extraction, and validation against unstructured PDFs, contracts, or invoices, with iterative quality improvement evaluated against labeled data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Web Application Security · 2026-09-26

DataDome CloudFront Node.js v3 splits exclusion config into two env vars and adds URI inspection defaults.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds DATADOME_STATIC_ASSET_EXCLUSION environment variable to hold static-asset extension exclusions separately from custom URL exclusions, enabled by default with a standard list.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Splits DATADOME_URI_REGEX_EXCLUSION so it now holds only custom URL exclusions, removing static-asset extensions from its scope.
• Adds DATADOME_REMOVE_MATRIX_PARAMS setting (enabled by default) so DataDome strips matrix params (;) before regex evaluation, matching existing query-param (?) handling.

Detection Engineering · 2026-09-26

dev-v3.0.0 ships offline ES|QL validation, XDR/SIEM taxonomy tags, ES|QL sub-query support, and a wave of new detection rules.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Replaces remote ES|QL validation with offline validation via detection-rules-esql-py 0.1.0, checking rules at load time against min_stack_version and local schemas; DR_BYPASS_ESQL_KEEP_VALIDATION and DR_BYPASS_ESQL_METADATA_VALIDATION still skip only the KEEP and FROM metadata checks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Removes the --esql-remote-validation flag; queries no longer need to be posted to an Elasticsearch cluster for validation.
• Adds XDR/SIEM taxonomy tags (phase 1) to rules.

Identity & Access Management · 2026-09-26

Didit: Adds liveness_camera and liveness_camera_switch query parameters to the verification URL for controlling camera selection and switcher visibility when opening the flow directly without the SDK.

Public Key Infrastructure (PKI) · 2026-09-26

DigiCert CertCentral: Adds Persistent DNS TXT automatic domain revalidation: CertCentral revalidates domains via the Persistent DNS TXT DCV method every five days, eliminating the need to manually resubmit domains before the nine-day revalidation window expires.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

DNSFilter macOS Roaming Client 2.4.6 adds IPv6 support, DoH VPN fallback, and component mismatch detection; dashboard gains Blocked By column and scoped deployment access controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Blocked By column to the Active Requests and Request History grids, showing the reason each domain was blocked (consistent with the Query Log's Method column), also visible in the approval drawer.
• Adds Last Logged In User as a default column and Friendly Name as an optional column in the CyberSight Top Clients View All grids on Activity Overview and AI Usage.
• Adds type-to-confirm requirement for Roaming Client delete and cleanup deletion actions to prevent accidental mass deletions.

Hacking Hardware · 2026-09-26

ESP32 Marauder v1.17.0 adds multiple saved WiFi profiles with scan-first selection and configurable wardrive geofences.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for multiple saved WiFi profiles with scan-first selection, allowing the device to scan and choose from stored network profiles.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds configurable wardrive geofences to restrict or define geographic boundaries for wardriving sessions.

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

Firezone launches an MCP server at https://rest-api.firezone.dev/mcp, letting Claude and other AI assistants read and manage your account.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an MCP server at https://rest-api.firezone.dev/mcp supporting Streamable HTTP transport and OAuth, enabling any compatible AI assistant to manage Firezone Resources, Policies, Sites, Gateways, Groups, Actors, Clients, and logs via plain-language prompts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Claude Code integration via claude mcp add --transport http firezone https://rest-api.firezone.dev/mcp, letting practitioners automate Firezone administration from the Claude Code CLI.
• Exposes granular read/write permission scoping at connect time — read permissions are selected by default, and write permissions (create, change, delete) must be explicitly granted per object type.

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

Firezone adds a Terraform provider, cloud Gateway modules (AWS/GCP/Azure), a REST API, and an MCP server for AI assistant integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Firezone Terraform Provider to manage Portal configuration — Sites, Resources, Policies, Groups, and Gateways — as code.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds cloud-specific Terraform Gateway Modules for AWS, GCP, and Azure to deploy a scalable Gateway cluster behind a cloud NAT with a single egress IP.
• Adds a REST API for programmatic management of Resources, Policies, Gateways, and more without Terraform.

Endpoint Security (EDR/XDR) · 2026-09-26

Fleet API gains CVSS-range vulnerability filtering, APNs ping, MDM command cancellation, and Microsoft Graph credential management endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds severity_min and severity_max query parameters (CVSS v3.x base score, 0–10) to the vulnerability host-count chart endpoint to filter results by CVSS score range; vulnerabilities without metadata are included only when neither filter is set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds POST /api/v1/fleet/hosts/:id/apns_ping to send a blank APNs push notification to a macOS, iOS, or iPadOS host, prompting it to check in and pick up pending MDM commands or profiles.
• Adds PUT /api/v1/fleet/microsoft_graph_credentials as a declarative replace endpoint for Microsoft Graph credentials; accepts tenant_id, client_id, and client_secret, validates each new/changed credential against Microsoft Graph before saving, and deletes any stored credential whose tenant_id is absent from the supplied list.

Secrets Detection & Management · 2026-09-26

GitGuardian SaaS: Adds report_status field to historical scan progress responses, signalling done (with final duration_seconds, pending_seconds, and outcome_by_reason) or unavailable independently of scan_status, so callers know when the audit summary is ready rather than just when the scan has finished.

Secrets Detection & Management · 2026-09-26

GitGuardian Self-Hosted 2026.9 adds Bridge networking, honeytoken endpoint protection, AI hooks for Codex and Mistral Vibe, and vaulted-secret classification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GGBridge.bridges Helm values key to declare GitGuardian Bridge servers, enabling scanning of sources in isolated networks (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ a GitLab instance behind a firewall) without opening inbound connections.
• Adds inAppAnalytics.postgresql.applicationSchema, useSeparateAnalyticsSchema, and analyticsSchema Helm/config keys so in-app analytics can write to custom PostgreSQL schemas instead of public.
• Adds replicated.supportBundle.nodeSelector, tolerations, and affinity Helm keys to schedule the support bundle pod on specific or tainted nodes.

Secrets Detection & Management · 2026-09-26

GitGuardian Self-Hosted: Adds per-team incident permissions when promoting a user to Member, and extends linked Jira ticket comments to cover reassignment, regression, validity, access grants and revocations, public sharing, and feedback events.

SAST / SCA / Code Security · 2026-09-26

GitHub Copilot enterprise managed settings now include an in-product validator that catches malformed JSON, bad team mappings, and unsupported configs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an in-product validator in the Copilot settings validation section of the enterprise AI controls page that detects malformed JSON, unsupported configurations, and invalid team mappings in copilot/managed-settings.json, copilot/team-mappings.json, and referenced team settings files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-26

Copilot usage metrics API gains pull_request_review_times array with per-stage PR review durations at median and p90.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds pull_request_review_times array to each repos-1-day row in the enterprise and organization Copilot usage metrics API, reporting median_minutes_ready_to_first_review, p90_minutes_ready_to_first_review, median_minutes_first_to_final_review, p90_minutes_first_to_final_review, median_minutes_final_review_to_merge, and p90_minutes_final_review_to_merge — all durations in minutes, attributed to the day the pull request merged.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Each pull_request_review_times entry includes authored_by, reviewed_by (both human in this release), and total_merged to identify which pull requests contribute to each timing row.
• Available to enterprise owners, billing managers, organization owners, and custom roles with the View Copilot Metrics Permission when the Copilot usage metrics policy is enabled; returns [] on days with no qualifying pull requests.

SAST / SCA / Code Security · 2026-09-26

Copilot gains Claude Opus 5.5, GPT-6, Grok 4.7, local sandboxing with OpenTelemetry, and new Slack/JetBrains/VS Code capabilities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds local sandboxing in the GitHub Copilot app (public preview) to limit agents' access to files, networks, and credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds OpenTelemetry support in the GitHub Copilot app to track agent activity in existing monitoring tools, configured through enterprise-managed settings.
• Adds Claude Opus 5.5 model to Copilot Pro+, Max, Business, and Enterprise plans.

SAST / SCA / Code Security · 2026-09-26

GitHub Copilot in Slack and Teams gains file/image context, model switching, and default owner/repo settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for setting default owners and repositories in Slack so Copilot knows where to create work without per-message prompting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports inline images, forwarded-message context, and channel and thread history as context in Microsoft Teams.
• Enables switching models mid-conversation for the next message, with the choice persisting throughout that conversation.

SAST / SCA / Code Security · 2026-09-26

GitHub adds private saved views for repository issues and GA Relates to issue relationships across APIs, webhooks, and search.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Relates to issue relationship support to the REST API, GraphQL API, webhooks, timeline events, issues search, and projects search.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds private saved views for repository issues pages, letting users create and save personalized issue filters.

SAST / SCA / Code Security · 2026-09-26

GitLab: Adds retry:when reason for jobs stuck in pending state despite matching runners being available, enabling targeted retry on scheduling delays.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds retry:when reason for jobs stuck in pending state because no runners match the job's requirements (tags, protected status, etc.).
• Adds retry:when reason for jobs in running state with no activity for an extended period (hung script or lost runner connectivity).
• Adds retry:when reason for jobs stuck in canceling state with no activity for an extended period.

SIEM · 2026-09-26

Google SecOps: Adds POST /v1beta/{parent}:search to execute searches and GET /v1beta/{parent}/searchedResults to retrieve results from a search session via the new v1beta.projects.locations.instances.searchSessions.searchedResults resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /v1alpha/{name}:fetchWizRelatedIssues to fetch Wiz-related security issues for a specific case, enabling Wiz integration within SecOps case management.
• Adds a full remediation-plan lifecycle API under v1alpha.projects.locations.instances.remediationPlans: POST /v1alpha/{parent}/remediationPlans:generate to trigger the remediation agent, POST /v1alpha/{name}:execute to execute a plan, GET /v1alpha/{parent}/remediationPlans to list plans, and PATCH /v1alpha/{remediationPlan.name} to update a plan.
• Adds GET /v1alpha/{name}:suggestQueryFields to retrieve query field autosuggestions based on user and tenant-level usage.

Password & Credential Cracking · 2026-09-26

Hashcat adds three bridged generic hash modes (72000, 73000, 74000) for custom Python or Rust hash functions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds hash modes 72000, 73000, and 74000 — bridged generic modes where the hash is computed by user-supplied Python or Rust code, enabling cracking of fully custom hash functions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Password & Credential Cracking · 2026-09-26

Hashcat table attack (-a 5) now supports toggle-case via tables/toggle.table for Latin, Greek, and Cyrillic⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds tables/toggle.table for use with the table attack (-a 5) to toggle case at every letter position independently, covering Latin, Greek, and Cyrillic scripts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Password & Credential Cracking · 2026-09-26

Hashcat gains -a 9 association attack mode, pairing per-account words with their specific hashes for targeted cracking⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 9 association attack mode, which pairs each candidate word with its corresponding hash by line number rather than trying every word against every hash — slashing cost to hashes × guesses-per-hash.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports running -a 9 with only a hash file, where Hashcat derives candidate words (surname, joined tokens, exact name) directly from the username or metadata embedded in each line.
• Supports running -a 9 with a paired wordlist (hashcat -m <type> -a 9 hashes.txt words.txt), matching line 3 of the wordlist to line 3 of the hash file exclusively — both files must have identical line counts.

Password & Credential Cracking · 2026-09-26

Hashcat gains -a 8 generic attack mode: a plugin-based candidate generator that accepts custom feeds written in C, Python, or Rust.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 8 generic attack mode, which delegates candidate generation to a loadable shared-library plugin called a feed, enabling custom generators without modifying hashcat itself.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Ships built-in feeds in the feeds/ folder: feed_wordlist.so, feed_mask.so, feed_hybrid.so, feed_table.so, feed_pcfg.so, feed_association.so, feed_stdin.so, and feed_random.so.
• Supports writing custom feeds in C, Python, or Rust; ships rust_random.so as a worked Rust example.

