https://cybertoolchain.io/ The week's most notable releases across the tools we monitor. en Sun, 01 Nov 2026 00:00:00 GMT https://cybertoolchain.io/newsletter/top/2026/10 https://cybertoolchain.io/newsletter/top/2026/10 Sun, 01 Nov 2026 00:00:00 GMT GitLab closed real capability gaps across source, supply chain and secrets in one month. The Dependency Firewall blocks malicious, vulnerable and non-compliant packages before they enter a build with warn/block modes and a logged bypass across npm, pip and Maven, while the Business Logic Security Analyzer runs whole-repository scans for broken object-level authorization, missing authorization and mass assignment that pattern-based SAST cannot detect, reporting them in the merge-request widget. GitLab Secrets Manager also reached GA with per-job build-time scoping via OpenBao and full audit trails. https://cybertoolchain.io/newsletter/head/18 https://cybertoolchain.io/newsletter/head/18 Fri, 30 Oct 2026 00:00:00 GMT 3 tools shipped new releases: Aikido Security, OpenSSL, Dreadnode. https://cybertoolchain.io/newsletter/head/17 https://cybertoolchain.io/newsletter/head/17 Fri, 23 Oct 2026 00:00:00 GMT 3 tools shipped new releases: Zenity, GitLab, Qualys Patch Management. https://cybertoolchain.io/newsletter/head/16 https://cybertoolchain.io/newsletter/head/16 Fri, 16 Oct 2026 00:00:00 GMT 3 tools shipped new releases: Operant AI, Endor Labs, Aembit. https://cybertoolchain.io/newsletter/head/15 https://cybertoolchain.io/newsletter/head/15 Fri, 09 Oct 2026 00:00:00 GMT 3 tools shipped new releases: GitLab, Elastic Security Labs, GitHub. https://cybertoolchain.io/newsletter/head/14 https://cybertoolchain.io/newsletter/head/14 Fri, 02 Oct 2026 00:00:00 GMT 4 tools shipped new releases: Cribl, Qualys VMDR, Qualys Patch Management, Metasploit Pro. https://cybertoolchain.io/newsletter/top/2026/09 https://cybertoolchain.io/newsletter/top/2026/09 Thu, 01 Oct 2026 00:00:00 GMT Cycode shipped two distinct, substantial capabilities in September. Agentic Code Scanning adds an agent layer that reasons from a threat model and disproves findings before surfacing them, catching logic-level flaws like broken access control that rule engines cannot express — it flagged real authorization CVEs (gitea CVE-2025-68941, next.js CVE-2025-29927) that Semgrep OSS, CodeQL, and Cycode's own rule engine all missed, then auto-promotes confirmed, generalizable findings into deterministic SAST rules. Weeks later, Workstation Protection moved supply-chain defense upstream of CI by intercepting package install commands on developer machines in real time, enforcing cooldown policies and blocking known malicious packages before installation. https://cybertoolchain.io/newsletter/top/2026/q3 https://cybertoolchain.io/newsletter/top/2026/q3 Thu, 01 Oct 2026 00:00:00 GMT Over the quarter adscan turned Active Directory attack-path analysis into a unified cross-domain and cross-forest graph, chaining Kerberos delegation and MSSQL linked-server compromise across trust boundaries into a single blast radius and executing AD CS ESC5/ESC8/ESC11 relay routes end to end. It then added zero-credential takeover paths that start from an unauthenticated null-session step and rate full-domain-compromise chains as Critical, plus a minimal-footprint krbtgt-only DCSync mode to prove full domain compromise. Findings come mapped to MITRE and CIS Benchmarks with targeted --target queries, so a practitioner can both demonstrate and remediate the chain. https://cybertoolchain.io/newsletter/head/13 https://cybertoolchain.io/newsletter/head/13 Fri, 25 Sep 2026 00:00:00 GMT 3 tools shipped new releases: Semgrep, Docker Sandboxes, Cycode. https://cybertoolchain.io/newsletter/head/12 https://cybertoolchain.io/newsletter/head/12 Fri, 18 Sep 2026 00:00:00 GMT 5 tools shipped new releases: Zeek, Qualys, Aviatrix, Splunk