The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
June 23, 202614 releases · 2026-06-01 → 2026-06-23Stable
Hacktron adds Context page with app-level threat models, public PR redaction, org fail-on default, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. duplicate marking.
Adds a Context page with Repositories and Applications tabs to view and manage repository and application threat models
Adds the ability to group repositories into an Application for merged threat modeling and scanning
Adds inline reading view with file tree and outline for editing threat models while preserving changes across regenerations
Redacts full titles, descriptions, proof-of-concept code, and file locations in PR review comments on public repositories
Adds an organization-level fail-on severity threshold default for PR/MR checks via settings
+2 moreshow less
Adds Enterprise SSO sign-in with a dedicated SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. or OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. login page and button
Adds the duplicate_of field to the update_finding MCP tool
7 details in Everything
13 more releases in this issue
· 2026-06-01 → 2026-06-23
Hacktron adds Context page for repos/apps/threat models, app-level threat synthesis, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. sign-in, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. duplicate marking
└──▷ HOW TO FIND IT
Navigate to the new Context page to view all repositories and applications sorted by recent threat model updates.
📍In the Hacktron console, click Context in the left sidebar.
Configure your organization to set a default severity threshold for PR checks, allowing individual repos to override it.
Adds a dedicated Context page with Repositories and Applications tabs to browse code knowledge sorted by threat-model update time
Gains ability to group repositories into an Application so Hacktron merges member threat models for application-level scanning and upload fold-in
Enables setting an org-level fail-on severity default for PR/MR checks in settings, overriding the previous per-repo-only limitation
Adds a dedicated SSO sign-in page and Single sign-on (SSO) button on the login screen for SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider./OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. authentication with IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. round-trip token support
Updates the update_finding MCP tool to accept a duplicate_of field for programmatically marking findings as duplicates
Hacktron adds automatic PR status sync on triage, duplicate finding support, and stacked scan volume charts
PR and MR checks update on triage: GitHub check or GitLab commit status flips to passing immediately when a finding is marked as false positive or accepted risk, and reverts to failing if the finding is reopened.
Close findings as duplicates: Mark a finding as a duplicate of another in the same repository; duplicated findings inherit their canonical finding’s severity for PR gate blocking decisions.
Scan volume chart: Dashboard scan volume widget switches to a stacked bar chart with tooltips showing Code Review and Whitebox scan counts per day.
Upload scans named after the archive: Whitebox scans initiated from uploaded archives now use the archive filename as the scan name.
Hacktron v2026-06 adds MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enforcement, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocol access, and PR exclusion rules via .hacktron/config.yaml
New remote MCP server endpoint enables connecting external tools to Hacktron’s finding-triage toolset via the MCP protocol with OAuth or API key authentication
Admins can now enforce multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. (MFA) requirements across their organization for account security
Hacktron adds Fix with AI Slack deep-links, auto-close findings on PR abandonment, and unsupported-language cost warnings
Adds a Fix with AI button in Slack alerts that deep-links directly into Cursor or Claude to open the issue and start fixing.
Allows starting a free trial without entering credit card details first; payment info is only required at subscription time.
Automatically moves findings to a Closed state when their associated pull or merge request is abandoned/unmerged, preserving triage status upon re-open.
Shows up-front notices in cost estimation when a repository contains primarily languages Hacktron cannot yet scan, preventing silent failures.
Dreadnode adds web chat interface, structured project memory for agent findings, and media hiding controls.
Adds a full web chat interface for querying analytics of project runtimes
Enables the web-security agent to persist reconnaissance findings, gadgets, leads, defense bypasses, and discoveries across sessions via structured project memory
Allows users to hide revealed images in tool results and free decoded blobs from memory
3 details in Everything
3 more releases in this issue
· 2026-06-04 → 2026-06-25
Dreadnode v2026-06-18 adds ProjectMemory persistence, DoS/path-traversal skills, EXIFEXIFMetadata standard embedded in image and audio files that records camera settings, timestamps, GPS coordinates, and device identifiers — giving cyber tools a rich source of attribution and forensic data without touching file content. tools, and inline media rendering
└──▷ HOW TO FIND IT
Admin manage LiteLLM model deployments and credentials directly from the platform UI.
📍Use Ctrl+K in the TUI to open the full model browser or navigate to the unified LiteLLM admin proxy page.
Log media evidence from a tool so it appears inline in the session transcript for debugging.
python
# In your custom tool or script, log output which will now render inline
import dn
dn.log_output("screenshot.png", content_type="image/png")
Adds ProjectMemory tools for persisting and retrieving durable project-scoped memory across runs
Renders screenshots and media logged via dn.log_output() inline in the session transcript next to the tool call
Provides a unified LiteLLM admin proxy and model browser with org-allowlist scoping and Ctrl+K TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. access
Dreadnode v2026-06-11 adds media views, ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. and pentest skills, vuln-assessment methodology, and evaluation flags.
New Session and Trace Views now display agent-captured images, audio, and video directly in the transcript (requires Show media click).
New attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management capability combining BBOT, Shodan, Neo4j graph analysis, screenshot triage, and multi-agent ASM pipeline.
New h2-waf-bypass skill in web-security covering 6 bypass classes including delayed DATA frame timing and Extended CONNECT.
New graphql-pentest skill covering endpoint discovery, introspection mining, resource abuse (CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-400, CWE-674), content-type CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session., and capability matrix testing.
New standalone vuln-assessment-methodology capability providing reusable severity matrix and disprove-first rules.
+2 moreshow less
New --judge-model flag on dn evaluation create to override the task-level judge model without modifying task.yaml.
Automated Cloud Assessments now measure the impact of exposed AWS credentials with authorized exploitation checks.
Dreadnode adds cross-platform PE/ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code./Mach-O binary analysis, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. header omission support, and bulk evaluation log download.
Binary-analysis capability replaces windows-reversing with cross-platform PE/ELF/Mach-O support
Conditional MCP header omission allows headers to be marked optional: true so unset env vars omit the header entirely
Bulk evaluation log download enables downloading all sample logs from an evaluation as a single ZIP bundle
Shannon v1.5.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. collector support for structuring intermediate deliverables in the worker
└──▷ GET THIS VERSION
$ git clone --branch v1.5.0 https://github.com/KeygraphHQ/shannon.git
# already have the repo? check out this version:$ git checkout v1.5.0
Decepticon v1.1.16 adds per-engagement sandbox routing, opt-in telemetry, web research tools, and skill retrieval.
└──▷ GET THIS VERSION
$ git clone --branch v1.1.16 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.1.16
get_sandbox(config) resolves configurable.sandbox_url and sandbox_token to enable multi-tenant sandbox isolation for bash sessions
Opt-in usage-telemetry system with consent gateway capturing engagement signals and masked reasoning trajectories
New RoE-gated open-web research tools: web_search, detect_tech_stack, live JS secret scanner, osint_enrich, and network reconnaissance suite
find_skill command enables LightRAG-style hybrid skill retrieval for mobile, IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure., and wireless security domains
export-transcript command exports engagement transcripts with zip export/import support for workspaces
+1 moreshow less
New MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server dedicated to engagement management
6 details in Everything
2 more releases in this issue
· 2026-06-06 → 2026-06-21
Decepticon v1.1.15 raises LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. output cap to 16384 tokens and adds full LiteLLM provider catalog.
└──▷ GET THIS VERSION
$ git clone --branch v1.1.15 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.1.15
The factory now sets an explicit max_tokens default of 16384 (env-overridable via DECEPTICON_LLM_MAX_TOKENS)
litellm_dynamic_config.py now carries the full LiteLLM v1.89.0 provider catalog
2 details in Everything
└──▷ BREAKING ON UPGRADE
!#677 drops the now-dead bedrock/vertex_ai bearer-key map entries
Decepticon v1.1.7 adds BloodHound CE REST support, AI attack-surface detection, and sensitive TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. opt-in
└──▷ GET THIS VERSION
$ git clone --branch v1.1.7 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.1.7
Adds bhce_status, bhce_cypher, and bhce_ingest_zip LangChain tools for official BHCE v9.2.2 integration
Introduces Technology node kind in the knowledge graphknowledge graphA representation of entities and the relationships between them. Software can follow those connections to answer questions or combine information from different sources. for AI-runtime and web-tech detection
Enables Blue Cell detection coverage via DetectionFired events through BlueCellTap + RuleMatcher
Requires explicit allow_sensitive_tlds engagement configuration for engagements with sensitive TLDs
Adds DECEPTICON_LLM__TIMEOUT environment variable for whole-coroutine LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. timeout control
+2 moreshow less
Deprecates legacy AD_TOOLS surface including bh_ingest_zip, bh_ingest_json, and others in favor of bhce_* tools
Changes BloodHound NodeKind to ADUser, ADComputer, ADGroup, etc., prefixed with AD
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The bh_ingest_zip, bh_ingest_json, dcsync_check, delegation_audit, gpo_audit, adcs_audit, and adcs_post.py paths emit a DeprecationWarning; the legacy AD_TOOLS surface is deprecated.
!Engagements with sensitive TLDs in scope now require explicit opt-in via allow_sensitive_tlds; previously trusted engagements will fail scope evaluation without this flag.
$ git clone --branch v4.5.33 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.5.33
eb7d82e introduces the scan-summary feature alongside LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. resolver/client updates and a web UI refresh (PR #155).
Independent finding verification is now available, providing false-positive hardening for findings workflows (PR #154).
2 details in Everything
5 more releases in this issue
· 2026-06-06 → 2026-06-19
xalgorix v4.5.11 adds per-role LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. temperatures and surface-area-aware finish gating.
└──▷ GET THIS VERSION
$ git clone --branch v4.5.11 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.5.11
Adds per-role LLM_TEMPERATURE_SCANNER=0.2, LLM_TEMPERATURE_VALIDATOR=0.0, LLM_TEMPERATURE_REPORTER=0.3 environment variables to control model stochasticity.
xalgorix v4.5.10 adds per-role LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. temperature control and surface-area-aware finish gating with depth tracking
└──▷ GET THIS VERSION
$ git clone --branch v4.5.10 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.5.10
per-role LLM temperature allows setting distinct temperatures for scanner (0.2), validator (0.0), and reporter (0.3) roles.
xalgorix v4.5.1 adds shorthand aliases for all 673 skills and MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. mapping in misspell linter
└──▷ GET THIS VERSION
$ git clone --branch v4.5.1 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.5.1
Adds shorthand alias for every skill (673 new) in skills configuration block with automatic collision checking
Enables MITRE technique references in the misspell linter subsystem
Strix v1.0.3 adds LiteLLM cost visibility, TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. status updates, and registry-gated reasoning.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.3 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v1.0.3
reasoning_effort is now gated by the LiteLLM model registry; effort parameters are only sent when the underlying model supports them
Use observed LiteLLM cost for LiteLLM-routed calls instead of estimated costs
RedAmon v5.0.0 adds AI Gauntlet offensive testing suite with garak, PyRIT, Giskard, promptfoo, and Ollama integration.
└──▷ GET THIS VERSION
$ git clone --branch v5.0.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v5.0.0
Adds AI Gauntlet offensive testing suite for AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources., integrating garak, PyRIT, Giskard, and promptfoo
Adds support for on-demand local LLM lifecycle management via Ollama with ref-counted, leased model handling
Adds Adversarial AI surface recon capabilities including endpoint AI classifier and JS Recon AI SDK detection
Adds ZAP Ajax Spider resource enumeration (now active) to the Recon & Graph pipeline
Adds Aggressive clustering pipeline for handling very large graphs in Recon
user-scanner v1.4.1 adds LuaRocksLuaRocksThe package manager for the Lua programming language, maintained by the LuaRocks project, used to distribute and install Lua modules so tools can pull in versioned dependencies without bundling them manually., PyPI and Linktree scan modules plus asyncio performance improvements
└──▷ GET THIS VERSION
$ git clone --branch v1.4.1 https://github.com/kaifcodec/user-scanner.git
# already have the repo? check out this version:$ git checkout v1.4.1
Adds support for scanning LuaRocks accounts via new OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. modules including file recovery script
Expands user_scan modules to include custom integrations for PyPI and Codeberg alongside Linktree updates
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The LOUD_MODULES configuration array has had the Polarsteps email module removed from its safety list
theHarvester 4.11.1 adds Sherlockeye as a new API-key source module for OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. collection.
└──▷ GET THIS VERSION
$ git clone --branch 4.11.1 https://github.com/laramies/theHarvester.git
# already have the repo? check out this version:$ git checkout 4.11.1
└──▷ TRY IT
Query Sherlockeye for email addresses and subdomains associated with a target domain.
$ theHarvester -d example.com -b sherlockeye
Adds Sherlockeye as a new API-key-based source module for email and domain intelligence gathering.
Adds OpenAI-compatible backend support for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integration
└──▷ GET THIS VERSION
$ git clone --branch v2.19.0 https://github.com/OpenOSINT/OpenOSINT.git
# already have the repo? check out this version:$ git checkout v2.19.0
Hunter now calculates engagement rates per distinct recipient instead of per email delivery across Sequences, API, and exports.
Opens, clicks, and reply rates in Sequences now measure distinct recipients rather than individual emails
Unsubscribe rate calculation is now recipient-based
Recipient-based engagement metrics are available via the API and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Per-step counts no longer sum to the recipient-based totals at the sequence level for API users
OpenHound v2.12.2 adds Jamf API client auth; BloodHoon v9.3.0 adds role-based access, expanded audit logging, and OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. namespace visibility.
API endpoint for OpenGraph extension information now includes namespace field to view each extension's namespace
OpenHound Jamf collector authentication uses a Jamf Pro API client instead of previous methods
OpenHound supports GitHub Enterprise SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. for connecting to enterprise-level single sign-onsingle sign-onSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. environments
adscan v9.2.0 adds live web console, offline VM cred extraction, NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against. framework, and MSSQL/AD Recycle Bin attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
└──▷ GET THIS VERSION
$ git clone --branch v9.2.0 https://github.com/ADScanPro/adscan.git
# already have the repo? check out this version:$ git checkout v9.2.0
Offline credential extraction from virtual-machine artifacts (virtual disks, snapshots, differencing chains, memory images) left on shares
MSSQL authorization mapping adds SQL access and sysadmin rights to the attack graph as escalation paths
Machine-password rotation auditing recovers the real rotation interval and reports stale machine passwords
NIS2 is now a distinct, selectable compliance framework in the web platform
Engagement-posture Settings with independent Offline-mode and Send-telemetry toggles applied per scan
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Deliverables restructured into three documents: Security Assessment Report, AD Hardening Playbook, and AD Control Coverage Report; the standalone MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. Remediation Checklist and Coverage Matrix deliverables are removed
!Compliance frameworks are now opt-in instead of showing a fixed default set
2 more releases in this issue
· 2026-06-04 → 2026-06-23
ADscan v9.1.1 adds AD Exposure Score metric, proven credentials from writable shares, and faster PRO scans
└──▷ GET THIS VERSION
$ git clone --branch v9.1.1 https://github.com/ADScanPro/adscan.git
# already have the repo? check out this version:$ git checkout v9.1.1
AD Exposure Score added to executive summary, PDF hero, technical report JSON, and web dashboard trends.
New Sample teaser report profile for cold outreach.
SMB Share Exposure phase now captures credentials from writable shares via a planted lure.
PRO runs performance improved to match LITE (12-20x faster on large graphs).
Attack pathsAttack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. reaching full domain compromise are now ranked higher than foothold-only paths.
+1 moreshow less
Unbound CI audit runs now capped at top 25 highest-risk shares with deep-analysis skipped by default.
ADScan v9.1 adds SPN-jacking detection, NTLMv1NTLMv1A Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. per-host sweep, MSSQL to DA escalation, and effective share access reporting.
└──▷ GET THIS VERSION
$ git clone --branch v9.1.0 https://github.com/ADScanPro/adscan.git
# already have the repo? check out this version:$ git checkout v9.1.0
adscan now detects and executes SPN-jacking with constrained delegation, modeling the attack graph in reports
Per-host NTLMv1 exposure sweep with live classification dashboard and compliance mappings (ENS, NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against., DORA, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001, PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers.)
New relay command for NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent.-relay-to-LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. workflow with resource-based delegation or Shadow Credentials
Passive credential capture via writable-share bait file with per-folder targeting and offline cracking
MSSQL service-account impersonation escalation to Domain Admin, including DC takeover options
+3 moreshow less
SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. share enumeration reports effective access (share + NTFSNTFSThe default file system format for Windows, developed by Microsoft, storing files with rich metadata and access controls; cyber tools target it to parse artifacts like timestamps, alternate data streams, and the MFT. permissions) instead of share-level only
Collection scope selector allows choosing sub-collections (directory/ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. base, local accounts, shares) at start
Live progress dashboard for SMB collection, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. user enumeration, password sprayingpassword sprayingTrying a small number of common passwords across many accounts. Attackers spread attempts out to avoid the lockouts caused by repeatedly guessing one user's password., and important-port scan
Dradis Pro v5.1 adds Roslin Echo Agent with LanguageTool grammar checking, new LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers, and BI date fields.
└──▷ HOW TO FIND IT
Enable self-hosted grammar checking for findings by configuring the Roslin agent in the UI
📍In the console, go to Tools → Echo → Agents, click Edit next to Roslin, and configure the LanguageTool connection.
Connect a cloud LLM provider like OpenAI for AI-assisted writing in Echo
📍In the console, go to Tools → Echo → Providers, click Add Provider, select OpenAI, and enter your API key and default model.
Create a structured date property in Business Intelligence for tracking remediation deadlines
📍In the BI settings, create a new custom property and select Date as the field type.
Adds Roslin Echo Agent to connect a self-hosted or local LanguageTool instance for inline grammar, spelling, and style checking in the findings editor
Adds OpenAI, Anthropic, and Google Gemini as new LLM provider options for Echo alongside existing Ollama support
Adds a dedicated date field type for Business Intelligence custom properties to store structured engagement dates
Metasploit Pro 5.0 introduces payloads_manager plugin, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. tracing, and improved backup handling
Adds the payloads_manager plugin to maintain a local archive of custom payloads and stage them into the data directory
Introduces KerberosTicketTrace datastore option for Metasploit’s Kerberos authentication flows to view AS-REQ/REP messages
Adds multiple improvements to the backup functionality in Metasploit Pro, including better progress tracking and support for backups larger than 4GB
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
Adds M5 Nano C6 hardware support and increases NimBLE output power
└──▷ GET THIS VERSION
$ git clone --branch v1.12.2 https://github.com/justcallmekoko/ESP32Marauder.git
# already have the repo? check out this version:$ git checkout v1.12.2
BloodHound v9.3.0 adds Privilege Zone metrics, richer findings endpoints, full-path highlighting, and JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. Teleport configuration.
└──▷ GET THIS VERSION
$ git clone --branch v9.3.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v9.3.0
Adds Privilege Zone tag-count metrics to surface coverage data for zone management.
Enriches the unified findings endpoint with zone_name, source_principal_name, target_principal_name, environment name, and zone display title fields.
Adds audit log entries for alert webhook activity, improving traceability of alert actions.
Adds an alerts feature flag and dedicated alerts permissions for granular access control.
Includes Extension Namespace in the Extension Object and exposes namespace column in the Object Group management page table.
+9 moreshow less
Introduces JIT Teleport configuration support.
Adds full-path highlight in the graph explorer, visually emphasizing entire attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately..
Adds toggle for label truncation in the graph UI, letting analysts show or hide full node labels.
Introduces a new Findings Table view for reviewing security findings.
Adds a collector_support_bundle feature flag for collector diagnostics.
Creates a new read auth permission and implements it for manage pages, enabling finer-grained role control.
Adds a new alertsOpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec, documenting the alerts API surface.
Prepares BloodHound CE for Embedded Extensions.
Adds HTTP request and labeled response size metrics for API observability.
Penelope v0.21.0 adds session capping, upload/download progress bars, and three new post-exploitation modules.
└──▷ GET THIS VERSION
$ git clone --branch v0.21.0 https://github.com/brightio/penelope.git
# already have the repo? check out this version:$ git checkout v0.21.0
└──▷ TRY IT
Limit a listener to 3 shells from the same host to prevent runaway reverse-shell floods.
$ penelope --max-sessions 3 -p 4444
Adds -ms / --max-sessions flag to cap the number of concurrent sessions per host (default 5).
Adds progress bars for every upload and download across both agent and non-agent sessions.
Adds DirtyPipe (CVE-2022-0847) and DirtyFrag local privilege-escalation modules.
Adds adPEAS Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. enumeration module.
Updates bundled ligolo-ng to v0.8.3 and SharpHound to v2.13.0.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The old script / socat upgrade fallback has been dropped; sessions relying on that fallback will no longer upgrade automatically.
$ git clone --branch 5.1.0 https://github.com/ly4k/Certipy.git
# already have the repo? check out this version:$ git checkout 5.1.0
Adds ESC17 attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. detection to Certipy's AD CS enumeration.
Improves ESC4 exploitation with a more targeted default ESC1 template, replacing the previous generic one.
Adds --debug-audit and --debug-file flags to write per-attempt JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. diagnostics with passwords redacted and credential substrings scrubbed from error text.
Adds --route-diagnostics flag to print selected local/source route info per target (interface, bound local IP, proxy context); disables TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. so output stays visible.
Adds --module-help <service|all> flag to introspect default port, credential mode, module params, and wrapper gating for any protocol module.
Adds --skip-policy auto|off|conservative|aggressive and --max-conn-fails to tune when repeated connection failures skip a host/service.
Adds --schedule auto|host-major|spray|pairwise to control credential queue ordering for deterministic or spray-style execution.
+7 moreshow less
Introduces stable machine-readable attempt status codes (auth_success, auth_failure, connection_failure, unsupported_service, module_timeout, module_panic_recovered, skipped_service) propagated through JSONL output, session logs, TUI, and resume paths.
JSONL attempt output now includes an additive status_code field alongside the legacy status field.
Module boundary protection: panicking protocol modules are now caught and recorded as module_panic_recovered instead of crashing the entire run.
Timeout containment: modules that ignore context cancellation no longer block host completion; the attempt is recorded as module_timeout.
Granular checkpoint resume now uses a count-based per-host cursor to skip already-attempted queue prefixes on partially completed hosts.
Adds OpenAI-compatible research provider support for wordlist research via WORDLIST_RESEARCH_PROVIDER, WORDLIST_RESEARCH_MODEL, and WORDLIST_RESEARCH_URL environment variables (enables vLLM and similar endpoints).
RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. Sticky-Keys detection upgraded with broader detectTerminalWindow logic covering cmd.exe, PowerShell, and custom shell colors via pixel brightness delta and bounding-box fill analysis.
ZeroPath is an AI-native SAST platform that finds 2x more real vulnerabilities with 75% fewer false positives.
ZeroPath 2026-06 adds container scanning, AI inventory, SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. policies, ObjectScript SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment., and new API endpoints.
Adds Container Scanning via the new Containers section, CLI, API, or MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server with layer-attributed findings and Dockerfile patch PRs
Adds AI Inventory exportable as an AI-BOMAI-BOMAn inventory of every AI model, dataset, and dependency used in a system, analogous to a software bill of materials, giving cyber tools a structured way to audit AI supply-chain risk. for governance and compliance
Adds Application Threat Modeling to edit trust boundaries and auth models affecting subsequent scan triage
Adds KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. badges, EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. scores, and license classification in the redesigned Supply Chain view
Adds per-ecosystem coverage reporting with warnings for failed manifests or missing transitive dependencies
+8 moreshow less
Adds SLA policies with Slack/webhook escalation, compliance burn-rate dashboards, and due date sync to Jira/Linear
Adds integration with GitHub Enterprise Server (guided App setup) and Azure DevOps Services (Entra OAuth/PAT)
Adds coding-agent integrations for Claude Code, OpenAI Codex, and Cursor via a single installer with blocking or monitoring hooks
Adds ObjectScript language support in Code Analysis recognizing .cls and .mac files
Adds Custom natural-language rules that apply on pull request scans and incremental rescans
Adds opt-in Cross-Repository Discovery to build relationship graphs across repositories
Adds scanner settings including High Performance Mode, draft PR handling, and removal of bypass button from failing checks
Adds new API endpoints for container scanning, supply chain posture, licensing, and issue management (notes, severity, patch regeneration)
13 details in Everything
└──▷ BREAKING ON UPGRADE
!Runtime validation responses no longer include the deprecated agentGroupKey field
Mend SAST is a static application security testing service that scans source code for vulnerabilities and helps teams prioritize remediation.
Mend SAST v26.5.2 adds natural language data flow explanations to findings API and improves detections for XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. and credentials
SAST findings API now includes natural language descriptions for each step in a vulnerability's data flow trace.
Extended support for JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. callbacks and anonymous classes in Java.
Improved detection of CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-79: Cross-site Scripting (XSS) in JavaScript/TypeScript.
Improved detection of hard-coded credentials for JavaScript/TypeScript, PL/SQL, and VB.Net.
4 details in Everything
1 more release in this issue
· 2026-06-01 → 2026-06-15
Mend SAST v26.5.1 adds Scala support, enhanced secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it., and suppression workflow controls via .whitesource config.
Adds new detection capabilities for hardcoded private keys (.pem, .key) and certificate files (.pfx, .p12)
Adds PowerShell scripts (.ps1) to the default set of file types scanned by secret scanning
Adds Information Requested state to suppression requests in the UI to allow reviewers to request additional context
v1.25.0 adds cve-lite overrides subcommand for audit/fix of npm/pnpm/yarn/bun override hygiene with NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory. logging and RFC 6902RFC 6902A JSON standard from the IETF that defines a format for describing changes to a JSON document as a sequence of operations such as add, remove, and replace, letting tools patch structured data without transmitting full replacements. patching
└──▷ GET THIS VERSION
$ git clone --branch v1.25.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.25.0
└──▷ USE IT
Audit a project's lockfile for ineffective or dangerous package overrides and output structured JSON for CI consumption.
shell
cve-lite overrides ./package-lock.json --json
Automatically repair invalid overrides in-place using safe RFC 6902 patches.
shell
cve-lite overrides ./package.json --fix
Stream override detection events to a log file for audit trails, triggered via environment variable.
cve-lite-cli v1.24.0 adds --sarif--sarifStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. + --report dual output for CI
└──▷ GET THIS VERSION
$ git clone --branch v1.24.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.24.0
└──▷ USE IT
Produce SARIF for GitHub Code Scanning and an HTML report in one run.
shell
cve-lite scan --sarif --report
Install dev dependencies as a side effect of the fix command.
shell
cve-lite fix -D
--sarif can now be combined with --report to write both a SARIF file and an HTML report in one scan
cve-lite-cli v1.22.0 adds dev dependency labeling and pnpm/Bun lockfile support for private registry detection
└──▷ GET THIS VERSION
$ git clone --branch v1.22.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.22.0
Terminal output and HTML reports now show direct · dev / transitive · dev labels for findings from devDependencies, with Yarn Classic and Berry parsers updated to detect dev status
Private registry detection (⚠ Unverifiable (private source)) is now supported for pnpm (legacy and v9), Yarn Classic, and Bun lockfiles
Adds --debug flag for traceable JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. logs and fixes unknown-severity handling in compact output
└──▷ GET THIS VERSION
$ git clone --branch v1.18.2 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.18.2
└──▷ TRY IT
Enable detailed tracing for a scan to debug network issues or cache behavior by capturing the output log path.
$ cve-lite scan <target> --debug
Adds --debug flag to write a timestamped JSONL log file alongside the scan with network requests, cache hits, and runtime events; a single stderr line identifies the log file path
Unknown-severity findings no longer silently dropped from compact and verbose terminal output; compact mode now shows all direct unknown findings regardless of how many critical/high findings are present
Visualized threat model diagrams, Windows device protection with MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies., repository/container labels, and new Zen API endpoints.
Every AI pentest & code audit now ships a diagram of your app's architecture, roles, and trust boundaries
Device Protection is now available for Windows, with MDM support to roll it out across your fleet
Attach any metadata you want to repositories and container images (business unit, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., region, ... ) and filter you issue feed based on those labels
3 details in Everything
1 more release in this issue
· 2026-06-02 → 2026-06-15
New AI Code Audit engine, Aikido MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration, ServiceNow ticketing, and multiple API endpoints added in v48.
Adds Aikido MCP capability to search and fetch issues directly from an AI coding assistant
Adds ServiceNow Integration to connect ServiceNow as a task tracker for automatic ticket creation
Adds new API endpoints: List Licenses, List Malware, and Get IDE/MCP usage statistics
Adds Oracle Cloud support with +50 rules under the Cloud section
Adds Alibaba organization onboarding capability under the Cloud section
Snyk Open Source adds native uv package manager support and private dependency scanning for Go.
Adds uv package manager support in SCMSCMSource Code Management: version-control systems (Git, SVN, etc.) that track changes to code over time, giving cyber tools reproducible builds, audit trails, and collaborative development workflows. integrations, enabled for Groups and Organizations through Snyk Preview.
Adds support for Go private dependencies via Broker or direct connections
2 details in Everything
3 more releases in this issue
· 2026-06-03 → 2026-06-28
Snyk Code announces C++ rules, broader Java library coverage, and JavaScript Insecure Transmission detection for the July 13, 2026 release.
Adds six new C++ detection rules: Log Forging, Improper Privilege Management, Missing Authorization, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS Certificate Verification Bypass, Insecure TLS Configuration, Sensitive Cookie Without Secure Attribute, and expands native C++ coverage for Code Injection, Insecure Storage, and Insecure Cipher.
Adds new Insecure Transmission rule-key for JavaScript/TypeScript to detect cleartext transmission over insecure transports (e.g., non-TLS Redis URLs), separate from existing HttpToHttps logic.
Expands detection coverage for Java libraries including Azure SDK, Logback, Reactor Netty HTTP, Apache Kafka clients, and Jackson.
New Prevention report in Early Access tracks proactive vulnerability fixes across IDE, CLI, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. surfaces.
Adds the Early Access Prevention report to track vulnerabilities developers proactively remediate in Snyk Code and Secrets before pull requests or production.
Introduces a Fix-by-Developer leaderboard to identify developers who squash vulnerabilities earliest in the lifecycle.
Skylos v4.26.0 adds harness replay CLI and LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. agent review routing
└──▷ GET THIS VERSION
$ git clone --branch v4.26.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.26.0
Adds harness replay subcommand to the CLI for agent harnessagent harnessThe software around an AI agent that manages its tools, execution loop, state and limits. It determines how the model's proposed actions are run and checked. playback
Adds agent review routing capability to the LLM subsystem
Adds replayable verification harness feature for LLM agent workflows
Improves dead-code detection by including unused-code evidence in output
4 details in Everything
3 more releases in this issue
· 2026-06-03 → 2026-06-25
Skylos v4.24.0 adds Kotlin dead-code and secrets scanning, LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. security detections, pinned corpus runner
└──▷ GET THIS VERSION
$ git clone --branch v4.24.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.24.0
Adds corpus pinned framework corpus runner for reproducible analysis pipelines.
Adds Kotlin dead-code detection via a thin scanner layer and grep verification.
Wires workflow registries for the new Kotlin backend support.
Enables secrets scanning for Kotlin source files in addition to existing languages.
Adds llm critical AI security rules, detecting excessive agent tool privilege, unbounded LLM consumption, and unsafe LLM app flows.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!upload now requires explicit scan uploads; implicit automatic uploads are no longer supported.
AFL++ v5.01c adds adaptive MOpt, non-colliding QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. coverage, a new qemu_bridge mode, and faster MacOS persistent fuzzing.
└──▷ GET THIS VERSION
$ git clone --branch v5.01c https://github.com/AFLplusplus/AFLplusplus.git
# already have the repo? check out this version:$ git checkout v5.01c
└──▷ TRY IT
Opt out of the new futex-based persistent mode on macOS if your host is older than 2024 or you observe compatibility issues.
New adaptive MOpt mutator in afl-fuzz, replacing the outdated implementation — reportedly outperforms standard havoc in initial testing.