Password & Credential Cracking · 2026-09-26

Hashcat restores the Table attack (-a 5) with GPU support, multi-table merging, and new bundled tables for leetspeak, layout conversion, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports chaining multiple table files in a single -a 5 run by listing them after the wordlist on the command line (e.g., tables/leetspeak-common.table tables/toggle.table).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds identity=value command-line setting to control whether 'leave this character alone' is offered as a choice, enabling pure conversion mode with identity=0.
• Adds template=value command-line setting so template=1 treats the wordlist as patterns and never returns a word unchanged.

Password & Credential Cracking · 2026-09-26

Hashcat gains documented PCFG attack mode (-a 4) with multi-ruleset merging, weights tuning, and language-specific grammar training workflow⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 4 PCFG (Probabilistic Context-Free Grammar) attack mode that guesses passwords in probability order, shipping a default password-trained ruleset requiring no extra arguments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports specifying a custom ruleset path after the hash file with -a 4, e.g. hashcat -m 0 -a 4 example0.hash /path/to/ruleset.
• Supports combining -a 4 with -r rule files, applying hashcat rules on top of PCFG-generated candidates.

Password & Credential Cracking · 2026-09-26

Hashcat 7.1.2 adds new hash types including Argon2id, BLAKE2b-256, LUKS v2, KeePass KDBX v4, and new attack modes -a 4, -a 5, -a 8, -a 12.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 4 PCFG attack mode, where a trained grammar generates candidates ordered most-likely first.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds -a 5 table attack mode, where a table defines the character substitutions each position may take.
• Adds -a 8 generic attack mode, where candidates come from a user-supplied feed.

Password & Credential Cracking · 2026-09-26

Hashcat gains attack mode -a 5 (Table attack) with maxperm candidate budget and multi-table support in master branch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 5 (Table attack) to hashcat master, enabling character-substitution wordlist generation via a .table file specified on the command line after the wordlist.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports passing multiple table files after the wordlist in a single invocation; hashcat merges them into one combined attack.
• Introduces maxperm candidate budget (default 1048576) to cap how many candidates a single word can produce, preventing runaway jobs on long words with large tables; set maxperm=0 to remove the limit entirely.

Password & Credential Cracking · 2026-09-26

Hashcat master adds attack mode 12 for combined mask+rule case-toggle, plus a new toggle table for the Table attack.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds attack mode -a 12 (master branch only) to place a word via mask and toggle its case with a rule in a single run — e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ hashcat -a 12 -m 0 hash.txt ?d?w! words.txt -r rules/toggles3.rule.

Password & Credential Cracking · 2026-09-26

Hashcat master branch adds -a 12 hybrid attack mode with ?w and ?q markers for full mask placement control⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -a 12 attack mode (master branch / beta builds) where ?w inside a mask places the dictionary word at any position — start, middle, or end — not just at the edges.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds ?w marker for use in -a 12 masks, required exactly once, compatible with all standard charset positions (?l, ?u, ?d, ?s, ?a, ?h, ?H, ?b) and custom charsets -1 through -4.
• Adds ?q marker for a second dictionary in -a 12, enabling combinator-style attacks with arbitrary characters between and around the two words (e.g. ?w-?q!).

Password & Credential Cracking · 2026-09-26

Hashcat: Adds -a 5 (Table Lookup Attack) to hashcat master-branch builds, running on the GPU; takes a dictionary plus one or more .table files and independently substitutes each character position, producing combinations no rule can express (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ pa$5word alongside pa$$word).

• Ships ready-made tables in tables/: tables/leetspeak-common.table, tables/leetspeak-extended.table, tables/toggle.table (Latin, Greek, Cyrillic case in both directions — 618 characters), tables/emoji.table, tables/sports.table, and per-layout files such as tables/layouts/de.table and tables/layouts/ru-reverse.table.
• Adds identity= setting (command-line name=value) to -a 5: set identity=0 to force pure conversion (one output per input) instead of generating all variant combinations — required for keyboard-layout correction use cases.
• Adds template=1 setting to -a 5: skips candidates that are identical to the input word, treating the wordlist as a set of patterns rather than literals.

Endpoint Security (EDR/XDR) · 2026-09-26

Huntress adds Modified Deployments rollout control, Unsecured Credentials overhaul, macOS Screen Sharing visibility, and new macOS quarantine-strip detections⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Modified Deployments org-level setting, letting administrators build a custom control set from the Huntress policy library, select low/medium/high impact items, set deployment days, and approve new controls before they roll out — ideal for strict compliance or change-control environments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Network File Scanning and Archive File Scanning toggles for Microsoft Defender in EDR > Managed Antivirus > Defender Configuration > Scans, previously fixed to Huntress defaults.

Identity & Access Management · 2026-09-26

iDenfy: Adds PNG logo upload support.

• Adds landscape mode support in Android SDK 9.2.0.
• Adds iOS 27 support in iOS SDK 9.2.2.

Endpoint Security (EDR/XDR) · 2026-09-26

Iru adds MSP Billing, LAPS for Mac, compliance evidence enhancements, and macOS 27 support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds MSP Billing with itemized billing to increase visibility into MSP margins.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds LAPS for Mac as a Library Item.
• Enhances Iru Compliance evidence collection.

General Utilities & Libraries · 2026-09-26

Joplin adds x-callback-url commands to get the current note and create notes from external apps⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds joplin://x-callback-url/getCurrentNote?x-success=<url>&x-error=<url> desktop command to return the currently selected note to a calling application via x-callback-url convention.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds joplin://x-callback-url/createNote?title=<title>&body=<body>&x-success=<url>&x-error=<url> desktop command to create a note in the current notebook and return it to a calling application.

General Utilities & Libraries · 2026-09-26

Joplin v3.7.21 adds a setting to hide the AI Chat toolbar button and persistent AI conversation history with a chat switcher.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Persists AI Chat conversation history across sessions and adds a chat switcher to manage multiple conversations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-26

JumpCloud: Expands the Android Bluetooth Restrictions policy to include outbound Bluetooth file sharing control, and adds personal-profile Bluetooth sharing restrictions for company-owned devices with a work profile via the Work & Personal Usage policy.

Identity & Access Management · 2026-09-26

JumpCloud: Adds SentinelOne integration via JumpCloud Commands to download and install the SentinelOne Agent on macOS, Windows, and Linux devices.

• Adds Microsoft 365 integration support for M365/Azure AD security groups.
• Adds new macOS software management policies to delay or block unwanted upgrades to macOS 13 Ventura.
• Adds interactive as-you-type password complexity dialog with mobile-responsive, WCAG-compliant design for setting policy-compliant passwords.

Identity & Access Management · 2026-09-26

JumpCloud: Adds Dynamic Device Groups and Dynamic User Groups allowing admins to automate group membership via attribute-based rules, with an optional review step before changes take effect.

• Adds MSP billing visibility for committed user licenses, available and consumed counts, and JumpCloud contract download.
• Enables Remote Assist access to the initial Windows Server login screen, allowing admins to authenticate and interact before desktop load.

Identity & Access Management · 2026-09-26

JumpCloud: Replaces deprecated GET api/systemusers/reactivate/{id} with POST https://console.jumpcloud.com/systemusers/reactivate/{id} (the GET now returns 404).

• Supports Android 15 in MDM.
• Launches SaaS Management, enabling discovery and tracking of SaaS app usage via the JumpCloud Go browser extension, SSO integration, app categorization, and access restriction with customizable warning or blocking messaging.
• Adds multiple IP address support to RADIUS server configuration.

Identity & Access Management · 2026-09-26

JumpCloud adds Access Requests, MCP Server, AI Commands Builder, Shadow AI Dashboard, Custom Admin Roles, and deeper SSO/MFA controls in 2025.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• JumpCloud Identity Provider now honors ForceAuthn="true" in SAML and prompt=login in OpenID Connect, prompting fresh credentials even during active sessions.
• Tracks Access Request events in Directory Insights and supports webhooks for real-time ticket creation in external systems.

Identity & Access Management · 2026-09-26

JumpCloud: Adds Client secret basic and Client secret post client authentication type options on an agent's Authentication tab for OAuth credential configuration.

• Adds Password Vault in the User Portal with bulk import via CSV or Excel, credential sharing with granular permissions, and personal/shared folder organization.
• Adds unified Patch Management dashboards under Device Management > Patch Management with Overview, Windows, and Apple tabs; supports CSV and JSON export of the KB list.
• Enables Dormant Application Access Detection in Access Risk > Configuration to alert only when a user signs back into an SSO app after a configured inactivity threshold, not on first-time access.

Identity & Access Management · 2026-09-26

JumpCloud: Adds an ARM build for macOS devices with M1 and above Apple Silicon chips, available on the Downloads page with automatic update detection.

• Introduces item sorting by nickname.

Identity & Access Management · 2026-09-26

JumpCloud: Adds Knowledge Base Uploads for AI Assistant, letting admins upload internal documentation in PDF, TXT, DOCX, and MD formats (10 MB max per file, 25 files max per org) to an org-scoped knowledge base the assistant references when answering questions.

Cloud Security Posture · 2026-09-26

FortiCNAPP adds risk score adjustment for inline firewall protection, vulnerability assessment for COS and Ubuntu, and Polygraph v2 graph-based anomaly alerts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds risk score adjustment for inline FortiGate or other next-generation firewall protection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds vulnerability assessment for Google Container-Optimized OS.
• Adds vulnerability assessment for Ubuntu 25.04 through 26.10.

Compliance Automation & Trust Management · 2026-09-26

Mondoo 14.0 adds MQL strict mode, 500+ new resources, unified IaC scanning, OpenTofu support, OCSF/InSpec/CSV output, and up to 97% fewer cloud API calls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds OCSF, InSpec, and CSV scan output formats.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces MQL strict mode for tighter query validation.
• Adds cross-version MQL support so queries work across different resource schema versions.

AI/LLM Security · 2026-09-26

nono adds Sandboxed Tool Execution with per-command filesystem, network, and credential grants brokered through a command sandbox policy⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds commands.<name>.from.session.sandbox config key to define a direct-session command sandbox policy, scoping a named command's filesystem, network, and credential grants independently of the session sandbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds commands.<name>.from.<caller>.sandbox config key to define caller-specific command sandbox policies, enabling chained tool execution where each hop receives its own narrowly scoped policy.
• Adds network.allow_all field within a command sandbox policy to grant unrestricted network access to a specific command sandbox.

AI/LLM Security · 2026-09-26

nono adds sandboxed tool execution and dangerous command blocking via command policies⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sandboxed tool execution to run selected commands in zero-trust command sandboxes with brokered chaining.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds dangerous command blocking to prevent destructive commands via command policies.

Identity & Access Management · 2026-09-26

Nudge Security adds batched password-manager nudges and in-browser device-code phishing warnings across 10 OAuth providers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a batched Use approved password manager nudge: filter the accounts inventory by observed password manager (including not approved), multi-select, and each employee receives one consolidated nudge listing all their affected accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds an in-browser nudge that warns employees on OAuth device code authorization pages for Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI — every acknowledgment is recorded as a nudge response.

General Utilities & Libraries · 2026-09-26

Obsidian 1.14.2 adds open-from-outside-vault, OS Open with integration, and kanban folder-column grouping by file.folder⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Open file from outside the vault... command to open any file on your computer in the current window (Desktop only).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Kanban: Adds error feedback when moving a card fails (e.g. invalid note properties or missing target folder).

Identity & Access Management · 2026-09-26

Okta for AI Agents: Replaces Okta On-prem SCIM Server agent with Okta On-prem SCIM agent, reducing dependencies and enabling new features.