Security Content, Dreadnode. https://cybertoolchain.io/newsletter/head/11 https://cybertoolchain.io/newsletter/head/11 Fri, 11 Sep 2026 00:00:00 GMT 4 tools shipped new releases: Aurascape, powershell-empire, GitHub, RAPTOR. https://cybertoolchain.io/newsletter/head/10 https://cybertoolchain.io/newsletter/head/10 Fri, 04 Sep 2026 00:00:00 GMT 5 tools shipped new releases: Cycode, Horizon3 NodeZero, Endor Labs, adscan, Binary Ninja. https://cybertoolchain.io/newsletter/top/2026/08 https://cybertoolchain.io/newsletter/top/2026/08 Tue, 01 Sep 2026 00:00:00 GMT adscan shipped five feature releases across August, each materially expanding Active Directory attack-path coverage: cross-forest Kerberos delegation and MSSQL linked-server chains surfaced as a single blast radius, AD CS ESC5 executed end-to-end with MITRE-mapped reports, and cross-forest Kerberoasting, AS-REP Roasting, and ADCS ESC8/ESC11 relay routes unified into a single graph. The month closed with a minimal-footprint krbtgt-only DCSync mode that proves full domain compromise without broad credential exposure. No other product in August matched this combination of sustained release cadence and closed capability gaps in a single, high-value domain. https://cybertoolchain.io/newsletter/head/9 https://cybertoolchain.io/newsletter/head/9 Fri, 28 Aug 2026 00:00:00 GMT 3 tools shipped new releases: Aikido Security, JFrog, defectdojo. https://cybertoolchain.io/newsletter/head/8 https://cybertoolchain.io/newsletter/head/8 Fri, 21 Aug 2026 00:00:00 GMT 5 tools shipped new releases: Bugcrowd, Plerion, Endor Labs, GitLab, Black Duck. https://cybertoolchain.io/newsletter/head/7 https://cybertoolchain.io/newsletter/head/7 Fri, 14 Aug 2026 00:00:00 GMT 5 tools shipped new releases: adscan, Elastic Security Labs, Radare2, Wiz Code, Tenzir. https://cybertoolchain.io/newsletter/head/6 https://cybertoolchain.io/newsletter/head/6 Sat, 08 Aug 2026 00:00:00 GMT 5 tools shipped new releases: Dreadnode, Metasploit Pro, Cribl, Aikido Security, Prowler. https://cybertoolchain.io/newsletter/top/2026/07 https://cybertoolchain.io/newsletter/top/2026/07 Sat, 01 Aug 2026 00:00:00 GMT Wiz Defend shipped three substantive releases across July: AI-agent-context-aware runtime detections (malicious symlinks, SSH key writes, severity elevation when an AI agent is the originating process), agentless EDR-like visibility into FortiGate appliances and Redis replication abuse via local log parsing, and the GA of Red Agent — a continuous autonomous pentester that reasons through business logic, validates API and vibe-coded app flaws, and delivers reproduction-ready proofs of execution. No other product in the month combined new detection surface, new autonomous offensive validation, and new runtime context (AI agent awareness) across three consecutive weeks. https://cybertoolchain.io/newsletter/head/5 https://cybertoolchain.io/newsletter/head/5 Fri, 31 Jul 2026 00:00:00 GMT 5 tools shipped new releases: Wiz Defend, Intruder, OpenAI Codex CLI, tcpreplay, ConductorOne. https://cybertoolchain.io/newsletter/head/4 https://cybertoolchain.io/newsletter/head/4 Fri, 24 Jul 2026 00:00:00 GMT 5 tools shipped new releases: VulnHunter, noir, Pomerium, Grype, Wiz Defend. https://cybertoolchain.io/newsletter/head/3 https://cybertoolchain.io/newsletter/head/3 Fri, 17 Jul 2026 00:00:00 GMT 5 tools shipped new releases: Cloudflare, Keycloak, xsrfprobe, Docker Sandboxes, ssh-audit. https://cybertoolchain.io/newsletter/head/2 https://cybertoolchain.io/newsletter/head/2 Wed, 15 Jul 2026 00:00:00 GMT 5 tools shipped new releases: Cloudflare, Keycloak, Docker Sandboxes, Wiz Defend, StepSecurity. https://cybertoolchain.io/newsletter/head/1 https://cybertoolchain.io/newsletter/head/1 Mon, 13 Jul 2026 00:00:00 GMT 5 tools shipped new releases: Dalfox, trufflehog, Headscale, xsrfprobe, ssh-audit.