Enforces halt on UBSAN errors in both afl-fuzz and afl-cc (via AFL_USE_UBSAN=1), making undefined-behavior findings actionable during fuzzing.
Non-colliding coverage in qemu_mode for more accurate edge tracking without hash collisions.
Faster persistent fuzzing in qemu_mode.
New qemu_bridge mode backed by the current QEMU version, enabling plugin support and new processor targets (WIP).
+2 moreshow less
MacOS persistent mode now uses futex-based synchronization for higher speed and lower syscall overhead; opt out with AFL_FAST_CHILD_SYNC (requires macOS 2024+).
Improved cmplog instrumentation on MacOS in afl-cc.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!MacOS persistent mode now uses futex mode by default (requires macOS 2024 or later); setups running older macOS versions must opt out with AFL_FAST_CHILD_SYNC or upgrade the OS.
!Removed unsupported LLVM version code paths from afl-cc and LLVM passes; builds relying on those code paths will break.
1 more release in this issue
· 2026-06-03 → 2026-06-18
New AFL_LLVM_PATH / AFL_LLVM_LTO_PATH / AFL_LLVM_PATH_MODE env vars enable Ball-Larus per-function path coverage (three strictness levels) on top of edge coverage in LTO and PCGUARD modes.
New afl-llvm-bug-pass.so instrumentation provides five runtime bug-detection oracles — SCALAR, BUDGET, SIZEFILL, ALLOCSIZE, and SLACK — catching arithmetic-bound and logical OOB bugs that ASan misses (including the CVE-2023-4863 / libwebp-Huffman class).
New -l M scheduling mode in afl-fuzz treats per-site minimum slack on inequality CmpLog comparisons as a coverage event, marking queue entries favoured for predicate-tightness.
New -l Z scheduling mode in afl-fuzz, paired with AFL_LLVM_BUG_ALLOCSIZE_DERIVE=1, logs computed allocation sizes and max offsets into CmpLog RTN slots for dictionary mining.
Linux persistent mode now uses futex instead of pipes, increasing speed and reducing syscall overhead; opt out with AFL_FAST_CHILD_SYNC.
+6 moreshow less
Adds LLVM 23 support in afl-cc.
macOS support restored for afl-fuzz, afl-cc (including LTO), frida mode, and lib* tools.
Refreshed FreeBSD support.
-I tool invocations in afl-fuzz now receive the new crash path as a command-line parameter.
Nyx mode now works for all afl-cmin minimizer variants.
IJON distance reverted to the original IJON implementation: initial matching bytes, max length 1024.
11 details in Everything
└──▷ BREAKING ON UPGRADE
!AFL++ is now licensed under AGPL 3.0 (files where the license could be switched); files under Apache 2.0 with third-party contributions remain on that license. Commercial use requires a separate commercial license.
New Gantt trace timeline view, Claude Agent SDK tracing, automatic init() instrumentation, Gateway guardrail enforcement, and invite link key provisioning
Adds openlayer.init() auto-instrumentation function to patch OpenAI, Anthropic, Mistral, Groq, Gemini, LiteLLM, Portkey, Google ADKADKGoogle's Agent Development Kit, an open-source framework for building and orchestrating AI agents; cyber tools use it to compose multi-agent workflows with built-in tool-calling and state management., and Azure SDKs automatically
Adds Gantt-style trace timeline view showing span start time, duration, and nesting for debugging slow steps or unexpected branches
Adds project lifecycle tracking with evidence document attachment for governance process visibility
Adds Gateway inline guardrails enforcement on LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. requests routing through the service
Adds Gateway admin API key invite links allowing users to self-provision their own Gateway keys
Phoenix Security correlates scanner, cloud and runtime findings with exploitability and ownership, and uses AI agents to prioritise and open remediation pull requests.
Phoenix adds REST and V5 PUB APIs for importing vulnerability reports from 200+ scanners into assessments.
└──▷ TRY IT
Upload a raw Grype JSON report directly to Phoenix for automatic translation and import into an assessment.
Adds POST /v1/import/assets/file/translate endpoint to upload raw scanner report files directly for translation and import into Phoenix assessments
Introduces the V5 PUB Loading Script toolkit (phoenix_multi_scanner_enhanced.py) for client-side translation of 200+ scanner formats including Grype and Trivy before bulk upload via POST /v1/import/assets
Adds support for three import modes (new, merge, delta) allowing full baselining, incremental updates, or partial delta imports of assets and findings
Extends asset type detection in V5 translators to map Grype/Trivy outputs to CONTAINER, INFRA, CLOUD, REPOSITORY, and BUILD categories based on report structure
GitLab 19.1 adds secret FP detection via Duo, SARIF 2.1.0SARIF 2.1.0A JSON-based file format, standardized by OASIS, for expressing static analysis results so that cyber tools from different vendors can share findings through a single, machine-readable schema. import, custom OAuth token lifetimes, and Security Manager role.
Adds Always on availability mode for GitLab Duo to lock AI features centrally.
Allows automatic assignment of Code Owners as reviewers in Merge Requests.
Adds 19 compliance framework templates (ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001:2022, SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., etc.) for the Compliance center.
Enables full branch secret detection scanning from divergence point to latest commit.
Adds tool-level approval policies (Allow, Ask, Deny) for GitLab Duo agents.
+9 moreshow less
Introduces allowlist controls and organization-wide default models for Agentic Chat.
Supports GPT-5.2 and GPT-5.3 Codex models for Code Review Flow.
Adds four new event triggers for flows: Merge request ready, code conflict, approved, and Work item created.
Provides a Scanner Enablement Wizard to bulk-apply security profiles and close coverage gaps.
Allows instance administrators to set custom OAuth access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. lifetimes (300–7200 seconds).
Enables importing findings from any SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. 2.1.0-compliant scanner into GitLab vulnerability management.
Generally available the Security Manager role for granular security feature access.
Extends git operation audit events to all actor types including runners and SSH certificate users.
Adds beta scheduled pipeline execution policies with time zone and snooze support.
14 details in Everything
1 more release in this issue
· 2026-06-10 → 2026-06-18
HawkScan 5.7.0 adds hawk flightpath command for local browser-based auth-authoring
Added hawk flightpath subcommand to run the auth-authoring loop entirely locally without cloud infrastructure, producing a validated stackhawk-auth.yml file.
OpenTaint v0.4.1 adds a multi-project test analyzer and method coverage-based SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. path selection
└──▷ GET THIS VERSION
$ git clone --branch v0.4.1 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout v0.4.1
Introduces analyzer module for common multi-project test analysis
Adds Go language support and refactors analyzer into language-agnostic parts for new platform coverage.
└──▷ GET THIS VERSION
$ git clone --branch go-server/2026.06.11.1fd5326 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout go-server/2026.06.11.1fd5326
Adds Go language support to the taint analysis engine
Mend SCA adds CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. source transparency, organization-level reports, Unspecified Copyrights state, and a Number of Licenses column.
Adds CVSS scores source display (e.g. NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization., MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.) in the UI and APIs to clarify scoring discrepancies
Adds organization-level reports for Dependencies Attribution, Dependencies Due Diligence, and Dependencies Inventory, accessible via API at the application/project level
Introduces a new Unspecified Copyrights state to the OS Inventory with dedicated filtering and visual indication
Adds a Number of Licenses column to the OS Inventory table for quick licensing complexity assessment
4 details in Everything
1 more release in this issue
· 2026-06-14 → 2026-06-28
MASTG v1.9.0 adds MAS-P Privacy profile, completes CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. mapping across all MASVS categories, and introduces new v2 tests for Android/iOS security.
└──▷ GET THIS VERSION
$ git clone --branch v1.9.0 https://github.com/OWASP/mastg.git
# already have the repo? check out this version:$ git checkout v1.9.0
Adds MAS-P Privacy profile covering all MASVS-PRIVACY test cases
Adds complete CWE mapping across all MASVS categories (AUTH, CRYPTO, NETWORK, PLATFORM, STORAGE, CODE, RESILIENCE)
Adds new v2 tests MASTG-TEST-0262 and MASTG-TEST-0263 for Android backup testing
Adds new v2 tests MASTG-TEST-0264 and MASTG-TEST-0265 for StrictMode detection
Adds new v2 tests MASTG-TEST-0278, MASTG-TEST-0279, and MASTG-TEST-0280 for iOS UIPasteboard
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The legacy PDF format is deprecated and removed from the primary reference structure.
!MASTG-TEST-0031 (Testing JavaScript Execution in WebViews) is deprecated.
MASTG v1.8.0 introduces new MASWE, MASTG Demos, and Best Practices component types plus MASVS-PRIVACY controls.
└──▷ GET THIS VERSION
$ git clone --branch v1.8.0 https://github.com/OWASP/mastg.git
# already have the repo? check out this version:$ git checkout v1.8.0
MASWE (Mobile App Security Weakness Enumeration) component type links MASVS controls to testable weaknesses, with entries like MASWE-0001, MASWE-0027, and MASWE-0108 added.
MASTG Demos component type provides concrete, reproducible test demonstrations with real app binaries, including an Android demo APK build pipeline via GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure..
MASTG Best Practices component type provides actionable remediation guidance, initially launched with the framework in PR #3081.
MASVS-PRIVACY category added to MASVS v2.1.0, introducing four new privacy controls (MASVS-PRIVACY-1 through -4) and the MAS-P profile.
New MASTG Test Apps (Android and iOS) skeleton apps embed code samples directly to make every demo reproducible on a real device.
Veracode adds DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. Directory Restrictions to target config and enhances scheduling with new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints.
Enhances DAST Schedule with advanced scheduling capabilities, including automatic migration of existing schedules
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!DAST REST API scheduling endpoints have changed; integrations using these endpoints must update to the new URLs.
New DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. Directory Restrictions and Schedule enhancements in Veracode
Adds Directory Restrictions in target configuration to control the scan scope
Enhances the DAST Schedule feature with advanced scheduling capabilities and configuration options
Adds Dart 3.12/Flutter 3.44 and Kotlin 2.4 support; improves third-party detection across multiple languages
Improves detection of vulnerabilities that involve tainted data flows through public methods in Apex.
Improves detection of CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-532 flaws in Apex.
Improves support for Security APIs on Apple Platforms.
Improves third-party detection in Java, JavaScript, and Python.
Improves detection and classification of ForgeRock third-party dependencies in Maven-based projects in Java.
+5 moreshow less
Improves detection of CWE-918 flaws in Java.
Improves detection of CWE-73 flaws in JavaScript.
Improves classification of first-party .NET assemblies to distinguish application code from third-party dependencies.
Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.
$ git clone --branch 2.0.12 https://github.com/cisco-ai-defense/skill-scanner.git
# already have the repo? check out this version:$ git checkout 2.0.12
Detects ASCII smuggling attacks via Unicode Tag Block characters in scanned skills.
Adds a YARA rule for jailbreak detection.
Supports passing repository name through the scanner for richer scan context.
Supports the OpenAI user request field when using LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-backed analysis.
Allows temperature override and omits temperature for newer Claude and o1 models.
Akto discovers APIs, MCP servers and AI agents, tests and red-teams them, and enforces runtime guardrails and posture management.
Akto Agentic Release June 2026 adds Traces dashboard, standalone Guardrails API, and new compliance guardrail presets.
Introduces the Traces dashboard for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. observability with Conversation Insights to automatically classify session topics.
Adds a standalone HTTP API for Guardrails allowing any AI agent to call Akto guardrails without SDKs or proxies.
Releases compliance guardrail presets for GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against., and NIST AI that auto-configure policies upon selection.
Enables host and path blocking in guardrail policies to prevent agent outbound traffic to specific domains and API paths.
Adds Default denied topics capability to block off-limits conversations instantly or via custom definitions without building policies from scratch.
+7 moreshow less
Allows guarding browser LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. specifically, enabling enforcement of guardrail policy on in-browser AI tools.
Permits scoping guardrail policies by team and user role to limit blast radius.
Adds a New agentic assets layout beta for browsing AI agents, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, LLMs, skills, and endpoints.
Provides mapping of every guardrail activity to the regulatory frameworks each violation affects.
Shows the full scope of MCP and agent servers a policy touches before deployment in the Apply to All view.
Enables red teaming Microsoft Copilot Studio agents using configured OAuth credentials for adversarial probing.
Allows scanning by specific attack technique and strategy to target probes at defined threat models.
Arcjet introduces Advanced Bot Signals to detect browser automation without CAPTCHAs using client-side telemetry.
Adds a new client-side signal collection mechanism that loads a WebAssemblyWebAssemblyA binary instruction format that runs in browsers and server runtimes at near-native speed, letting developers compile C, Rust, or other languages into a portable, sandboxed module any compliant host can execute. module in the browser and stores results in the aj_signals cookie for server-side validation
Adds a named bot rejection reason ARCJET_SIGNALS returned by the bot detection rule when advanced signals indicate automation
Arcjet announces design principles for its agent-safe CLI, introducing structured error codes, confirmation envelopes, and token-based auth.
Implements distinct exit codes (0-4) with JSON error bodies on stderr to enable programmatic branching by AI agents
Introduces a mutation confirmation protocol using --confirm flag that returns a JSON envelope in stdout before execution
Adds automatic detection of non-TTY stdout to default to structured JSON output for agent workflows
Supports the ARCJET_TOKEN environment variable as the primary authentication mechanism, bypassing browser flows for CI/agent environments
Enables field filtering via --fields flag to limit JSON output top-level keys and reduce context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. usage
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. Simulate API now returns detector_scope on signals and increases request limit to 200 KB
Adds detector_scope field to simulation response signals in the Next-Gen WAF Simulate API to indicate detection source (system, workspace, account, or unknown)
Increases request body size limit from 100 KB to 200 KB for reconstructed requests used in the import flow
Fastly Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. adds account-level request search via GET /ngwaf/v1/requests
Adds GET /ngwaf/v1/requests endpoint to search requests across all workspaces in an account.
Results from the new endpoint include the workspace_id field to identify the originating workspace.
Fastly Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. adds block_immediately threshold action to unconditionally block requests matching specific signals
Adds block_immediately action to thresholds to unconditionally block requests carrying a configured signal without rate window
Supports Pentest, CVE, XXEXXEXML External Entity injection, a class of attack against XML parsers that tricks them into fetching external resources or local files, letting an attacker read sensitive data or trigger server-side request forgery., and AWS-SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. signals for the new block_immediately action
Adds Alpine Linux 3.24 support; improves SQLI and XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. detection
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. for HAProxy 1.5.3 adds Ubuntu 26.04 and Amazon Linux 2/2023 support
NGWAFNGWAFA next-generation web application firewall that inspects HTTP traffic at the application layer, using behavioral analysis and contextual rules rather than pure signature matching to block attacks like SQLi and XSS. v1.7.2 adds env var control for agent host/port and AmazonLinux 2 support
Adds FASTLY_NGWAF_AGENT_HOST and FASTLY_NGWAF_AGENT_PORT environment variables to configure the agent connection instead of hardcoded or config-file defaults.
Adds explicit platform support for AmazonLinux 2, removing the previous reliance on el/7 compatibility layers.
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. custom signal name limit increased from 25 to 128 characters.
Wallarm launches AI Control Platform with Infrastructure Discovery for AWS estates and AI Hypervisor for runtime LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. monitoring.
Adds Infrastructure Discovery to continuously inventory AWS assets (EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware., VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware., EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves., Lambda, API Gateway, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., Bedrock) across accounts and regions via IAM role assumption
Adds live relationship graph with blast-radius traversal and attack-path analysis for discovered infrastructure assets
Adds field-level drift detection between scans with CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. creator attribution on every asset
Adds AI Hypervisor, a Kubernetes DaemonSet using a mutating admission webhook to instrument AI workloads at runtime without code changes
Adds real-time sensitive data detection (credit cards, SSNs, passport numbers, API keys, JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. tokens) in LLM calls via the AI Hypervisor
+3 moreshow less
Adds session kill switch by user subject or W3C trace ID, enforced at the kernel, for untrusted LLM sessions
Adds agent behavior certificates to pin and enforce permissions for each agent
Generates continuous compliance reports (AI inventory, coverage heatmap, session logs, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. egress records) aligned with EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe. requirements
fcaptcha v1.12.0 adds AI-agent detection via CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure.-injected input forensics and new behavioral signals
└──▷ GET THIS VERSION
$ git clone --branch v1.12.0 https://github.com/webdecoy/fcaptcha.git
# already have the repo? check out this version:$ git checkout v1.12.0
Adds behavioral.inputForensics and environmental.cdpRuntime client-side signals for detecting AI agents driving real browsers via CDP.
Introduces six new server-side detections: Coalesced-event absence, Pointer movement incoherence, CDP/DevTools console attach, Teleport clicks, Agent act/think cadence, and Programmatic textarea fill.
Adds declared_ai threat category for self-identifying AI agents and Web Bot Auth verification in fcaptcha v1.11.0
└──▷ GET THIS VERSION
$ git clone --branch v1.11.0 https://github.com/webdecoy/fcaptcha.git
# already have the repo? check out this version:$ git checkout v1.11.0
Adds declared_ai as a new threat category to detect self-identifying AI agent user-agents such as ClaudeBot, GPTBot, and PerplexityBot.
Enables detection of Web Bot Auth signed requests (RFC 9421RFC 9421An IETF standard defining HTTP Message Signatures, a scheme for cryptographically signing HTTP requests and responses so tools can verify message integrity and authenticity end-to-end.) in v1, with JWKSJWKSA JSON Web Key Set, a published collection of cryptographic keys. Applications use it to find the public key needed to verify a token's signature. signature verification documented for a future update.
Adds native OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. repos and AWS ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. proxy support to Nexus Repository Cloud
Added native OCI hosted, proxy, and group repository types.
Added AWS ECR support within Docker proxy repositories for centralized image caching.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The Content Disposition setting is removed for Maven and Raw repositories in cloud deployments.
Adds Go, Ansible Galaxy, and Alpine repo support; new User Token API lookup, OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs./OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., uploader metadata permissions, IP Allow List, auth rate limits, and HPA Hel
Support for Go Hosted and Group Repositories
Support for Ansible Galaxy repository format
Support for Alpine Repository Format
New nameCode Parameter in User Token API to look up user token ownership
Granular Control of Uploader Metadata Visibility via nexus:uploader-metadata:read permission
+6 moreshow less
Enhanced PyPI Repository Compatibility with PEP 658 inline metadata and PEP 691 JSON-based Simple API
New Endpoints in Security management: user roles API for programmatic role assignment management
IP Allow List feature available in Pro and Cloud editions to restrict access by source IP
OAuth2/OIDC Configuration REST API for managing authentication settings via REST
Authentication Attempt Rate Limits with nexus.auth.ratelimit.* configuration properties
Expanded Enterprise Deployment Options for Kubernetes supporting Helm chart 93.0.0+ with HPA and Azure Workload Identity
Adds -is-mdm flag to the Windows endpoint installer.
└──▷ GET THIS VERSION
$ git clone --branch 1.5.8 https://github.com/AikidoSec/safe-chain.git
# already have the repo? check out this version:$ git checkout 1.5.8
└──▷ TRY IT
Install MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies.-specific components during the silent setup of safe-chain on Windows.
$ safe-chain install -is-mdm
-is-mdm
1 detail in Everything
1 more release in this issue
· 2026-06-01 → 2026-06-17
syft v1.46.0 adds SPDX 3SPDX 3An open standard from the Linux Foundation for expressing software bill-of-materials data, letting cyber tools exchange dependency, license, and vulnerability metadata in a machine-readable, interoperable format., Deno, Bun lockfile, Elastic agent/Beats support, uv PEP 723PEP 723A Python Enhancement Proposal that standardizes embedding dependency metadata directly in single-file scripts, letting tools automatically resolve and install requirements without a separate config file. lockfiles, and .bpl PE cataloging.
└──▷ GET THIS VERSION
$ git clone --branch v1.46.0 https://github.com/anchore/syft.git
# already have the repo? check out this version:$ git checkout v1.46.0
└──▷ TRY IT
Inspect which catalogers are active and what PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. types they emit — now including PURL type info.
$ syft cataloger info
Supports SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. 3 as an output format for SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue..
Adds Deno dependency cataloging support.
Adds support for Bun lockfile (bun.lock) in the JavaScript cataloger.
Catalogs Elastic Agent and Elastic Beats binaries with new binary classifiers.
Detects uv PEP 723 script lockfiles (*.py.lock) with the Python cataloger.
+2 moreshow less
Adds .bpl file support to the PE / DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. cataloger.
Adds PURL types to the cataloger info command output.
7 details in Everything
1 more release in this issue
· 2026-06-02 → 2026-06-26
syft v1.45.0 adds ZapAddOn JAR support, ingress-nginx binary cataloging, and MySQL Cluster detection.
└──▷ GET THIS VERSION
$ git clone --branch v1.45.0 https://github.com/anchore/syft.git
# already have the repo? check out this version:$ git checkout v1.45.0
Supports ZapAddOns packaged as JAR files for SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. cataloging.
Catalogs the ingress-nginx binary as a distinct component.
Distinguishes between MySQL Cluster (ndb) and standard MySQL when classifying MySQL binaries.
Socket MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. adds org alerts, threat feed querying, and authenticated package inspection
Adds organization-level alert review with filtering by severity or repository
Enables querying the Socket threat feed by ecosystem, category, and time window
Allows listing, reading, and searching published package artifacts without local installation
Connects package findings to affected repositories and organization alerts
Supports authentication for org alerts and threat feed; depscore remains public
Socket displays package keywords and marketplace categories for GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. and Packagist packages.
Aguara v0.26.0 adds OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. all-versions and bounded semver malicious-package detection.
└──▷ GET THIS VERSION
$ git clone --branch v0.26.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.26.0
└──▷ USE IT
Detect malicious packages regardless of installed version using the new all-versions matcher.
shell
aguara check .
View the updated intel snapshot including the new range-based records.
shell
aguara status
Adds support for OSV advisory ranges marking every version of a package as malicious
Adds semantic version range evaluation for npm malicious advisories with explicit bounds
Backport v4-migrator TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. keepalive/socket timeout, out-of-order Flyway migrations, and non-UTC metrics support to 5.0.1
└──▷ GET THIS VERSION
$ git clone --branch 5.0.1 https://github.com/DependencyTrack/dependency-track.git
# already have the repo? check out this version:$ git checkout 5.0.1
Backport: v4-migrator now supports TCP keepalive and optional socket timeout for better connection stability during migration.
Backport: Allow out-of-order execution of Flyway migrations to accommodate custom or delayed database schema changes.
Backport: Support non-UTC timezones for metrics operations, allowing accurate time-based metric calculations in any region.
3 details in Everything
1 more release in this issue
· 2026-06-07 → 2026-06-12
Dependency-Track v5.0.0 introduces container-only distribution, drops H2/MySQL/SQL Server for PostgreSQL 14+, and updates the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services..
└──▷ GET THIS VERSION
$ git clone --branch 5.0.0 https://github.com/DependencyTrack/dependency-track.git
# already have the repo? check out this version:$ git checkout 5.0.0
Mandates container-based distribution; WAR file deployment is no longer supported
Requires PostgreSQL 14+ for database storage; H2, MySQL, and SQL Server are dropped
Updates REST API to version 1 with changes to existing endpoints and schemas
Introduces new notification schemas for event notifications
4 details in Everything
└──▷ BREAKING ON UPGRADE
!WAR file deployment is removed; you must now use the container-only distribution
!H2, MySQL, and SQL Server database support is dropped; PostgreSQL 14+ is now required
Adds bundle upgrade subcommand to convert existing bundles to the standardized Sigstore bundle format.
Updates signing path to log to Rekor v2, with DSSE attestations logged as hashed entries using PAE encoding — unblocking large signed DSSEs like SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue..
Adds Rekor v2 flag to cosign signing-config create for configuring Rekor v2 in signing configs.
Makes the standardized Sigstore bundle format the default output for signing and default input for verification.
Signing now routes exclusively through sigstore-go.
sbomify v26.3.0 adds GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure.OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. trusted publishing and removes the Project layer from the hierarchy
└──▷ GET THIS VERSION
$ git clone --branch v26.3.0 https://github.com/sbomify/sbomify.git
# already have the repo? check out this version:$ git checkout v26.3.0
verify_item_access now reads roles directly from the database instead of the session cache.
Authenticated binding-management API for OIDC workflows, including private-repo bindings via deferred ID pinning using org/repo claims.
Accepts string repository_id and owner_id claims in GitHub OIDC tokens and tolerates clock skew during verification.
Replaced the Project layer with a Product → Component hierarchy, accompanied by an automatic data migration.
NinjaAPI now enforces CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. requirements for cookie/session authentication; bearer-token (PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it./OIDC) requests remain exempt.
+5 moreshow less
List endpoints now require authentication and reject invalid bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else..
Member-ship enforcement on branding reads with redaction of private product names.
Signed artifact downloads re-check current access permissions at request time.
Component creation returns DUPLICATE_NAME error code on name collision.
CRA documentation renders correctly in non-GFM markdown viewers and generates PDFs via WeasyPrint bundled in the distroless production image.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!The Project layer has been removed; the hierarchy is now strictly Product → Component.
!Personal access tokensPersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. default to a 90-day expiration lifetime.
!CSRF protection is enforced on all cookie/session API requests.
!List endpoints previously open or anonymously accessible now require authentication.
Apiiro expands secrets detection to include Azure SAS, GCP service accounts, PuTTY keys and more.
Detects newly supported secret types including Azure Storage SAS tokens, GCP service account credentials, PuTTY private keys, Twilio Account SIDs, and Samsara API tokens.
Improves detection for Slack incoming webhooks, high-entropy KEY=value pairs, and passwords in IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. template defaults.
New inline code preview capability in the risk pane for SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment., API security, pipeline misconfiguration, pipeline dependency, and IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. risks.
Adds inline code preview in the risk pane via the eye icon for Path or Introduced through fields
Enables global configuration of code snippet preview under Settings > Global
Chalk v1.1.1 adds docker_context_upload to attach build context as OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. attestation and supports OCI Referrers API.
└──▷ GET THIS VERSION
$ git clone --branch v1.1.1 https://github.com/crashappsec/chalk.git
# already have the repo? check out this version:$ git checkout v1.1.1
Adds docker_context_upload configuration under docker.docker_registry.<name>.docker_push.<name> to upload the build context as a .tar.gz layer attached to an OCI attestation manifest
Adds support for OCI Referrers API via new attestation_use_oci_tag config key to attach attestations using the subject field instead of legacy tags
Starts populating DOCKER_CHALK_ADDED_LABELS with labels injected during docker build, keyed by original name
FAILED_KEYS and _OP_FAILED_KEYS now store a list of error objects per key instead of a single object to record multiple distinct failures
4 details in Everything
└──▷ BREAKING ON UPGRADE
!FAILED_KEYS and _OP_FAILED_KEYS now store a list of error objects per key instead of a single object; consumers must handle the new list format
ARC Harden Runner v2.18.3 adds pod spec customization via broker.* Helm values and keyless Cosign image verification.
└──▷ TRY IT
Verify the signed arc-harden-runner image using cosign with OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. identity.
Xygeni 6.11 adds native DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. engine (xy-dast), AI Triage/Explanation GA, own-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. support, and IDE Code Flow
└──▷ TRY IT
Run a native dynamic scan against an application URL with sensible defaults.
$ xy-dast scan -u <url>
Configure a custom LLM provider for AI features like Triage and Explanation via the UI.
📍Navigate to AI Agents Configuration › Add Provider › Enter endpoint/credentials.
Visualize the vulnerability data path from source to sink directly within the editor.
📍Open a finding in VS Code/IntelliJ/Cursor/Windsurf/Eclipse/Visual Studio › View Code Flow.
Adds xy-dast native dynamic analysis engine with built-in profiles and CI/CD gating for on-premise and air-gapped environments
Brings AI Triage to general availability across all scanners, assessing verdict, remediation urgency, and complexity in bulk or per finding
Enables Bring Your Own LLM to configure a custom model provider for Xygeni's AI capabilities including Triage and Explanation
Introduces Code Flow visualization and inline AI Explanation directly in VS Code, JetBrains/IntelliJ, Visual Studio, Eclipse, Cursor, and Windsurf IDEs
Adds incremental scanning support across all analyzers to analyze only changed code and dependencies in CI/CD and the IDE
5 details in Everything
└──▷ BREAKING ON UPGRADE
!AI usage model shifts from a count-of-fixes to a credit-based metering system for Xygeni-hosted LLM models.
allow-scripts gains a check command to detect stale allow-lists in CI pipelines.
└──▷ GET THIS VERSION
$ git clone --branch allow-scripts-v5.1.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout allow-scripts-v5.1.0
└──▷ TRY IT
Run in CI to fail fast if the allow-scripts config no longer matches installed packages.
$ npx allow-scripts check
New check command warns when the allow-scripts configuration is out of date, enabling CI to catch unapproved lifecycle script changes before they reach production.
jwt-hack v2.6.0 adds JWE support, JWKSJWKSA JSON Web Key Set, a published collection of cryptographic keys. Applications use it to find the public key needed to verify a token's signature. subcommand, new attack payloads, and targeted brute-force flags
└──▷ GET THIS VERSION
$ git clone --branch v2.6.0 https://github.com/hahwul/jwt-hack.git
# already have the repo? check out this version:$ git checkout v2.6.0
└──▷ TRY IT
Fetch and verify a token against a remote JWKS to check for key rotation issues
encode_jwe/decrypt_jwe APIs enable encoding and decrypting JSON Web Encryption (JWE) tokens with full key management for RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-OAEP, ECDH-ES, A128KW, A256KW, Direct and content encryption via A128GCM/A256GCM
New jwks subcommand fetches, spoofs (via jku/x5u), verifies tokens against a JWKS endpoint, and tests for key-rotation vulnerabilities
scan --report <path> exports JSON or HTML reports from scan results; global --json mode applies to all commands
New JWE decryption attacks include padding-oracle detection with statistical timing baselines and misconfiguration detection
crack --min starts brute-force from a specified minimum password length
+3 moreshow less
crack --target-field/--pattern targets specific JWT fields (kid, jti, jku) for brute-forcing with custom patterns
New attack payloads include x5c_signed, psychic (CVE-2022-21449), typ_confusion, alg_edge, jku/x5uSSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. probes, zip (DEFLATE bomb), kid_predictable, dup_key, nested, jwk_embed_ec, jws_json, alg_family_swap, none_sig, header_quirks, and kid_wildcard
Caido v0.57.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Replay, StreamQL filtering, Automate extractors, and global filters.
└──▷ GET THIS VERSION
$ git clone --branch v0.57.0 https://github.com/caido/caido.git
# already have the repo? check out this version:$ git checkout v0.57.0
Adds WebSocket message sending in Replay: create a WebSocket session, set the initial HTTP request, and send messages interactively.
Adds custom extractors in Automate, letting you define a regex capture group to extract response sections as custom columns in result tables.
Introduces StreamQL, a new query language for filtering WebSocket messages in the WS History page.
Extends Match & Replace rules to apply to WebSocket requests and responses.
Adds Global Filters, making saved filters accessible across all projects.
+1 moreshow less
Adds a Logging node in Workflows for debugging field values without requiring JS nodes.
Nuclei v3.9.0 adds impacket integration, Windows RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. helper modules (WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk./TSCH/SCMR/DCOM), and protocol redirect support.
└──▷ GET THIS VERSION
$ git clone --branch v3.9.0 https://github.com/projectdiscovery/nuclei.git
# already have the repo? check out this version:$ git checkout v3.9.0
Supports protocol redirects, allowing templates to follow cross-protocol redirect chains.
Adds impacket integration for Windows attack-path testing directly from nuclei templates.
New JS helper modules for WMI, Task Scheduler (TSCH), Service Control Manager (SCMR), and DCOM enable Windows RPC enumeration and exploitation in JS-protocol templates.
Mirrors -config, -report-config, and -dashboard flags for SDK callers, making programmatic nuclei usage config-consistent with CLI usage.