SAST / SCA / Code Security · 2026-09-26

Openlayer adds a full Governance REST API, prompt-injection detection, EU data residency, and integrations for Azure AI Speech, Google Gemini, and OpenAI Compliance Logs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /governance/frameworks/{id}/rules, GET /governance/frameworks/{id}/projects, and GET /governance/frameworks/{id}/rule-stats to list a framework's rules, projects, and per-project compliance roll-ups.
• Adds GET /governance/rules, POST /governance/rules, GET /governance/rules/{id}, PATCH /governance/rules/{id}, and DELETE /governance/rules/{id} REST endpoints for full CRUD on governance rules.
• Adds GET /governance/rule-results, GET /governance/rule-results/{id}, PATCH /governance/rule-results/{id}, GET /governance/rule-results/{id}/evidence, and POST /governance/rule-results/{id}/evidence to track and satisfy evidence requirements against rules.

AI/LLM Security · 2026-09-26

OpenShell v0.1.0 adds sandbox templates, VM HTTP proxy egress, structured list output, OCSF schema versioning, and EC/EdDSA JWKS support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --no-login-shell flag to openshell sandbox exec to skip shell startup files when entering a sandbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --from flag accepting a rootfs tar archive as the source for VM driver sandboxes.
• Adds structured output to openshell list commands for machine-readable results.

Identity & Access Management · 2026-09-26

Passbolt 5.16.0 adds Offline Mode (Beta) for secure read-only access and autofill when the server is unreachable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Offline Mode (Beta) in the browser extension, providing secure read-only access and autofill for selected credentials when the Passbolt server cannot be reached.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

CNAPP · 2026-09-26

Plerion adds role-scoped API keys and a GET /v1/tenant/openapi endpoint that returns a filtered OpenAPI 3.1 spec for any key.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET /v1/tenant/openapi endpoint that returns the full API reference as an OpenAPI 3.1 document filtered to only the operations the calling key's role permits — send Accept: application/yaml to receive YAML instead of JSON.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

CNAPP · 2026-09-26

InsightCloudSec adds OCI support for CrowdStrike Falcon agent filters and expands Azure detection coverage with 15+ new insights and query filters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Distributed Table Local Authentication Configuration query filter to identify Cosmos DB accounts based on whether local authentication is enabled or disabled (default: enabled).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Distributed Table Encryption Configuration query filter to identify Cosmos DB accounts using customer-managed vs. provider-managed encryption keys (default: provider-managed).
• Adds Distributed Table Without Network Traffic Restrictions query filter to identify Cosmos DB accounts that allow all network traffic or have Azure datacenter IPs in firewall rules.

Hacking Hardware · 2026-09-26

Rayhunter v0.13.0 adds a graphical installer, NDJSON in ZIP exports, a no-NAS analyzer, and smarter IMSI heuristics.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Includes NDJSON alongside existing files in the ZIP download from the daemon.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a graphical installer-gui frontend (MVP) so users can install Rayhunter without the command line.
• Exposes CLI help text and default values inside the installer GUI.

MCP Servers & Tooling · 2026-09-26

Runlayer: Adds backend_desired_count input to override the backend service's initial desired_count without replacing the full services_configurations map; seeds only services never previously created, with Application Auto Scaling owning the live count afterwards.

MCP Servers & Tooling · 2026-09-26

Runlayer adds write-only OTLP telemetry ingestion for AI clients including Claude Code and Glean.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds automatic API key minting via Settings → MDM configuration for AI Watch scan, hook, and OTLP submissions — keys with this scope cannot be created manually.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

MCP Servers & Tooling · 2026-09-26

Runlayer 1.28.811 adds per-entry MCP policy management with search/pagination and a minimal environment for local MCP servers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds minimal environment isolation for local MCP servers: runlayer run now starts local MCP servers with only the connector's configured variables plus proxy, TLS, and locale settings, instead of inheriting the full AI client environment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds per-entry management to Enforce/Protect policy lists for allowed and denied MCP URLs, local packages, and built-in servers, with search and pagination instead of a single bulk save — and lets Shadow AI overview add a discovered MCP straight to the allowlist.
• Splits an agent's Slack settings into four sections (Replies, Channel access, Monitoring, and Sending) navigable from the left panel, with Channel monitoring showing channels and condition only while active.

MCP Servers & Tooling · 2026-09-26

Runlayer: Adds Claude Opus 5.5 support for agents through the Anthropic API or AWS Bedrock, with adaptive thinking effort settings.

• Adds GPT-6 Sol and GPT-6 Luna model support for agents on the OpenAI provider.
• Adds channel-only mode for Slack agents so admins can turn off direct messages; users who DM the agent are redirected to mention it in a channel.
• Adds queued agent messages so follow-ups sent while an agent is working run in order, with the ability to edit, reorder, or remove queued messages.

Attack Surface & Exposure Management · 2026-09-26

runZero: Software and Vulnerabilities collected from integrations are now retired when that integration data expires.

• Issue owners now receive an email with a direct link when assigned an Issue.
• AWS, Azure, and GCP imports now include additional asset types.
• runZero optimized MAC merging so large scan jobs now process faster.

Identity & Access Management · 2026-09-26

SailPoint ISC now routes manual provisioning tasks to Governance Groups, letting any member complete work with full audit attribution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables assigning a Governance Group to a source so that manual provisioning tasks are routed to all group members instead of a single owner, with ISC recording which individual member completed each task.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends existing task notifications — Pending Manual Changes, Pending Task Daily Digest, and Task Reassignment — to reach all members of an assigned Governance Group.
• Displays group-assigned manual tasks as a single row listing all assigned members in the admin task view.

SAST / SCA / Code Security · 2026-09-26

Semgrep: Adds CSV export for Agentic Workflows issues from the Issues page and through the public API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a banner on older Agentic Workflows runs that links to the newest run of the same workflow on that branch.

AI-Powered Offensive Security · 2026-09-26

Shannon gains documented config file support with authenticated testing, scope rules, SARIF output, and agentic SAST via -c flag⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -c flag to shannon start / npx @keygraph/shannon@latest start to load a YAML configuration file, enabling authenticated testing, scope guidance, rules of engagement, SAST, and report filtering.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds agentic_sast.enabled config key to opt in to agentic static analysis, which reads the repository for vulnerabilities before the pentest and feeds findings into the exploitation phase.
• Adds authentication block in config (with login_type, login_url, credentials, totp_secret, login_flow, and success_condition) to drive form-based and TOTP authenticated scans.

AI-Powered Offensive Security · 2026-09-26

Shannon CLI documented with full command reference, output layout, and CI integration via --follow flag⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds shannon start -u <url> -r <repo> as the primary pentest invocation, accepting an absolute or relative repository path mounted read-only in the worker container.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds -c <path> flag to shannon start to supply a YAML configuration file at scan time.
• Adds -o <path> flag to shannon start to copy deliverables to a custom output directory after the run completes.

AI-Powered Offensive Security · 2026-09-26

Shannon gains multi-provider AI support: set SHANNON_AI_MODEL to pick Anthropic, OpenAI, xAI, Bedrock, or any local model.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Sets the AI provider and model for an entire scan with SHANNON_AI_MODEL=<provider>:<model-id>; defaults to anthropic:claude-sonnet-4-6.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Routes model traffic through a proxy or LLM gateway by setting SHANNON_AI_BASE_URL alongside SHANNON_AI_MODEL, leaving credential selection and API dialect unchanged.
• Reaches local OpenAI-compatible servers (Ollama, vLLM, LM Studio) by describing them in a models.json file and passing it with --models-config at scan time.

AI-Powered Offensive Security · 2026-09-26

shannon: Adds start -u <URL> -r <path> to run a pentest against a target application, with -c/--config for a configuration YAML, -o/--output for a custom deliverables directory, -w/--workspace for named workspaces that auto-resume, --follow to stream the scan log and exit on scan outcome (CI-friendly), --pipeline-testing for fast minimal-prompt test runs, and --keep-container to preserve the worker container for post-run log inspection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds logs [<workspace>] to tail a scan's live log, defaulting to the running scan or most recent workspace.
• Adds setup interactive wizard to configure AI provider credentials in npx mode.
• Adds --models-config <path> flag on start to supply a models.json Pi model config for models not in the harness catalogue.

AI-Powered Offensive Security · 2026-09-26

shannon: Adds npx @keygraph/shannon@latest start -u <url> -r <repo-path> (or ./shannon start -u -r) to launch a fully autonomous pentest — pre-recon through exploitation — against a source-available target, mounting the repo read-only inside an ephemeral Docker worker container.

• Adds npx @keygraph/shannon logs <workspace> and npx @keygraph/shannon status (or ./shannon logs / ./shannon status) to stream logs and check scan progress from a second terminal.
• Writes final pentest results as Security-Assessment-Report.pdf and Security-Assessment-Report.md under ~/.shannon/workspaces/{hostname}_{sessionId}/ (npx) or ./workspaces/ (source build).
• Exploit-mode runs also emit report.sarif (SARIF 2.1.0) alongside structured JSON for ingestion by GitHub code scanning or any SARIF consumer.

AI-Powered Offensive Security · 2026-09-26

Shannon 3.0 launches as an autonomous AI pentester with SARIF output, native CI/CD, PDF reports, and multi-provider LLM support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds native GitHub Actions integration via KeygraphHQ/shannon-action@v1 with url, api-key, fail-on-severity, and upload-sarif inputs.
• Gates CI/CD pipelines on fail-on-severity: high (or other thresholds), counting only findings with status: exploited — not code-analysis hypotheses.
• Publishes SARIF findings to GitHub code scanning when upload-sarif: true is set in the Action.

Firewalls & Network Defense · 2026-09-26

Sophos AP6 gains wired network settings (STP, IGMP snooping, LLDP-MED, port trunking) and advanced diagnostic logging.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Network settings tab to access point profiles for configuring wired Ethernet port settings on AP6 access points, including Spanning Tree Protocol, IGMP snooping, and LLDP-MED.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds port trunking configuration under the Network settings tab, available exclusively for AP6 840E models.
• Adds advanced diagnostic logging, enabled from Diagnostics > System logs in Sophos Fusion, for deeper wireless network troubleshooting.

Firewalls & Network Defense · 2026-09-26

Sophos Email Security now supports custom policies applied directly to distribution lists and shared mailboxes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables applying custom email protection policies directly to distribution lists and shared mailboxes, independent of policies assigned to individual list members.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-26

StackHawk: Adds disabled: true field inside app.authentication.sessionVerification to explicitly turn off session verification while still requiring a loggedInIndicator/loggedOutIndicator as a fallback check.

• Reports a clear, non-zero-exit error — including the minimum supported version and upgrade location — when the platform rejects a scan due to an out-of-support CLI version, and logs deprecation advisories once per scan instead of on every platform call.
• Entity and transport headers — Content-Type, Content-Length, Accept, Accept-Encoding, Host, User-Agent, Referer — are no longer stripped from replayed spider requests during rescans, even when listed in authentication.testPath.requestHeaders or app.redact.headers.

SIEM · 2026-09-26

API surface changed: −2 endpoints, 1 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

tailscale: Adds a device posture status detail view in the admin console showing each posture's required assertions, per-machine values, pass/fail state, and a count of policy file rules requiring that posture.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports subscribing to tailnet events and routing notifications through an integration or app via webhooks.
• Adds a log-mode parameter to the container to control whether logging output is grouped, ungrouped, or quiet.

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

Tailscale PAM (beta) adds identity-aware connectors for privileged access to SSH, databases, and Kubernetes over your tailnet⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces Tailscale PAM (beta), a Privileged Access Management layer that combines VPN and PAM capabilities for identity-aware access to private tailnet resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds PAM connectors — application-aware identity proxies that establish sessions between tailnet clients and services such as SSH, databases, and Kubernetes.
• Supports Ansible-based installation and configuration of PAM connectors across one or more hosts.

SOAR · 2026-09-26

Tines: Adds new dimensions to the AI usage API, enabling more granular reporting on AI consumption.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds new functions for converting content to markdown.
• Cases and dashboards now stay up to date when viewed in background browser tabs.
• Enables tracking cases with change control directly in the storyboard.

Secure Access (VPN / SASE / ZTNA) · 2026-09-26

Twingate: Expands each AI service entry in the AI Usage Overview to show matched domains and indicate whether activity is widespread or concentrated on specific devices.

Data Security & DLP · 2026-09-26

Ubiq Security: Access Graph now includes IDP groups and filters related nodes in both directions, enabling access tracing from either an identity or a dataset.

• Go library now validates input against the dataset character set before encryption, returning a clear error instead of failing silently.
• Security History events are now attributed to the IDP identity that performed them, and event details show the Access Group field in place of the retired Dataset Group field.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds \Ubiq\encryptInteger() and \Ubiq\decryptInteger() for datasets configured with data_type = 'integer' (size 32 or 64), bridging values correctly through the underlying FF1 cipher.

• Adds \Ubiq\encryptDate() / \Ubiq\decryptDate() and \Ubiq\encryptDateTime() / \Ubiq\decryptDateTime() for datasets with data_type = 'date' or 'datetime', requiring UTC DateTimeImmutable inputs.
• Adds \Ubiq\encryptIntegerForSearch(), \Ubiq\encryptDateForSearch(), and \Ubiq\encryptDateTimeForSearch() to return all key-rotation ciphertexts for typed datasets, enabling searchable encryption across rotated keys.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds Token dataset support (64-character and 128-character variants) via EncryptAsync, DecryptAsync, and encryptForSearchAsync — 64-char tokens accept inputs under 40 chars and output base62 (A-Za-z0-9); 128-char tokens accept inputs under 80 chars.

• Adds createCredentialsWithIdp factory method (ubiq.UbiqFactory.createCredentialsWithIdp(<username>, <password>, <host>)) to authenticate using an identity provider.
• Adds buildStructuredAsync builder method on ubiq.CryptographyBuilder to construct structured encryption/decryption objects alongside the existing buildEncryptionAsync and buildDecryptionAsync.
• Documents multithreaded environment behavior: Ubiq objects must be created and destroyed within each worker thread because Node.js workers serialize/copy objects rather than sharing them.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds encryptInt / decryptInt / encryptIntForSearch and encryptLong / decryptLong / encryptLongForSearch methods for Format-Preserving Encryption of 32-bit integers (range -99,999,999 to 99,999,999) and 64-bit longs (range -9,999,999,999,999,999 to 9,999,999,999,999,999) using pre-configured Int32/Int64 datasets.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds LoadCache([]string{...}) on both encryption and decryption objects to pre-populate the dataset cache and reset TTLs for already-cached datasets.

• Releases v2 of the Go library (import "gitlab.com/ubiqsecurity/ubiq-go/v2") with Structured Encryption support; v1 (without /v2) does not include Structured Encryption.

Data Security & DLP · 2026-09-26

Ubiq Security adds Apache Airflow integration with UbiqEncryptOperator and UbiqDecryptOperator for DAG-native structured encryption⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds UbiqEncryptOperator and UbiqDecryptOperator Airflow operators (installed via pip install ubiq_security, placed in plugins/operators/) for performing structured encrypt and decrypt operations directly inside DAGs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds credentials, data_task, and dataset_names parameters to both operators, enabling column-level encryption control over tabular data passed as a list of lists — compatible with BigQueryGetDataOperator output format.
• Supports per-column dataset mapping via dataset_names — pass an empty string for columns that should pass through unencrypted, with array length required to match row width.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds CREATE OR REPLACE FUNCTION ... ubiq_idp_auth(dataset_names STRING) RETURNS JSON REMOTE WITH CONNECTION BigQuery SQL function so queries authenticate via IDP session instead of API keys.

• Adds CREATE OR REPLACE PROCEDURE ... ubiq_begin_idp_session(datasetNames STRING) as a keyless alternative to begin_ubiq_session, using the existing BigQuery user session for authentication.
• Adds idp_setup.sh shell script to automate provisioning of IDP-related SQL and broker functions for enterprise IDP customers.
• Supports mounting the IDP Private Key as a Google Secret Manager volume in Cloud Run (rather than as an environment variable) for more secure key lifecycle management.

Data Security & DLP · 2026-09-26

Ubiq datasets now support Integer, Date, and Date & Time structured types that encrypt to the same native column type⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Integer structured dataset type for whole numbers, encrypting 32-bit (-99,999,999 to 99,999,999) or 64-bit (-9,999,999,999,999,999 to 9,999,999,999,999,999) values to an integer of the same type — no column-type changes or conversion code required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Date structured dataset type for calendar dates (01/01/0001 to 11/28/2738), encrypting dates back to a date value with no time component.
• Adds Date & Time structured dataset type for timestamps to the second (1653-02-10 06:13:21 to 2286-11-20 17:46:39 UTC), encrypting to a timestamp value in the same column.

Data Security & DLP · 2026-09-26

Ubiq Security: Adds Ubiq encrypt and decrypt operators for Apache Airflow DAGs to protect data in pipeline tasks.

• Adds dataset creation wizard support for advanced structured dataset configuration in the C 2.3.0.0 library.

Hacking Hardware · 2026-09-26

Unleashed unlshd-093 adds Nice O-Code and Security+ 2.0 keypad support, new menu styles, and IR signal saving from Universal Remote.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds SubGHz Nice O-Code protocol support (52, 72 bits, Dynamic) — decode, save, and emulate — plus a new Nice O-Code app that recovers the installer code from 4+ captures.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds SubGHz Security+ 2.0 keypad support (86 bits, Dynamic) — decode, save, and emulate keypad frames — plus a new Security+ PIN app to test and change the keypad PIN in file.
• Adds SubGHz Superrollo (GW60) roller-shutter protocol (KeeLoq HCS361, 67-bit rolling code with CRC, including Add Manually support).

SAST / SCA / Code Security · 2026-09-26

Veracode adds Custom PDF REST API, OAuth for XML APIs, IDE/CLI Usage Analytics, and new Reporting API fields and filters⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Custom PDF REST API to programmatically generate custom PDF reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds OAuth Client Credentials authentication support for Veracode XML APIs, in addition to the existing REST API support.
• Adds most_recent_scan filter to the Reporting API Scans report; when set to true, returns only the most recent scan per asset.

SAST / SCA / Code Security · 2026-09-26

Veracode CLI gains SCA fix generation, new package discovery, auth login, SBOM export, and a raft of new flags across scan and package commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds veracode fix sca command to generate fixes for vulnerable dependencies identified in SCA scans (Limited Availability).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --exclude flag to veracode package to prevent specified Java packages or JAR files from being scanned.
• Adds --skip-packagers flag to veracode package to exclude specific artifacts (e.g. unsupported SQL) from packaging results without affecting other languages.

SAST / SCA / Code Security · 2026-09-26

Veracode adds multi-team DAST targets, DryRun Security integration, iOS 27 and Go 1.27 static analysis, and European region IDE/CLI dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the policy parameter to the GitHub Workflow Integration v2.1.7 for infrastructure-as-code (IaC) scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Enables assigning multiple teams to a DAST target when creating a web application or API specification.
• Integrates Veracode Static Analysis with DryRun Security, surfacing Veracode findings and remediation guidance inside pull request and code review workflows.

SIEM · 2026-09-26

Wazuh v4.14.8 adds audit identity fields to FIM eBPF whodata alerts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds audit_uid, audit_name, audit_gid, and audit_group_name fields to FIM whodata alerts generated by the eBPF provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Hacking Hardware · 2026-09-26

WiFi Pineapple Pager 1.1.2 adds UI_TAKEOVER and UI_RELEASE DuckyScript commands for payload-driven framebuffer control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds UI_TAKEOVER and UI_RELEASE DuckyScript commands to let a payload or application take over the framebuffer (display) and consume input (button presses) without shutting down the pineapplepager service.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Hacking Hardware · 2026-09-26

WiFi Pineapple Pager 1.1.1 adds QR/image DuckyScript commands, CSA deauth for WPA3 clients, and MFP detection in PineAP recon.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds PROMPT_QR DuckyScript command to generate and display a QR code with a message to the user.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds PROMPT_IMAGE DuckyScript command to show an image on the screen.
• Adds MFP (Management Frame Protection) detection to PineAP recon result models.

SAST / SCA / Code Security · 2026-09-26

ZeroPath Issues API now includes dependency findings by default; Issues page All tab unified with dashboard totals.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• The issues.list, issues.search, and MCP issues_list tool now include dependency findings when detectionTypes is omitted, aligning API defaults with the full open-findings set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• The Issues page All tab now counts and lists dependency findings alongside code findings, matching the dashboard's Total Open card and repositories list.

Identity & Access Management · 2026-09-25

1Password CLI 2.40.0-beta.02 reduces repeated auth prompts on macOS and speeds up Environments account commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• On macOS, successive CLI invocations by coding agents or scripts now share a single desktop app authorization session instead of prompting for each command.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• CLI commands run faster for accounts using 1Password Environments.

Web Application Security · 2026-09-25

Acunetix 360 v26.9.1 adds secrets in custom auth scripts, extended scan data retention, and a PolyShell security check.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for secrets in custom authentication scripts, enabling secure credential handling during authenticated scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends scan data retention, allowing scan results to be stored for longer periods.

Identity & Access Management · 2026-09-25

AI/LLM Security · 2026-09-25

AI SAFE² CLI 0.8.0 adds evidence-bound AISM remediation planning with human decision gates and machine-readable output contracts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds safe2 aism remediation-init command to create a remediation source template bound to the exact assessment, system identity, and assessment scope.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds safe2 aism plan command to validate a proposed implementation path and produce canonical JSON (aism-remediation-plan-v1) plus a human-readable decision card.
• Adds --previous flag to safe2 aism plan to preserve action history across reassessments and detect completed actions that regress or disappear.

Web Application Security · 2026-09-25

Arcjet adds Google ADK adapters for Python and JavaScript to gate agent tool calls before side effects run⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds arcjet[google-adk] Python package (requires google-adk>=2.0.0,<3, CPython 3.10+) with helpers imported from arcjet.guard.google_adk: guard_tool, guard_plugin, google_adk_context, launch_arcjet, and launch_arcjet_sync for sync frameworks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds guard_tool as an LlmAgent.before_tool_callback that denies a tool call by returning a skip dict — assign via LlmAgent(before_tool_callback=...) — with on_guard_error defaulting to 'deny' (fail-closed).
• Adds guard_plugin as a Runner plugin that gates all tool calls runner-wide via before_tool_callback; first-win semantics mean it must be listed first, and tool names already covered by guard_tool should be listed in exclude to avoid double-calling Guard.

Web Application Security · 2026-09-25

Arcjet adds a Cloudflare Think adapter with guardHooks() and cloudflareThinkContext() to enforce policy on agent tool calls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds guardHooks() from @arcjet/guard/cloudflare-think/v0 to gate every beforeToolCall invocation in a Cloudflare Think agent, returning { action: 'substitute', output } (default) or { action: 'block', reason } on deny without ever executing the tool.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds cloudflareThinkContext() from @arcjet/guard/cloudflare-think/v0 to supply caller-owned correlation IDs (correlationId, sessionId, conversationId) to direct guard() calls for inbound text screening.
• Adds ArcjetDenialResult type export from @arcjet/guard/cloudflare-think/v0 with fields arcjetDenied, reason (RATE_LIMIT, PROMPT_INJECTION, SENSITIVE_INFO, ERROR), message, retryable, and retryAfterSeconds for structured denial payloads the model receives as a tool result.