Invicti adds gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. scanning via .proto uploads, account-wide scan suspension, and collection dashboards in Release 20260625.
└──▷ HOW TO FIND IT
Scan gRPC-based APIs by providing their protocol buffer definitions directly to the scanner.
📍Upload .proto files via the New Scan wizard's service configuration panel
Pause all automated scanning for an entire organization during a maintenance window.
📍Organization Settings › Scheduled Scans › Suspend All Future Scans
Monitor the security posture of a specific collection without navigating to individual applications.
📍Collections › [Select Collection] › Dashboard
Adds gRPC scanning support by uploading .proto definition files to extend DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. coverage
Adds organization-level ability to suspend all future scheduled scans across the account
Adds dedicated dashboard for Collections to view security posture at a glance
3 details in Everything
2 more releases in this issue
· 2026-06-11 → 2026-06-25
Invicti 20260611 adds asset and collection filters to the UI, Shift-select for bulk actions, and more resilient GraphQL schema parsing. No breaking changes.
└──▷ HOW TO FIND IT
Narrow your vulnerability list to findings belonging to a specific collection in the Invicti UI.
📍In the console, go to Vulnerabilities and use the Collection filter dropdown.
Filter identified technologies for a specific asset name on the Technologies page.
📍In the console, go to Technologies and use the Asset filter input.
Adds Collection filter on the Vulnerabilities page so you can narrow vulnerabilities down to specific collections alongside your other filters
Adds Asset filter on the Technologies page by asset name
Enables Shift-select in lists (hold Shift and click another item) for bulk selection of Targets, Vulnerabilities, and Scans
Improves GraphQL schema import resilience: unrecognized directives such as oneOf input directive no longer cause syntax errors
Dalfox is an XSS scanner that automates parameter analysis, reflected/stored/DOM-based XSS detection, and WAF fingerprinting for web apps.
Dalfox 3.1.1 unifies target parameter, enforces -i for stdin/file/pipe, bounds fan-out with per-payload cap and DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime. early exit.
└──▷ GET THIS VERSION
$ git clone --branch 3.1.1 https://github.com/hahwul/dalfox.git
# already have the repo? check out this version:$ git checkout 3.1.1
└──▷ TRY IT
Force stdin input by explicitly passing -i when piping a URL list.
--target (alias -t) now serves as the unified argument for all scan types, including MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server URLs; url remains a REST alias only
url, file, and pipe input sources now properly load config files, apply global flags, and require explicit -i flag to read from stdin
2 details in Everything
1 more release in this issue
· 2026-06-14 → 2026-06-21
Dalfox v3.1.0 adds blind/OOB XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. via interactsh, HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. input, external JS analysis, CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks./Trusted Types awareness, and a global rate limiter.
└──▷ GET THIS VERSION
$ git clone --branch v3.1.0 https://github.com/hahwul/dalfox.git
# already have the repo? check out this version:$ git checkout v3.1.0
└──▷ TRY IT
Analyze external JS bundles and flag outdated vulnerable libraries in a single authenticated crawl.
Adds --blind-oob for out-of-band XSS detection using an interactsh OASTOASTOut-of-band Application Security Testing: a technique for detecting vulnerabilities by having a target system make DNS or HTTP callbacks to an attacker-controlled server, revealing flaws that produce no visible in-band response. server, catching stored, async, and non-reflecting sinks.
Adds --analyze-external-js to fetch and ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text.-analyze same-origin <script src> bundles (up to 16 files / 512 KiB) for DOM-XSSDOM-XSSA cross-site scripting vulnerability where malicious JavaScript executes entirely in the browser by manipulating the DOM, never touching the server, making it invisible to server-side input filters. sinks.
Adds --detect-outdated-libs to flag known-vulnerable front-end library versions as informational findings.
Adds CSP and Trusted Types awareness, emitting strict-dynamic/nonce gadget payloads and adapting to Trusted Types policies.
Adds filter-aware payload synthesis that computes exact JS breakout sequences from the observed script prefix, including escaped-quote and nested-context cases.
+9 moreshow less
Adds four attribute-decode WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server.-bypass mutations (KeywordEntityEncode, SchemeBreak, EntityScheme, MultiSlash) exploiting HTML tokenizer entity decoding.
Adds size-limited WAF inspection-window bypass, positioning payloads past the byte boundary WAFs inspect.
Adds --input-type har to accept HAR/proxy exports (Burp, Caido, ZAP, DevTools, mitmproxy) as a scan source.
Adds --rate-limit / -r / --rl for a global requests-per-second token bucket shared across all workers and targets.
Adds --retries and --retry-delay for optional exponential-backoff retries on HTTP 5xx and transient transport errors.
Adds --insecure flag to make TLS certificate validation configurable for scan, server, and mcp modes.
Adds scan_timeout configuration for server and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. modes to bound total scan duration for concurrent REST/MCP jobs.
Extends structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. metadata (version, targets, duration, request/finding counts, per-target WAF info) to SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface., Markdown, and TOML formats.
Widens DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime.-XSS sink coverage with Document.parseHTMLUnsafe() and window.open() as modeled sinks.
Juice Shop v20.1.0 adds a prompt-injectionprompt-injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. challenge, Node.js 26 support, and a new CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. config option.
└──▷ GET THIS VERSION
$ git clone --branch v20.1.0 https://github.com/juice-shop/juice-shop.git
# already have the repo? check out this version:$ git checkout v20.1.0
└──▷ USE IT
Customize the attack origin used in the CSRF challenge — useful when running Juice Shop behind a reverse proxy or on a non-default hostname.
New System Prompt Extraction challenge: prompt injection attack against the chatbot.
Adds a Fix It coding phase for the NFT Takeover challenge.
Supports Node.js 26.x as a runtime.
Replaces native libxmljs2 with WASMWASMA binary instruction format for a stack-based virtual machine, maintained by the W3C, that lets code compiled from any language run at near-native speed inside a sandboxed environment across browsers and servers.-based libxml2-wasm, eliminating the native build dependency.
Adds overwriteUrlForCsrfChallenge configuration option to customize the attack origin for the CSRF challenge.
Adds MongoDB and MS SQL account types, MySQL web explorer, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. flow, command blocking, RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. support to PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded.; new project env API.
└──▷ GET THIS VERSION
$ git clone --branch v0.161.9 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.9
Add mongodb and mssql_server account types to PAM
Add GET /api/v2/project/{projectId}/environment/slug/:envSlug endpoint to get project environment by environment slug
Add MySQL web access data explorer to PAM
Implement MFA access flow for accounts in PAM
Add command blocking and session log masking support to PAM
+1 moreshow less
Add Windows RDP support and S3 recording overrides to PAM
6 details in Everything
10 more releases in this issue
· 2026-06-02 → 2026-06-26
New PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. account types and registry-driven templates; PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets.HSMHSMA tamper-resistant device that generates and stores cryptographic keys and performs operations with them, so the private key never leaves the hardware. Cloud KMS services run on fleets of them. connector; Trigger.dev integration; API for project membership lookup
└──▷ GET THIS VERSION
$ git clone --branch v0.161.6 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.6
└──▷ TRY IT
Look up a user's specific membership status within a project via the API.
Sync secrets from a Trigger.dev application connection to Infisical.
📍# Configure in the UI under Integrations › Trigger.dev
GET /api/member endpoint added to retrieve membership by project id and user id
Adds Trigger.dev app connection and secret sync integration
Adds registry-driven template policies for PAM (Privileged Access ManagementPrivileged Access ManagementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded.)
Adds new MongoDB and MS SQL Server account types to the PAM catalog
Adds HSM connector support for PKI code signing workflows
Allow user invitations when SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. enforcement is enabled
└──▷ GET THIS VERSION
$ git clone --branch v0.161.5 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.5
Add allow_user_invitations toggle to permit local account invites even with SSO enforced
Adds steps for FQDN support in PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. Syncs schemas and product filter in audit log streaming
└──▷ GET THIS VERSION
$ git clone --branch v0.161.4 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.4
└──▷ HOW TO FIND IT
Configure PKI syncs to use FQDNs instead of IP addresses.
📍Steps: In the PKI Sync configuration, enter the Fully Qualified Domain Name (FQDN) as the target hostname for the secret reference.
Filter audit logs to only show events for a specific product.
📍Steps: Navigate to Audit Log › Streaming and apply the Product filter to isolate events from a specific service or component.
Adds Full Qualified Domain Name (FQDN) support to PKI Syncs schemas.
Infisical v0.161.2 adds PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. pages, Postgres CLI support, KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. key rotation, and folder moves
└──▷ GET THIS VERSION
$ git clone --branch v0.161.2 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.2
Adds PAM sessions, audit logs, and access control pages to the UI
Adds unexportable flag for KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. keys, honey token webhook type, and certificate revocation by thumbprint.
└──▷ GET THIS VERSION
$ git clone --branch v0.161.1 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.1
Add unexportable flag to KMS keys to prevent key material export
Add webhook type for triggered honey tokens
Add support for revoking certificates using thumbprints
Adds KMIP CSRCSRA Certificate Signing Request is a block of encoded data submitted to a certificate authority, containing a public key and identity details, so the CA can issue a signed TLS certificate without ever seeing the private key. signing, dynamic secret validation rules, Convex/Infisical OAuth support, and duplicate secret detection
└──▷ GET THIS VERSION
$ git clone --branch v0.161.0 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.161.0
Add KMIP client CSR signing for generating Certificate Signing Requests via the Key Management Interoperability Protocol.
Support dynamic secrets and rotations within validation rules, enabling automated lifecycle management during validation.
Detect duplicate secret values in the secrets insight feature to surface redundant or copy-pasted credentials.
Support Convex secret rotation to automate credential updates for Convex database connections.
Allow multiple GitHub apps per organization to expand integration options for repository access.
+1 moreshow less
Enable gateway support for Azure Key Vault connections.
Adds async project deletion, IBM API Connect dynamic secrets, and GoDaddy CA integration to Certificate Manager.
└──▷ GET THIS VERSION
$ git clone --branch v0.160.11 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.11
Implement async project deletion via soft-delete and paced hard-delete worker
Integrate GoDaddy CA with Certificate Manager for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination.
Complete support for external KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves., HSMHSMA tamper-resistant device that generates and stores cryptographic keys and performs operations with them, so the private key never leaves the hardware. Cloud KMS services run on fleets of them. and production hardening before shadowing
Infisical v0.160.10 adds NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent./KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. MSSQL auth, certificate metadata search, OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. metrics coverage, and PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. seed policies.
└──▷ GET THIS VERSION
$ git clone --branch v0.160.10 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.10
└──▷ HOW TO FIND IT
Search the certificate inventory by metadata fields like subject or issuer.
📍In the Inventory UI, use the new certificate metadata search field to filter certificates.
Add NTLM and Kerberos auth support for MSSQL enables Windows-authenticated database connections in Infisical
Add certificate metadata search to inventory UI allows filtering certificates by fields in the certificate inventory screen
Seed pre-defined PKI certificate policies at org creation automatically applies PKI policies when a new organization is created
Expand OTEL metrics coverage with bounded-cardinality InfisicalCore meter for observability
GitGuardian Detection Engine v2.166 adds nine new secret detectors and validity checkers for Gemfury tokens.
Adds nine new detectors: Amadeus OAuth Credentials, Kinde OAuth Credentials, TomTom API Key, Datadog Personal Access Token, Azure Maps Key, Azure Mixed Reality Key, Azure Service Bus Key, Azure Quantum Key, and Azure Bot Direct Line Key
Adds validity checkers for Gemfury Deploy/Push tokens and Full Access tokensAccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions.
2 details in Everything
1 more release in this issue
· 2026-06-09 → 2026-06-23
GitGuardian Detection Engine 2.165 adds 8 new secret detectors and custom-host support for Okta, Azure, and AWS validations
Adds detectors for Stitch API Key, ActiveMQ Credentials, Instantly API Key, Gitea Access Token, Fal.ai API Key, SurrealDB Cloud JWT Token, Kimi API Key, and Wiz OAuth Credentials.
Adds custom_host_support to Okta Token, Okta OAuth Credentials, Azure Storage Account Key, and AWS Cognito OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. Credentials validity checkers.
Updates Sumo Logic checker to validate against Switzerland and Korea deployments while removing the retired India endpoint.
Improves detection accuracy for azure_active_directory_api_keys by reducing false positives via updated matchers.
Smart Notifiers lets you filter alerts by criteria; improved scan coverage and ticketing controls
config rules for Smart Notifiers allow filtering notifications by severity, ML risk score, validity, secret type, or GitGuardian tag for custom webhook, Slack, Microsoft Teams, and email channels.
Incidents page now filters by closure reason via the UI filter options.
GitHub check runs gain a new setting to skip merge commits in pull request checks.
Large GitHub pull requests can now be skipped based on a configured size limit to protect API rate limits.
GitGuardian Self-Hosted 2026.6 adds premium scan retry worker, agent skills, 19 new detectors, and granular Teams alerting.
└──▷ TRY IT
Clone the new agent skills repo to integrate with local AI tools for automated remediation guidance.
$ git clone https://github.com/GitGuardian/agent-skills.git && ls agent-skills
Configure granular Teams notifications for specific incident types via the UI.
📍In the console, go to Settings › Integrations › Microsoft Teams and enable granular alerting for specific incident event types per channel.
Adds Premium scan retry worker (Helm-only optional deployment) to route large, OOMOOMAn out-of-memory condition: a program requests more memory than the system or device can provide. The allocation fails or the operating system may stop the process.-prone VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. scans to a dedicated high-memory pod, keeping base workers small.
Ships open-source GitGuardian/agent-skills repository to teach AI coding assistants how to scan, read findings, and remediate secrets via ggshield.
Introduces 19 new secret detectors across engine versions v2.163–v2.165, including Aikido API OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Credentials, Authentik API Token, Stitch API Key, and others.
Adds granular Microsoft Teams alerting for internal monitoring, allowing subscription to specific incident event types per channel.
Enables Jira Cloud recurrent scanning (replacing webhooks) and extends VCS historical scans to cover orphaned commits, Git notes, and pull/merge request refs.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Updates minimum system requirements for Self-Hosted deployment: KOTS 1.117.3+, Kubernetes 1.30+, PostgreSQL 15+, Redis 6+; Helm values require review for compatibility.
!The sap_ai_core_credentials detector is replaced by the new SAP OAuth Credentials checker in engine v2.165.
License policy labels now visible in the component list for all users with access; deterministic project-name resolution fixes scan upload reliability.
Show the license policy label and its filter chip to any user with access to a component's bill of materialsbill of materialsA structured list of every component, library, and dependency that makes up a piece of software or hardware, used by cyber tools to track what is inside a product and surface known vulnerabilities in its parts., removing the need for a separate org-level policy configuration permission — security engineers and compliance analysts can now filter and review license labels directly from the component list
1 detail in Everything
2 more releases in this issue
· 2026-06-02 → 2026-06-10
Adds configurable labels to license policies and uncapped bulk component exclude/include via UI.
Add configurable labels to license policies — admins set labels in policy settings, and users see them alongside policy violations in the Bill of MaterialsBill of MaterialsA structured list of every component, library, and dependency that makes up a piece of software or hardware, used by cyber tools to track what is inside a product and surface known vulnerabilities in its parts. and can filter components by label
Bulk exclude or include components matching a filter across all pages, not just the current page
Finite State adds embedded credential detection via YARA rules and virtual-ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. firmware unpacking support
Adds 32 new YARA flag rules to detect AWS access keys, GitHub tokens, Slack tokens, Stripe keys, Google API keys, SSH and PGP private keys, PEM certificates, JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage. during binary SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. scans with severity-tiered classification
Opens a new virtual-ELF conversion pipeline for analyzing SREC, Intel HEX, Cortex-M vector-table, and iMX boot-image firmware formats
Adds first-class unpacking support for TP-Link SafeLoader-v2 (Omada/Fusion), UBI/SquashFS volumes with device-tree-blob payloads, Realtek Ameba flash images, and QNX4 boot sectors
Adds Script.interrupt() and Script.terminate() APIs for controlling runaway scripts in Frida 17.14.0
Script.interrupt() aborts executing JavaScript while leaving the script loaded and ready to run again.
Script.terminate() interrupts execution and unloads the script, including stuck or infinite operations. These operations are unsupported in Barebone sessions.
Exposes process argv from enumerate_processes() at metadata scope.
Frida 17.12.0 adds native Control-Flow Graph analysis in Gum/GumJS and Process.findFunctionRange()
gum now includes a native control-flow graph module with resolver-based construction, Cooper-Harvey-Kennedy dominators, and nearest-first dominating site enumeration.
GumJS exposes ControlFlowGraph and BasicBlock objects for analyzing function structures.
Adds Process.find_function_range() in Gum and Process.findFunctionRange() in GumJS to locate function ranges in stripped binaries without symbols.
Frida 17.11.0 adds ptrace-free injection fallback, in-kernel instrumentation for Virtualization framework, and Gum export sizes
/proc/$pid/mem fallback enables Frida to inject into targets on Linux whose ptrace slot is already owned by another tracer, working on x86, x86_64, and arm64.
VZ kernel GDB stub client and physical-memory bridge allow in-kernel instrumentation of Virtualization framework guests via the Barebone backend.
Intra-kernel hostlink over vsock brings NativeCallback, Interceptor, and Memory.patchCode() to kernel code without relying on BRK callbacks.
Interceptor and Stalker are now functional in the kernel for barebone targets, with writable-remap support and TLB flushing.
Gum's enumerateExports() now includes export sizes via the size field in GumExportDetails reports st_size or -1.
+2 moreshow less
Linux protection queries use the PROCMAP_QUERY ioctl on Linux 6.11+ to speed up memory analysis.
Vala bindings expose X86Writer so Vala code can generate x86 and x86_64 instructions, mirroring Arm64Writer.
Frida 17.10.1 adds Memory.findPointers() with SIMD acceleration for finding pointer-aligned words.
gumjs: Expose Memory.findPointers(), backed by the new gum_memory_find_pointers() helper. This provides a focused, SIMD-accelerated way to find pointer-aligned words matching one or more values, across one or more ranges.
memory: Add gum_memory_find_pointers(), with parallel range tiling and per-architecture kernels such as SSE2 and NEON.
Radare2 6.1.8 adds new demanglers, JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. decoding, ESIL PPC coverage, new type commands, and more binary format support.
└──▷ GET THIS VERSION
$ git clone --branch 6.1.8 https://github.com/radareorg/radare2.git
# already have the repo? check out this version:$ git checkout 6.1.8
└──▷ TRY IT
Look up all struct names that match a specific byte size to identify unknown data structures.
$ r2 binary.elf -c 'tsn 16'
Find an enum value by its numeric constant to reverse-engineer protocol or status codes.
$ r2 binary.elf -c 'ten 3'
Adds Rust, D, C++, IBM XL, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. ABI demanglers for richer symbol resolution across more toolchains.
Implements pFJ command for decoding JWT tokens directly in the print pipeline.
Adds idd command for binary info inspection.
Adds ten command for enum lookup by numeric value.
Adds tsn command to look up struct names by size.
+17 moreshow less
Adds FTAB extractor plugin for new binary format support.
Adds GNS1 binary loader improvements with better dyldcache false-positive detection.
Adds R_DYLDCACHE_NO_DEPS option for shallow dyldcache dependency filtering.
Adds ESIL modeling for PPC scalar floating-point load/store/arithmetic/convert operations.
Adds ESIL for PPC integer, logical, rotate, and mod operations including isel conditional-select.
Adds ESIL for PPC XER.CA carry flag for add/subtract-with-carry and algebraic shift-right.
Unifies asm.addr.base10/asm.addr.base36 settings into a single asm.addr.base config key.
Supports hexdump/disasm address display in octal base.
Adds CLd command for source-baked decompiler output.
Adds r2vsql to the fallback command handler for SQL-style binary querying.
Ships syscall tables and a Pebble script for stub scans targeting PebbleOS.
Adds ldmap.r2.js script to load source-line information from linker map files.
Renders array stack variable element accesses as name[i] in disassembly.
Adds RTableOptions.wrap and improved Markdown table rendering with ellipsis trim and attribute support.
Extends all p-/p= commands with JSON output and improved bounds.
Ports r2preload to Windows.
Adds Nix flakeNix flakeA Nix packaging construct that pins all dependencies in a lockfile and exposes a standardized interface, giving cyber tools fully reproducible builds across any machine running the Nix package manager. and dev shell support for the build system.
22 details in Everything
└──▷ BREAKING ON UPGRADE
!The asm.addr.base10 and asm.addr.base36 config keys are unified into asm.addr.base; existing configs using the old keys will break.
!The default CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. for AVR is now ATxmega128a4u; setups relying on the previous default CPU may behave differently.
!iz+ now requires spaced arguments; scripts passing unspaced arguments to iz+ will break.
!sdb_remove is deprecated as a duplicate of sdb_unset; code using sdb_remove via the ABI may break.
1 more release in this issue
· 2026-06-02 → 2026-06-23
Radare2 6.1.6 adds Zydis x86 backend, dynamic calling convention analysis, multireturn support, and sweeping DEX/Mach-O/ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. improvements.
└──▷ GET THIS VERSION
$ git clone --branch 6.1.6 https://github.com/radareorg/radare2.git
# already have the repo? check out this version:$ git checkout 6.1.6
└──▷ TRY IT
Inspect jump/switch table cases for the current function using the redesigned afbt command.
$ r2 <binary> -c 'aaa; s sym.main; afbt'
Parse and display DER code signatures embedded in a Mach-O binary.
$ r2 <macho_binary> -c 'iC'
Adds opt-in Zydis x86 arch plugin as an alternative disassembly backend.
Adds dynamic calling convention parser supporting Java, Dalvik, .NET, Python, and Wasm via RBinPlugin.getCc.
Adds initial multireturn support in calling convention analysis.
Renames afj to afbt and redesigns/extends the jump/switch table API and commands.
Adds afbtj branch-case display in analysis output.
+26 moreshow less
Adds configurable jumptable maxcases for analysis.
Adds static x86 calling convention clobber, preserve, and stack-cleanup metadata.
Adds ppc.nz r_asm encoder plugin for PPC assembly.
Adds OpType/ESIL support for PPC dword shifts, X-form load/store, cntlz, mulh, and CR moves.
Adds RArchInfo.WODST flag for architectures with write-only destination operands.
Adds ic[+-] commands to add/remove class fields and inheritance info.
Adds ii+ and ii- commands to add/remove imports interactively.
Adds ies extension for Dalvik onCreate symbol entrypoints.
Adds bin.classes.namesonly option to skip method/field parsing for faster loading.
Adds bin.relocs.xrefs config var to skip xref creation from relocations.
Adds bin.unnamed option (and RBinOptions.loadUnnamed) to skip loading unnamed symbols across ELF, SOM, dyldcache, and more formats.
Adds bin.flags config var to skip loading binary symbol flags.
Adds bin.meta config var to disable codemeta info loading.
Adds anal.plugins.pre config var.
Parses and displays DER signatures in Mach-O via the iC command.
Exposes DYLD_ENVIRONMENT, __RESTRICT, and MH_APP_EXTENSION_SAFE Mach-O metadata via sdb.
Exposes Mach-O signing type.
Recovers ObjC inheritance in analysis classes.
Parses valid Wasm sections 12 and 13 (datacount and tag).
Updates Wasm3 support for try/MMX ops.
Handles more PPC64 relocation types with big-endian-aware reloc patching.
Adds r_bin_class_add_method API and surfaces class methods.
Supports lazy-loading of DEX addrline debug info for faster loading.
Adds support for pining functions with custom emojis.
Adds anal.flagbounds (renamed from anal.flagstop) as a function boundary option.
Adds command file string API to the ABI.
31 details in Everything
└──▷ BREAKING ON UPGRADE
!The anal.flagstop config variable is renamed to anal.flagbounds; existing configs using anal.flagstop will need to be updated.
!The afj command is renamed to afbt; scripts or workflows invoking afj must be updated to use afbt.
CHIPSEC 2.0.5 adds Intel 440FX (QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware.) support, Meteor Lake DIDs, and expanded cfg_checker validation.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:$ git checkout 2.0.5
Adds platform configuration for Intel 440FX (QEMU), enabling CHIPSEC analysis in QEMU-based virtual environments.
Adds Meteor Lake (MTL) Device IDs from the datasheet, expanding hardware coverage for MTL platforms.
Adds BAR register/field validity and subcomponent type checks to cfg_checker, strengthening configuration validation.
Splits tcobar and smbus_base into their own configuration files, improving modularity of platform configs.
Reversecore MCP v3.0 introduces dynamic analysis, digital forensics tools, dual-mode sandbox execution, and SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. compatibility.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.0 https://github.com/sjkim1127/reversecore_mcp.git
# already have the repo? check out this version:$ git checkout v3.0.0
Adds Digital Forensics module via ForensicsToolsPlugin, exposing 22 new MCP tools for memory, disk, network, and artifact analysis (e.g., memory_analyze, pcap_analyze).
SandboxExecutor enables dual-mode sandbox execution (restricted vs standard) controlled by the SANDBOX_MODE environment variable.
Adds /health/ready endpoint returning structured readiness data {"status": "ready", "ready": true} for orchestrator probing.
Implements async task queue and TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit.-based result caching to eliminate duplicate computation on repeated binary analysis.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!GHIDRA_HOME and JAVA_HOME environment variables are now ignored; Ghidra dependency is removed in favor of embedded r2ghidra.
!diec (Detect-It-Easy) CLI is no longer used; packer detection runs in-process via Python/LIEF.
1 more release in this issue
· 2026-06-24 → 2026-06-28
v2.1.0 adds AI SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment., Keystone/Qiling analysis, and plugin architecture to reversecore_mcp
└──▷ GET THIS VERSION
$ git clone --branch v2.1.0 https://github.com/sjkim1127/reversecore_mcp.git
# already have the repo? check out this version:$ git checkout v2.1.0
Introduces SECURITY.md as the formal security policy for the repository.
Adds a new SAST framework in reversecore_mcp/core/sast/ with YAML-configurable rules via rule_manager.py and hybrid ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text./Regex detection in python_ast_scanner and regex_scanner.
Exposes assemble_instructions tool for Keystone-based assembly of mnemonics to machine-code bytes across x86, ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware., MIPSMIPSA RISC processor architecture originally developed at Stanford and commercialized by MIPS Technologies, widely used in embedded and network devices; cyber tools target it to analyze or exploit routers, cameras, and similar hardware. architectures.
Exposes emulate_binary tool for full-system binary emulation via the Qiling engine, tracking CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. registers and system call hooks.
Enables dynamic third-party extensions by registering them at runtime via the plugin system in core/plugin.py, extension.py, and extension_registry.py.
+1 moreshow less
Adds test-all-mcp-tools.py script for verifying all 101 registered MCP tools in container environments before release.
checksec.sh 3.2.0 adds SafeStack, sanitizer, RISC-V CFI, W^X, and stack-clash detection plus a CI gate and parallel scanning.
└──▷ GET THIS VERSION
$ git clone --branch 3.2.0 https://github.com/slimm609/checksec.sh.git
# already have the repo? check out this version:$ git checkout 3.2.0
└──▷ TRY IT
Suppress advisory warnings and check a binary for the new sanitizer, SafeStack, and W^X properties.
$ checksec --file=/usr/bin/target--no-warnings
Adds SafeStack detection for ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. binaries.
Extends CFI hardening detection to i386 CET and RISC-V Zicfilp/Zicfiss (landing pads and shadow stack) for RV32 and RV64.
Detects sanitizer instrumentation (ASAN, UBSAN, MSAN, TSAN, LSAN) via compiler-rt symbol prefix scan.
Adds Selfrando detection via the .txtrp section.
New W^X segment check (SeparateCode) asserts no PT_LOAD segment is simultaneously writable and executable.
+6 moreshow less
Adds stack-clash protection detection via annobin .gnu.build.attributes notes (authoritative on RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence./Fedora/CentOS toolchains).
New RPATH/RUNPATH inspection classifies each entry as bad (relative/empty/world-writable), warning ($ORIGIN or nonexistent), or safe (absolute).
Adds annobin-based FORTIFY and GLIBCXX assertion detection.
New --fail-if CI gate exits non-zero when a required check is not in a good state.
Adds parallel directory scanning (RunListChecksParallel) over a bounded worker pool (default GOMAXPROCS).
Adds --no-warnings and --color flags; warnings now include filename context.
hrtng v3.9.105 adds new deinline modes and global xrefs cache update for MSIG files
└──▷ GET THIS VERSION
$ git clone --branch v3.9.105 https://github.com/kasperskylab/hrtng.git
# already have the repo? check out this version:$ git checkout v3.9.105
deinline now supports split head and exit blocks, cutting very short inlines from inside single blocks, loading inlines from the work-folder, and keeping compatibility with earlier inlines library
Forces hex-rays's global xrefs cache update when creating MSIG files in All user named functions mode, reducing re-decompilation time
2 details in Everything
└──▷ BREAKING ON UPGRADE
!deinline FIND_MATCHED_PATHS mode has been removed
Cortex Analyzers 3.8.7 adds an OpenCVE analyzer and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. platform support.
└──▷ GET THIS VERSION
$ git clone --branch 3.8.7 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.7
Adds an OpenCVE analyzer for querying CVE intelligence directly from Cortex.
Extends platform support to IPv6 addresses.
2 details in Everything
1 more release in this issue
· 2026-06-03 → 2026-06-19
Adds Zscaler responders for URL Filtering, Denylist, Cloud Firewall, and Security Exceptions.
└──▷ GET THIS VERSION
$ git clone --branch 3.8.5 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.5
openrelik gains IAP support and single-host ingress mode in osdfir-infrastructure 2.9.0
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.9.0 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.9.0
Adds Identity-Aware Proxy (IAP) support to the openrelik Helm chart component.
Adds single-host ingress mode to the openrelik Helm chart component.
Timesketch 20260617 enforces cross-sketch ownership on event fact conclusions via the API.
└──▷ GET THIS VERSION
$ git clone --branch 20260617 https://github.com/google/timesketch.git
# already have the repo? check out this version:$ git checkout 20260617
└──▷ BREAKING ON UPGRADE
!OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. users must upgrade to a minimum of version 3.7.0 before upgrading to this Timesketch release when running OpenSearch >= 3.x.
1 more release in this issue
· 2026-06-11 → 2026-06-17
Timesketch 20260611 adds native wildcard field search, OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing, and upgrades the base image to Ubuntu 26.04.
└──▷ GET THIS VERSION
$ git clone --branch 20260611 https://github.com/google/timesketch.git
# already have the repo? check out this version:$ git checkout 20260611
Supports mapping text fields as wildcard field types in OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions., enabling native substring searches across log data.
Introduces OpenTelemetry integration for tracing Timesketch web backend, SQLAlchemy, and OpenSearch interactions — enabling performance monitoring and health tracking.
Upgrades the base Docker image to Ubuntu 26.04 with major dependency updates.
Improves the SearchDropdown UI component with enhancements for usability.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The minimum compatible OpenSearch version is now 2.19.5 to support native wildcard field mappings; deployments running older OpenSearch versions must upgrade.
!The base Docker image has been upgraded to Ubuntu 26.04; custom container deployments must plan migration accordingly.
mesh v0.1.7-alpha adds ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. support, ADBADBAndroid Debug Bridge, a command-line tool maintained by Google that lets a host machine communicate with an Android device over USB or TCP, giving cyber tools shell access, file transfer, and app control. auto-pairing with reachability checks, profile reset, and .env-based control plane URL for mobile key generation
└──▷ GET THIS VERSION
$ git clone --branch v0.1.7-alpha https://github.com/barghest-ngo/mesh.git
# already have the repo? check out this version:$ git checkout v0.1.7-alpha
feat: add arm support enables running mesh on ARM architecture platforms
Automatic adbpair feature allows automatic pairing with Android devices, confirmed by device reachability checks before initiation
feat: check ADB state rather than have user check adds automated ADB status validation within the tool
feat: add reset action to clear all profile states introduces a new command or UI action to wipe configuration profiles
Use of the .env file for control plane URL allows dynamic configuration of mobile node key generation endpoints without manual input
YARA-X v1.18.0 adds --cpu-limit CLI flag and improves scan performance
└──▷ GET THIS VERSION
$ git clone --branch v1.18.0 https://github.com/VirusTotal/yara-x.git
# already have the repo? check out this version:$ git checkout v1.18.0
└──▷ USE IT
Limit YARA-X CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. usage to a specific number of cores during a scan to prevent resource exhaustion.
shell
yara-x --cpu-limit 4 rules.yar target_file
Adds --cpu-limit option to the CLI for controlling CPU usage during scans
Improves scan performance by ignoring patterns that can't match due to file header constraints
Aviatrix CoPilot 4.33.0 adds upgrade workflows in Administration > Maintenance, DCF logging visibility for serverless workloads, gateway Security Rules tabs, and SNAT/DNAT ru
Adds Administration > Maintenance pages to consolidate Controller and gateway upgrade workflows, including upgrade groups, readiness checks, and backup/restore.
Adds serverless workload details (VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules., Region, Cloud Account, Type) to Source and Destination Workload columns in DCF logging via an info icon tooltip.
Adds a new accordion UI for DCF audit changes providing structured diff views for policy modifications.
Adds a Security Rules tab on the Gateways page and Transit Egress page to display DCF rules enforced on each gateway, plus an Enforcement on Gateway setting card.
Adds priority and move controls to reorder SNAT and DNAT rules, enabling user-controlled priority assignment for both Customized SNAT and DNAT rules.
+1 moreshow less
Moves TLS inspection and WebGroup URL filtering from Preview to General Availability; TLS Profiles now support configurable enforcement levels for SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. Verification (strict or permissive).
Cortex Analytics 2026.05.28 adds 29 new detectors focusing on AI security, cloud storage mass deletion, and OAuth token theft.
Adds Suspicious AI model usage from a Tor exit node detector for high-severity AI infrastructure abuse
Adds ML artifacts destruction and Unusual ML artifacts destruction detectors for model integrity monitoring
Adds Potential denial of wallet abusing AI services and Possible denial of wallet abusing AI services variations for crypto/AI threats
Adds Suspicious AI Dataset Download and Suspicious First-Time AI Dataset Download by Identity detectors
Adds Suspicious ML Model Download and Suspicious First-Time AI Model Download by Identity detectors
+14 moreshow less
Adds Unusual AI Knowledge Base Modification and Suspicious AI Knowledge Base Modification detectors
Adds AI model discovery detector for reconnaissance activity
Adds AI safeguards deletion attempt and AI safeguards were successfully deleted detectors
Adds AWS Bedrock model invocation logging deletion and related variations
Adds Abnormal increase in network-related alerts on the same host detector
Adds Bedrock model shared with a foreign account detector for data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. risk
Adds Cloud AI agent was modified and Unusual modification of AI agent detectors
Adds massive file deletion detectors for Box, Dropbox, Google Drive, and Microsoft SharePoint/OneDrive
Adds Modification of the AD FS IdentityServer configuration file detector
Adds Multiple network-related alerts of different MITRE tactics on the same host detector
Adds Possible ConsentFix - OAuth Token Theft Detected and OAuth Token Theft - Potential Session Hijacking Detected from new ASN detectors
Adds Suspicious AI Dataset Label Modification, Unusual AI RAG Knowledge Base Modification, and Unusual AI dataset modification detectors
Adds An RDS snapshot containing sensitive data was exported detector for cloud database exposure
Adds Unusual AI model invocation, Unusual AWS Bedrock model access request, and Unusual AWS SageMaker notebook access detectors
Supports serviceability commands against Remote Networks—High Performance termination nodes from Strata Cloud Manager
Routing Information command now available for viewing routing tables, including BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes., static, and OSPF routes, on High Performance connections
Service IP Address command retrieves FQDN or IP address of the High Performance service endpoint for CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. configuration
Adds CRI Profile v2.1, K-ISMS for Finance, NZISM v3.9, NIST SP 800-172 standards; updates AI and KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. rules.
Adds Cyber Risk Institute (CRI) Profile v2.1 to the Standards Catalog
Adds Korea – Information Security Management System (ISMS) For Finance to the Standards Catalog
Adds 'New Zealand Information Security Manual (NZISM) v3.9' to the Standards Catalog
Adds NIST SP 800-172 to the Standards Catalog
Updates EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001:2023, NIST AI 600-1, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Applications 2025, and OWASP Top 10 for Agentic Applications 2026 with new AI-focused rules
+1 moreshow less
Adds KSPM-specific security configuration rules to CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Amazon EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. Benchmark v1.4, CIS Azure AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. Benchmark v1.5, and other existing benchmarks
Prisma Access 6.2 allows up to eight Colo-Connects per region for redundancy
Supports deploying up to eight Colo-Connects per region
Adds support for GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. and non-GRE tunnel solutions with multiple Colo-Connects
Prisma Access 6.2 introduces BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. filtering and route metric configuration for service connections in Strata Cloud Manager.
Adds support for creating custom BGP policies on regular and Colo-Connect service connections to control routing behavior
Enables setting route metrics on service connections via the Strata Cloud Manager UI to influence traffic flow
Adds aws-bedrock-agentcore-memory integration to detect Amazon Bedrock AgentCore memory resources
Adds aws-bedrock-agentcore-policy integration to detect Amazon Bedrock AgentCore policy engines
Adds aws-bedrock-agentcore-gateway integration to detect Amazon Bedrock AgentCore gateways
Adds aws-bedrock-agentcore-agent-runtime integration to detect Amazon Bedrock AgentCore agent runtimes
+10 moreshow less
Adds aws-athena-prepared-statement integration to detect Amazon Athena prepared statements
Adds aws-ecr-repository-creation-template integration to detect Amazon ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. repository creation templates
Adds aws-opensearch-vpc-endpoint integration to detect Amazon Elasticsearch Service VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. endpoints
Adds gcloud-network-connectivity-policy-based-route integration to detect Google Cloud Network Connectivity Center policy-based routes
Adds gcloud-gke-backup-backup-channel integration to detect Google Backup For GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. backup channels
Adds gcloud-gke-backup-restore-channel integration to detect Google Backup For GKE restore channels
Adds gcloud-managed-kafka-clusters-acl integration to detect Google Managed Kafka Clusters ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.
Adds gcloud-gcp-managed-kafka-connect-cluster integration to detect Google Managed Kafka Connect Clusters
Adds gcloud-vertex-ai-aiplatform-reasoning-engine integration to detect Google Vertex AI AIPlatform reasoning engines
Updates the 'AWS API gateway request authorisation is not set' policy logic to exclude OPTIONS HTTP methods from authorization checks
Cortex Cloud Runtime Security adds CRI, K-ISMS, NZISM, NIST SP 800-172 standards and AI/KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. rule mappings for existing benchmarks.
Adds Cyber Risk Institute (CRI) Profile v2.1 to the Standards Catalog
Adds Korea – Information Security Management System (ISMS) For Finance to the Standards Catalog
Adds 'New Zealand Information Security Manual (NZISM) v3.9' to the Standards Catalog
Adds NIST SP 800-172 to the Standards Catalog
Updates EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001:2023, NIST AI 600-1, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Applications 2025, and OWASP Top 10 for Agentic Applications 2026 with AI-focused cloud security posture managementcloud security posture managementCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. rules
+1 moreshow less
Adds Kubernetes security posture management rules to CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Amazon EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. Benchmark v1.4, CIS Amazon EKS Benchmark v1.7, CIS Azure Kubernetes Service (AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations.) Benchmark v1.5, CIS Azure Kubernetes Service (AKS) Benchmark v1.8, CIS Docker Benchmark v1.7.0, CIS Google Kubernetes Engine (GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure.) Benchmark v1.6, CIS Google Kubernetes Engine (GKE) Benchmark v1.8, CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. Benchmark v1.11.0, CIS Red Hat OpenShift Container Platform v1.7.0, HIPAA, and PCI DSS v4.0.1
Prisma Access 6.2 adds SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support and scales trusted source IP capacity to one million
Adds SOCKS5 proxy support on port 1080 with Basic Authentication for connecting to non-web TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. applications
Prisma Access 6.2 introduces native IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. support for remote networks.
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. adds CRI Profile v2.1, K-ISMS Finance, NZISM v3.9, NIST 800-172 standards and AI/KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. rule mappings.
Adds Cyber Risk Institute (CRI) Profile v2.1 to the Standards Catalog
Adds Korea – Information Security Management System (ISMS) For Finance to the Standards Catalog
Adds New Zealand Information Security Manual (NZISM) v3.9 to the Standards Catalog
Adds NIST SP 800-172 to the Standards Catalog
Maps Kubernetes security posture management rules to existing cloud workload protection standards including CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.4 and others
+1 moreshow less
Maps AI-focused cloud security posture managementcloud security posture managementCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. rules to existing AI standards including EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe. and others
Prisma Access 6.2 adds native IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. support for service connections via dual-stack capabilities and dedicated BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. sessions.
Service connections now function as dual-stack entities processing both IPv4 and IPv6 traffic simultaneously
Enables secure implementation using IKE gateways configured specifically for IPv6 on customer premises edge devices
Adds support for dual BGP routing sessions to dynamically exchange routing information between service connections and CE devices
Prisma Access 6.2 adds CVE Insights dashboard, Sliver C2 detection in TLS 1.3, and bulk enablement for advanced services.
Adds CVE Insights dashboard in Strata Cloud Manager for native CVE mapping and KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. status visibility
Enables Encrypted Sliver C2 Detection over TLS 1.3 via Advanced Threat Prevention Inline Cloud Analysis without decryption
Provides Bulk Enable Advanced Services wizard to activate Inline Cloud Analysis for Anti-Spyware, Advanced URL Filtering, Advanced WildFire, and Vulnerability Protection across custom profiles
Upgrades default profiles to include advanced protection by default for new greenfield setups
Introduces Threat Insights Dashboard with Blocked Threats metric and Platform Effect visualization
+1 moreshow less
Reimagines Operator Dashboards for Advanced URL Filtering, Advanced WildFire, Advanced Threat Prevention, and Advanced DNS Security with real-time efficacy widgets
Prisma Access 6.2 adds Context-Driven IP Address Manager for dynamic, policy-based source IP assignment using user geo-location, gateway location, and identity role.
Introduces Context-Driven IP Address Manager to dynamically assign source IP addresses based on real-time dimensions: User Geo-Location, Prisma Access Location, and Identity & Role
Enables granular, policy-driven access controls that automate compliance by replacing static rules with dynamic IP assignment logic
SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. Private Location now supports remote branch network connectivity via Local Inspection Nodes.
Introduces Local Inspection Nodes to bring Prisma Access managed data plane processing (virtual or hardware) into customer infrastructure, enabling low-latency inspection without routing through external cloud infrastructure.
Cortex XSIAM June 2026 adds CRI, ISMS, NZISM, NIST SP 800-172 standards; updates AI and KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. rule coverage
Adds Cyber Risk Institute (CRI) Profile v2.1, Korea – Information Security Management System (ISMS) For Finance, 'New Zealand Information Security Manual (NZISM) v3.9', and NIST SP 800-172 to the Standards Catalog.
Updates EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001:2023, NIST AI 600-1, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Applications 2025, and OWASP Top 10 for Agentic Applications 2026 with new AI-focused cloud security posture managementcloud security posture managementCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. rules.
Maps Kubernetes security posture management (KSPM) rules to CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves., AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations., GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure., Docker, Kubernetes, OpenShift benchmarks, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., and PCI DSS v4.0.1 for the first time.
Vectra v9.12 adds GhostLock SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. detection, JA4DHCP fingerprints in Recall, expanded NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent./ C2 coverage and Empire/Merlin detections.
Adds GhostLock SMB detection for file-level locking behavior associated with the tool’s default authorization artifact.
Adds JA4DHCP fingerprint support in Recall metadata.
Expands Unified Beacon detection to interactive C2 over HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. by detecting sustained connection patterns to uncommon external domains.
Adds detection coverage for Empire, Merlin, Caldera Sandcat, and interactive beaconing activity.
Adds detection of Ncrack-based RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. activity and Responder NTLM behavior.
Sophos Switch 2.1.1986MR2 adds CLI controls for cloud agent, de-registration, and port reset, plus expanded ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. limits.
Adds cloud-agent start, cloud-agent stop, and cloud-agent restart commands to manage the cloud agent without full device reboot
Adds sophos-central deregister command to de-register a switch from Sophos Central for reprovisioning or decommissioning
Adds port-reset <port> command to reset individual ports via CLI for granular network access control
Adds lacp interface speed query command to diagnose LACP link aggregation by querying negotiated speeds
Increases MAC ACL limit from 16 to 128 entries, IPv4 ACL limit from 16 to 128 entries, and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. ACL limit from 16 to 64 entries
Malcolm v26.06.1 requires MAXMIND_GEOIP_DB_ACCOUNT_ID alongside the license key for MMDBMMDBA binary database file format designed for fast IP-address lookups, maintained by MaxMind, used by cyber tools to resolve IPs to geolocation or ASN data without external API calls. downloads and hardens the file-upload surface.
└──▷ GET THIS VERSION
$ git clone --branch v26.06.1 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.06.1
└──▷ USE IT
Supply the now-required MaxMind account ID alongside the license key so Malcolm can download GeoLite MMDB files during startup.
Adds MAXMIND_GEOIP_DB_ACCOUNT_ID as a required field alongside MAXMIND_GEOIP_DB_LICENSE_KEY in ./config/arkime-secret.env for downloading MaxMind MMDB files at build and runtime.
Adds tag_on_exception to all ruby Logstash filters to surface parsing exceptions during debugging.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!MAXMIND_GEOIP_DB_ACCOUNT_ID is now required in ./config/arkime-secret.env; existing setups that only set MAXMIND_GEOIP_DB_LICENSE_KEY will fail to download MMDB files at build and runtime until the account ID is added.
!PostgreSQL databases for NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. and Keycloak are not compatible between v26.06.0 and v26.06.1; upgrading without first backing up the NetBox database (and not using keycloak as the auth method) will leave those databases in a broken state.
!curl (via php-curl) has been removed from the htadmin container, causing its container health check to report unhealthy.
1 more release in this issue
· 2026-06-01 → 2026-06-16
Malcolm v26.06.0 hardens security across 15 vulnerabilities and requires mandatory secrets for Arkime and NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. on upgrade.
└──▷ GET THIS VERSION
$ git clone --branch v26.06.0 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.06.0
└──▷ TRY IT
Run the mandatory pre-upgrade settings migration so Malcolm can rewrite changed environment variables before you start services.
Adds KEYCLOAK_SSL_VERIFY (default false) to keycloak.env to control Keycloak OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. verification.
ARKIME_PASSWORD_SECRET in arkime-secret.env no longer ships with a default value and must be explicitly set during auth_setup.
SUPERUSER_PASSWORD in netbox-secret.env no longer ships with a default value and must be explicitly set during auth_setup.
Adds Content-Security-Policy framing headers (frame-ancestors, base-uri, form-action) and X-Frame-Options: SAMEORIGIN globally to harden against clickjacking.
Closes RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. fail-open for unlisted handlers: Malcolm API's defaultdict(lambda: True) no longer grants access to unregistered routes by default.
+3 moreshow less
Closes read-only deployment bypass: POST /mapi/event is now blocked in read-only mode.
Closes read-only Arkime bypass: deny-regex now includes addtags and removetags endpoints.
Closes WISE auth bypass: authentication path can no longer be selected by a client-supplied User-Agent.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!ARKIME_PASSWORD_SECRET in arkime-secret.env no longer has a default value; existing deployments must set it explicitly during auth_setup or Malcolm will fail to start.
!SUPERUSER_PASSWORD in netbox-secret.env no longer has a default value; existing deployments must set it explicitly during auth_setup or Malcolm will fail to start.
!Upgrading from an existing Malcolm installation requires running ./scripts/status before ./scripts/configure, ./scripts/start, or other control scripts to migrate settings via ./config/env-var-actions.yml.
PolarProxy 2.0.1 prioritizes accurate PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. output over throughput and reduces memory overhead.
Prioritizes accurate PCAP output by rate-limiting proxied traffic if the real-time PCAP-over-IP consumer falls behind, preserving every decrypted packet for forensic analysis
Reduces CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. and memory use by caching less data through a major overhaul of the data-flow logic to support more simultaneous sessions
Wireshark adds HTTP QUERY method support, SMB2SMB2A Microsoft network file-sharing protocol (version 2 of SMB) used for remote file, printer, and service access over a network; cyber tools target or implement it to inspect, relay, or exploit Windows file-sharing traffic. async comm, sharkd socket options, and more
Adds QUERY method and Accept-Query header field support in the HTTP dissector
Adds SMB2 support for asynchronous communications
Adds --install-optional argument handling to haiku-setup.sh script for Haiku OS setup
Enables Unix Domain Sockets on Windows via sharkd when available
4 details in Everything
└──▷ BREAKING ON UPGRADE
!sharkd now restricts TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. socket connections to loopback addresses only (IPv4 or IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.)
!sharkd on Linux abstract sockets now only allows peers with the same eUID to connect
2 more releases in this issue
· 2026-06-07 → 2026-06-21
$ git clone --branch 4.1.1 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:$ git checkout 4.1.1
Adds pluggable feature-provider and ANN-architecture registries to the Neural module, plus a sequence output mode with SIF word selection for fasttext_embed, multi-head attention pooling in kann, and slice/concat graph transforms in lua_kann.
Enables content-negotiation (representation and compression) in checkv3 via Accept/Accept-Encoding headers.
Expands CSS text-hiding detection to cover off-screen positioning, clip, negative text-indent, and tiny fonts.
Adds opt-in zip-bomb extraction limits (size, count, ratio) to lua_archive and byte-distribution statistics (entropy, byte mean/deviation, serial correlation, Monte-Carlo Pi) to lua_text.
Exposes a zlib/YARA-compatible crc32 on rspamd_text, rspamd_util, and cryptobox hash objects.
+1 moreshow less
Adds an explicit SOM (start-of-match) flag to the Multipattern engine.
6 details in Everything
1 more release in this issue
· 2026-06-05 → 2026-06-19
Rspamd 4.1.0 adds load-aware upstream selection, chain-aware URL redirect caching, /checkv3 metadata headers, hot-reloadable composites, and new Lua/selector APIs.
└──▷ GET THIS VERSION
$ git clone --branch 4.1.0 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:$ git checkout 4.1.0
└──▷ TRY IT
Inspect per-worker memory usage — RSS, Lua heap, mempool callsites, and jemalloc stats — to identify a leaking worker process.
$ rspamadm control memstat
Hold dmarc_report dispatch until a full batch is ready, reducing partial-report noise in high-volume environments.
$ rspamadm dmarc_report --batch-wait
Review autolearn statistics grouped by a chosen field and sorted by a metric to tune Bayes classifier performance.
$ rspamadm autolearnstats --sort-by ham --group domain
Adds Power of Two Choices load-aware upstream selection with per-upstream latency EWMA, slow-start on revive, per-target SRVSRVA DNS record type that advertises the hostname and port for a specific service, letting clients discover endpoints without hardcoded addresses. weight/error-budget expansion, and deferred DNS to survive transient startup failures.
Upgrades url_redirector with chain-aware intermediate-hop caching, coherent browser fingerprint profiles for stealth resolution, glob-based redirector_hosts_map, and a per-URL GET allowlist.
Adds IP-class classification, bad_mxs/bad_ips trust maps, and per-source checks to mx_check.
Exposes custom metadata via metadata headers and task:get_metadata() on the /checkv3 protocol endpoint.
Adds hot-reloadable dynamic composites map so composite rules update without a full restart.
+9 moreshow less
Extends Lua API with bulk and regexp symbol lookups on task; phase-specific (connect/read/write) timeouts and an on_error callback for lua_tcp; lua_extras structured loader for custom selectors, maps, and regexps with cross-kind dependency ordering; and lua_feedback_parsers for DSN and ARF reports.
Reports pending async events and stalled symbols when a scan times out, aiding diagnosis of slow scans.
Adds fuzzy_digest, fuzzy_shingles, authenticated, and received_count selectors.
Adds ClickHouse named extra_columns presets (including an outbound preset) and richer Elastic logs covering Reply-To, received IPs, URL metadata, and forcing module.
Adds per-service <RULE>_CHECK anchor symbol for dependency ordering and eXpurgate engine support in lua_scanners.
Adds HTML5 tag definitions (video/audio/picture/svg/…) and optional insertion-ordered HTTP header emission.
Adds rspamadm control memstat for per-worker memory dumps covering RSS, mempool callsites, Lua heap, and jemalloc stats; also adds dmarc_report --batch-wait and autolearnstats --sort-by/--group options.
Supports env-overridable baseline pidfile and logging, auto-load of the shipped fasttext model when present, and fixed-point (%.Nf) formatting with correct rounding in fpconv.
Discovers rspamd.com fuzzy servers via SRV by default in fuzzy_check.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!mx_check: MX_NONE replaces the former MX_NXDOMAIN and MX_MISSING symbols; any rules, composites, or actions referencing those old symbol names will stop matching.
!fuzzy_check: rspamd.com server discovery now uses SRV records by default; setups that rely on hard-coded addresses or override DNS resolution may behave differently.
New Google SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. integration for centralized threat detection and SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. automation
└──▷ HOW TO FIND IT
Install the connector from Google SecOps Marketplace to enable SOAR playbooks for Abnormal AI threats
📍In Google SecOps Marketplace, search for Abnormal AI and install the native connector.
Configure YARA-LYARA-LA rule language developed by Google for Chronicle that extends YARA syntax to express multi-event, time-windowed detections over log data rather than single-file pattern matching. rules to convert SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. events into SOAR cases automatically
📍Create a YARA-L detection rule that maps incoming SIEM events from Abnormal AI to SOAR cases, eliminating manual triage.
Adds native Abnormal AI connector to Google SecOps Marketplace for automated incident response via SOAR playbooks
Enables automatic ingestion of IES, AISM, ATO, Security Posture Management, and Audit Logs into Google SecOps SIEM
2 details in Everything
7 more releases in this issue
· 2026-06-10 → 2026-06-24
Abnormal AI adds 15 threat-led M365 posture policies and CSV export for SPM.
└──▷ HOW TO FIND IT
Export SPM evaluation results for compliance review or audit trails.
📍Navigate to the ESPM evaluations page and select Export › CSV
Adds 15 first-party email posture policies for Microsoft 365, researched against active 2025–2026 attack campaigns and mapped to MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior.
Enables high-risk detection of M365 misconfigurations including unauthenticated Direct Send, mailbox forwarding, transport-rule persistence, Teams federation abuse from trial tenants, and audit-log tampering
Adds export capability for the ESPM evaluations page to CSV for audits, compliance reviews, and reporting
New Attack Library page in Abnormal AI Phishing Coach to manage simulation templates
Adds a new Attack Library page that lists every AIPC-simulated template (click-phishing, credential-phishing, BEC, VEC) with tags, content previews, and metadata.
Adds per-template enable/disable toggles to the Attack Library, allowing immediate exclusion of specific templates from autopilot rotation without disabling entire attack types.
Abnormal AI Phishing Coach adds nine new compliance training modules covering PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly., GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., and more
Adds nine new Compliance framework modules for PCI, GDPR, SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2, PIPEDA, CCPA, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., FERPA, CMMC, and FFIEC to the AI Phishing Coach Video Library.
Adds a Compliance section in the Video Library for organizing these new regulatory training modules.
New Export CSV button in the Abnormal AI URL Rewriting dashboard to download rewrite logs.
└──▷ HOW TO FIND IT
Export last month's URL rewriting logs for compliance reporting using the dashboard UI.
📍In the Abnormal AI platform, navigate to the URL Rewriting click tracking dashboard and click Export CSV. Select a date range covering up to 180 days (e.g., the previous month) to download the Rewrite Logs CSV file.
Adds an Export CSV button to the URL Rewriting dashboard for exporting click tracking data as a Rewrite Logs CSV file.
Enables selection of a custom date range (up to 180 days) for the rewritten URL activity export.
Adds AI Phishing Coach risk reporting with exportable per-employee Bayesian risk scores and simulation history
Exports employee risk workbooks pairing identities with Bayesian risk scores, variance against company average and global benchmark, plus phishing/credential/BEC-VEC simulation activity and training data
Trivy is a comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM in containers, Kubernetes, code repositories, and clouds
Trivy 0.71.0 adds secret scan customization, CycloneDX 1.7CycloneDX 1.7An OWASP-maintained Software Bill of Materials standard and schema; version 1.7 adds attestations and evidence fields, giving cyber tools a richer, machine-readable format for expressing supply-chain trust claims., Ubuntu 26.04 detection and language file seal support
└──▷ GET THIS VERSION
$ git clone --branch 0.71.0 https://github.com/aquasecurity/trivy.git
# already have the repo? check out this version:$ git checkout 0.71.0
Adds WithDriver and WithProvider options to the ospkg detector for custom operating system package sources
Supports <mirrors> directives from Maven settings.xml during Java dependency scanning
Enables CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. 1.7 format output in SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation
Adds vendor support for language file detection within the seal subsystem
Allows customization of skipped folders, files, and extensions in secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. via new configuration options
+4 moreshow less
Adds Azure-specific secret detection rules to the secret scanner engine
Adds Maven-specific rules to detect passwords and passphrases in settings.xml and settings-security.xml
Adds SHA-512 hash algorithm support to the SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. serializer output format
Adds detection capability for Ubuntu 26.04 LTS operating system
Inspektor Gadget v0.53.0 adds trace_link gadget, Python 3.13 TLS profiling support, and cleaner ustack symbol output.
└──▷ GET THIS VERSION
$ git clone --branch v0.53.0 https://github.com/inspektor-gadget/inspektor-gadget.git
# already have the repo? check out this version:$ git checkout v0.53.0
└──▷ TRY IT
Trace BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. link creation/deletion events system-wide to audit eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. program attachment activity.
$ ig run trace_link
Start the ig daemon allowing insecure TLS connections, useful in lab environments without valid certificates.
$ ig daemon --tls-insecure
Adds new trace_link gadget for tracing BPF link operations.
Supports Python 3.13 TLS in the eBPF-based continuous profiler via updated otel-ebpf-profiler.
Improves user-space stack (ustack) symbol display: removes [N] index prefix and shows binary path with offset instead.
Adds --tls-insecure flag to ig daemon for insecure TLS connections.
Grype v0.114.0 adds Zarf package scanning and improved Go Vulnerability DB OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. support.
└──▷ GET THIS VERSION
$ git clone --branch v0.114.0 https://github.com/anchore/grype.git
# already have the repo? check out this version:$ git checkout v0.114.0
└──▷ TRY IT
Scan a Zarf package archive directly to find vulnerabilities before deployment.
$ grype path/to/package.zst
Adds ability to scan Zarf packages for vulnerabilities.
Adds a GoVulnDB OSV transformer for improved Go vulnerability data processing.
Respects withdrawn status of Go Vuln DB OSV records, reducing false-positive findings.
Minimus adds MariaDB CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark compliance, Helm chart version action triggers, and smarter Go dependency scanning.
Adds a new MariaDB-Hardened image that complies with the CIS MariaDB Benchmark for deploying compliant clusters
Introduces a new actions feature to trigger webhooks, GitHub actions, or notifications on Helm chart version updates
Enhances Go dependency scanning with improved CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. matching for golang modules to reduce false negatives
First stable release with CLI spoc, AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profile bindings, and unauthenticated metrics access via enableInsecureMetricsAccess.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.0 https://github.com/kubernetes-sigs/security-profiles-operator.git
# already have the repo? check out this version:$ git checkout v1.0.0
Ship spoc, the official Security Profiles Operator command-line interface for amd64, arm64, and ppc64le
Add AppArmorProfile to the list of ProfileBinding kinds
Add enableInsecureMetricsAccess SPOD config option to allow unauthenticated metrics scraping on the daemon container
3 details in Everything
└──▷ BREAKING ON UPGRADE
!All CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. APIs have graduated from alpha/beta to v1, requiring manifests to use the stable API groups
dockerscan v2.0.6 adds Docker credential helpers and verbose/debug flags
└──▷ GET THIS VERSION
$ git clone --branch v2.0.6 https://github.com/cr0hn/dockerscan.git
# already have the repo? check out this version:$ git checkout v2.0.6
--verbose / -v flag shows scan progress including scanner status, image pull details, and per-scanner findings count to stderr.
--debug flag enables verbose output plus internal errors from failed sub-checks in CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline., supply chain, and runtime scanners.
Docker credential helper support via credHelpers (per-registry) and credsStore (global) configs for helpers like docker-credential-osxkeychain, docker-credential-pass, and docker-credential-wincred.
Anchore Enterprise v4.4.0 adds SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format./CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence.SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. export endpoints, Ancestry Policy Gate, and Ubuntu 22.10 feed support.
Enterprise API now supports downloading SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. in SPDX and CycloneDX formats via new endpoints /images/{imageDigest}/sboms/spdx-json, /images/{imageDigest}/sboms/cyclonedx-json, /sources/{source_id}/sbom/spdx-json, and /sources/{source_id}/sbom/cyclonedx-json.
New Image Ancestry Policy Gate allows verification that a specified image contains an approved base image.
Vulnerability data is now available for the Ubuntu 22.10 (Kinetic Kudu) feed group.
Configuration option enable_package_db_load added to disable the package.verify policy trigger and reduce database load.
AnchoreCTL binary for linux x86 is now packaged into the docker.io/anchore/enterprise image.
+1 moreshow less
Tech Preview: Enterprise Reporting provides a global endpoint for queries including data from all accounts.
Docker CLI 29.6 adds in-toto attestations API and per-device blkio update
└──▷ TRY IT
Retrieve all SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format.SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. statements for an image on linux/amd64 platform
Adds GET /images/{name}/attestations endpoint to retrieve SLSASLSASupply-chain Levels for Software Artifacts, a framework for assessing how software was built and protecting that process from tampering. Provenance records help verify where a build came from.provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. and SPDX SBOM statements with platform, predicate type, and statement query filtering
New POST /containers/{id}/update API support for per-device blkio resource settings
Kata Containers 3.32.0 adds Kata-monitor standalone image, Job-based deployment, TDXTDXIntel Trust Domain Extensions, a CPU feature that creates hardware-isolated virtual machines whose memory is encrypted and inaccessible even to the hypervisor, letting tools run workloads in a confidential computing environment. ACPI/guest memfd support, and erofs/iothread/nycus capabilities.
└──▷ GET THIS VERSION
$ git clone --branch 3.32.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.32.0
kata-monitor is shipped as a standalone multi-arch image starting with 3.32.0
Add a Job-based deployment mode to kata-deploy (alternative to the privileged DaemonSet)
Add basic ACPI implementation for TDX boot in dragonball
Add implementation for KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed.-managed guest memfd in dragonball
Support erofs snapshotter with gpt vmdk mode in runtime-rs
+4 moreshow less
Support Independent iothreads in runtime-rs
Nydus standalone mode support in runtime-rs
Add support for monitoring disk usage via statfs to Metrics
Use /etc/containerd/conf.d/ drop-in for containerd >= 2.2.0
9 details in Everything
└──▷ BREAKING ON UPGRADE
!file_mem_backend config option removed in runtime-rs
cilium-cli v0.19.5 expands sysdump coverage with Gateway API and ClusterMesh resources
└──▷ GET THIS VERSION
$ git clone --branch v0.19.5 https://github.com/cilium/cilium-cli.git
# already have the repo? check out this version:$ git checkout v0.19.5
Adds CiliumGatewayClassConfigCRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. collection to sysdump for Gateway API troubleshooting
Adds Gateway API BackendTLSPolicy resource collection to sysdump
Captures additional operator and clustermesh-apiserver troubleshooting information in sysdump
Adds ClusterMesh endpoint slices watch and kvstoremesh wiring support
Prowler 5.31.0 adds Linode provider, post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. crypto checks, DORA coverage for Azure/GCP/Cloudflare/Alibaba, and 40+ new checks across AWS, Azure, GCP, K8s, and M365.