Web Application Security · 2026-09-25

Arcjet Guard adds Cloudflare Think integration, Google ADK (Python/JS) support, and HITL via request_confirmation⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds @arcjet/guard/cloudflare-think/v0 integration, enabling Arcjet Guard to run on Cloudflare Think with a default substitute action ({ action: "substitute", output: ArcjetDenialResult }) and optional onDeny: "block".⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds arcjet.guard.google_adk support for Google ADK in both JavaScript and Python, hookable via before_tool_callback and guard_plugin.
• Adds request_confirmation (HITL — human-in-the-loop) capability to Arcjet Guard, allowing tools to pause execution and require confirmation before proceeding.

Web Application Security · 2026-09-25

Arcjet adds Claude Code hook integration to enforce policies and record AI coding-agent session activity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds https://decide.arcjet.com/v1/agent-hooks/claude-code API endpoints for Claude Code hooks, covering events including post-tool-use-failure, notification, subagent-start, subagent-stop, task-created, task-completed, error, teammate-idle, cwd-changed, directory-added, file-changed, pre-compact, post-compact, pre-model-switch, post-model-switch, elicitation, and elicitation-result.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds PreModelSwitch hook enforcement via https://decide.arcjet.com/v1/agent-hooks/claude-code?event=pre-model-switch to enforce allowed-model policies on Claude Code sessions — a denied switch keeps the current model in place.
• Supports managed-settings.json as a drop-in configuration template that wires all Claude Code enforcement and activity-recording hooks to Arcjet without changing developer workflow.

Web Application Security · 2026-09-25

Arcjet now supports protecting custom AI agent pipelines across 14 named frameworks including LangChain, CrewAI, and OpenAI Agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds custom AI agent protection for tool calls, queue consumers, and agentic pipelines — covering Claude Agent SDK, Claude Managed Agents, Cloudflare Think, CrewAI, Genkit, Google ADK, LangChain, LangGraph, Mastra, Microsoft Agent Framework, OpenAI Agents, Strands Agents, TanStack AI, and Vercel AI SDK/Eve — enforcing bot protection and security policies across all agent interactions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Web Application Security · 2026-09-25

Arcjet adds Google ADK and Cloudflare Think integrations for agent security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds google-adk integration, installable via pip install "arcjet[google-adk]".⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds @cloudflare/think integration for Cloudflare Think (JavaScript-only), installable via npm i @arcjet/guard @cloudflare/think.

Identity & Access Management · 2026-09-25

Auth0: Adds a member access level model (none, readonly, limited, full) that computes each member's permissions automatically from their organization connection access levels.

• Activate the My Organization API by navigating to Applications > APIs in the Auth0 Dashboard.

Identity & Access Management · 2026-09-25

Auth0 launches Identity Conversion Suite bundling Anonymous Sessions and Experiment Center for pre-auth tracking and A/B testing⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces the Identity Conversion Suite, a new Auth0 bundle that pairs two complementary features: Anonymous Sessions and Experiment Center.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Anonymous Sessions, which tracks and manages users from their first pre-authentication interaction and carries that activity forward to their authenticated profile upon sign-up or login.
• Adds Experiment Center, which enables A/B tests and gradual rollouts on authentication flow changes — such as new sign-up fields, passkeys, or MFA rules — targeting a slice of traffic before full rollout.

Data Security & DLP · 2026-09-25

Bytebase 3.23.0 adds MCP access policies, inline plan-review comments, any-OIDC workload identities, and a query-plan visualizer in SQL Editor.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds workload_identity_email, workload_identity_token, and workload_identity_token_file provider fields so the Terraform provider can authenticate as a workload identity instead of a service account key.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds provider_type = "OIDC" and optional jwks_url to bytebase_workload_identity in the Terraform provider, enabling any OIDC issuer as a workload identity.
• Adds GET /v1/actuator/info (ActuatorService.GetActuatorInfo) as the new source for MCP settings, replacing the removed GET /v1/mcp/info.

Attack Surface & Exposure Management · 2026-09-25

Censys launches censys-ai-skills repo, adding Claude Code and AI assistant skills for asset lookup, CenQL search, pivot analysis, and more via cencli⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds censys-ai-skills, a public Censys-owned GitHub repo of skills, hooks, and helper scripts for AI coding assistants (Claude Code, Cursor, Windsurf, Cline, and custom agents) that wrap cencli Platform CLI capabilities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Installs into Claude Code via claude plugin marketplace add censys/censys-ai-skills and claude plugin install censys; other editors load individual SKILL.md files into .cursorrules, .cursor/rules/*.md, .windsurfrules, or .clinerules.
• Includes censys-search skill for CenQL-based searches, censys-view for host/certificate/web-property lookups, censys-aggregate for field aggregation (equivalent to Report Builder), censys-enrich for credit-free IP enrichment, censys-censeye for pivot analysis with rarity bounds, and censys-timeline for temporal analysis and change detection.

Attack Surface & Exposure Management · 2026-09-25

Censys: Includes censys-search skill for running CenQL queries, censys-view for looking up hosts, certificates, and web properties, and censys-aggregate for field aggregation (equivalent to the Report Builder).

• Includes censys-enrich skill for credit-free IP enrichment intended for SOC triage workflows.

Container & Image Security · 2026-09-25

Chainguard adds EU data-residency beta for Containers and Libraries, plus 26+ new container images including FIPS variants.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Launches Sovereign Artifacts beta for enrolled customers, storing Chainguard Containers and Libraries artifact bytes in an EU region with automatic backfill of existing artifacts and ~30% faster pulls from Europe.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds openjdk:26 container image (released 2026-09-17, EOL 2027-03-17).
• Adds ceph:19 container image (released 2026-09-19, EOL 2027-03-19).

Container & Image Security · 2026-09-25

Chainguard adds chainctl skills harden and chainctl skills status for server-side agent skill hardening with job tracking⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds chainctl skills harden command to upload a local agent skill directory or existing uploads-registry artifact, submit it for server-side hardening, and download the result with a HARDENING.md report.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds chainctl skills status command with --id, --wait, and --timeout flags to track a hardening job and resume waiting for its result using the 64-character job ID.
• Adds --folder, --digest, --wait, and --timeout flags to chainctl skills harden, supporting four input forms: positional path, --folder, an uploads.cgr.dev reference, or --digest with --name.

Container & Image Security · 2026-09-25

Chainguard: Adds chainctl skills accept-terms --group <org> to accept terms before using the registry.

• Adds chainctl skills push <name> --group <org> --tag <version> to upload agent skills to uploads.cgr.dev.
• Adds chainctl skills harden <ref> --group <org> --wait --timeout 30m to submit an uploaded skill for hardening and download results to ./hardened/<name>/, including a HARDENING.md findings report.
• Adds chainctl skills status --group <org> --id <job-id> to check the status of an in-progress hardening job.

Container & Image Security · 2026-09-25

Chainguard adds skill hardening pipeline: upload to uploads.cgr.dev, submit with chainctl, and serve from skills.cgr.dev.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces a skill hardening pipeline: upload original skills to uploads.cgr.dev/<your-org>/<skill>, submit with chainctl skills harden, and receive hardened results published under skills.cgr.dev/<org-uidp>/users/<user-namespace>/<skill> scoped to your organization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Serves hardened agent skills from both public and private registries at skills.cgr.dev/<your-org>/.

Reverse Engineering · 2026-09-25

CHIPSEC 2.0.9 improves UEFI firmware decode with new section decoders and adds an ACPI NVS fallback for SBREG_BAR discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an ACPI NVS fallback for SBREG_BAR discovery, broadening platform coverage when the primary P2SB unhide path is unavailable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds missing UEFI section-type decoders per the PI and UEFI specifications, including correct handling of EFI_SECTION_DISPOSABLE (type 0x03) and fixed DEPEX opcode decoding to PI 1.9.
• Improves uefi decode output by replacing the set_log_file() redirect pattern with direct file I/O for .lst artifacts, eliminating log-file conflicts where NVRAM output clobbered the .UEFI.lst handler.

Identity & Access Management · 2026-09-25

Clerk Organizations can now link multiple SAML or OIDC enterprise connections, enabling multi-directory user provisioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports linking multiple SAML or OIDC enterprise connections to a single Organization, allowing more than one directory to provision the same user.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-25

Clerk adds multi-IdP enterprise SSO per Organization, GA Client ID Metadata Documents, and SMS delivery event logs⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables Publish CIMD support toggle in the OAuth applications settings page under Client onboarding, with a Client admission control (Pre-registered clients only) and per-client scope management via the Applications tab — making Client ID Metadata Documents generally available for all applications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds SMS delivery event logging with five normalized event types — sms.accepted, sms.delivered, sms.failed, sms.undeliverable, and sms.unconfirmed — each carrying a reason field (e.g. invalid_phone_number, destination_unreachable, rate_limited) and full trace linking across a message's lifecycle.
• Adds a dedicated SMS logs view filterable by event type (e.g. sms.failed) or destination phone number, available on all plans as part of Application Logs.

SIEM · 2026-09-25

API surface changed: +2 endpoints, 7 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/progress

Internet Services · 2026-09-25

API surface changed: +89 endpoints, −36 endpoints, 196 modified, 8 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint DELETE /accounts/{account_id}/custom_pages/assets/{asset_name}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New endpoint DELETE /accounts/{account_id}/devices/policy/exclude
• New endpoint DELETE /accounts/{account_id}/devices/policy/fallback_domains

Internet Services · 2026-09-25

Cloudflare: Adds Logpush support for MCP server portals, enabling export of portal activity to external storage or a SIEM system.

• Adds Static OAuth client credentials support to MCP server portals for providers that do not support Dynamic Client Registration.
• Adds Service token authentication to MCP server portals for autonomous agents and machine-to-machine access.
• Adds Code Mode policies to MCP server portals to control how portals reduce tool definitions and token use.

Internet Services · 2026-09-25

Cloudflare Workers AI adds claude-opus-5.5, gpt-6-luna, gpt-6-sol, and grok-4.7 to its model catalog.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds claude-opus-5.5 (Anthropic Claude Opus 5.5) with a 1 million token context window, 128K token max output, always-on adaptive thinking, and medium default effort level — suited for long-running agentic coding and knowledge work.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds gpt-6-luna (OpenAI GPT-6 Luna), the most efficient GPT-6 variant, optimized for focused, high-volume tasks.
• Adds gpt-6-sol (OpenAI GPT-6 Sol), the mid-tier GPT-6 variant, built for complex coding and agentic workflows.

Internet Services · 2026-09-25

Cloudflare: Adds AI Search instance create and update endpoints, with notes that Search for Agents requires the default namespace.

• Bumps the cloudflare-go SDK to v7.11.0 (go get -u github.com/cloudflare/cloudflare-go/v7@v7.11.0).

Internet Services · 2026-09-25

Cloudflare: MCP server portals are now generally available to connect, secure, and monitor approved MCP servers through one endpoint.

• 1.1.1.1 now supports RFC 8509 root key trust anchor sentinels to help diagnose DNSSEC root key rollovers.
• Adds account-level transformation analytics for Cloudflare Images usage.
• Adds guided onboarding for Mesh participants, including node deployment setup, client installers, organization name lookup, and a unified participant management table.

SAST / SCA / Code Security · 2026-09-25

API surface changed: +3 endpoints, 12 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint DELETE /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks/{webhookId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New endpoint GET /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks
• New endpoint POST /organizations/{provider}/{remoteOrganizationName}/integrations/webhooks

General Utilities & Libraries · 2026-09-25

code-oss: Enables chat.agentHost.devContainer.enabled to run agent sessions inside a remote project's Dev Container on SSH, Tunnel, and WSL hosts, available from VS Code 1.139.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

General Utilities & Libraries · 2026-09-25

VS Code adds subagent delegation with configurable harnesses, custom agent files, nested recursion, and per-agent model selection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Run Subagent tool toggle in Configure Tools to enable subagent delegation in Local sessions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds user-invocable and subagent frontmatter properties to custom agent .agent.md files, replacing the deprecated property that previously controlled both behaviors.
• Adds agents frontmatter property to coordinator agent files to restrict which workers they can invoke — agents: ['Codebase Researcher', 'Reviewer'] permits only named agents, agents: ['*'] permits all, agents: [] prevents subagent use.

General Utilities & Libraries · 2026-09-25

Agents window gains Dev Container sessions, Agent Merge, PR artifact removal, and a Create PR form with auto-merge controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enables chat.agentHost.devContainer.enabled to run Agent Host sessions inside a Dev Container, supporting local folders and — starting in VS Code 1.139 — folders on SSH, Tunnel, or WSL hosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Use Dev Container option in the workspace picker so the agent builds and tests using the project's container tools and dependencies, with a - Dev Container suffix on the workspace label.
• Introduces Agent Merge, an experimental feature that monitors the pull request in an active agent session and asks the agent to address blockers, with configurable Blockers (Address Reviews, Fix CI Failures, Resolve Conflicts and Behind Branches) and Merge Pull Request settings (Off, If Unchanged, When Ready).

Identity & Access Management · 2026-09-25

ConductorOne adds EU data residency, AI task diagnostics, public REST API for AI governance, and new MCP Terraform resources alongside breaking API changes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds POST /api/v1/app-secrets-admin/revoke to queue a credential revoke separately from secret deletion, after DELETE /api/v1/secrets/{vault_id} is scoped to delete-only.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Exposes classifiers, tool gates, classifier bindings, templates, and the agent classifier policy through the public REST API for AI governance management.
• Adds Terraform resources for hosted and external MCP sources, covering details, authentication, and tool enablement policy via C1's Terraform provider.

SAST / SCA / Code Security · 2026-09-25

Corridor: Introduces a Setup script field in Claude cloud environment settings (at claude.ai/admin-settings/cloud-environments) where pasting curl -fsSL https://app.corridor.dev/cli/claude-setup.sh | CORRIDOR_API_KEY=YOUR_KEY sh installs the Corridor CLI and pre-commit hook for every session.

• Exposes a CORRIDOR_API_KEY environment variable used by the setup script to authenticate the CLI against a Corridor team.

SAST / SCA / Code Security · 2026-09-25

Corridor: Adds CORRIDOR_API_KEY secret (with Permission set to Team) as the authentication mechanism for connecting Corridor to Cursor Cloud Agent environments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds corridor scan --staged as the pre-commit hook command that scans staged changes and blocks commits containing security findings.
• Installs the Corridor CLI via https://app.corridor.dev/cli/install.sh into each Cursor Cloud Agent session through the Start script field.
• Supports manual installation into custom Docker-based agent environments by placing the Corridor CLI binary on PATH and adding a pre-commit hook at .git/hooks/pre-commit or .husky/pre-commit.

Security Data Pipeline · 2026-09-25

Cribl Search adds metrics ingestion (Preview) via Prometheus Remote Write and OpenTelemetry, plus Monitors and Metrics Explorer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds metrics ingestion (Preview) into Cribl Search lakehouse engines via Prometheus Remote Write and OpenTelemetry (OTLP) sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds Metric Dataset Rules to route incoming metrics into a metrics Dataset, with a default catch-all rule targeting the primary metrics Dataset.
• Adds Explore Metrics (Preview) — a query-free interface to filter and visualize metrics stored in the lakehouse.

Security Data Pipeline · 2026-09-25

Cribl Stream adds a Databricks Zerobus Destination to route telemetry directly into Delta Tables via gRPC without intermediate object storage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Databricks Zerobus Destination, routing events from Cribl Stream pipelines directly into Databricks Delta Tables via Databricks Zerobus Ingest over gRPC with JSON records, eliminating the need for an intermediate S3/Blob staging bucket and separate ingestion job.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports catalog.schema.table targeting so operators can route different telemetry streams to specific Unity Catalog Delta Tables from within existing Stream pipeline configuration.
• Supports Databricks service-principal authentication scoped to a Unity Catalog table, aligning data movement with existing Databricks governance policies.

IDS / IPS · 2026-09-25

CrowdSec adds a Go-based HAProxy SPOA bouncer with WAF/AppSec support, CAPTCHA, GeoIP headers, mTLS, and Prometheus metrics⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Installs via crowdsec-haproxy-spoa-bouncer package (apt/dnf) with bouncer config at /etc/crowdsec/bouncers/crowdsec-spoa-bouncer.yaml and HAProxy snippets under /usr/share/doc/crowdsec-haproxy-spoa-bouncer/examples.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Configures the SPOE agent via /etc/haproxy/crowdsec.cfg, using spoe-message crowdsec-tcp for IP-level decisions and spoe-message crowdsec-http-body / crowdsec-http-no-body groups for HTTP-layer WAF evaluation including request body up to 51200 bytes.
• Adds WAF (AppSec) evaluation via CrowdSec AppSec — the only HAProxy bouncer with WAF support — enabling real-time WAF protection and virtual patching directly in HAProxy.

Web Application Security · 2026-09-25

Dalfox adds MCP support and a SKILL.md for skill-aware AI agents such as Claude Code, Cursor, OpenCode, and Codex.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds SKILL.md for direct integration with skill-aware AI agents including Claude Code, Cursor, OpenCode, and Codex.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Web Application Security · 2026-09-25

Dalfox gains a persistent config file (~/.config/dalfox/config.toml or .json) covering all scan flags, scoping rules, and WAF evasion settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds ~/.config/dalfox/config.toml (or config.json) as a persistent config file, auto-created with a commented template on first run of any subcommand except completion and man.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Supports $XDG_CONFIG_HOME/dalfox/ as the config directory when XDG_CONFIG_HOME is set, falling back to $HOME/.config/dalfox/ (or %USERPROFILE%\.config\dalfox\ on Windows).
• Accepts --config <path> to point Dalfox at a specific config file; a non-existent path is created from a default template and the run uses built-in defaults.

Web Application Security · 2026-09-25

Dalfox: Adds _meta.progressToken support on wait=true calls and preflight, streaming notifications/progress with cumulative requests sent, phase, parameters tested, and findings so far.

• Supports notifications/cancelled on in-flight wait=true calls to stop the underlying scan itself (not just the wait), settling it with partial results.
• Publishes outputSchema in tools/list and returns a structuredContent object from tools/call conforming to it, alongside the existing text content block.
• Adds dalfox://scans and dalfox://scan/{scan_id} resource URIs so scan status, progress, and findings are addressable directly rather than only callable.

Web Application Security · 2026-09-25

Dalfox documents structured output formats, new output flags, and enriched JSON/JSONL/SARIF report fields including request/response capture⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds -f json and -f jsonl output format flags; JSON writes one envelope document with findings under findings, JSONL writes one object per line with {"meta": {…}} as the first line and one finding per subsequent line.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds -f toml output format flag for TOML-formatted scan reports.
• Adds --include-request flag to embed the verbatim HTTP request Dalfox sent (including all -H headers and cookies) into each finding in structured output.

Web Application Security · 2026-09-25

Dalfox gains WAF fingerprinting, bypass strategies, and evasion controls via new flags including --waf-bypass, --force-waf, --skip-waf-probe, --waf-evasion, and --waf-min-confidence⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --waf-bypass auto to enable automatic WAF fingerprinting (passive header/body analysis plus a dalfox_waf_probe=<script>alert(1)</script> provocation probe) and apply a per-WAF evasion strategy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --force-waf <name> to override fingerprinting and force a specific WAF strategy; accepted names include cloudflare/cf, aws/awswaf/aws-waf, akamai, imperva/incapsula, modsecurity/modsec/owasp-crs/owaspcrs/crs, sucuri, f5/bigip/f5-bigip, barracuda, fortiweb/forti, azure/azurewaf/azure-waf, cloudarmor/cloud-armor/gcp, fastly, wordfence, and citrix/netscaler (case-insensitive; any other value is rejected).
• Adds --skip-waf-probe to suppress the active provocation request while still running passive WAF detection on the preflight response.

Web Application Security · 2026-09-25

Dalfox adds dry-run mode, discovery-only mode, GraphQL/XML/multipart body probing, and smarter parameter mining with bucketed requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --dry-run flag to print the attack plan (target count, parameters found, request estimate) without sending any XSS payloads or attack-shaped requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --only-discovery flag to run the full discovery and mining stage and print one line per discovered parameter (URL, name, location) without scanning.
• Adds --ignore-param flag (repeatable) to exclude specific parameter names from scanning, with wildcard pattern support.

Web Application Security · 2026-09-25

Dalfox docs reveal --blind-oob OOB XSS detection, resume/state-file scanning, and HAR/raw-HTTP input handling with --keep-duplicates⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --blind-oob flag (with optional --blind-oob=oast.fun server override and --blind-oob-wait poll duration) to register an interactsh session, mint a per-payload callback host, and surface late-firing XSS as V findings with detection_method: oob.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds -b flag for supplying your own out-of-band callback listener URL for blind XSS payloads without Dalfox managing the interactsh session.
• Adds scan resume via a state file: a target's identity is hashed from its URL, method, and request data (body, headers, cookies, user-agent, plus captured values in raw HTTP / HAR inputs), and run-wide credential headers (Authorization, Proxy-Authorization, Cookie, X-Api-Key, *-Api-Key, X-Auth-Token, *-Token, X-CSRF-Token, X-XSRF-Token, *-Session-Id, X-Session-Token, X-Access-Key, X-JWT-Assertion) are excluded from the hash so a refreshed session resumes rather than rescans.

Web Application Security · 2026-09-25

Dalfox v3 adds MCP stdio server, managed OAST, resumable scans, session monitoring, shell completions, and major CLI flag overhauls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds dalfox server --type mcp as a dedicated stdio subcommand exposing Dalfox to AI coding assistants over JSON-RPC, replacing v2's server --type mcp approach.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds --blind-oob flag for managed OAST: registers an interactsh session and correlates callbacks to the payload that triggered them, alongside the plain -b callback URL.
• Adds --state-file and --baseline flags for resumable and incremental runs — skip targets a previous run completed, or report only findings new since an earlier JSON report.

Web Application Security · 2026-09-25

Dalfox: Adds out-of-scope pattern file support so a file of host-exclusion patterns (one per line, blank and # lines skipped) can be supplied alongside or instead of inline --out-of-scope flags.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --blind-oob custom blind payload template file support: one template per line, each containing {callback}, which Dalfox replaces with the OOB callback URL; lines missing {callback} are skipped with a warning and fall back to built-in templates.
• Adds a custom payload file flag (one payload per line, blank and # lines skipped) that merges with built-in payloads unless the 'use only custom payloads' flag is also set.
• Adds a 'use only custom payloads' mode that requires the custom payload file flag (exits on missing file) and suppresses all built-in payloads.

SIEM · 2026-09-25

Databricks GA: apply key-value tags to dashboards, notebooks, apps, and Genie Agents for workspace asset organization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports governed and ungoverned key-value tags on dashboards, notebooks, Databricks apps, and Genie Agents to organize and categorize workspace assets (now generally available).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-25

Databricks AI/BI dashboards gain column pinning, natural-language filtering, LOD expressions, and per-widget filter overrides.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds column pinning and formatting, search, a column explorer, natural-language filtering, and a selection details panel to the dataset results table and metric view preview grid.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds include-style level of detail (LOD) expressions to the metric view editor.
• Enables configuring a dashboard widget to ignore selected dashboard filters while those filters continue to apply to the rest of the page.