└──▷ GET THIS VERSION
$ git clone --branch 5.31.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.31.0
└──▷ TRY IT
Assess your AWS environment against the DORA regulation framework to report on all five resilience pillars.
$ prowler aws --compliance DORA_2022_2554
Scan a Linode account to enumerate administration, compute, and networking findings.
$ prowler linode
New provider: Scans Linode (Akamai Cloud) covering administration, compute, and networking services.
Adds DORA (2022/2554) compliance framework mapping to Azure, GCP, Cloudflare, and Alibaba Cloud providers (use framework name DORA_2022_2554).
New AWS post-quantum cryptographypost-quantum cryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. readiness checks: cloudfront_distributions_pqc_tls_enabled, apigateway_domain_name_pqc_tls_enabled, transfer_server_pqc_ssh_kex_enabled, acmpca_certificate_authority_pqc_key_algorithm (new acmpca service), and rolesanywhere_trust_anchor_pqc_pki (new rolesanywhere service).
New AWS organization-wide governance checks: securityhub_delegated_admin_enabled_all_regions and config_delegated_admin_and_org_aggregator_all_regions.
New AWS ML check: sagemaker_clarify_exists verifies at least one SageMaker Clarify processing job exists per region for bias-detection and explainability controls.
+9 moreshow less
New Azure checks spanning Cosmos DB (automatic failover, continuous backup, TLS 1.2, public access), MySQL/PostgreSQL Flexible Servers (geo-redundant backup, high availability), AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. (auto-upgrade, Container Insights, local accounts disabled, Defender), Databricks (public network access, secure cluster connectivity), Defender CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps., Networking (NSG on subnets, DDoSDDoSDistributed Denial of Service: an attack that floods a target system with traffic from many sources simultaneously, exhausting its resources so legitimate requests cannot be served. protection on VNets), Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. (credential expiry, sign-in, strong auth), and Recovery Services vaults.
New GCP checks: cloudsql_instance_high_availability_enabled, cloudfunction_function_inside_vpc, cloudfunction_function_not_publicly_accessible, secretmanager_secret_not_publicly_accessible, and secretmanager_secret_rotation_enabled.
New Kubernetes checks for container resource governance: CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. limits, CPU requests, memory limits, memory requests, fixed image tags, liveness probes, and readiness probes.
New Microsoft 365 checks: entra_directory_sync_object_takeover_blocked and entra_conditional_access_policy_no_deleted_object_references.
New OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. check: identity_storage_service_level_admins_scoped (CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 3.1 control 1.15) ensures storage admins exclude delete permissions.
Prowler SDK now supports Python 3.13.
Flexible per-provider scan scheduling in Prowler Cloud with daily, 48-hour, weekly, and monthly cadence options via the Providers page and a new Scheduled tab in Scan Jobs.
Guided onboarding experience in Prowler Cloud with contextual empty states and first-provider prompts.
SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties.userType attribute is now optional; missing or blank values preserve existing user roles rather than applying a fallback role.
14 details in Everything
3 more releases in this issue
· 2026-06-01 → 2026-06-23
Prowler 5.30.0 adds complete Okta DISA STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. V1R2 coverage, the DORA universal compliance framework, and 10+ new checks across AWS, M365, GCP, and StackIT.
└──▷ GET THIS VERSION
$ git clone --branch 5.30.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.30.0
Adds complete DISA Okta IDaaS STIG V1R2 framework coverage with 18 new checks spanning user inactivity, password policy, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. hardening, smart card, network zones, API tokens, and system log streaming.
Introduces DORA (Digital Operational Resilience Act) as Prowler's first universal compliance framework, mapping AWS checks across the five DORA pillars with OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. Compliance Finding export support.
New AWS check sagemaker_models_monitor_enabled verifies each SageMaker monitoring schedule is in the Scheduled state to catch data and model drift.
New AWS check elbv2_alb_drop_invalid_header_fields_enabled verifies Application Load Balancers drop invalid HTTP header fields to mitigate HTTP desyncHTTP desyncAn attack technique that exploits disagreements between a front-end proxy and a back-end server about where one HTTP request ends and the next begins, letting an attacker poison the request queue and hijack other users' traffic. attacks (FSBP ELB.4).
New AWS check bedrock_agent_role_least_privilege verifies Bedrock Agents run with least-privilege IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. roles.
+7 moreshow less
New M365 check entra_service_principal_privileged_role_no_owners flags privileged service principals that have no assigned owners.
New M365 check exchange_mailbox_primary_smtp_custom_domain verifies mailbox primary SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. addresses use a custom domain.
GCP kms_key_rotation_enabled is split into two focused checks: one for rotation being enabled and one enforcing a maximum 90-day rotation period.
New StackIT objectstorage service with three checks: Object Lock (WORM protection), retention policy enforcement, and access key expiration.
Adds support for external/custom providers, checks, and compliance frameworks without modifying Prowler core code.
Postgres connections are now labeled with application_name="<component>:<alias>" (set via DJANGO_APP_COMPONENT) for per-component attribution in pg_stat_activity.
UI adds dedicated compliance detail pages and icons for DISA Okta IDaaS STIG V1R2 and DORA frameworks.
Adds StackIT (German sovereign cloud) as a new provider, authenticating via service account key file (--stackit-service-account-key-path) or inline JSON (--stackit-service-account-key) for CI/CD pipelines.
Adds 20 new Google Workspace checks (8 Rules service, 12 Security service) via the Cloud Identity Policy API, completing automated coverage of the CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Google Workspace Benchmark 1.3.
Adds new application service for the Okta provider with 6 checks covering admin console and dashboard hardening (MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., phishing-resistant auth, session idle timeout, network zone enforcement).
Adds storage_account_public_network_access_disabled check for Azure that flags storage accounts allowing public network access.
Adds AWS AI Security Framework compliance mapping, linking Prowler checks to AWS AI/ML security guidance.
+4 moreshow less
Speeds up GET /api/v1/finding-groups/latest aggregation on tenants where one recent scan holds most findings.
Redesigns the Scan Jobs UI view with dedicated In Progress, Completed, and Scheduled tabs and a new scan-launch modal for picking accounts and adding scan notes.
Reworks dark mode with a pure-black canvas, pure-white primary text, and brighter border/input tokens for improved legibility.
Supports Azure authentication against sovereign clouds (AzureChinaCloud, AzureUSGovernment).
June 26, 20262 releases · 2026-06-09 → 2026-06-26Stable
Sysdig Secure adds Azure Monitor Logs Ingestion API for Sentinel forwarding and refreshes Threats experience.
└──▷ HOW TO FIND IT
Switch Sysdig Secure Sentinel forwarding from the legacy HTTP Data Collector API to the supported Azure Monitor Logs Ingestion API.
📍In the console, go to Settings › Integrations › Microsoft Sentinel and select Azure Monitor Logs Ingestion API as the authentication method.
Review historical context for a detected threat by switching between its occurrences.
📍In the Threats experience, open a specific threat and use the occurrence tabs to switch between Last and previous occurrences.
Supports the Azure Monitor Logs Ingestion API as a new authentication method for Microsoft Sentinel SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. integration
Adds occurrence tabs to review previous or last threat occurrences from the same threat
2 details in Everything
1 more release in this issue
· 2026-06-09 → 2026-06-26
Sysdig Secure adds EOL visibility in Vulnerability Management with Lifecycle column and Component Lifecycle rule type.
Adds a new Lifecycle column and filter in the Components tab of Sysdig Vulnerability Management to identify unsupported components alongside vulnerability data
Adds lifecycle metadata to CLI scanner JSON output and scan results API for pipeline integration
Adds a new Component Lifecycle rule type to Rule Bundles that can fail policy evaluations when a component is EOL or within 90 days of it
cloud-nuke v0.52.0 adds parallel scanning and nuking with a new --parallelism flag for faster multi-region teardowns.
└──▷ GET THIS VERSION
$ git clone --branch v0.52.0 https://github.com/gruntwork-io/cloud-nuke.git
# already have the repo? check out this version:$ git checkout v0.52.0
└──▷ TRY IT
Speed up a full account teardown across many regions by raising the concurrency limit beyond the default of 10.
$ cloud-nuke aws --parallelism 25
New --parallelism flag (default 10) controls concurrent resource discovery and deletion across regions and resource types under a single global concurrency cap.
Regional resources are nuked concurrently while global resources (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., Route53, CloudFront) are deleted last, with within-region dependency order preserved.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!aws.NukeAllResources and gcp.NukeAllResources now require an additional parallelism int parameter, breaking any library consumers that call these functions directly.
1 more release in this issue
· 2026-06-10 → 2026-06-13
cloud-nuke v0.51.0 adds AWS Backup Plan support and dry-run mode for defaults-aws
└──▷ GET THIS VERSION
$ git clone --branch v0.51.0 https://github.com/gruntwork-io/cloud-nuke.git
# already have the repo? check out this version:$ git checkout v0.51.0
└──▷ TRY IT
Preview what default VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. and security group rules would be removed in a region before actually deleting them.
$ cloud-nuke defaults-aws --dry-run
New backup-plan resource type enables nuking of AWS Backup plans.
Adds --dry-run flag to the defaults-aws command to preview which default VPCs and security group rules would be deleted before committing.
Cloudsplaining 0.9.1 sorts principals alphabetically by name in reports and quiets library logging noise.
└──▷ GET THIS VERSION
$ git clone --branch 0.9.1 https://github.com/salesforce/cloudsplaining.git
# already have the repo? check out this version:$ git checkout 0.9.1
Sorts IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. principals alphabetically by name (instead of ID) in generated reports, making large reports easier to navigate.
Routes exclusion-match messages through logging instead of stdout, keeping library integrations quiet without changing CLI behavior.
Cloudsplaining 0.9.0 adds 37 new privilege-escalation detections linked to pathfinding.cloud for deeper IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. attack-path analysis.
└──▷ GET THIS VERSION
$ git clone --branch 0.9.0 https://github.com/salesforce/cloudsplaining.git
# already have the repo? check out this version:$ git checkout 0.9.0
Adds 37 new IAM privilege-escalation path detections linked to pathfinding.cloud for enriched attack-path context in reports.
Integrates pathfinding.cloud onboarding skill pipeline and safety tooling for guided privilege-escalation analysis.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Python 3.9 is no longer supported; environments running Python 3.9 will fail to install or run Cloudsplaining 0.9.0.
Adds CubeEgress, an OpenResty-based egress security proxy that enforces L7 policy via TPROXY, supporting credential injection, domain filtering, and structured access auditing for sandbox outbound traffic.
Adds per-sandbox credential injection at the proxy layer via EgressRule.inject, so user code inside the sandbox never handles raw credentials; credential material is redacted as ***REDACTED*** in safe-log output.
Adds policy-driven domain allow/deny filtering for sandbox egress, evaluated first-match-wins against L7 requests, with DNS queries permitted even when domain-based allow-out rules are set.
Adds structured JSON egress access logs with optional body redaction via a redactor Lua module for downstream compliance review.
Adds container log forwarding: init-process stdout/stderr is streamed from the agent to the shim via a dedicated vsock connection and appended to host-side log files.
+14 moreshow less
Adds cubecli cubebox logs subcommand to read container stdout/stderr from outside the sandbox, with --tail N, --head N, --all, and --stderr flags.
Adds a node component version matrix that gives operators cluster-wide visibility of component versions (guest-image, cube-agent, kernel, control-plane) with version-skew surfacing via CubeAPI and a new Web UI Versions page.
Adds standardized build-time version metadata injection (version, commit, build time) to all Go and Rust binaries via ldflags/build.rs, plus a machine-readable release-manifest.json in release bundles.
Adds template replica compatibility checking: component versions bound to a template are compared against what each node reports, with results exposed via /templates/compat and /templates/compat/{id} endpoints and per-replica compatibility badges in the Web UI.
Adds a daemonless template image build pipeline using skopeo/umoci, reducing peak disk usage by 72% (from ~4.2× to ~1.2× image size), with fallback to Docker for backward compatibility.
Adds CUBEMASTER_DISK_SPACE_SAFETY_MARGIN configurable safety margin for a fail-fast disk-space pre-check before template image builds.
Adds CUBEMASTER_LOOP_MOUNT_EXT4_ENABLED flag (default false) to enable a loop-mount streaming ext4 build phase with CAP_SYS_ADMINCAP_SYS_ADMINA Linux capability that grants a process a broad set of privileged operations — mounting filesystems, managing namespaces, and more — without full root, letting cyber tools perform system-level tasks under tighter privilege boundaries. detection.
Adds a three-tier GetTapFile strategy (fast/hot/recovery paths) delivering 35% faster network P50 (35.3→23.1 ms) and 41% faster P99 (86.6→51.2 ms), plus 8% higher throughput.
Adds a --pprof-listen flag to the network agent for on-demand pprof profiling.
Adds CubeEgress /admin/v1/health endpoint extension and integrates CubeEgress version reporting into the node component version matrix.
Adds CubeAPI POST /templates and Python/Go SDK support for DNS, egress CIDRs, registry auth, command/args, network type, and node scope options, matching the full cubemastercli template create-from-image option set.
Adds SYN-only packet rejection in the CubeVS port-mapping BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. fast path to prevent guest-initiated connections from bypassing egress policy.
Enables TX checksum/TSO offload and tx-tcp-mangleid-segmentation on TAP devices so redirected packets skip GSO before reaching the guest.
Supports CubeEgress deployment on kernel v5.4+, expanding deployment coverage.
19 details in Everything
└──▷ BREAKING ON UPGRADE
!The CubeNetworkConfig protobuf message is renamed from CubeVSContext; any integration referencing the old message name will break.
2 more releases in this issue
· 2026-06-02 → 2026-06-15
CubeSandbox v0.3.1 adds custom network CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. config, glibc/PVM preflight checks, and snapshot/rollback API routes in AgentHub.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.1 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.3.1
└──▷ TRY IT
Avoid CIDR conflicts with your existing host network when deploying CubeSandbox in environments with non-default subnets.
Supports CUBE_SANDBOX_NETWORK_CIDR at install time to specify a custom sandbox network CIDR, with format validation, host interface/route overlap detection, and an optional conflict-check bypass flag.
Adds glibc >= 2.34 preflight check during installation to fail fast on unsupported distributions before cubelet/cubecli binaries crash at runtime.
Adds PVM consistency pre-check: when kvm_pvm is loaded, the installer verifies CUBE_PVM_ENABLE=1 is set, preventing silent installation of the wrong guest kernel.
Adds snapshot creation and rollback API endpoints to AgentHub, enabling the digital assistant console to manage sandbox checkpoints.
New preview button and sandbox open logic in the AgentHub WebUI, with template store defaults corrected.
CubeSandbox v0.3.0 ships CubeCoW snapshot engine, AgentHub console, Web UI, and a new Go SDK for sandbox management.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.0 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.3.0
└──▷ HOW TO FIND IT
Use the AgentHub snapshot timeline to create a visual checkpoint and roll back an AI agent sandbox to a known-good state.
📍In the AgentHub console, open the target assistant → Snapshot Timeline → Create Checkpoint, then select a prior checkpoint and click Rollback.
Adds CubeCoW Copy-on-Write snapshot engine with reflink-based volume snapshots for lightweight, space-efficient checkpoints of AI Agent sandboxes.
Adds soft-dirty incremental memory snapshots that capture only dirty pages after the first full snapshot, dramatically reducing snapshot time and storage.
Adds AgentHub digital assistant console (Preview) with snapshot timelines, visual checkpoint creation and rollback, parallel clone environments, template actions, and WeCom notification configuration.
Adds browser-accessible Web UI management dashboard for sandboxes, templates, and cluster nodes — including a template store for deploying pre-built images.
Adds initial Go SDK providing typed API bindings for sandbox lifecycle management (create, manage, destroy).
+9 moreshow less
Adds Python SDK template creation API for programmatic sandbox template creation without shell commands.
Adds systemd-based one-click deployment with service supervision and automatic restart on failure.
Adds check.sh and collect-logs.sh health check and diagnostic scripts for one-click deployment environments.
Adds cgroup v2 CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. controller preflight check in the installer with actionable guidance when support is missing.
Adds Prometheus scheduler metrics exposed as gauges on /v1/metrics via Cubelet for real-time monitoring.
Adds node resource reporting (CPU, memory, disk) from Cubelet to CubeMaster for cluster-wide resource awareness.
Adds path-based sandbox routing and shared backend resolution in CubeProxy.
Adds centralized database schema migration via goose in CubeMaster for versioned, automated schema management.
Adds early network connectivity and disk space validation in the online installer before downloading begins.
OpenSandbox v1.0.15 adds custom SandboxPool creators and isolated-session SDK APIs.
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.15 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.15
SandboxPool accepts a custom creator function to control sandbox instance construction while retaining pool-level lifecycle management.
Kotlin Sandbox SDK exposes models, services, and adapters for creating and deleting isolated execution sessions with isolated filesystem operations.
2 details in Everything
22 more releases in this issue
· 2026-06-05 → 2026-06-25
OpenSandbox v0.1.13 adds custom sandbox creators to SandboxPool and isolated session/client APIs.
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.13
Adds custom_sandbox_creator configuration to SandboxPool for client-side pool management
Exposes generated isolated-session and isolated-filesystem clients in the Python SDK
Adds SandboxManager.waitForSnapshotReady() method and SnapshotState constants for snapshot readiness polling
└──▷ GET THIS VERSION
$ git clone --branch java/code-interpreter/v1.0.14 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/code-interpreter/v1.0.14
SandboxManager.waitForSnapshotReady(snapshotId, timeout, pollingInterval) now allows blocking calls until a snapshot reaches the Ready state, replacing manual polling logic.
New SnapshotState constants (Creating, Ready, Failed, Deleting, Unknown) are available for state comparison without using magic strings.
New SandboxManager.waitForSnapshotReady method and SnapshotState constants
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.14 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.14
└──▷ USE IT
Block execution until a snapshot is ready before proceeding with sandbox operations.
Ingress now auto-discovers OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. endpoint via HOST_IP env var or /etc/hostinfo when no exporter endpoint is configured
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.8
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT and OTEL_EXPORTER_OTLP_ENDPOINT are now optional; ingress defaults to <node-ip>:4318 using HOST_IP (fallback /etc/hostinfo)
WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. proxy now forwards all headers except hop-by-hop and handshake-specific headers (replacing hardcoded whitelist)
OpenSandbox egress v1.1.2 adds full policy logging and automatic env var routing to the egress sidecar
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.1.2 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.1.2
OPENSANDBOX_EGRESS_* prefixed environment variables in CreateSandboxRequest.env are now automatically routed to the egress sidecar instead of the main sandbox container, with reserved vars (OPENSANBOX_EGRESS_RULES, OPENSANBOX_EGRESS_MODE, OPENSANBOX_EGRESS_TOKEN) blocked.
OpenSandbox v1.0.13 adds paginated file reads and directory listing API
└──▷ GET THIS VERSION
$ git clone --branch java/code-interpreter/v1.0.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/code-interpreter/v1.0.13
└──▷ TRY IT
Read the last 100 lines of a large log file without downloading the entire content.
$ curl -X GET "https://<sandbox-host>/files/download?path=/var/log/app.log&offset=900&limit=100"
List the top-level directory structure of a workspace, including symlink types.
$ curl -X GET "https://<sandbox-host>/execd/directory?path=/workspace&depth=1"
Adds offset and limit query parameters to GET /files/download for line-based pagination of large text files
Adds a new execd directory API endpoint supporting depth control, entry type reporting (file, directory, symlink, other), and symlink traversal controls
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Code Interpreter runtime paths have moved from /opt/opensandbox to /opt/code-interpreter. If you hardcoded /opt/opensandbox/code-interpreter.sh, /opt/opensandbox/code-interpreter-env.sh, or /opt/opensandbox/jupyter.log, update them to /opt/code-interpreter/code-interpreter.sh, /opt/code-interpreter/code-interpreter-env.sh, and /opt/code-interpreter/jupyter.log.
OpenSandbox Go SDK v1.0.3 adds credential vault support, directory listing, line-based file reads, and configurable resource requests for sandboxes.
└──▷ GET THIS VERSION
$ git clone --branch sdks/sandbox/go/v1.0.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout sdks/sandbox/go/v1.0.3
Adds resourceRequests field to sandbox creation API to set Kubernetes resource requests independently from limits
Adds line-based file reads via GET /files/download?offset=<int>&limit=<int> query parameters
Adds ListDirectory(ctx, path) and ListDirectoryWithDepth(ctx, path, depth) methods to the Go SDK for directory listing
Adds CredentialVault model and adapter support to the Go SDK surface
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The CodeInterpreterEntrypoint constant now points to /opt/code-interpreter/code-interpreter.sh; if you hardcoded the old path /opt/opensandbox, you must update your configuration or code when upgrading.
OpenSandbox v0.1.3 adds resourceRequests for Kubernetes sandboxes, line-based file reads via API, directory listing API, replace feedback, and Credential Vault support
└──▷ GET THIS VERSION
$ git clone --branch csharp/sandbox/v0.1.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout csharp/sandbox/v0.1.3
└──▷ USE IT
Set resource requests independently from limits when creating a Kubernetes-backed sandbox.
code
// Existing SDK usage with new `resourceRequests` field
var sandbox = await client.CreateSandboxAsync(new CreateRequest {
Resources = new Resources {
Limits = new ResourceQuota { Cpu = "1", Memory = "512Mi" },
Requests = new ResourceQuota { Cpu = "0.5", Memory = "256Mi" } // New `resourceRequests` field
}
});
Read a specific range of lines from a large text file using the new offset/limit API.
api
curl -X GET 'https://sandbox.example.com/files/download?offset=100&limit=10'
Adds resourceRequests to sandbox creation so Kubernetes-backed sandboxes can set resource requests separately from limits.
Adds line-based file reads through GET /files/download with offset and limit query parameters, enabling C# callers to read large text files by line range.
Adds directory listing support through the new execd directory API, with depth-controlled traversal and symlink reporting.
Adds detailed replace-content feedback via new methods that return per-file replacedCount results.
Adds Credential Vault support to the C# SDK surface.
OpenSandbox v1.0.13 adds resourceRequests for sandboxes, offset/limit file download, directory listing API, replace-content feedback, and Credential Vault integration.
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.13
Adds resourceRequests field to sandbox creation payloads so Kubernetes-backed sandboxes can set resource requests separately from limits (omitting the field preserves existing behavior where requests match limits).
Adds offset and limit query parameters to GET /files/download for line-based file reads via the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services..
Adds directory listing support through the new execd directory API with depth-controlled traversal and symlink handling.
Adds detailed replace-content feedback with per-file replacedCount results while keeping existing replace methods backward-compatible.
Adds Credential Vault support to the Kotlin/JVMJVMThe Java Virtual Machine, a runtime maintained by Oracle (and implemented by others) that executes Java bytecode on any OS, giving cyber tools a portable, garbage-collected environment with a large ecosystem of libraries. SDK surface, including model, adapter, sandbox creation, and E2E coverage.
OpenSandbox v0.1.11 adds resource request configuration, paginated file downloads, directory listing API, replace feedback, and Credential Vault support
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.11 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.11
Adds resourceRequests field to sandbox creation payload so Kubernetes-backed sandboxes can set resource requests separately from limits
Adds line-based file reads through GET /files/download with offset and limit query parameters for large text files
Adds directory listing support through the execd directory API, exposing depth-controlled traversal in the Python SDK
Adds detailed replace-content feedback via a new verbose parameter to detect no-match and multi-match replacements
Adds Credential Vault support to the Python SDK path aligned with multi-language coverage for credential injection flows
OpenSandbox v0.1.9 adds resource requests, offset file downloads, directory listing and credential vault support
└──▷ GET THIS VERSION
$ git clone --branch js/sandbox/v0.1.9 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/sandbox/v0.1.9
Adds resourceRequests field to sandbox creation for Kubernetes-backed sandboxes
Adds line-based file reads via GET /files/download with offset and limit query parameters
Adds depth-controlled directory traversal through the new execd directory API
Adds optional per-file replacedCount feedback in detailed replace methods
Adds Credential Vault support to the JavaScript SDK for credential injection
OpenSandbox v1.1.1 adds OPENSANDBOX_EGRESS_CREDENTIAL_VAULT_REQUIRE_TLS env var to enforce TLS for vault writes
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.1.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.1.1
OpenSandbox v0.2.0 adds a Credential Vault system with CLI commands and SDK surfaces for injecting secrets into sandboxes.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.2.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.2.0
Introduces the Credential Vault, a new credential injection system that allows sandboxes to consume secrets (API keys, OAuth tokens, HTTP headers, query parameters) without exposing raw values to user code.
Adds osb credential-vault CLI commands for managing the Credential Vault from the command line.
Exposes SDK surfaces for Python, Go, JS, Kotlin, and Java to interact with the Credential Vault.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The execd install path is flattened from /opt/opensandbox/bin/ to /opt/opensandbox/; binary paths like /opt/opensandbox/bin/execd become /opt/opensandbox/execd.
!Custom Pool CR templates need updated mountPaths and env vars to reflect the flattened /opt/opensandbox directory structure.
OpenSandbox execd v1.0.19 adds PTY takeover, one-shot commands, directory/file listing, and OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. auto-discovery.
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.19 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.19
Adds ?takeover=1 query parameter to GET /pty/:sessionId/ws for live PTY session handoff
Adds optional command field to POST /pty for one-shot terminal I/O
Adds GET /directories/list endpoint with depth-controlled traversal and type field to FileInfo responses
Adds offset and limit query parameters to GET /files/download for line-based file reading
Adds replacedCount field to POST /files/replace response for match detection
+1 moreshow less
Adds OTLP endpoint auto-discovery via HOST_IP env var or /etc/hostinfo when OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. exporters are unset
OpenSandbox egress v1.1.0 adds credential vault injection and moves Mitmproxy config to config.yaml
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.1.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.1.0
Egress participates in the credential vault injection pipeline, enabling sandboxes to receive injected credentials (API keys, tokens, OAuth) for outbound requests
Mitmproxy static options (mode, listen_host, stream_large_bodies, ssl_verify_upstream_trusted_confdir, ignore_hosts) are now declared in a baked-in config.yaml under the standard mitm confdir layout
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The environment variable OPENSANDBOX_EGRESS_MITMPROXY_CONFDIR is removed and will break config.yaml discovery if set
!The environment variable OPENSANDBOX_EGRESS_MITMPROXY_IGNORE_HOSTS is removed; multi-host lists were silently truncated to the last value, now replaced by the yaml-native list in config.yaml
v1.1.0 adds Sigstore/cosign image signing and a seccomp-based clone3 fallback in execd
└──▷ GET THIS VERSION
$ git clone --branch docker/code-interpreter/v1.1.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/code-interpreter/v1.1.0
Adds sigstore/cosign keyless signing to Docker images with GitHub attestations for authenticity verification
Adds a seccomp-based clone3 fallback to execd that switches to clone when the profile blocks clone3
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The entrypoint path is renamed from /opt/opensandbox/code-interpreter.sh to /opt/code-interpreter/code-interpreter.sh
OpenSandbox v0.1.10 adds skip_accumulation for constant-memory streaming, secure_access for ingress headers, and PVC auto-provisioning SDK support
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.10 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.10
Adds acquire_min_remaining_ttl parameter to pool.acquire() to skip idle sandboxes nearing expiry
Adds skip_accumulation option to execution handlers to stream stdout/stderr with constant memory
Adds PVC auto-provisioning fields to the SDK model
Adds secure_access support for sandbox creation and endpoint access headers in Kubernetes ingress gateway mode
OpenSandbox Go SDK v1.0.2 adds skipAccumulation, platform selection, and SecureAccess support
└──▷ GET THIS VERSION
$ git clone --branch sdks/sandbox/go/v1.0.2 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout sdks/sandbox/go/v1.0.2
Adds skipAccumulation to execution handlers to prevent unbounded memory growth by delivering stdout/stderr events without appending them to accumulated logs
Adds CreateSandboxRequest.Platform, SandboxInfo.Platform, and SandboxCreateOptions.Platform fields for specifying OS/architecture targets like Windows
Adds SDK model support for PVC auto-provisioning fields
Adds SecureAccess support for sandbox creation, currently supported by Kubernetes ingress gateway mode
$ git clone --branch csharp/sandbox/v0.1.2 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout csharp/sandbox/v0.1.2
Adds skipAccumulation to execution handlers config to prevent unbounded memory growth for streamed commands
Adds SDK model support for PVC auto-provisioning fields
Adds opt-in SecureAccess support for sandbox creation and endpoint access headers in Kubernetes ingress gateway mode
OpenSandbox v0.1.8 adds skipAccumulation for logs, PVC auto-provisioning fields, and secureAccess headers
└──▷ GET THIS VERSION
$ git clone --branch js/sandbox/v0.1.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/sandbox/v0.1.8
Adds the skipAccumulation execution handler option to prevent unbounded memory growth during long-running streamed commands
Adds SDK model support for Persistent Volume Claim (PVC) auto-provisioning fields
Adds secureAccess option for sandbox creation and endpoint access headers in Kubernetes ingress gateway mode
OpenSandbox v1.0.12 adds skipAccumulation, PVC auto-provisioning support, and secureAccess with log redaction
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.12 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.12
Duration.ZERO disables the sandbox expiry threshold to control idle pool behavior
SDK model support for PVC auto-provisioning fields enables automatic volume claims in sandbox builders
secureAccess flag enables endpoint header propagation and log redaction for sandbox builders and pool creation specs
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Command timeout APIs now use java.time.Duration as the primary public type; kotlin.time.Duration overloads are deprecated
OpenSandbox egress v1.0.13 adds a DELETE /policy API endpoint and supervisor-based restart reliability.
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.13
Adds the DELETE /policy HTTP endpoint to remove egress rules by accepting a JSON array of target strings
Introduces a dedicated supervisor process (opensandbox-supervisor) that manages egress lifecycle, implements exponential backoff with jitter and a crashloop circuit breaker, and forwards SIGTERM with a configurable 20-second grace period before SIGKILL
Adds an idempotent cleanup.sh script that runs as pre-start and post-exit hooks to reset iptables DNS REDIRECT rules, transparent-HTTP rules, the nftables opensandbox table, and stray mitmdump processes
Enables OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. endpoint auto-discovery when OTEL_EXPORTER_OTLP_METRICS_ENDPOINT or OTEL_EXPORTER_OTLP_ENDPOINT is unset: resolves node IP from the HOST_IP environment variable (falling back to /etc/hostinfo) and points the exporter to <node-ip>:4318 over plaintext
Falco 0.44.1 adds support for disabling BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. iterators for environments where they cause issues.
└──▷ GET THIS VERSION
$ git clone --branch 0.44.1 https://github.com/falcosecurity/falco.git
# already have the repo? check out this version:$ git checkout 0.44.1
aya-obj v0.3.0 adds iterator and Flow Dissector program types, uprobe cookies, XskMap::unset, Array::set, and more eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. surface area
└──▷ GET THIS VERSION
$ git clone --branch aya-obj-v0.3.0 https://github.com/aya-rs/aya.git
# already have the repo? check out this version:$ git checkout aya-obj-v0.3.0
Adds bpf_strncmp helper to the eBPF program API.
Adds iterator program type (feat(aya): Add iterator program type).
Adds support for cookies in aya::programs::uprobe.
Adds XskMap::unset to remove entries from AF_XDPAF_XDPA Linux kernel interface that hands raw packets to a userspace program straight off the network card, skipping the kernel's networking stack. It is how userspace tools reach line rate on 100G links. socket maps.
Adds set method for Array<T> map type.
+15 moreshow less
Adds support for Flow Dissector programs.
Adds ifindex support to XdpContext in aya-ebpf.
Adds conversions to Program from ProgramInfo.
Adds aya-build crate for building eBPF crates, with BTFBTFBPF Type Format, a metadata format in the Linux kernel that embeds type and debug information directly into eBPF programs, letting cyber tools inspect kernel structures safely without kernel headers at runtime. enabled by default.
Adds MIPSMIPSA RISC processor architecture originally developed at Stanford and commercialized by MIPS Technologies, widely used in embedded and network devices; cyber tools target it to analyze or exploit routers, cameras, and similar hardware. architecture bindings.
Adds loongarch64 to codegen targets.
Handles raw tracepoint arguments in BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. programs.
Returns error messages from netlink operations in aya.
Parses complete entries from /proc/$pid/maps including previously omitted fields.
Allows program names to be static strings.
Generates additional userspace constants in codegen.
Generates bindings for all eBPF instructions.
Enables clang_macro_fallback in aya-tool.
Allows setting the Rust version in aya-build.
Removes panics on indeterminate kernel version detection.
Plerion adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. Containers Matrix to threat mapping
13 more releases in this issue
· 2026-06-03 → 2026-06-27
Plerion 2026-06-27 adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. Containers Matrix threat mapping.
Plerion adds four new security framework mappings: ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001, NIST AI RMFNIST AI RMFA voluntary framework published by NIST that gives organizations a structured process for identifying, assessing, and managing risks introduced by AI systems, giving cyber tools a common vocabulary and governance scaffold. 1.0, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. (2025), and OWASP Top 10 for Agentic Apps (2026).
Maps cloud and code posture to ISO/IEC 42001 via compliance settings.
Maps cloud and code posture to NIST AI Risk Management Framework (NIST AI RMF 1.0) via compliance settings.
Maps cloud and code posture to OWASP Top 10 for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Applications (2025) via compliance settings.
Maps cloud and code posture to OWASP Top 10 for Agentic Applications (2026) via compliance settings.
Plerion adds ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001, NIST AI RMFNIST AI RMFA voluntary framework published by NIST that gives organizations a structured process for identifying, assessing, and managing risks introduced by AI systems, giving cyber tools a common vocabulary and governance scaffold., and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against.LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code./Agentic Top 10 compliance mapping
Adds compliance mapping to ISO/IEC 42001 for cloud and code posture tracking
Adds compliance mapping to NIST AI Risk Management Framework (NIST AI RMF 1.0) for AI system measurement
Adds compliance mapping to OWASP Top 10 for LLM Applications (2025)
Adds compliance mapping to OWASP Top 10 for Agentic Applications (2026)
Adds bidirectional linking between AWS assets and GitHub repositories via the Assets tab in Code Security
Enables Pleri remediation suggestions to factor in linked repository context for findings
Supports CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call., CDK, and Terraform infrastructure-as-code formats by default for all GitHub integrations
New capability to block specific internet destinations in serverless network policies via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services..
New ALTER STREAMING TABLE and ALTER MATERIALIZED VIEW ... SET OWNER TO capability in Databricks SQL
Adds ALTER STREAMING TABLE <table_name> SET OWNER TO <user_or_role> syntax to Databricks SQL for changing ownership of standalone pipeline streaming tables
Adds ALTER MATERIALIZED VIEW <view_name> SET OWNER TO <user_or_role> syntax in Databricks SQL to change ownership of materialized views backed by standalone pipelines
Databricks adds managed agent memory in Beta with Unity Catalog storage and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. access.
Adds Managed agent memory feature allowing AI agents to store long-term memories across conversations.
Adds cursor_column configuration option to the Lakeflow Connect Workday Reports connector in Beta for selective row ingestion based on last pipeline run
Enables performance and cost reduction by ingesting only rows changed since the previous run when a cursor column is set
Lakehouse FederationLakehouse FederationA data architecture pattern that lets a single query engine read from multiple external data sources—databases, data lakes, warehouses—without moving or copying the data, reducing pipeline complexity for tools that need broad data access. syncs table/column comments from external sources to Unity Catalog foreign tables in Beta
Databricks adds Omnigent, a beta coding agent meta-harness with shared sessions and context policies.
Adds Omnigent beta: a web UI for managing coding agents (e.g. Claude Code, Codex) with persistent shareable sessions, team collaboration, mobile access, contextual policies, and unified deployment infrastructure.
Lakeflow Designer GA launches a visual drag-and-drop canvas for preparing data with no-code workflows governed by Unity Catalog.
Introduces Lakeflow Designer, a visual, no-code experience on a drag-and-drop canvas to prepare and transform data with built-in operators or natural language.
Install third-party data and AI applications from Databricks Marketplace in Unity Catalog-governed workspaces
Allows discovery, installation, and execution of third-party data and AI apps from the Databricks Marketplace within a Unity Catalog-governed workspace
Introduces a dedicated Apps category filter in the Open Marketplace UI to locate available third-party applications
Databricks adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. support for sharing OpenSharing to Iceberg clients like Snowflake and OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. Spark
Adds OpenID Connect (OIDC) federation support for reading OpenSharing shares via Iceberg REST Catalog clients
New SecureConnect feature allows sharing data from behind firewalls without allowlisting recipient networks
Adds SecureConnect capability to OpenSharing, enabling data sharing from cloud storage behind a firewall or private endpoint without adding recipient networks to an allowlist.
Databricks Runtime 19 ML updates core libraries including CUDACUDANVIDIA's platform and programming interface for running general computation on its GPUs. Nearly every AI training and inference stack is built on it first. 13.0, flash_attn, and adds GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference.-native Scala JARs for XGBoost.
Adds flash_attn version 2.8.3 to the default Python environment on GPU clusters
Updates CUDA support to version 13.0 and includes cuDNN 9.23.0.39 for GPU clusters
Adds GPU-specific XGBoost4j Scala JARs (xgboost4j-gpu_2.13 and xgboost4j-spark-gpu_2.13) to GPU cluster classpaths
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The TensorFlow/Keras stack (tensorflow, keras, tf_keras) is removed; workloads must install these via cluster library or init script
!Approximately 40 ML runtime packages are removed in this version compared to Databricks Runtime 18 ML
Automatic change data feedchange data feedA stream of records describing every insert, update, and delete that occurs in a database, captured in real time so downstream systems can react to changes without polling. (Auto CDF) enables row-level change tracking at query time without manual per-table configuration
New truncate(number, scale) function truncates numbers to a specified scale without rounding in SQL and DataFrame APIs
New trim_array(array, count) function removes elements from array ends based on sign of count in SQL and DataFrame APIs
New variant_strip_nulls(value) function recursively removes variant null fields in SQL and DataFrame APIs
+9 moreshow less
New parse_sql(sql_statement) function returns structured JSON metadata for parsed SQL statements
New collect_union aggregate function returns distinct union of array elements within groups in SQL and DataFrame APIs
spark.databricks.execution.pythonUDF.arrow.enabled config enables Arrow-optimized Python UDFs by default; set to false to restore previous serialization behavior
INSERT INTO ... REPLACE ON <columns> and INSERT INTO ... REPLACE USING <subquery> syntax supports upsert-style writes in SQL
withSchemaEvolution() method in DataFrame writer API enables automatic schema evolution for compatible tables
Dataset.zipWithIndex added to Scala API for pairing elements with index positions
DataFrameGroupBy.cov and SeriesGroupBy.describe added to pandas API on Spark for covariance and descriptive statistics
Plan download links for query plans in SVG, DOT, and TXT formats now available in Spark UI execution page
TopN pushdown for fine-grained access control on dedicated compute pushes ORDER BY ... LIMIT operations to remote cluster
14 details in Everything
└──▷ BREAKING ON UPGRADE
!Clusters that set JNAME=zulu17-ca-amd64 must remove that environment variable because JDK 17 is removed in Databricks Runtime 19; only JDK 21 is supported
!Approximately 90 standard runtime Python packages are removed (including plotly, seaborn, openai, langchain-core, huggingface_hub, psycopg2, pyodbc); workloads must install these explicitly via cluster library or init script
!Setting pipelines.pipelineId table property manually results in an error as it is now reserved; remove explicit assignments from table DDL before upgrading
!In standard access mode, restricted Spark configurations (including spark.driver.extraJavaOptions, spark.executor.extraJavaOptions, spark.jars, spark.files, spark.executorEnv.*, spark.kubernetes.*) can no longer be set; cluster creation or editing fails with an error
Auto-TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. for automatic row deletion is now generally available for Unity Catalog managed Delta Lake, Apache IcebergApache IcebergAn open table format for large analytic datasets, maintained by the Apache Software Foundation, that gives cyber tools reliable schema evolution, time-travel queries, and atomic commits on object storage or HDFS., and streaming tables.
General availability of ALTER TABLE ... REPLACE PARTITIONED BY WITH CLUSTER BY for converting Delta Lake tables to liquid clustering in Databricks Runtime 18.1+
Databricks introduces the Mission Critical workspace add-on in Public Preview, bundling managed disaster recovery and Enhanced Security and Compliance (ESC) capabilities. Access is gated and enabled per workspace via the new Add-ons tab in the account console.
Beta release of ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. GRANT policies to dynamically grant EXECUTE privilege on Unity Catalog models via governed tags
Adds ABAC GRANT policy support for the EXECUTE privilege on models attached at catalog or schema level.
Extends attribute-based access controlattribute-based access controlAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. to system.ai foundation models and customer-registered MLflow models.
Databricks adds generally available endpoint telemetry for custom model serving endpoints, persisting OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. logs, traces, and metrics to Unity Catalog.
Databricks ai_classify function is GA with support for custom labels, descriptions, global instructions, and multi-label classification.
ai_classify function general availability allows classifying text according to custom labels, supporting label descriptions, global instructions, and multi-label classification.
No-code UI for building, validating, and iterating on classification agents via the Classification menu.
Adds configurable deferred (on-next-restart) and immediate (restart-and-enforce) compute policy enforcement with cancel options.
Enforce on next restart schedules a configuration update to apply the next time the compute terminates or restarts, avoiding immediate interruption of running workloads
Restart and enforce applies the configuration update right away
Workspace admins can cancel a scheduled enforcement for a single compute resource or for an entire policy
Databricks Runtime 18 LTS adds SQL scripting, parameter markers, IDENTIFIER clause, vector math aggregates, and geospatial functions
CREATE OR REPLACE TEMP TABLE now supported for creating or replacing temporary tables in a single statement
DESCRIBE FLOW command is now available to describe flow objects
DESCRIBE HISTORY write option flags (isDynamicPartitionOverwrite, canOverwriteSchema, etc.) now appear in operationParameters for WRITE and REPLACE TABLE operations
SET METADATA ON COLUMN and UNSET METADATA ON COLUMN SQL commands are now available for managing semantic metadata on Unity Catalog table columns
SQL scripting feature is now generally available, supporting CURSOR variables for iterating over query result sets row by row
+21 moreshow less
INSERT INTO ... BY NAME now supports the REPLACE WHERE clause
Named (:param) and unnamed (?) parameter markers can now be used virtually anywhere a literal value of the appropriate type can be used, including DDL statements
The IDENTIFIER clause reach has been expanded to nearly everywhere an identifier is permitted, allowing strings to be cast to SQL object names
max_by and min_by aggregate functions now accept an optional third argument limit (up to 100,000) to return top-K or bottom-K values
New vector math aggregate functions are available: vector_avg, vector_sum, vector_norm, and vector_normalize for dense vector columns
Approximate distinct count using Datasketches Theta Sketch is supported via new theta_sketch_agg and related functions
Approximate quantile computation using KLL Sketches is supported via new kll_sketch_agg_bigint and related functions
New geospatial functions st_azimuth, st_boundary, st_closestpoint, and st_geogfromewkt are now available
Apache Spark now supports native GeometryType and GeographyType data types in the PySpark and Java APIs
Approximate top-K most frequent values can be returned using the new approx_top_k aggregate function
Delta Sharing tables using pre-signed URL or cloud token sharing modes now support multi-statement transactions
parse_timestamp SQL function parses timestamp strings using multiple patterns with Photon engine support for improved performance
array_agg and collect_list aggregate functions now support IGNORE NULLS and RESPECT NULLS clauses
PIVOT clause now supports aliases to rename pivot column expressions in the output
Trigger.AvailableNow in Python streaming readers is now available, enabling one-time batch processing of all available data
The state repartition API for TransformWithState streaming operators is now available in PySpark
DataFrame.applyInPandas now accepts a function with an Iterator[pandas.DataFrame] signature to reduce overhead when processing large groups
Spark Session.emptyDataFrame is now available as a convenience API for creating an empty DataFrame
TIMESTAMP WITH LOCAL TIME ZONE is now supported as a SQL syntax alias for the TIMESTAMP_LTZ type
The to_json function now accepts a sortKeys option to produce JSON output with keys in sorted order
spark.catalog.* API methods now have feature parity with their equivalent DDL commands for catalog, schema, and table operations
New public preview feature allows syncing Okta users and groups into Databricks without SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning.
Adds support for automatic identity management with Okta as the source of record
Enables searching for Okta users and groups in identity federated workspaces
Databricks Genie app for Slack enters Public Preview, enabling data queries via DM or channel mentions.
Adds steps integration for the Databricks Genie app in Slack (Public Preview), allowing users to get answers by sending a direct message or mentioning @Genie.
Enables pinning specific Genie Agents to channels or group DMs, where mentions route to the pinned agent.
External lineage generally available in Unity Catalog; Lakeflow Connect now auto-records source lineage.
Adds External Lineage capability to Unity Catalog, allowing registration of non-Databricks assets like Salesforce, MySQL, Tableau, or Power BI into a single graph
Enables automatic source lineage recording from source tables to destination tables in Unity Catalog for Lakeflow Connect managed ingestion pipelines
Inbound Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. for Lakebase Autoscaling and Zerobus Ingest is GA.
Provides a configuration guide for setting up inbound PrivateLink for these services
Managed SharePoint connector now supports structured ingestion (CSV/JSON/XML/Excel/Parquet/Avro/ORC), metadata, filters, and schema controls in Lakeflow Connect
Adds structured file ingestion for CSV, JSON, XML, Excel, Parquet, Avro, and ORC formats via the unified managed file source API in the Managed SharePoint connector (Lakeflow Connect).
Adds file metadata ingestion capability to the Managed SharePoint connector.
External Delta and Iceberg clients can now read pipeline streaming tables and materialized views via Unity Catalog and Iceberg REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services..
Exabeam June 2026 adds Phishing Email Inbox Collector, OpenAI/REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. collectors, Nova rule creator, and Entity Health dashboard.
OpenAI Cloud Collector ingests data from your Open AI platform (early access)
REST API Context Collector ingests context data from REST API endpoints (early access)
REST API Context Tables support custom context sources mapped via the REST API Context collector
Entity Health Dashboard shows entity coverage, uniqueness, and identity resolution issues (early access)
+23 moreshow less
Optional Email Address and Username Prefix Linking allows linking identities with identical prefixes but different domains
Attack Surface Insights rules can preview up to five matching entities using the Test Conditions button
Exabeam Nova Rule Creator drafts correlation and analytics rules from natural language descriptions
Correlation rule templates updated for MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. v19 Stealth and Defense Impairment tactics (77 templates)
Search results display increased to 5,000 events across Timeline, List, and Table views
Timeline view supports continuous scrolling without manual paging
Timeline query date range expanded to 31 days (early access opportunity)
Global Search can now search by ip_address and full_name fields
Visualization charts support Series Positioning, Scale Type, Missing Date handling, and Results Count limits
Custom Visualization window defaults Field = user, Metric = count, Chart Type = bar chart
Log Stream audit log covers event-enricher and platform-event-enricher operation types
Log Stream Parsers Overview shows Tier Distribution and Parsed vs. Unparsed graphs for the last 24 hours
Exabeam MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. now supports getting threat summaries, context tables, correlation rules, and MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. coverage scores
Outcomes Navigator queries Search for rule-trigger activity_type to verify analytics rule satisfaction
Service Health App Config tab introduces dedicated RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions (Read, Write, Delete)
Direct Access Agent (DAA) Windows Event Log Collector collects logs natively from Windows servers
Threat Center watchlists increased limit to 40 and support reordering via drag-and-drop
Watchlist entity display shows open/closed cases and alerts with direct navigation links
New Early Access Pre-Built Analytics Rules for AI agent installation, OpenClaw activity, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. permission abuse
Pre-built Phishing Rule detection grouping rule groups detections by email subject
Merge Phishing Detection Engine Cases playbook merges related phishing cases over a 14-day period
Phishing Rule Detections assigned static rarity score of 50 in Threat Center
28 details in Everything
└──▷ BREAKING ON UPGRADE
!The Log Sources tab in Site Collectors will be deprecated in August 2026; migrate to the Log Sources application.
Hunters Pathfinder AI June 2026 adds S3 data onboarding, Org Context UI, 5 new detectors and 10 integrations.
Adds pathfinder data onboarding capability to ingest custom S3 buckets with automatic OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. mapping
Adds organizational context creation via public preview UI for manual input
Adds Suspicious File Created in Windows Startup Folder detector
Adds Suspicious User-Agent Observed in Sign-In Activity detector
Adds Microsoft 365 Defender Copilot Prompt Injection 3rd Party Alert detector
+12 moreshow less
Adds Azure Service Principal Sign-In via Unusual User Agent Category detector
Adds Suspicious User-Agent Observed in Azure Non-Interactive/SPN Sign In Activity detector
Adds Windows User Lock Status enrichment and scoring model
Adds Upguard Alerts SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. integration
Hunters Pathfinder AI adds Context Unified Anomalous Login detector, new threat hunts, and Windows Password Change enrichment
Adds Context Unified Anomalous Login detector for successful anomalous logins across unified authentication sources (identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., cloud, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection.)
Introduces multi-layer encoded command execution detection for process creation events with nested Base64 encoding/decoding on Windows, Linux, and macOS
Adds Azure Service Principal sign-in anomaly detection based on User Agent divergence from 45-day baseline with audit log correlation
Adds Suspicious User-Agent Observed in Azure Non-Interactive/SPN Sign In Activity detector for offensive tool signatures in SPN/non-interactive sign-ins
Adds publicly accessible storage resource discovery for AWS S3, Azure Blob Storage, and Google Cloud Storage via automated external exposure assessment
+2 moreshow less
Adds Windows Recent Password Change enrichment querying Event ID 4723/4724 for password reset context
Adds Windows Recent Password Change Model scoring layer with configurable confidence modifier based on recent password resets
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The following legacy detectors are deprecated and will stop functioning after July 6, 2026: CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. anomalous console login, Anomalous login by an Azure account, Office365 anomalous login, Okta anomalous login, Okta successful login from host without an EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. agent, Okta successful administrative access from host without an EDR agent, Successful Duo authentication from host without an EDR agent, Successful Azure portal sign-in from machine without EDR agent, Successful Azure CLI sign-in from machine without EDR agent, Successful AWS console login from host without an EDR agent, Successful G Suite login from computer without EDR agent, G Suite successful authorization of token to GCP related interface without EDR agent. They are replaced by Context Unified Anomalous Login.
Sekoia.io Intelligence module gets new IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. type filters, column management, and FLINT report access enhancements.
IOC type filter added to the Threat Context panel to scope views to specific indicators like IPs or domains.
Support for First Seen and Last Seen columns in the Threat Context table alongside existing date fields.
Last updated filter available in Threat Context to scope results to relationships modified within the last 30 days.
New Access all FLINTs button on the Threat Landscape page for direct navigation to threat intelligence reports.
4 details in Everything
3 more releases in this issue
· 2026-06-04 → 2026-06-17
Google SecOps adds Non-prioritized IoC Matching detection category for high-fidelity threat hunting.
└──▷ HOW TO FIND IT
View the newly available non-prioritized IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. rules in your curated detections list to assess coverage.
📍In the console, go to Security › Detections › Curated Detections and filter by category Non-prioritized IoC Matching rules.
Adds the Non-prioritized IoC Matching rules category to Curated Detections for matching IPs, domains, and file hashes against Google IoC feeds
Enables detection of cryptomining, Command and Control (C2) communications, and malicious anonymization services via non-prioritized IoCs
Google SecOps adds async Search API for large datasets and detection visibility in Search
└──▷ HOW TO FIND IT
View detections alongside events in the Google SecOps Search UI to streamline threat investigation.
📍In Google SecOps Search, run a query for an entity or event, then check the Alerts and Detections tab for matching system-generated findings.
Adds Investigate detections in Search feature displaying matching system-generated detections in the Alerts and Detections tab when searching events or entities
Adds Asynchronous Search APIs allowing long-running queries with operation ID tracking, up to 1 million results, and pagination for UDM events, data tables, and ECG
UDM fields now display enrichment source icons (U/E) and metadata.
└──▷ HOW TO FIND IT
Verify if a specific UDM field in an event has been enriched by checking the icon and metadata.
📍Look for the E icon next to the UDM field in the Chronicle UI event viewer and inspect the source metadata value.
Adds U (unenriched) and E (enriched) icons to UDM fields in the UI to visualize data provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build.
Includes source-of-enrichment metadata values within enriched UDM fields
Requires chronicle.events.fetchEnrichedEventIAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. permission for access
Exaforce runs AI Exabots that detect, triage, investigate and respond to threats across cloud, SaaS, identity, endpoint and code on a real-time knowledge graph.
Exaforce integrates with Claude Compliance API for AI identity, content sensitivity, and threat detection
Adds Claude Enterprise as a data source via the Claude Compliance API for inventory and identity context
Enables sensitive chat labeling for PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., secrets, and regulated data to feed detections and access graphs
Expands the identity access graph traversal to include Claude organizations, projects, and resources
ClickHouse 26.6 adds hypothetical skip indexes, GeoJSON input, MVT SQL functions, PNG output, and more.
Add the --echo, --echo-formatted, and --echo-query-id options to clickhouse-client for granular control over query echoing
Add CREATE HYPOTHETICAL INDEX ... TYPE ... syntax and EXPLAIN WHATIF SELECT ... to estimate skip ratios without materializing indexes
Add the system.hypothetical_indexes table to expose session-scoped virtual skip indexes
Add embedded /schema web UI to visualize dependency graphs between tables, views, dictionaries, and distributed objects
Add PNG output format to render query results directly as PNG images
+10 moreshow less
Detect AI coding agents via environment variables and report the detected agent in the new client_agent column of system.query_log, system.query_thread_log, and system.processes
Add system.documentation system table collecting embedded reference documentation as Markdown
Add GeoJSON input format for reading GeoJSON FeatureCollection documents into native Geometry types
Add input_format_geojson_unsupported_geometry_handling setting to control how unsupported geometry types are handled in GeoJSON imports
Add MVTEncodeGeom, MVTEncode, MVTBoundingBox, and MVTBoundingBoxMercator functions for serving Mapbox Vector Tiles from SQL, with PostGIS aliases ST_AsMVTGeom and ST_AsMVT
Support writing data into Azure Data Lake Storage Gen2
Add RowBinaryWithNamesAndTypesAndDefaults format to support schema evolution
Implement ADD ENUM VALUES in ALTER TABLE queries to append new values to existing Enum types
Add interactive help command (help, /help, man, /man) to clickhouse-client and clickhouse-local for syntax-highlighted documentation lookup
Support SYSTEM START LISTEN and SYSTEM STOP LISTEN in clickhouse-local to enable TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./HTTP connections
15 details in Everything
└──▷ BREAKING ON UPGRADE
!The allow_experimental_query_deduplication feature is removed; queries relying on it will fail.
!The system.instrumentation.parameters column and SYSTEM INSTRUMENT ADD ... HANDLER PARAMETERS ... syntax are renamed to arguments and SYSTEM INSTRUMENT ADD ... HANDLER ARGUMENTS ...; old names are no longer supported.
!The default of the server setting insert_deduplication_version changes from compatible_double_hashes to new_unified_hash, altering deduplication scope from per-partition to per-insert block.
!The setting show_data_lake_catalogs_in_system_tables is renamed to show_remote_databases_in_system_tables; when set to 0, MySQL and PostgreSQL databases are also hidden from system.tables, system.columns, and system.completions.
!The default x86 build now targets x86-64-v3 (AVX2); CPUsCPUsThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. without AVX2 support must switch to the amd64compat build.
!icebergHash and icebergBucket now reject Int128, UInt128, Int256, UInt256, and Decimal256 arguments with an explicit error instead of silently truncating.
!ALTER TABLE ... REPLACE PARTITION ... FROM ... no longer silently drops the destination partition's data if the source has no parts; it is now rejected with BAD_ARGUMENTS by default. Set allow_replace_partition_from_empty_source = 1 or compatibility to 26.5 to restore old behavior.
ESET PROTECT 7.2 adds AI-driven incident response actions, vulnerability management setup for MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs., and new graph export formats.
Adds AI Advisor add-on support for AI-driven recommended Response Actions in Incidents
Adds Vulnerability & Patch Management availability in Basic setup for MSPs
Adds Export Incident Graph in PNG or SVG format
Adds Lists for Executables and Processes display in Incidents
Adds Auto-enabling of ESET Inspect via Platform modules and Basic setup per tenant
+1 moreshow less
Adds tenant-specific settings support for ESET LiveGuard and security application in Basic setup
Adds Collect Evidence action node to Security Playbooks for automated forensic data collection on Windows and Linux endpoints.
Adds the Collect Evidence action node directly inside security playbooks (endpoint response, automated response, and Workbench insight progression types) to trigger forensics evidence collection on impacted endpoints without playbook chaining.
New action node automatically triggers evidence collection when a Workbench insight meets criteria such as severity is high or Insight score exceeds 80.
Collected evidence is now presented alongside Workbench events and in the Forensics workspace to build a complete incident timeline within a single workflow.
3 details in Everything
20 more releases in this issue
· 2026-06-01 → 2026-06-26
Adds show regions command for region codes; dynamic site data fetch at registration and re-registration on VM clone.
└──▷ USE IT
List available region codes to configure or verify connectivity regions.
shell
show regions
Adds show regions CLI command to list all available region codes.
Connector now fetches full site data (code, display name, aliases, endpoints) from the API at registration time and back-fills it for already-registered connectors.
Connector automatically generates a new identity when a VM clone is detected, forcing cloned VMs to re-register on first boot.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Minimum ESXi version is now 7.0 U1; drops ESXi 6.5/6.7 support
!Upgrading requires a new base OS image with fluent-bit pre-installed.
Trend Vision One Outlook Add-in AskAI v0.1.295 adds AI email analysis and reporting
AskAI in Outlook Add-in empowers end users to take an active role in email security without leaving their inbox.
Administrators can flexibly control whether end users have access to AskAI, ensuring the feature is rolled out in alignment with organizational policies.
Once enabled, users can instantly analyze suspicious emails using AI-powered insights and submit phishing or spam reports directly within a conversational chat interface.
Helm Chart 3.4.1 adds SELinuxSELinuxA mandatory access control system built into the Linux kernel, maintained by the NSA and Red Hat, that enforces fine-grained policies restricting what processes can access, even if they run as root. spc_t runtime security support and moves exclusion logic to components.
Adds enhanced support for runtime security on SELinux-enforcing clusters using spc_t
Replaces live namespace lookup by moving exclusion logic into the trend components
Adds configurable AWS security manager image parameter in CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. template for Container Protection v2.2.5.
Container Security now supports Terminate action for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. clusters when runtime rule violations occur.
Terminate mitigation action is now supported for Amazon ECS clusters running CAM v2.2.3 or later.
File Security Storage template v4.1.2 for AWS adds FileSecurityStorageUseSourceBucketAsFolder parameter.
Adds the FileSecurityStorageUseSourceBucketAsFolder configuration parameter to separate files from different source buckets into distinct destination folders.
Container Protection for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. v2.2.3 adds runtime terminate actions and ZA/ID support
terminate action now supported for Runtime Security on EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves., ECS Fargate, and ECS on EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware..
New method to replace AWS-IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. to support ZA/ID site.
AWS security manager image parameter added for private repositories.
Adds fipsEnabled toggle to .helm/values.yaml for controlling FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. mode in Helm Chart 3.3.9
Adds the fipsEnabled configuration key to enable or disable FIPS mode compliance.
Runtime security restricted permissions are now required for OpenShift clusters.
Adds AWS pre-deployment check in Cloud Accounts to verify permissions, SCPsSCPsAWS Service Control Policies — organization-wide guardrails from Amazon that cap the maximum permissions any IAM entity in a member account can hold, letting cyber tools enforce least-privilege boundaries across an entire AWS org. and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. stacks before connection
Cloud Accounts now includes a pre-deployment check for single-account AWS connections and updates.
The pre-deployment check verifies that your credentials have the IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. permissions required for deployment.
The pre-deployment check verifies there are no AWS Service Control Policies (SCPs) at the organization level that could block required actions.
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. On-prem Gateway v1.0.84 adds ICAP client support and AI traffic enhancements
Adds on-premises gateway capability to act as an ICAP client for integration with 3rd party DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. servers.
Enhances AI identification logic for Grok traffic originating from x.com and grok.x.com.
Adds compatibility enhancements for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. and tool call passthrough in Anthropic Claude integration.
Huntress Managed SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. GA support for Okta logs with built-in detections.
Huntress Managed SIEM now supports Okta as an identity and authentication log source
Huntress SOC includes detections for credential attacks, privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., MFA bypass, account takeover, and federated identity manipulation targeting Okta
2 details in Everything
8 more releases in this issue
· 2026-06-02 → 2026-06-24
Huntress Managed SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. introduces GA AI Search for plain English log queries and ESQL translation
Adds AI Search capability to Huntress Managed SIEM allowing users to search logs using plain English instead of only ESL or the Query Builder
Adds an ESQL button after running a plain-English AI Search that displays the translated ESQL query to help users learn the syntax
Managed ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. adds security controls for SharePoint/Teams and continuous enforcement for Azure/Microsoft identities.
Adds idle session timeout and anonymous sharing block for SharePoint and OneDrive in Managed ISPM
Blocks user creation of SharePoint sites in Managed ISPM
Retains deleted user OneDrive content for at least 90 days
Blocks communication with unmanaged Teams tenants in Managed ISPM
Ensures organization cannot communicate with accounts in trial Teams tenants
+5 moreshow less
Adds continuous enforcement with drift detection and auto-remediation for Azure Management portal access policy
Adds continuous enforcement with drift detection and auto-remediation for unused device types blocking policy
Adds continuous enforcement with drift detection and auto-remediation for guest Office client restriction policy
Adds continuous enforcement with drift detection and auto-remediation for frequent admin sign-in policy
Adds continuous enforcement with drift detection and auto-remediation for MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. on device registration/join policy
Huntress GA release introduces Agents Write API for programmatic agent management
Adds Agents Write API (GA) enabling partners to programmatically uninstall agents, update tags, toggle tamper protection, and isolate or release hosts via automation tools
Managed ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. adds Exchange Online, Teams, and SharePoint/OneDrive security controls.
Adds Exchange Online control to ensure the Common Attachment types filter is enabled
Adds Exchange Online control to ensure notifications for internal users sending malware is set to Enabled
Adds Exchange Online control to ensure Exchange Online spam policies are set to notify administrators
Adds Exchange Online control to ensure that SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders. records are published for all Exchange domains
Adds Microsoft Teams control to disable communication with unmanaged Teams
+2 moreshow less
Adds SharePoint Online control to ensure Guest resharing of SharePoint and OneDrive files is set to Disabled
Adds SharePoint Online control to ensure Legacy authentication protocols are blocked for SharePoint and OneDrive
ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. Learning Mode for Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. allows 14-day impact monitoring before policy deployment.
rustinel v1.1.2 adds sliding-window alert deduplication and upgrades alert schema to ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. 9.4.0
└──▷ GET THIS VERSION
$ git clone --branch v1.1.2 https://github.com/karib0u/rustinel.git
# already have the repo? check out this version:$ git checkout v1.1.2
feat(alerts): sliding-window alert deduplication with event.count rollup reduces noise by grouping identical alerts within a time window.
feat(output): upgraded alert output schema to match ECS version 9.4.0 for better interoperability.
osctrl v0.5.3 adds SAML 2.0SAML 2.0A standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. authentication, per-OS flags in enrollment parity, and fine-grained service account permissions.