SIEM · 2026-09-25

Genie Agents gains column picker for monitoring table and page-level citations for volume file answers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a column picker to the agent monitoring table on the Monitor tab, letting you choose which columns are displayed.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds page-level citations (Beta) so that when a Genie Agent answers using content from an attached volume file, citations point to the specific page of the source file.

SIEM · 2026-09-25

Genie One adds chat pinning and MCP write actions in the mobile app (Beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the ability to pin a chat to keep it at the top of the Genie One sidebar.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds MCP write actions support in the Genie One mobile app (Beta), enabling write operations from connected external tools.

SIEM · 2026-09-25

Databricks GA: share metric views via OpenSharing and query them with MEASURE(...) on serverless compute.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds support for including metric views in a share via OpenSharing, queryable with MEASURE(...) on serverless compute.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-25

Databricks Runtime 19 adds ABAC row filter and column mask enforcement for Unity Catalog time travel queries (Beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Enforces ABAC row filter and column mask policies on Unity Catalog managed tables when using time travel queries, starting with Databricks Runtime 19 (Beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-25

Databricks adds automatic sensitive data classification and tagging within Unity Catalog.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Automatically classify and tag sensitive data in Unity Catalog with the new Data Classification capability.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Web Application Security · 2026-09-25

DataDome Varnish module 3.6.0 adds support for Varnish 8.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Varnish 8 support to the DataDome Varnish module.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Identity & Access Management · 2026-09-25

Web SDK 0.4.0 adds native camera-control options — defaultDocumentCamera, defaultLivenessCamera, and switcher-hide flags — plus matching URL query parameters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds defaultDocumentCamera, defaultLivenessCamera, showDocumentCameraSwitchButton, and showLivenessCameraSwitchButton options to the Web SDK, bringing camera-control parity with the native SDKs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Public Key Infrastructure (PKI) · 2026-09-25

Container & Image Security · 2026-09-25

Distroless adds a Dart example using the base-nossl image and requires Dart 3.9 for the dart build CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Requires Dart 3.9 for the dart build CLI when building distroless Dart containers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secure Access (VPN / SASE / ZTNA) · 2026-09-25

AI/LLM Security · 2026-09-25

Docker Sandboxes adds cloud environment file support via sbx --cloud env with plan, run, and removal workflows⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx --cloud env plan <file> to preview a cloud sandbox configuration before provisioning, including inherited cloud credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx --cloud env run --detached <file> to create a cloud sandbox from an environment file without attaching to it.
• Adds sbx --cloud env rm <file> to tear down a cloud sandbox and remove only the secrets provisioned by that environment file.

AI/LLM Security · 2026-09-25

Docker Sandboxes: Supports GitHub Copilot models in OpenCode by configuring a GitHub credential — no separate device login required inside the sandbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Selects a local model or inference endpoint via sbx run --model, with the model's supported thinking levels available as OpenCode variants cycled using Ctrl+T.

AI/LLM Security · 2026-09-25

New sbx move command transfers filesystem snapshots between local and cloud Docker sandboxes in either direction.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx move <sandbox> --to cloud to transfer a local sandbox filesystem snapshot to a cloud sandbox, creating a new cloud sandbox from the captured image.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx move <sandbox> --to local to transfer a cloud sandbox filesystem snapshot to a local sandbox, importing the snapshot and creating a local sandbox.
• Adds --name flag to sbx move to set the destination sandbox name prefix (cloud destinations append a short unique suffix).

AI/LLM Security · 2026-09-25

Docker Sandboxes gains cloud network policy management via sbx --cloud policy with account and sandbox scopes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx --cloud policy init to set the outbound network default for cloud sandboxes to allow-all, balanced, or deny-all at the Docker account scope.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx --cloud policy init deny-all --sandbox <sandbox> to set a deny-all default scoped to a single cloud sandbox.
• Adds sbx --cloud policy allow network <host:port> and sbx --cloud policy allow network <host:port> --sandbox <sandbox> to create account-level or sandbox-scoped outbound allow rules.

AI/LLM Security · 2026-09-25

Docker Sandboxes adds cloud secret store for agent credentials via sbx --cloud secret with per-sandbox and account-scoped support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx --cloud secret set anthropic to store an Anthropic API key in the cloud secret store for Claude Code agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx --cloud secret set openai --oauth to complete an OpenAI OAuth flow and store the resulting credential at account scope for Codex.
• Adds sbx --cloud secret set openai to store an OpenAI API key for Codex in the cloud secret store.

AI/LLM Security · 2026-09-25

Docker Sandboxes gains a --cloud flag for sbx commands, enabling cloud-managed sandboxes with persistent volumes, SSH, MCP servers, and port exposure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds --cloud flag to sbx commands to create and manage sandboxes on Docker-managed infrastructure using cloud IDs, names, and lifecycle controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx --cloud run with --name, --new, --detached, --cpus, --memory, --platform, --ttl, --on-timeout, --env, and --allow-network flags to control cloud sandbox creation and launch behavior.
• Adds sbx --cloud create to provision a cloud sandbox without opening an agent session, printing the cloud sandbox ID for later use.

AI/LLM Security · 2026-09-25

Docker Sandboxes: Adds sbx --cloud flag to run sandboxes against Docker-managed cloud resources instead of local host resources, exposing sandbox ports via public HTTPS URLs instead of host port bindings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds separate sbx --cloud secret store (sbx --cloud backend) distinct from the local sbx secret store, requiring independent credential configuration for cloud sandboxes.
• Supports sbx --cloud env with environment files for cloud sandboxes, accepting a subset of local configuration fields: agents, environment variables, resource limits, and credentials.
• Adds sbx cp for transferring files separately when workspace mounts or cloud volumes are not copied during a move.

AI/LLM Security · 2026-09-25

Docker Sandboxes: Adds --cloud global flag to the sbx CLI (v0.45.0+) to route supported commands to the Cloud Sandboxes API instead of local execution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx login command to authenticate against a Docker Agentic Platform subscription from the CLI.
• Adds sbx --cloud secret set subcommand to configure cloud-scoped credentials (e.g. Anthropic API keys) separately from local sandbox secrets.
• Supports sbx --cloud create, sbx --cloud exec, sbx --cloud attach, and sbx --cloud rm for full cloud sandbox lifecycle management.

AI/LLM Security · 2026-09-25

Docker Sandboxes adds sbx template subcommands to save, list, remove, export, import, and load sandbox filesystem snapshots as reusable template images.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx template save <sandbox-name> <name:tag> to snapshot a sandbox's container filesystem as a reusable template image stored in the sandbox runtime's local image store.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds sbx template save ... --output <file>.tar to export a saved template as a tar file for sharing or moving to another machine.
• Adds sbx template load <file>.tar to import a tar file directly into the sandbox runtime's image store, bypassing any registry requirement.

AI/LLM Security · 2026-09-25

Docker Sandbox Kit Specification v3 introduces OCI-native Kit format for declaring agent authority as versioned, reviewable config⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Introduces the Docker Sandbox Kit Specification v3, open source under Apache 2.0 at docker/sandbox-kit-spec, defining a portable OCI image format for declaring exactly what authority a sandbox agent may exercise.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Stores all Kit declarations in a single OCI manifest annotation (vnd.docker.sandbox.kit.descriptor), so Kits build with docker buildx build, pull with docker pull, and are pinnable by digest.
• Supports two Kit kinds: a workload Kit (supplies the root filesystem) and a mixin Kit (an overlay adding a CLI, network rule, or credential binding), composed at launch with one workload and any number of mixins.

AI/LLM Security · 2026-09-25

Docker Sandboxes adds Cloud Sandboxes: managed microVM compute in the cloud with sbx --cloud run and sbx move --to cloud.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx --cloud run <kit> to launch a sandbox on Docker-managed cloud compute, with size options from Micro (1 vCPU / 2 GiB, $0.07/hr) to XL (16 vCPU / 32 GiB, $1.12/hr) and sessions up to 24 hours.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces Kits: pre-configured, pre-built sandbox images for leading coding agents (Claude Code, Codex, Copilot, Antigravity, Open Code, Hermes), launchable with a single sbx --cloud run <kit> command.
• Adds a centralized MCP gateway so agents running in cloud, locally, or in other clients (e.g. ChatGPT desktop) can share a single set of connected MCP servers (Jira, Linear, Grafana, incident.io, or any streamable HTTP endpoint).

AI-Powered Offensive Security · 2026-09-25

Dreadnode adds inline tool-call approvals, eight new agentic probe families, a browsable Tool catalog, and TUI runtime log switching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds generate_attack support for agentic-probes 2026 attacks in the ai-red-teaming agent, including transforms for argument injection, deserialization payloads, RAG poisoning, and covert channels, plus matching evidence-gated scorers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds eight new agentic red-teaming probe families to the SDK: evidence-gated scorers and transforms covering tool-misuse RCE, advanced exfiltration, MINJA memory poisoning, MCP line-jumping, RAG optimization attacks, and indirect prompt injection via the new IterInject attack loop.
• Adds a new provisionable multiagent sandbox target agentic-probes-sandbox for 2026 agentic-probe evaluation families.

AI-Powered Offensive Security · 2026-09-25

Dreadnode Workflows enter open beta with CLI/SDK/UI pipelines, Slack integration, and a built-in agent runtime health tool.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a runtime_info built-in tool agents can call to inspect which capabilities are loaded, enabled, and healthy — including failed loads and component health — without exposing raw config or credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Introduces Workflows in open beta: define, run, and inspect multi-step agent pipelines from the CLI, SDK, and a new Workflows section in the UI, with project-scoped catalog, stable graphs, inline CLI guide, and model selection at run time.
• Adds Slack integration: org owners connect a workspace via Settings → Integrations, then @mention an agent to stream a full session in-thread with stop support and a direct link back to the session in Agents → Sessions.

Digital Forensics & Incident Response · 2026-09-25

iOS Forensic Toolkit 10.11 adds bootloader-level extraction for Apple Watch Series 4/5 and Apple TV 4K 2nd Gen, yielding full file system images and decrypted keychains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds bootloader-level extraction for Apple Watch Series 4 and Series 5, producing a full file system image and decrypted keychain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds bootloader-level extraction for Apple TV 4K 2nd Generation, producing a full file system image and decrypted keychain.
• Extends low-level extraction support beyond the A11 generation of Apple silicon for the first time.

Reverse Engineering · 2026-09-25

Finite State now auto-resolves findings when a Linux distro package already contains a vendor-authored CVE patch, with advisory evidence in the audit trail.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports vendor-patch recognition for Debian, Ubuntu, Alpine, Wolfi, Chainguard, MinimOS, Red Hat Enterprise Linux, AlmaLinux, Rocky Linux, and openSUSE Leap packages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secure Access (VPN / SASE / ZTNA) · 2026-09-25

Firezone Android 1.5.15 adds iru-id SAN claim support in device attestation and improves resume-from-sleep connectivity restoration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Recognizes iru-id SAN claims in device attestation certificates as an alias for kandji-id.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Secure Access (VPN / SASE / ZTNA) · 2026-09-25

Firezone: Recognizes iru-id SAN claims in device attestation certificates as an alias for kandji-id.

Endpoint Security (EDR/XDR) · 2026-09-25

Fleet: Adds severity_min and severity_max query parameters to the vulnerability host-count chart endpoint to filter results by CVSS 3.x base score range; vulnerabilities lacking metadata are included only when neither filter is set.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds DELETE /api/v1/fleet/hosts/:id/commands/:command_uuid to cancel a pending MDM command (lock, wipe, or ClearPasscode/EnableLostMode) for Apple hosts before it is delivered.
• Adds GET /api/v1/fleet/microsoft_graph_credentials to list all Microsoft Graph credentials and per-tenant Autopilot sync status, including credential_invalid, last_synced_at, and last_sync_error fields.
• Adds preserve_host_activities_on_reenrollment global config field to retain host activity history after a wipe and re-enrollment for company-owned Apple (AB) and Android hosts.