└──▷ GET THIS VERSION
$ git clone --branch v0.5.3 https://github.com/jmpsec/osctrl.git
# already have the repo? check out this version:$ git checkout v0.5.3
Adds SAML 2.0 support for osctrl-api + React SPA
Adds OIDC support for osctrl-api + React SPA as a reusable pkg/auth provider
Enables fine-grained permission control for service account creation via the API
Adds per-OS flags to enrollment configuration for parity with legacy admin
Lynis 3.1.7 expands EOL database with CachyOS, NixOS, AlmaLinux, openSUSE Leap, and updated RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence./Ubuntu/Alpine/Fedora dates.
└──▷ GET THIS VERSION
$ git clone --branch 3.1.7 https://github.com/CISOfy/lynis.git
# already have the repo? check out this version:$ git checkout 3.1.7
Adds CachyOS to the OS end-of-life database (with corrected OS detection support).
Adds NixOS EOL data to the end-of-life database.
Adds AlmaLinux to the EOL database.
Adds openSUSE Leap to the EOL database.
Adds EOL dates for Alpine 3.22 and 3.23.
+4 moreshow less
Adds EOL dates for Ubuntu 25.10 and 26.04.
Updates RHEL 8 EOL date and adds RHEL 9 and 10 dates.
Adds and updates Fedora EOL dates including Fedora 43.
Adds read_auto operator for automatic input format detection with fallback options
Adds from_clickhouse source operator to query ClickHouse tables or SQL
Adds tenzir.http-proxy, tenzir.https-proxy, tenzir.no-proxy config keys and TENZIR_HTTP_PROXY/TENZIR_HTTPS_PROXY/TENZIR_NO_PROXY env vars for outbound proxy routing
Adds tenzir.shutdown-grace-period config key to control pipeline drain duration before force-kill
Adds ignore_case argument to string functions (starts_with, ends_with, contains, replace, split, equals) for case-insensitive matching
5 details in Everything
└──▷ BREAKING ON UPGRADE
!to_clickhouse now creates ClickHouse Bool columns instead of UInt8 for boolean fields
11 more releases in this issue
· 2026-06-01 → 2026-06-24
Platform v1.34.0 adds OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing for frontend visibility and Stream view timestamp columns
Enables PUBLIC_ENABLE_TRACING=true to export OpenTelemetry traces from the Platform frontend via OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. to an endpoint like ${OTEL_EXPORTER_OTLP_ENDPOINT}/v1/traces
Adds authentication header support via the OTEL_EXPORTER_OTLP_HEADERS environment variable for collectors requiring auth
Displays shared schema fields as dedicated columns in the Stream view, starting with timestamps
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The PUBLIC_USE_INTERNAL_WS_PROXY configuration variable no longer has any effect; all Websocket Gateway connections are now proxied through the App Server
!The PUBLIC_WEBSOCKET_GATEWAY_ENDPOINT environment variable is repurposed as a fallback when PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT is not defined
Initial release of the tenzir-node Helm chart from oci://ghcr.io/tenzir/charts/tenzir-node
Per-node nodes[].config overlay with checksum-driven rollouts via pod annotation
nodes[].extraPorts to attach ports to specific node pods and Services
sharedServices to create a fleet-wide load-balanced Service across selected nodes
Hardened container defaults: securityContext with non-root, drop ALL capabilities, and readOnlyRootFilesystem: true
+2 moreshow less
Optional NetworkPolicyNetworkPolicyA Kubernetes API object that defines which pods may send or receive traffic, enforced by the cluster's CNI plugin to give cyber tools namespace-level network segmentation without host firewall rules. via networkPolicy.enabled: true
Optional PodDisruptionBudget via podDisruptionBudget.minAvailable or .maxUnavailable
Adds tenzir-skills v2.2.0 with new schema reference skills for ASIM, CIM, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping., CEFCEFCommon Event Format, an ArcSight (Micro Focus) log standard that defines a fixed header plus extensible key-value pairs so cyber tools can emit and ingest alerts in a predictable, parseable structure., LEEF, EDM, UDM and updated design system tokens
└──▷ USE IT
Configure Tenzir design system to consume machine-readable brand tokens
yaml
brand: data/brand.yml
Adds tenzir-asim skill for mapping security telemetry to Microsoft Sentinel ASIM
Adds tenzir-cim skill for mapping security telemetry to Splunk CIM
Adds tenzir-ecs skill for mapping logs and security telemetry into Elastic Common Schema
Adds tenzir-edm skill for mapping events into Fortinet’s Event Data Model
Adds tenzir-leef skill for generating, parsing, and mapping LEEF 2.0 events
+3 moreshow less
Adds tenzir-cef skill for generating, parsing, and mapping ArcSight CEF events
Updates tenzir-udm skill to expose record definitions as YAML leaves with machine-readable type shapes
Expands tenzir-design-system skill with machine-readable tokens in data/brand.yml and data/tokens.yml
Adds from_amazon_kinesis and to_amazon_kinesis operators for reading from and writing to Amazon Kinesis data streams
Adds drop_null_fields function for stripping null values from records in expressions
Allows from_kafka to select topics via regex when the topic argument starts with ^
Updates to_google_secops operator to use Chronicle logs.import, events.import, and entities.import APIs
4 details in Everything
└──▷ BREAKING ON UPGRADE
!from_kafka now consumes all topics through Kafka’s consumer group subscription, causing pipelines sharing a group.id to split partitions instead of replicating them; use unique group.id values for full copies
!exit option is not available for regex topics in from_kafka
Adds window operator for event-time windowing with size, every, on, tolerance, and idle_timeout parameters
Adds ai::prompt operator for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integration with model, endpoint, and default local Ollama support at http://127.0.0.1:11434/v1
Adds to_prometheus operator sending metric events to Prometheus Remote WritePrometheus Remote WriteA protocol for streaming time-series metrics from a Prometheus instance to a remote storage backend, letting cyber tools offload long-term metric retention and query load to a dedicated system. receivers, supporting v1 default and v2 via protobuf_message="io.prometheus.write.v2.Request"
Adds from_microsoft_sql source operator for SQL Server reads with table, host, user, password, database, show, and custom query support
Adds read_chunks and write_chunks operators for converting between byte streams and records with a bytes field
tenzir-skills v2.1.0 adds dual UDM field name forms and refocuses the tenzir-manage-packages skill on lifecycle management
tenzir-google-udm skill now generates both standard and camelCase UDM field names (e.g., event_type/eventType) to simplify mapping for Google SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. API ingestion and YARA-LYARA-LA rule language developed by Google for Chronicle that extends YARA syntax to express multi-event, time-windowed detections over log data rather than single-file pattern matching. detection workflows
Replaces tenzir/skills@tenzir-create-parser-package and tenzir/skills@tenzir-create-ocsf-mapping with tenzir-create-package for consolidated Tenzir package development
Adds tenzir-google-udm, a generated Google SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. UDM schema and normalization guidance skill
2 details in Everything
└──▷ BREAKING ON UPGRADE
!tenzir/skills@tenzir-create-parser-package and tenzir/skills@tenzir-create-ocsf-mapping are replaced by tenzir-create-package
Tenzir v6 adds from_mysql, accept_opensearch, each/group operators, Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. source, and TQL match statements.
└──▷ TRY IT
Ingest OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. Bulk API requests into a pipeline
Adds from_mysql operator to read data directly from MySQL databases with support for TLS/SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. connections, live streaming via live=true, and the tracking_column argument.
Adds accept_opensearch operator to start an OpenSearch-compatible HTTP server that converts incoming Bulk API requests into events; the new keep_actions=true option includes action objects in the stream.
Adds TQL statement-level match blocks for branching on patterns, allowing concise routing by field values using constants, ranges, alternatives (|), and a required final wildcard _.
Adds from_nats and to_nats operators to consume from and publish to NATS JetStream subjects, with the metadata_field option for attaching NATS metadata.
Adds dedicated TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. operators: from_tcp, accept_tcp, to_tcp, and serve_tcp with TLS support and exponential backoff for reconnection.
+12 moreshow less
Adds from_nic operator to capture packets from a network interface, emitting them as events; supports BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. filtering via the filter option.
Adds serve_http operator to start an HTTP server that broadcasts pipeline output to all connected clients via GET requests.
Adds to_http operator to send each input event as an HTTP request (default POST) to a webhook or API endpoint, with parallel for concurrent requests.
Adds high-level writer operators: to_file, to_s3, to_azure_blob_storage, and to_google_cloud_storage with hive-style partitioning (**) and rotation parameters.
Adds read_tql operator to parse incoming TQL-formatted records into events for round-tripping data or processing piped input.
Adds anonymize operator to generate synthetic events that share the schemas of its input, configurable via count, fully_random=true, and seed.
Adds Microsoft Graph source operator from_microsoft_graph for reading Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. sign-in logs and other collections with app-only auth and OData pagination.
Adds from_stdin operator to read bytes from standard input through a parsing subpipeline.
Adds write_all operator to concatenate a selected string or blob field into raw bytes for binary payload copying.
Adds write_delimited operator to write one string or blob value per event with a configurable separator.
Adds internal_memory_size function to estimate the in-memory size of each event in bytes for routing or inspection.
Adds repeat string function to repeat a string a given number of times.
17 details in Everything
└──▷ BREAKING ON UPGRADE
!load_ftp and save_ftp operators have been removed; use from_ftp and to_ftp directly instead.
!from_opensearch operator has been removed; use accept_opensearch instead.
!from_http no longer doubles as an HTTP server; use the new accept_http operator for accepting incoming requests.
!Removed real_time argument from the measure operator; emission cadence is now governed by executor backpressure.
!yara operator no longer accepts the blockwise argument and is now suitable only for finite byte streams.
!from_gcs operator has been renamed to from_google_cloud_storage.
!The path_field option is removed from filesystem/cloud reader operators; use the $file let-binding in the parsing subpipeline instead.
Splunk Security Content v6.1.0 adds 34 new detections across Cisco IOS XE, SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience., Linux, BlueHammer/RedSun, PTC Windchill, and more.
└──▷ GET THIS VERSION
$ git clone --branch v6.1.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v6.1.0
Adds two new Cisco Secure Access detections: Cisco SA - Access to Anonymizer Services and Cisco SA - Automated Web Reconnaissance via HTTP Access Errors to identify evasion and large-scale web reconnaissance via abnormal HTTP error patterns.
Introduces BlueHammer and RedSun analytic stories with detections covering suspicious Microsoft Defender engine/signature update activity, unauthorized Defender file modifications, non-administrative password changes, abnormal password reset bursts, and processes interacting with Defender update components.
Adds support for Windows Security Event ID 4723 (password change attempts) to improve visibility into credential theft and privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. tradecraft.
Expands Linux detection coverage for Copy Fail (CVE-2026-31431) with analytics targeting malformed authentication entries, PF_ALG registration outside normal boot windows, suspicious namespace creation, and process execution with null argv values.
Introduces a new Linux kern.log telemetry data source for deeper visibility into low-level system activity and Linux exploitation techniques.
+7 moreshow less
Adds nine new Cisco IOS XE detections covering Salt Typhoon-style activity: Guestshell activation/destruction, log clearing sequences, VTY access control tampering, tunnel interface creation, WebUI abuse, remote access probe bursts, reconnaissance commands, and platform package shell interactions.
Adds two new Cisco SD-WAN analytics to detect multiple source IPs authenticating to vManage via SSH and repeated SSH key-based authentications from a single source.
Introduces a new PTC Windchill Exploitation analytic story with detections for gateway command execution and GW READY/OK probing activity, plus a new Windchill Log4j data source and supporting macro.
Adds new analytic stories for RoguePlanet and Salat Stealer.
Adds Windows FFmpeg audio/video device discovery and DirectShow video capture detections to identify potential surveillance or data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. activity.
Adds Windows Cloud Files Filter detections for files loaded by uncommon processes or logs created by non-system processes.
Introduces Splunk Secure Application Alerts for Runtime Security detection for runtime-level visibility.
12 details in Everything
└──▷ BREAKING ON UPGRADE
!The detections Attempt To Add Certificate To Untrusted Store, CHCP Command Execution, Ivanti Sentry Authentication Bypass, Processes launching netsh, and Sc exe Manipulating Windows Services have been permanently removed in v6.1.0; any alerts, correlation searches, or workflows depending on them will stop functioning.
!PowerShell - Connect To Internet With Hidden Window and Regsvr32 with Known Silent Switch Cmdline are deprecated and scheduled for removal in v6.4.0.
1 more release in this issue
· 2026-06-01 → 2026-06-17
ESCU 6.0.0 expands Finding support with entity-tagged scores and adds creation/modification date clarity across all content.
└──▷ GET THIS VERSION
$ git clone --branch v6.0.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v6.0.0
Detections now create Findings with appropriately tagged entities and real risk scores instead of generic 0-score N/A entity Findings, aligning with Enterprise Security v8.x+ Finding behavior.
Detections, Analytic Stories, and related content now expose both creation date and modification date, making content age and recency visible wherever content is viewed.
Transitions tooling from contentctl to Detection Studio as the officially supported content-development capability going forward.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Five detections (CHCP Command Execution, Sc exe Manipulating Windows Services, Processes launching netsh, Ivanti Sentry Authentication Bypass, Attempt To Add Certificate To Untrusted Store) are scheduled for removal in v6.1.0 with no replacement detections available; any correlation searches or use cases depending on them will stop firing after that upgrade.
Beelzebub v3.8.0 captures raw client bytes in TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. trace events for binary protocol forensics.
└──▷ GET THIS VERSION
$ git clone --branch v3.8.0 https://github.com/mariocandela/beelzebub.git
# already have the repo? check out this version:$ git checkout v3.8.0
rsigma v0.17.0 adds rule-side detection-engineering reports, OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools./webhook sinks, daemon introspection CLI, and pySigma delegation.
└──▷ GET THIS VERSION
$ git clone --branch v0.17.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.17.0
rsigma rule scorecard fuses backtest precision/recall, coverage, and fire volume into per-rule keep/tune/retire verdicts with --fail-on CI gating
rsigma rule visibility exports DeTT&CT administration pairs and a visibility ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. Navigator layer with --dettect-data-sources, --dettect-techniques, and --navigator
rsigma backend convert delegates to sigma-cli for the full pySigma backend ecosystem (splunk, elasticsearch, kusto, qradar, loki, crowdstrike, and 30+ more) with no new dependency
rsigma engine tail streams live detections via a new GET /api/v1/detections/stream endpoint to the terminal
rsigma engine tap records a bounded, redactable live event fixture to a replayable NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory. file via a new GET /api/v1/tap endpoint
+5 moreshow less
rsigma engine status queries a running daemon's /api/v1/status snapshot from the CLI
Generic template-driven webhook sink (daemon.output.webhooks) delivers detections to Slack, Teams, Discord, PagerDuty, or any HTTP endpoint
OTLP output sink exports detections over OTLP/HTTP and OTLP/gRPCOTLP/gRPCOpenTelemetry's wire protocol for shipping traces, metrics, and logs, using gRPC as the transport; tools adopt it to emit observability data to any OTLP-compatible backend without vendor lock-in. with --output otlp:// and --output otlphttp:// URIs
Async per-sink delivery layer replaces inline sink writing with bounded queues, retry/backoff, and at-least-once ack-join across fan-out
rsigma rule coverage maps rules onto MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., exports an ATT&CK Navigator layer (format 4.5), and reports gaps against Atomic Red Team or baseline layers
10 details in Everything
2 more releases in this issue
· 2026-06-05 → 2026-06-23
$ git clone --branch v0.15.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.15.0
rsigma backend convert -t fibratus converts Sigma rules to Fibratus YAML with fibratus_windows field mapping, ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. label flattening, and correlation_method selection
Array matching syntax ([any], [all], [all_or_empty], [none], positional field[N]) now evaluates in the engine and lowers to PostgreSQL JSONB
Declarable correlation window modes sliding, tumbling, session via rsigma.window / correlation.window attributes, with rsigma.gap for session windows
sigma-version top-level attribute gates breaking spec changes (e.g. array matching activates at major 3+) and enables cross-document reference lints
New rstix library crate providing core STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. + TAXII 2.1TAXII 2.1An OASIS-standard HTTP-based protocol for exchanging cyber threat intelligence, letting cyber tools publish and subscribe to structured threat data across organizations without custom integration work. primitives including validated IDs, deterministic SCO IDs, and vocabulary tables
+1 moreshow less
MatchDetailLevel (off, summary, full) exposes *why* each field matched via selection, matcher, and pattern fields, configured via -O match_detail
6 details in Everything
└──▷ BREAKING ON UPGRADE
!sigma-version: 2 or absent causes bracket selectors like [0] to be treated as literal field names rather than array indices
rsigma v0.14.0 adds layered YAML config with rsigma config group, global structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. formats, and custom lint tag namespaces
└──▷ GET THIS VERSION
$ git clone --branch v0.14.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.14.0
Introduces the rsigma config command group with subcommands init, validate, show, schema, path, and reload for managing layered YAML configuration discovery and validation
Adds a global --output-format <json|ndjson|table|csv|tsv> flag to all subcommands, with TTY-aware defaulting to pretty JSON in terminals and NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory. when piped
Adds global --color <auto|always|never>, --quiet/-q, and --no-stats flags for controlling terminal output verbosity and styling
Adds repeatable --tag-namespace <ns> CLI flag and tag_namespaces config key to LintConfig for registering organisation-specific tag namespaces alongside built-in ones
pySigma v1.4.0 adds external data source placeholder transformations (File, HTTP, Command) and a new neq modifier for boolean NOT match.
└──▷ GET THIS VERSION
$ git clone --branch v1.4.0 https://github.com/sigmahq/pysigma.git
# already have the repo? check out this version:$ git checkout v1.4.0
└──▷ USE IT
Use the neq modifier to match events where a field does NOT equal a value — useful for writing exclusion-based detection logic directly in Sigma rules.
Adds external data source placeholder transformations supporting File, HTTP, and Command sources, letting rules pull in dynamic lookup data at transformation time.
Implements the neq modifier for boolean NOT match in Sigma rule conditions.
Torq adds 6 new integrations (Atlassian Rovo, CrowdStrike Falcon Shield, LayerX, Reco MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., BloodHound Enterprise, Tenable) and numerous new steps for existing tools.
Adds Atlassian Rovo MCP Server integration with List Tools and Create Session steps
Adds CrowdStrike Falcon Shield integration with 5 new steps including List Activity Events, List Affected Entities, Upload Custom Integration Data, List Security Checks, and List Device Inventory
Adds LayerX integration with 8 new steps for managing tags, policies, devices, and extensions
Adds Reco MCP Server integration with List Tools, Create Session, and Generic Tool Call steps
Adds SpecterOps BloodHound Enterprise integration with 9 new steps for fetching assets, findings, and attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately.
+19 moreshow less
Adds Tenable integration with 5 new steps including Download Report, Export Analysis Request, and scan/report listing
Adds Get URL Rewrite Events step to the Abnormal Security integration
Adds Get MISP Report step to the ANY.RUN integration
Adds 12 new steps to the Drata integration: Create Risk, Get Asset, Get Risk, Get Policy, List Tasks, Get Device, Get Task, List Users, List Policies, Get Event, List Monitoring Test Failures, and Get Vendor
Adds 3 new steps to the Microsoft Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. integration: Enable Account by sAMAccount Name, Disable Account by sAMAccount Name, and Remove user from group by sAMAccount Name
Adds Azure cloud parameter to the Run commands on Azure CLI step
Adds Timestamp range start parameter to the List Threat Events V2 step in Mimecast
Adds 9 new steps to the Orca integration: Get Scheduled Report Files, List Scheduled Reports, Get Scheduled Report, Create Report Task, Get Report Task Status, Retrieve Security Score and Metrics, Get User Selected Compliance Frameworks, Unset Crown Jewel Assets, List Audit Log Actions, List Open Alerts by Severity, List Alert Remediation Actions, and Set Custom Remediation Text
Adds multiple parameters to Orca steps including Timeout, Skip SSL verification, HTTP proxy, HTTPS proxy, Max retries, Retry delay, Custom certificates PEM, and Send to Jira for Add Comment to Alert
Adds Orca base URL parameter to the Get CVE Details step in Orca
Adds parameters to the List CVEs step in Orca including Limit, HTTPS proxy, HTTP proxy, Custom certificates PEM, Retry delay, Max retries, Skip SSL verification, and Timeout
Adds List Users step to the Reco integration
Adds parameters to the Reco Update Alert Status step including Sort order, HTTPS proxy, Custom certificates PEM, Retry delay, Max retries, Retry on status, Skip SSL verification, and Timeout
Adds new Run Splunk API Query step to the Splunk integration
Adds Assign a group to case step to Torq Cases
Adds Case MITRE ATT&CK parameter to the Update case MITRE ATT&CK step in Torq Cases
Adds Group IDs parameter to the Query cases step in Torq Cases
Adds Case group ID parameter to the Create a case step in Torq Cases
Adds Object Utils utility step with Lookup MITRE ATT&CK functionality
Cloudmersive Reverse Proxy v4-13-0 raises default origin timeout to 4 minutes and target concurrency to 2048 via ReverseProxy_MaxConnectionsPerServerOutbound
Updates the default origin timeout (when not configured in Site Settings) to 4 minutes, up from the previous default.
Increases the configurable default target server concurrency limit via ReverseProxy_MaxConnectionsPerServerOutbound to 2048, up from a minimum of 64 per core.
2 details in Everything
9 more releases in this issue
· 2026-06-02 → 2026-06-25
Cloudmersive Cloud Document AI API v2-8-0 adds vector embeddingsvector embeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. support
Cloudmersive Private Cloud Diagnostics version 3.7 introduces a new offline authentication checking script, alongside bug fixes and performance enhancements.
POST /json/v3/search-by-domain/supply-chain-risks allows paginated discovery of third-party partner services exposed via compromised credentials for a given domain.
Supports domain, page, limit, and sort_by request fields to filter and rank partners by size, occurrence, or name.
OpenCTI 7.260626.0 adds drafts to dashboard filtering and restricts AI agent run as selection.
└──▷ GET THIS VERSION
$ git clone --branch 7.260626.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260626.0
playbook now restricts the AI agent run as selection option to only current users and service accounts.
Dashboards can now filter entities by draft status, exposing DraftWorkspace in visualisations.
2 details in Everything
5 more releases in this issue
· 2026-06-04 → 2026-06-26
OpenCTI 7.260624.0 adds trust proxy config, CTEMCTEMContinuous threat exposure management, a recurring process for finding, prioritizing and validating exploitable exposures. It connects discovery to fixes and checks whether those fixes work. shortcut, bulk playbook enrollment, and streaming filters
└──▷ GET THIS VERSION
$ git clone --branch 7.260624.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260624.0
└──▷ HOW TO FIND IT
Add many entities to an existing playbook at once instead of enrolling them individually.
📍Navigate to Playbooks › [Playbook Name] › Bulk Enrollment and select your target entities.
Adds TRUST_PROXY environment variable to control IP whitelisting behavior when behind a reverse proxy.
Adds a new CTEM Command Center shortcut in the top bar for users with an XTM One connection.
Enables bulk enrollment of entities into playbooks via the UI.
OpenCTI 7.260619.0 adds IP allow-list config, playbook run as user, saved filter sharing, bulk limit to 150, and Hub import CTA
└──▷ GET THIS VERSION
$ git clone --branch 7.260619.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260619.0
Adds security.cidr_allow_list configuration key to control access for login and public information
Adds a run as user selection option on AI agent playbook components to specify the execution identity
Adds the ability to share saved filters with other users, groups, or organizations via the UI
Increases the bulk creation object limit to 150 objects per operation
Adds an import from Hub call-to-action button on the Playbooks library screen in the Hub interface
OpenCTI 7.260615.0 adds auto-reload to custom dashboards, News Feed playbooks, security coverage metrics in has-covered view, and multi-conversation history for Ask Ariane
└──▷ GET THIS VERSION
$ git clone --branch 7.260615.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260615.0
Adds auto-reload for custom dashboards so they refresh automatically without manual page reloads.
Enables News Feed as a playbook source type, allowing playbooks to trigger on incoming feed entries.
Adds security coverage metrics to the has-covered relationship view for deeper analysis of security controls.
Adds multi-conversation history and mid-run steering support for the Ask Ariane feature in XTM One.
New UI options for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. feed verification, password policy display, and custom no-access error messages.
└──▷ GET THIS VERSION
$ git clone --branch 7.260609.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260609.0
└──▷ HOW TO FIND IT
Verify SSL for feeds by default or override it per feed via the UI.
OpenCTI 7.260604.0 adds configurable ingestion deny lists, retention policy activity tracking, form intake default values, and XTM One file downloads.
└──▷ GET THIS VERSION
$ git clone --branch 7.260604.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260604.0
Adds active/inactive status to Retention Policies with telemetry for monitoring rule activity
ThreatExchange hma library adds NCMEC hash sharing support via new environment URLs
└──▷ GET THIS VERSION
$ git clone --branch hma-v1.1.7 https://github.com/facebook/ThreatExchange.git
# already have the repo? check out this version:$ git checkout hma-v1.1.7
MISP v2.5.42 adds scheduled TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services. push, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. PAR toggle, Overmind UI advances, and a new SiberKapan threat-intel feed.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.42 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.42
└──▷ HOW TO FIND IT
Enable and run a scheduled TAXII push to all enabled servers without waiting for the next cron window.
📍In the MISP UI, go to Server Settings › Scheduled Tasks, locate the TAXII push task, set the push mode to all-enabled, toggle the server's enabled flag on, then trigger the task manually.
Disable OIDC PAR for an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. that does not support the Pushed Authorization Request endpoint.
📍In the MISP UI, go to Server Settings › Plugin › Authentication, find the OIDC settings section, and set the Disable PAR option to true.
Adds scheduled TAXII push as a new task type, with single-server and all-enabled push modes, a per-server enabled flag, and proxy support.
New option to disable OIDC Pushed Authorization Requests (PAR) for environments that cannot support it.
Overmind UI: tags and galaxy clusters can now be added directly from the Event View.
Overmind UI: correlation graph integrated into the Insight UI.
Overmind UI: object index and event-report views/forms migrated, including attachment add and event-report add form.
+2 moreshow less
Overmind UI: new colour scheme, bolder MISP element icons, item-count badges in index views, and clickable breadcrumbs.
Adds SiberKapan (Turkey-focused threat-intel platform) to the default feeds.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The rdkafka config file path/name is now strictly validated and the setting is restricted to CLI-only configuration — any site-admin web-based rdkafka config path will no longer be accepted.
2 more releases in this issue
· 2026-06-05 → 2026-06-22
MISP v2.5.41 adds event index mass tagging, async server updates, new threat intel feeds, and a reworked Overmind UI.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.41 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.41
└──▷ USE IT
Set a custom OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. login button label so users see your organisation's identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. name instead of a generic button.
yaml
# In app/Config/config.php or equivalent OIDC config block:
'OidcAuth' => [
'button_text' => 'Login with CorpSSO',
...
]
Adds mass tagging and galaxy cluster attachment to multiple selected events at once from the event index.
Major rework of the Overmind (Beta) UI Event View, Collections, and List pages.
Supports configurable login button text for OIDC authentication.
Surfaces hidden server setting behaviours (CLI-only, file-only, redacted) in the server settings view.
Enables async background-job updates via /servers/updateJSON.
+2 moreshow less
Adds PrecisionSec OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. Threat Intelligence and Rectifyq MISP Feeds as default feeds.
Shows current server time when adding a scheduled task.
MISP 2.5.39 adds analyst dashboard widgets, WebGL globe visualizations, ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. heatmap redesign, and expanded STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. interoperability.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.39 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.39
└──▷ HOW TO FIND IT
Enable the 'overlap with my org' correlation widget to surface events sharing indicators with your organisation's data.
📍In the dashboard, go to the widget picker, select Overlap with my org, configure country/sector filters and exclude_own_org as needed, then save the layout.
Switch the dashboard between light and dark themes without a page reload to match analyst environment preferences.
📍In the MISP dashboard, click the theme toggle control; the dashboard and all charts retheme live and the preference is persisted for your user account.
New analyst-focused dashboard widgets: trending vulnerabilities, threat actors, and ATT&CK techniques; new-data KPI cards; event cards; recent event reports; recent analyst notes and opinions; recent local galaxy clusters; and 'overlap with my org' correlation-based views.
WebGL globe support for attack-flow visualizations, with selectable globe skins and idle auto-rotation.
Live light/dark dashboard theme switching — including chart retheming — with persisted user preference and no-flash boot.
ATT&CK heatmap redesigned with parent/sub-technique aggregation, inactive technique hiding, readable labels, and a clearer red intensity ramp.
Dashboard widgets gain typed configuration controls for dimensions, country/sector filters, exclude_own_org, event stream filters, and galaxy type filtering.
+5 moreshow less
Save as template now saves via AJAX in the dashboard slide-in panel, keeping users on the current board.
New misp-iconify icon set used for dashboard stat glyphs.
Updated misp-stix 2026.6.1 brings full TLP marking support shared across import and export paths, expanded patterning-language support, more deterministic byte-stable conversions, and regenerated mapping documentation.
Supports EM SPACE (U+2003) in FreeText import for broader indicator parsing coverage.
Required publish permission enforced for publishing galaxy clusters.
ThreatStream Next Gen adds permission-based controls and per-PIR sharing for PIRs
Adds permission-based controls for PIRs, allowing Organization Administrators to configure user capabilities for create, edit, run, and delete operations on PIRs
1 detail in Everything
6 more releases in this issue
· 2026-06-10 → 2026-06-24
Adds ja4_tls_fingerprint indicator type, multiple new APP Store feeds, and PDRP Takedown Service to ThreatStream.
Adds ja4_tls_fingerprint indicator type to ThreatStream for tracking TLS handshakes
Makes the URLhaus Hostfile open-source feed available for activation in the APP Store
Enables the Anomali PDRP Takedown Service enrichment for submitting takedown requests via the APP Store
Goes generally available with self-service on-boarding for the Anomali PDRP Enhanced premium feed
Adds Cognyte: Luminar IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself., LeakedCredentials, and AI Cyber Feeds premium feeds to the APP Store
Anomali Search gains an OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. Field Panel to browse schema fields and filter results directly from the UI.
Adds the OCSF Field Panel (Limited Availability) in Event Search for browsing OCSF Version 1.2.0 schema fields by category.
ThreatStream adds Zscaler URL push, PDRP asset config, and multiple new premium/intel feeds via App Store
Zscaler integration pushes observables to the Custom Malicious URLs list in ZIA
PDRP feed allows configuration of organizational assets on the Assets page
App Store adds Check Point Exposure Management IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. Intelligence and Doppel premium feeds
Adds OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. schema support for Search views
Suricata rules in Insights Cards, Ask AI Playground, @reference snippets, new State-sponsored actor model
Adds access to Suricata detection rules extracted from articles via the Detection Rules section of Insights Cards
Introduces the Ask AI Research Playground for self-serve threat intelligence exploration
Enables creating reusable text/Markdown snippets in Org Profile and pulling them into prompts using @reference across Ask AI, Report Builder, and Intel Agent
Adds a new AI Model: State-sponsored threat actors
4 details in Everything
1 more release in this issue
· 2026-06-10 → 2026-06-24
Feedly adds Atlassian/Oracle filter, PoC model split, Talos/Atlassian/Apache/Google OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. sources, and improved Ask AI.148
Adds Proof of Exploit model to distinguish PoC code from active exploitation.
Adds Atlassian and Oracle security updates under the Security Update Releases filter in the Vulnerability Agent.
Adds 5 new advisory sources: Talos, Symphony, Atlassian, Apache, and Google OSV.
Enriches Ask AI responses with intel profile context.
Flashpoint introduces a new MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. for integrating intelligence into AI workflows.