Reverse Engineering · 2026-09-25

Frida 17.19.0 ships PS5 support and adds a barebone WinNT ARM64 agent⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds prebuilt Frida binaries for the PlayStation 5 (PS5) platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a barebone WinNT ARM64 agent, now included in CI-shipped assets.

Secrets Detection & Management · 2026-09-25

GitGuardian ships 10 new detectors, 8 new analyzers, and expanded validation for Splunk, Salesforce, Artifactory, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present.
• Adds a new detector for generic Sanctum tokens.

Secrets Detection & Management · 2026-09-25

GitGuardian publishes a Docker Sandbox Mixin Kit that auto-installs ggshield AI hooks for Claude Code, Codex, Cursor, and GitHub Copilot agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds sbx secret set gitguardian to supply a GitGuardian API key through Docker's host-side credential proxy, keeping the real token outside the sandbox microVM.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Publishes a Docker Sandbox Mixin Kit on Docker Hub and GitHub that automatically installs ggshield and configures agentic AI hooks when a sandbox starts, requiring no manual setup.
• Adds a prompt-submission hook via ggshield that scans a developer's prompt for secrets and blocks it before it reaches the AI model.

Secrets Detection & Management · 2026-09-25

GitGuardian API adds detector custom hosts endpoint and live historical-scan progress polling⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds live progress polling for historical scans, exposing report_status (values: running, watching, done, unavailable) alongside scan_status, with terminal fields duration_seconds, pending_seconds, and outcome_by_reason (reasons: skipped, binary_file, too_large, failed, file_not_downloadable, empty_content) available once report_status reaches done.

SAST / SCA / Code Security · 2026-09-25

GitHub Copilot admins can now set a global default policy for all new GA features under AI Controls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds a Default policy for new features setting under the AI Controls > Copilot > Features & clients admin page, with options Enabled, Disabled, and Let organizations decide, controlling whether current and future eligible Copilot features are available to users by default.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Extends the global default policy to cover the Copilot Code Review policy on the Agents page and the MCP servers in Copilot policy, in addition to features managed on the Features & clients page.

SAST / SCA / Code Security · 2026-09-25

GitHub Enterprise Cloud adds proof-of-presence re-authentication before high-impact actions for Entra ID EMU enterprises.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Supports two proof-of-presence requirement levels — re-authentication (password-level IdP sign-in) and MFA (authenticator app or biometric as configured in Entra ID) — allowing enterprises to set custom IdP policies governing which actions trigger which level.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• After a successful proof-of-presence challenge, the verified session remains elevated for two hours in the same browser session, matching the existing sudo mode session model.

SAST / SCA / Code Security · 2026-09-25

CodeQL 2.27.1 adds new C/C++ and C# queries, Kotlin 2.4.20 support, and expanded data flow models for Go, Rust, and JS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the cpp/ambiguous-assignment-of-comparison query to detect expressions that assign a comparison result to a variable and use the assignment as a truth value.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds the cs/linq/missed-firstordefault query to identify foreach loops that can be rewritten with LINQ's FirstOrDefault method.
• Supports Kotlin 2.4.20 in CodeQL's Java/Kotlin analysis.

SAST / SCA / Code Security · 2026-09-25

GitLab CI adds granular retry:when reasons for stuck, pending, hung, and timed-out jobs⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Deprecates the stuck_or_timeout_failure value for retry:when in GitLab 19.1; existing jobs retain it for historical data only and new jobs must use the more specific reasons.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SAST / SCA / Code Security · 2026-09-25

GitLab 19.4 adds CI/CD, merge request, vulnerability, and project MCP server tools plus a new merge-request-created trigger for agentic flows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds save_pipeline MCP tool to run, retry, cancel, or rename a CI/CD pipeline.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds get_job MCP tool that returns a job by default; passing include: ['log'] streams the job trace paginated via byte_offset and byte_limit (512 KB per page) so an agent can fetch and diagnose a failed build log directly.
• Adds save_merge_request MCP tool to open and update merge requests.

SIEM · 2026-09-25

Google SecOps: Adds GET /v1alpha/{name}:fetchWizRelatedIssues to fetch Wiz-related security issues for a specific case.

• Adds the v1alpha.projects.locations.instances.remediationPlans resource with POST /v1alpha/{parent}/remediationPlans:generate to trigger the Remediation agent and save its output as a Remediation Plan.
• Adds POST /v1alpha/{parent}/remediationActions to create a manual Remediation Action under a plan, and GET /v1alpha/{parent}/remediationActions to list actions under a plan, via the new v1alpha.projects.locations.instances.remediationPlans.remediationActions resource.

SIEM · 2026-09-25

Google SecOps auto-enriches direct-ingestion logs with the source GCP organization ID under metadata.base_labels.ingestion_kv_labels.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-25

Google SecOps adds a User Preferences dialog for time zone, date/time format, notifications, and accessibility settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds User Preferences dialog (reached via user avatar menu) to configure time zone, date/time format, notification settings, and accessibility options including feedback message duration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

SIEM · 2026-09-25

Google SecOps adds a Gemini pane for in-product documentation Q&A with Google Search grounding and citations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds an in-product Gemini pane that answers natural-language questions about Google SecOps by summarizing relevant documentation and linking to related pages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Gemini responses are grounded via Google Search, surfacing a Google G icon, search query chips, and citations so practitioners can verify sources used during an investigation.
• Enables deletion of individual or all Gemini chat sessions via Delete chat and Delete all chat sessions controls in the Gemini pane.

SIEM · 2026-09-25

Google SecOps gains Gemini-powered natural-language search, YARA-L generation, AI case summaries, and an autonomous Triage and Investigation Agent⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds the Triage and Investigation Agent (TIN), which autonomously analyzes incoming security alerts, executes an investigation plan, and delivers a structured true/false-positive verdict with findings and a summarized explanation; operational data such as investigation volume and token usage is visible in the curated TIN dashboard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds a Gemini pane and natural-language prompt support in the search field to build, edit, run, and iterate on searches — adjusting scope, time range, and filters — without writing queries manually.
• Adds natural-language prompt-driven YARA-L rule generation so practitioners can describe detection logic in plain text and receive a ready-to-use rule.

SIEM · 2026-09-25

Google SecOps Content Hub centralizes discovery and deployment of detection rules, dashboards, playbooks, and SOAR integrations in one place.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds chronicle.googleapis.com/featuredContentSearchQueries.get, .list, and .install IAM permissions to control access to saved search query content in Content Hub.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds chronicle.googleapis.com/featuredContentRules.list IAM permission to control access to featured curated detection rules in Content Hub.
• Adds chronicle.googleapis.com/featuredContentNativeDashboards.get, .list, and .install IAM permissions to control access to dashboard content in Content Hub.

SIEM · 2026-09-25

Google SecOps adds Agentic Automation to embed AI agents directly into SOAR playbooks for adaptive triage and investigation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Agentic Automation to Google SecOps playbooks, enabling AI agents to be embedded as discrete steps alongside deterministic automation — pausing the playbook asynchronously while the agent works without occupying the execution queue.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Integrates the Triage and Investigation Agent (TIN) as the first supported agent, delivering autonomous alert analysis with first-party enrichment, a True Positive / False Positive verdict, and a confidence_level score usable in downstream playbook logic.
• Exposes verdict and confidence_level fields from AI Agent step results in the Expression Builder, enabling conditional branching (remediation, auto-close, or manual review) driven by the agent's structured JSON output.

SIEM · 2026-09-25

Google Unified Security launches with Chrome Enterprise Premium integration, multi-cloud CDIR, and AI Protection for securing AI workloads⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Chrome Enterprise Premium (CEP) integration with Google SecOps, enabling browser-sourced threat visibility with curated detections enriched by Safe Browsing and Google Threat Intelligence (GTI).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds dedicated Google SecOps dashboards for Chrome security events and anomalies to support investigation of browser-based threats.
• Adds native playbook orchestration for automated Chrome Enterprise response actions — including blocking malicious URLs, blocking extensions, and quarantining devices — directly from Google SecOps.

SIEM · 2026-09-25

Google SecOps Ingestion API docs detail batch deduplication, regional endpoints, and UDM vs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ unstructured log ingestion paths

• Supports POST https://malachiteingestion-pa.googleapis.com/v2/udmevents:batchCreate to ingest pre-parsed UDM events that bypass the CBN parsing layer and go directly to indexing and the rules engine, reducing end-to-end latency.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Implements batch-level deduplication: a batch ID is hashed from customer_id and log entry content (excluding log type, namespace, labels, and feed ID); duplicate batches for the same customer and log type are rejected entirely.
• Supports ingesting unstructured logs via a separate endpoint, with normalization handled inside Google SecOps infrastructure and data surfaced through the UI or Raw Log Scan.

SIEM · 2026-09-25

Google SecOps Detection Engine API adds full programmatic rule management via YARA-L 2.0 endpoints across 19 regional endpoints⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds POST https://backstory.googleapis.com/v2/detect/rules (CreateRule) to create a new YARA-L 2.0 detection rule without immediately setting it live.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds POST https://backstory.googleapis.com/v2/detect/rules/{ruleId}:createVersion (CreateRuleVersion) to create a new version of an existing rule, including from non-latest versions.
• Adds DELETE https://backstory.googleapis.com/v2/detect/rules/{ruleId} (DeleteRule) to programmatically delete a specified rule.

SIEM · 2026-09-25

Google SecOps Backstory Search API reference published, covering endpoints for events, assets, IOCs, and alerts with regional endpoint support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds GET https://backstory.googleapis.com/v1/events/log:get/?name={UID} endpoint to retrieve a single raw log by UDM event metadata.id.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• Adds GET https://backstory.googleapis.com/v1/event:get?name={UID} endpoint to retrieve a single parsed UDM event by metadata.id.
• Adds GET https://backstory.googleapis.com/v1/artifact/listassets endpoint to list all assets that accessed a given artifact (domain, destination IP, MD5/SHA1/SHA256 hash) within a time range, with artifact.domain_name, artifact.destination_ip_address, artifact.hash_md5, artifact.hash_sha1, artifact.hash_sha256, start_time, end_time, and page_size parameters; returns up to 100 assets per request.

SIEM · 2026-09-25

Google SecOps adds GoogleSQL search, case playbooks, reaction triggers, Detection Engineering Agent, and GA customizable rule schedules⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds match_all option to the Grok filter in parser syntax, extracting all non-overlapping pattern occurrences in a field instead of only the first match.
• Adds GoogleSQL query support (public preview) in Search, supporting both declarative SQL and Piped SQL syntax to query UDM events, entity graphs, detection rules, and case management telemetry tables.
• Adds case playbooks (preview) enabling playbooks and manual actions to run across an entire case container rather than individual alerts.

Reconnaissance & OSINT · 2026-09-25

API surface changed: +1 endpoint, 3 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• New endpoint POST /sequences/{sequence_id}/test⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Endpoint Security (EDR/XDR) · 2026-09-25

Huntress Managed ISPM adds Modified Deployments, letting orgs hand-pick security controls and approval gates before anything rolls out.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

• Adds Modified Deployments, an org-level setting in Managed ISPM that lets you hand-pick which security controls (low, medium, or high impact) from the Huntress policy library roll out and on which days, with no changes deployed until explicitly approved.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
• New controls added by Huntress to the policy library trigger a notification under Modified Deployments but are held until you approve them, supporting strict compliance and change control requirements.