└──▷ HOW TO FIND IT
Connect an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.-compatible AI client like Claude to access Flashpoint intelligence via OAuth.
📍Configure your MCP client (e.g., Claude) to connect to the Flashpoint MCP Server using OAuth authentication or an API token.
Adds the Flashpoint MCP Server capability to integrate intelligence data directly into AI assistants and AI-native workflows via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP).
Exposes Flashpoint intelligence modules including Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data as queryable tools.
Supports OAuth authentication or API tokens for connecting AI assistants to the Flashpoint MCP Server.
Flashpoint launches its MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. for reading intel via AI assistants.
Adds the Flashpoint MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server, exposing intelligence as data tools for AI-native workflows
Enables search, retrieve, enrich, and analyze capabilities for Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data
Supports OAuth authentication or API token connections for MCP-compatible clients like Claude and Gemini
Cribl Stream 4.18.2 adds Google Cloud Observability destination, Apps RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., cribl diag connect, SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxies for Outpost Nodes
Adds Google Cloud Observability Destination for sending OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. metrics, logs, and traces to Google Cloud.
Adds RBAC control for Apps (Preview) to restrict user and team access per App.
Adds cribl diag connect CLI command to test Leader connectivity from managed Stream Workers and Edge Nodes.
Enables SOCKS proxy support for Outpost Node communication with the Leader.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Single-item GET requests in the Cribl.Cloud API now return HTTP 404 Not Found for unknown IDs instead of HTTP 200 OK with an empty items array.
!The CRIBL_OUTPOST_LISTENER_URL environment variable is deprecated due to Outpost listener service startup fixes.
NodeZero June 2026 adds reusable Scopes for external pentesting, OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. export in Real-Time View, and Executive Summary PDF reports
Adds Scopes as reusable entities to replace legacy Asset Groups for defining external testing boundaries
Exports granular event logs from the Real-Time View (RTV) Event Metadata Table in OCSF (Open Cybersecurity Schema Framework) format
Adds a new Executive Summary Segmentation PDF report type accessible via the Portal
Allows bulk uploading of CSV or plain-text files for external asset management
Enables direct loading of large CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. ranges (/16 through /32) in External Asset Management
+1 moreshow less
Adds TGT (Ticket Granting Ticket) creation submodule to simulate AS-REQ exploitation and capture credentials
Rapid7 June 2026: New integrations, IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. insights, NGAV rollout controls, bot creation from JSON
Adds Exabeam New-Scale, SUSE Manager, Ubuntu Landscape, Zimperium MTDMTDMoving Target Defense: a strategy that continuously shifts a system's attack surface — rotating IPs, ports, or configurations — so attackers cannot rely on static reconnaissance data., SonicWall Capture Client, Nudge Security and Symmetry DataGuard DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. connectors to Attack Surface Management
Adds Create Bot From JSON dropdown option in Automation (InsightConnect) > Bot Factory to create bots directly from JSON configuration files
Adds Kubernetes runtime security monitoring capabilities to Cloud Security (InsightCloudSec), including sensor deployment, process termination actions, and least-privilege network policy enforcement
Includes Microsoft Defender vulnerabilities in the unified Remediation Hub view across Attack Surface Management, Exposure Command, and Incident Command
Updates Cloud Security (InsightCloudSec) with new AWS IaC Insights (e.g., Web App without Log Streaming Fully Configured, ECS Task Definition without Logging Configuration) and Query Filters (e.g., Cloud Region Disk Encryption)
+1 moreshow less
Adds Gradual Prevention rollout capability for Next-Generation Antivirus and Ransomware Prevention, allowing protection to be enabled for specific endpoint groups while others remain in Detection Only mode
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Offline installation support has been removed for the following connectors in Attack Surface Management: AWS Core, AWS EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware., AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege., AWS Route53, AWS S3, Amazon Inspector, Armis, Atlassian Bitbucket Cloud, Atlassian Jira Cloud, Azure Core, BigFix, Bitdefender, CrowdStrike Falcon, Cyberhaven, Device42, Devo SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., Exabeam, ExtraHop, GCP Core, Google Workspace, Infoblox BloxOne Threat Defense, Jamf, Lansweeper, MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances., ManageEngine OpManager, Microsoft Active Directory, Microsoft Defender, Microsoft Entra ID (formerly Azure AD), Microsoft Graph Security, Microsoft Intune, Microsoft SCCM, Microsoft SQL, Mosyle MDM, Nexthink, Okta, Paessler PRTG Network Monitor, Palo Alto Cortex Cloud CSPM, Proofpoint TAP, SailPoint Security Cloud, ServiceNow, Slack, Snyk, Splunk, Tanium, Tenable Security Center, and Tenable Vulnerability Management. Offline installation workflows for these connectors will no longer function after upgrade.
Furl adds Open/Closed State column for target filtering and simplifies Validation status display.
Targets now have a new Open/Closed State column that lets you filter and sort targets by whether they’re still open or have been closed
The Validation column is simplified — the Status now reflects only terminal outcomes, and the in-progress validating state is collapsed into a cleaner indicator
2 details in Everything
4 more releases in this issue
· 2026-06-04 → 2026-06-15
Tenable One Web App Scanning adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. auth type with Authorization Code, Client Credentials, and Device Code flows.
Adds OAuth as a selectable authentication type in scan credentials for supported web application targets
Supports three OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..0 flow options: Authorization Code, Client Credentials, and Device Code
Enables configurable session verification using response body pattern, header inspection, or HTTP response code within the new auth configuration
3 details in Everything
6 more releases in this issue
· 2026-06-04 → 2026-06-25
Version 3.93.5 includes improvements to IoA time precision and deployment workflow support, along with numerous bug fixes for stability and accuracy.
Granular time filtering for Indicators of Attack (hour, minute, second) in syslog alerts.
New capability to retrieve listenerLauncher.ps1 hash from the IoA deployment script for EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. whitelisting.
Tenable One OT Exposure 4.7.44 adds centralized subnet management, IEC 61850 GOOSE detection, Yokogawa DCS activity visibility, air-gapped agent support, saved views, and TLS
Adds MonitoredNetwork types, IemMonitoredNetworks/IemMonitoredNetworksRaw Query fields, and bulk enable/disable Mutations for centralized enterprise subnet management.
Adds GooseStream, GOOSEAnomalyDetails, and gooseStreamsByAssetId Query field to expose IEC 61850 GOOSE traffic and anomaly details in the asset view.
Adds PolicyEventType values YokogawaDcsStart, YokogawaDcsStop, YokogawaFunctionBlockChange, YokogawaSnapshotSave, YokogawaSnapshotLoad, YokogawaTagWrite, and YokogawaDcsStep for Yokogawa Centum VP DCS activity detection.
Adds OtdScan and OtdScanProfile types, otdScans/otdScanProfiles Query fields, and createOtdScan/downloadOtdScans Mutations to support offline/scanned OT Agent deployments in disconnected environments.
Adds the networkAreaId field to OtAgentDetails, SensorDetails, Mutation.editOtAgent, and Mutation.testAdHoc*Credentials for centralized network area anchoring.
+2 moreshow less
Adds My Saved Views capability allowing analysts to save, name, and reuse custom filter combinations across sessions.
Adds TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. with TLS support for Syslog forwarding by introducing tlsEnabled: Boolean and caCert: String arguments to Mutation.newSyslogServer, Mutation.setSyslogServer, and testAdHocSyslogServer, and tlsEnabled/caCert fields on the SyslogServer type.
Tenable Exposure Management adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. Heatmap JSON/CSV export and Security Controls visibility/filtering in Attack Path.
Adds MITRE Navigator-compliant.json export from the MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. Heatmap tab for overlay in external tools
Adds CSV export from the MITRE ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. Heatmap tab containing technique names, priorities, asset counts, and deep links
Surfaces detected EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. and firewall security controls data across Top Attack Techniques, Top Attack Paths, and Attack Path Graph
Adds Security Controls filter in Attack Path to scope investigations to paths with or without active coverage
Tenable One VM 2026 adds a new VM Custom Role with granular navigation and action-based RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. toggles
Adds VM Custom Role to Tenable One Vulnerability Management for role-based access controlrole-based access controlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. (RBAC)
Enables navigation-based permissions by mirroring the UI navigation bar into permission settings
Provides granular toggles to enable or disable specific areas like scans, sensors, or reports
Introduces an action-based matrix allowing precise read vs. full write access with restricted actions removed from the UI
ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. findings (SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS, HTTP Metadata, WHOIS) now visible in Tenable Explore with filtering and grouping.
Surfaces External Attack Surface (ASM) findings directly in Explore alongside existing vulnerability data for Host and Web Application assets
Adds SSL/TLS, HTTP Metadata, and WHOIS finding subtypes to Explore with detailed attributes like cipher suites, security headers, and registrant details
Enables filtering, searching, and grouping of ASM findings in Explore using the same query builder as other finding types without running a scan
Vuls v0.39.3 adds EOL data for new OS versions and enables Windows vulnerability detection via vuls2.
└──▷ GET THIS VERSION
$ git clone --branch v0.39.3 https://github.com/future-architect/vuls.git
# already have the repo? check out this version:$ git checkout v0.39.3
Supports Windows vulnerability detection using the vuls2 detector engine.
Updates GetEOL with newly released OS versions for accurate end-of-life tracking.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The vuls2-based Windows detector (detect windows with vuls2) changes detection behaviour for Windows targets — existing Windows scan workflows may produce different results on upgrade.
!AnalyzeLibrary failures are now treated as warnings instead of errors, which may change pipeline exit codes or alerting behaviour that relied on hard failures.
Edgescan adds multi-severity filtering, asset disable reasons, named EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do. investigations, and non-integer UTC pause schedules.
└──▷ HOW TO FIND IT
Filter vulnerabilities by both Critical and High severity in the UI.
📍In the assessment view, apply filters: Severity = Critical, High.
Name your EASM investigation to keep assets organized from the start.
📍Create a new investigation -> Enter a name -> Save.
Pause scans in a timezone like IST (+5:30) without calculation errors.
📍Settings › Schedule › Pause Schedule › Select IST (UTC+5:30) or similar offset.
Adds filter by multiple severity levels for vulnerabilities
Adds the ability to name an EASM investigation during creation
Enables pausing scan schedules in non-integer UTC offset timezones (e.g. IST +5:30)
Requires a reason when disabling an asset, with standardized options or free text
DefectDojo 3.0.100 adds Govulncheck V2 and PICUS BAS parsers, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. vector parsing for Cargo Audit, and Endpoint_Status API updates.
└──▷ GET THIS VERSION
$ git clone --branch 3.0.100 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 3.0.100
Adds Govulncheck Scanner V2 parser for Go vulnerability scanning results.
Adds PICUS Breach and Attack Simulation CSV parser for BAS tool ingestion.
Parses CVSS vectors and derives severity from Cargo Audit findings.
Updates Endpoint_Status API with new enhancements.
4 details in Everything
1 more release in this issue
· 2026-06-15 → 2026-06-22
Import Xygeni JSON results (SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment., SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself., or Secrets) into an engagement.
Adds a full Tailwind CSS UI rebuild (Dojo V3) with updated legacy authorization and open-source surface changes.
New Alert Logic CSV parser for importing Alert Logic findings.
New Xygeni JSON parser supporting SAST, SCA, and Secrets finding types.
GitHub Vulnerability parser now sets the fix_available field on findings.
Exposes created_before, created_after, updated_before, and updated_after date filters on the Risk Acceptance API.
+9 moreshow less
Adds mitigation finding filters to the findings API and UI.
Import-time tags are now applied per batch before post-processing; old findings are not re-tagged.
Supports requesting peer review from yourself.
Adds Brazilian Portuguese (pt-BR) and Russian locale translations.
Jira integration now checks statusCategory instead of the resolution field to determine issue status.
Scopes report views to only the requesting user's authorized products.
Applies object-level permission checks to finding duplicate API actions.
KSA Security Advisory source added to the advisory database.
Cascade delete gains a preview_only parameter for dry-run previews.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!Credential Manager is removed (deprecated in 2.57, EOL in 2.59); any configuration or API usage relying on Credential Manager will break.
!Stub Findings are removed (deprecated in 2.57, EOL in 2.59); workflows using Stub Findings will break.
!Questionnaire API endpoints are removed (deprecated in 2.56, EOL in 2.59); integrations calling those endpoints will break.
!The sync= dispatch kwarg is renamed to force_sync=; callers passing sync= will break.
!V3 functionality and organization/asset relabeling are now enabled by default via settings.dist.py; existing deployments relying on the old defaults will see changed behavior.
!A database migration is required; the migration refactors and removes deprecated features while preserving database state — upgrading without running migrations will break the application.
CVE MCP Server provides an MCP interface for looking up Common Vulnerabilities and Exposures (CVEs).
CVE MCP Server v0.2.0 adds triage_cve orchestrator, VulnCheck fallback, SSVCSSVCA decision-support framework for vulnerability prioritization, maintained by CISA and Carnegie Mellon's CERT/CC, that uses stakeholder-specific decision trees to guide patch and remediation timing instead of relying on numeric scores alone. decisions, and streamable-HTTP transport
└──▷ GET THIS VERSION
$ git clone --branch v0.2.0 https://github.com/mukul975/cve-mcp-server.git
# already have the repo? check out this version:$ git checkout v0.2.0
└──▷ TRY IT
Run a deep triage of a specific CVE, enabling SSVC decisioning via the new HTTP transport.
Configure the server to use streamable HTTP by setting the environment variable.
$ export MCP_TRANSPORT=http
Fetch EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. scores for a CVE using the newly registered MCP Resource URI.
Adds triage_cve tool as an orchestrator that fans out concurrent calls to NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization., EPSS, CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal., and public PoC discovery to compute a composite risk score.
Introduces depth parameter (quick, standard, deep) for the triage_cve tool; deep mode emits an SSVC v2SSVC v2A vulnerability prioritization framework maintained by CISA and Carnegie Mellon's CERT/CC that uses decision trees to score CVEs by exploitability and impact context rather than a raw numeric score, helping triage at scale. gated decision (CISA Deployer model) with outcomes Act, Attend, or Track.
Adds automatic VulnCheck NVD++ fallback when NIST NVD is unreachable or throttled.
Implements CISA KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. hard override logic: CVEs listed in CISA KEV are scored as CRITICAL (score clamped ≥ 76).
Stamps scoring_version into the triage_cve, calculate_risk_score, and health_check responses.
+4 moreshow less
Adds MCP_TRANSPORT=http environment variable to enable streamable-HTTP transport instead of the default stdio.
Registers new MCP Resources: kev://catalog, epss://scores/{cve_id}, and manifest://tool-hash (SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. over registered tool surface).
Adds new MCP Prompts: patch_decision, compare_and_prioritize, and dependency_triage.
Expands the health_check endpoint to include scoring version, manifest hash, and configured-key status.
OSV-Scanner v2.4.0 adds CycloneDX 1.7CycloneDX 1.7An OWASP-maintained Software Bill of Materials standard and schema; version 1.7 adds attestations and evidence fields, giving cyber tools a richer, machine-readable format for expressing supply-chain trust claims., Swift/Chisel extraction, .csproj scanning and a new ScanGoModVersion config key
└──▷ GET THIS VERSION
$ git clone --branch v2.4.0 https://github.com/google/osv-scanner.git
# already have the repo? check out this version:$ git checkout v2.4.0
os/chisel extractor plugin to scan container images built with Canonical Chisel.
Enables the swift/packageresolved plugin by default for SwiftURL vulnerability scans.
Supports CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. 1.7 specification via updated cyclonedx-go dependency.
Adds .csproj and Central Package Management (nugetcpm) source scanning plugins, enabled by default.
New ScanGoModVersion configuration setting (disabled by default) to control parsing of toolchain version directives in go.mod.
+1 moreshow less
Extracts Alpine OS distro version from PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously.distro qualifiers to scan packages under respective Alpine ecosystems.
Brinqa 12.1.403 adds BCL filtering during connector sync, multi-hop BQL traversal, and bulk Activate/Deactivate actions
returnFields in the BQL API now supports nested projection and wildcard field selection for precise response control
BQL queries can now perform multi-hop relationship traversal using recursive syntax to traverse hierarchical data
Connector data sync now supports filtering via BCL conditions based on attribute values and conditions
Configuration list views gain Activate and Deactivate bulk actions for managing risk factors, SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. definitions, and status configurations
Tenable Nessus 10.12.1 adds variable support for custom audit files in Security Center scans and FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. scanner compatibility.
└──▷ HOW TO FIND IT
Ensure legacy China-based scanner deployments can reach Tenable One VM post-upgrade by updating the endpoint.
📍Update connection settings on mainland China scanners to use sensor.cloud.tenablecloud.cn instead of sensor.cloud.tenable.com
Enable parameterized custom audit files in Security Center scans.
📍In Tenable Security Center, provide variables to custom audit files when scanning
Adds the ability to provide variables to custom audit files when scanning from Tenable Security Center
Expands support so Tenable One Vulnerability Management FedRAMP environments accept Tenable Nessus scanners versions 10.5.0 and later
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Scanners, Agents, Web App Scanning scanners, or NNM located in mainland China must now connect through sensor.cloud.tenablecloud.cn instead of sensor.cloud.tenable.com.
Automox MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. 2.0 adds per-tool safety gates, device deletion/upload tools, and full API coverage.
Adds AUTOMOX_MCP_ALLOW_APPLY_REMEDIATION_ACTIONS environment variable to gate remediation execution.
Adds AUTOMOX_MCP_ALLOW_SPLASHTOP_BULK_INSTALL_UNINSTALL=true flag to allow bulk Splashtop install/uninstall actions.
Adds delete_device tool for irreversible single-device deletion, gated by AUTOMOX_MCP_ALLOW_DELETE_DEVICE.
Adds update_device tool to set name, group, tags, exception state, or IP addresses for a single device.
Adds upload_policy_file tool to upload local installers to Required Software policies with directory allowlist and size cap.
+2 moreshow less
Updates upload_action_set to accept raw CSV from Qualys, Tenable, CrowdStrike, Rapid7, or generic sources via multipart data.
Adds list_webhook_deliveries tool to surface recent delivery attempts with status, latency, and errors.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!AUTOMOX_MCP_ALLOW_REMEDIATION is renamed to AUTOMOX_MCP_ALLOW_APPLY_REMEDIATION_ACTIONS; leaving the old name prevents the tool from registering.
!Bulk Splashtop actions now require AUTOMOX_MCP_ALLOW_SPLASHTOP_BULK_INSTALL_UNINSTALL=true in addition to write mode.
Windows Package Manager v1.29.280 adds source priority, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. upgrade tools, and sorted list output.
└──▷ GET THIS VERSION
$ git clone --branch v1.29.280 https://github.com/microsoft/winget-cli.git
# already have the repo? check out this version:$ git checkout v1.29.280
Adds sourcePriority experimental setting to assign numerical priority to sources for result ordering
Adds --sort <field> flag to winget list for multi-field sorting with direction control
Extends WinGet MCP server tools find-winget-packages and install-winget-package with upgradeable and upgradeOnly parameters
Adds logging.fileNameStrategy user setting to configure installer log file naming (manifest, timestamp, guid, shortguid)
Adds --no-progress flag to all commands to disable progress reporting for automation
An asset discovery and inventory platform that identifies and maps all devices on networks without requiring agents.
runZero v5.0.260625 adds VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Endpoint asset creation, external issue sharing via the issues datagrid, and accurate multi-site finding counts.
AWS integration can now create assets for VPC Endpoints
Issues datagrid allows sharing issues externally
Findings Overview widget now accurately counts findings appearing in multiple sites
Rapid7 InsightVM Cloud task runs no longer exclude non-critical vulnerabilities
4 details in Everything
8 more releases in this issue
· 2026-06-04 → 2026-06-25
Recurring tasks now pause with reason on inaccessible credentials; asset/vuln/cert queries run faster
Recurring tasks that reference an inaccessible credential after an ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. change now pause and indicate why.
Asset, vulnerability, and certificate queries now run faster.
runZero 5.0.260610.1 introduces Exposure Management dashboard, Jira sync, external reports, and Arista EOS EOL data
Adds the new Exposure Management dashboard for high-level internal, external, and cloud attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. overview.
Enables creation of Issues to track findings with optional third-party synchronization to Jira.
Allows generating and sharing externally visible reports for most dashboards and inventory tables.
Adds Operating System End of Life (EOL) information support for Arista EOS.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The Explorer no longer merges assets by MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet..
runZero v4.9.260604.0 adds client-level defaults for stale integration attributes and vulnerability expiration settings, and enriches site-updated events.
Adds client-level defaults for stale integration attribute and vulnerability expiration settings, updatable by superusers
Enhances the site-updated event to include details about what changed on the site
Intruder introduces AI-driven vulnerability management on Enterprise plans with automated check generation.
Automatically builds detection checks for newly disclosed vulnerabilities using an AI pipeline that averages under an hour from NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. analysis to QA readiness.
Introduces Intruder AI-powered check filter in the checks list to identify checks built by the new AI system.
Enables active checks that safely interact with systems to confirm real exposure, moving beyond version-based inference.
3 details in Everything
1 more release in this issue
· 2026-06-09 → 2026-06-18
Axonius 9.0.1 adds custom SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. compliance values, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. role/data scope mapping, and 6 new adapters.
└──▷ HOW TO FIND IT
Configure custom SaaS compliance standards by setting recommended values.
📍In SaaS Applications settings, define Custom setting recommended value to override Axonius default recommendations.
Map roles and data scopes independently in SAML configuration.
📍Enable Advanced Mapping in Access Settings › SAML, then configure separate role assignment and data scope assignment tables matching different SAML claims.
Fetch vault secrets and keys from Oracle Cloud using the generic adapter engine.
Adds Custom setting recommended value for SaaS application settings to define organization-specific compliance standards.
Introduces independent mapping of roles and data scopes in SAML configurations via two separate tables in Advanced Mapping.
Adds six new adapters: Bold Security, EasyDNS, Google Threat Intelligence ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them., Industrial Defender ASM, Lenovo Device Orchestration, One Identity Safeguard.
Updates Airlock Digital adapter to fetch Agent Versions field for devices.
Enables AWS adapter to set Fetch Organization Accounts as assets (renamed from Fetch Organizations as assets).
+26 moreshow less
Enables Archer IRMIRMInsider Risk Management: a discipline focused on detecting and responding to threats from employees or contractors with legitimate access, giving cyber tools behavioral analytics and policy-enforcement hooks for internal actors. adapter to fetch Application Settings via new Fetch Application Settings advanced setting.
Adds Arnica.io advanced setting to filter findings by severity level (critical, high, medium, low, info, unknown).
Enables Cisco Secure Access adapter in the Agent Coverage Workspace for monitoring agent deployments and coverage gaps.
Updates Cisco Webex adapter to fetch Activities, role information, and OAuth authorizations via new advanced settings.
Allows Cloudflare Zero Trust adapter to fetch tunnel connections as Network Services.
Adds AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate assets as Serverless Functions in CrowdStrike Falcon adapter with restructured POD asset configuration.
Enables Custom Files adapter to fetch Application Settings.
Adds CyberArk Endpoint Privilege Manager support for Software assets and installed programs via advanced setting.
Introduces advanced setting in CyberArk Idaptive adapter to control device entity fetching during discovery.
Adds configurable Safes page size setting in CyberArk Privilege Cloud adapter to prevent timeouts.
Enables CyberArk Privileged Account Security adapter to parse devices from user account domain values via Parse Device from User Account advanced setting.
Updates Duo Beyond adapter to fetch account settings including password policies, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. requirements, and lockout thresholds.
Adds GitHub option to fetch and store SSH keys as Secrets in Axonius.
Enables Google Security Operations SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. adapter to use Delimiter advanced setting for UDM queries (replacing list format with delimited string).
Updates HPE Aruba Networking ClearPass Policy Manager adapter with new constraints for Extended Info Fetch Window (Days) (0-90 days) and async fallback options.
Adds Jamf Pro option to fetch device compliance information from Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. API.
Enables Jira Service Management adapter to support Custom Parsing for Firewalls and Groups/URLs entity types from Insight.
Allows Microsoft AD adapter to fetch printers as Devices.
Updates Microsoft Defender for Endpoint adapter with detailed vulnerability info in records and changed default for vulnerability aggregation to True.
Enhances New Relic adapter to enrich Windows Services onto parent HOST devices.
Adds NodeZero support for MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet., UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide., network services, and Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. password audit findings.
Updates Observium adapter to fetch Network Devices.
Updates Oracle Cloud adapter to fetch Vaults, Vault Secrets, Keys, and Volume Backup Policy via generic adapter engine (disabled by default).
Enhances Proofpoint Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. adapter to automatically extract directory fields from API responses.
Adds Qualys Cloud Platform advanced setting to fetch software install paths via CSAM API.
Replaces boolean Parse Proof and Key Rich Text Fields for vulnerabilities in Rapid7 adapters with granular configuration for selecting specific fields.
31 details in Everything
└──▷ BREAKING ON UPGRADE
!The AWS adapter setting Fetch Organizations as assets is renamed to Fetch Organization Accounts as assets.
!HPE Aruba Networking ClearPass Policy Manager requires Extended Info Fetch Window (Days) values to be between 0 and 90; existing configurations outside this range will fail or need updating.
Intune adds STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. SCAP audit baseline for Windows, enrollment time grouping for Apple ADE, and new Android Management API opt-in paths for work profile devices.
└──▷ HOW TO FIND IT
Use web enrollment for tenants to skip app installation during Android work profile onboarding.
📍Devices › Device Onboarding › Enrollment › Android › Personally owned devices with a work profile › Use web enrollment for all users enrolling into Android personally-owned work profile management
Adds STIG audit baseline capability for Windows 10/11 to assess compliance against DISA Security Technical Implementation Guides without enforcing settings
Enables enrollment time grouping for Apple ADE on iOS/iPadOS and macOS to identify Microsoft Entra security groups during setup
Adds web based enrollment option for Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. personally owned devices with a work profile via the Intune admin center
Moves to Android Management API (AMAPI) implementation for policy delivery on Android personally owned devices with a work profile
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Managed Win32 app content now requires HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. delivery; clients bypassing Microsoft Connected Cache will fall back to the CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server., increasing internet traffic and bandwidth usage.
1 more release in this issue
· 2026-06-08 → 2026-06-15
New MHS silence feature, Multiple Managed Accounts support, in-place CA renewal, Shadow AI detection, and strict Android tunnel mode.
Adds MHS_silence_apps configuration to silence apps during Managed Home Screen authentication prompts on Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. devices.
Supports Multiple Managed Accounts within a single app, applying App Protection Policies separately per account for Teams on iOS/iPadOS v8.10.0+.
Enables custom text in the top bar of the Managed Home Screen with variables {{SerialNumber}}, {{DeviceName}}, and {{TenantName}}.
Introduces a new device configuration profile for 802.1x Wired Networks on iOS/iPadOS devices.
Allows in-place renewal of Cloud PKICloud PKIA certificate authority and lifecycle-management service hosted in the cloud, letting cyber tools issue, renew, and revoke X.509 certificates without the operator running on-premises CA infrastructure. issuing certification authorities (CAs) without recreating SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. certificate profiles.
+5 moreshow less
Enables Strict Tunnel Mode on Android Enterprise devices, forcing all traffic through the VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. and blocking non-tunnel access if disconnected.
Introduces a Grant MTD role permissions toggle to grant enhanced security exemptions (suspension, hibernation, power restrictions) to Mobile Threat Defense apps on Android COBO/COPE devices.
Adds Vulnerability Remediation Agent support for Microsoft Entra agentic identity, deprecating human user identity support within 90 days.
Adds properties catalog policies, device queries, and a Local AI Agent Baseline - OpenClaw preview to detect and block Shadow AI agents like OpenClaw on Windows devices.
Adds new Block Bluetooth sharing setting in the Android Enterprise settings catalog.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Managed Home Screen exit lock task mode password can no longer be configured via an app configuration profile; it must now use a device configuration profile.
!Vulnerability Remediation Agent human user identity support expires 90 days after this release, requiring migration to Microsoft Entra agentic identity.
ITarian adds Endpoint Intelligence (ad-hoc SQL), AMSI profile config, Python 3 scripting on Linux, Debian 12/macOS 26 support, CSV exports, and audio for remote control.
Endpoint Intelligence section with Dashboard, Device Queries, Query Library, and Monitors tabs enables ad-hoc SQL queries against Windows, macOS, and Linux endpoints
Profile Suggestions tab under Device Details > Associated Profiles on Windows shows compliant/non-compliant status for security profiles (Antivirus, Firewall, EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device., etc.) with side-by-side current vs. recommended values
Client Proxy and XCS Proxy tabs added to Linux profiles under Configuration Templates > Profiles allow configuring proxy server address, port, credentials, and fallback settings
Script procedures on Linux now support Python 3 with pre-included modules (Requests, Selenium, Beautiful Soup, psutil, Pillow)
Antivirus profile settings in Configuration Templates include a new AMSI configuration section under the Realtime Scan tab for enabling cloud-assisted AMSI scans
+3 moreshow less
Debian 12.x and macOS 26 are now listed as supported platforms in Settings > Support and can be enrolled via XCS
Antivirus Scan History tab added to Security > Endpoint Security Status showing last 90 days of records with export to CSV
Software Inventory tab on device details now includes an Export to CSV button
Fleet 4.87 adds Android L/W commands, W in API, GCS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. auth, Spotlight cmd palette, trace sampler endpoint.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.87.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.87.0
└──▷ TRY IT
Retrieve AB tokens using the new canonical CLI commands.
$ fleetctl get mdm-ab
Adjust trace sampling ratios at runtime for debugging high-cardinality endpoints.
$ PATCH /debug/trace_sampler
Enable GCS IAM authentication for software installer storage using ADC.
yaml
s3_software_installers_gcs_iam_auth: true
Added fleetctl get mdm-ab and fleetctl generate mdm-ab CLI commands to work with the new Apple Business (AB) terminology replacing ABM.
Added /api/v1/fleet/ab_tokens and /api/v1/fleet/mdm/apple/ab_public_key API endpoints for managing Apple Business tokens and keys.
Added mdm.apple_business YAML key in GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. config to replace the deprecated apple_business_manager key.
Added ability to deploy custom OS update configuration profiles for Apple and Windows hosts.
Added support for issuing Lock, Wipe, and Clear passcode commands to Android hosts via UI or API.
+7 moreshow less
Added the macos_applications filter for filtering host software lists in the UI and API.
Added continuous_automations_enabled field to GitOps YAML output and config for re-running automations on policy failure.
Added GCS IAM authentication support for software installers and file carving S3 storage, configurable via s3_software_installers_gcs_iam_auth and s3_carves_gcs_iam_auth.
Added route-aware head sampling for OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. trace export with configurable ratios for agent firehose endpoints.
Added GET/PATCH /debug/trace_sampler endpoint for adjusting trace sampling ratios at runtime without restart.
Added Spotlight command palette accessible via Command + K or Control + K in the Fleet UI.
Added Self-service categories page (Premium) under Software > Library for managing custom software categories.
12 details in Everything
└──▷ BREAKING ON UPGRADE
!The ABM terminology has been renamed to Apple Business (AB); the /abm_tokens, /mdm/apple/abm_public_key endpoints, and apple_business_manager config keys are deprecated.
Cordon v0.3.1 adds denylist_exceptions for trusted local services and improves startup diagnostics.
Adds top-level denylist_exceptions config to forward traffic to specific host:port destinations bypassing the SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. denylist
Improves service install/startup readiness waiting and logs exact command to diagnose failed starts
Improves startup secret validation to report keyring timeouts with affected service and account details
Cordon v0.3.1 adds denylist_exceptions config to allow trusted SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. bypasses.
Adds top-level denylist_exceptions in cordon.toml for specific host:port destinations exempt from the SSRF denylist, without injecting credentials.
cordon doctor now suggests commands for adding missing 1Password account selectors and warns about macOS Keychain approval requirements.
Zscaler Workflow Automation adds Notify node configuration wizard and time zone selection for notifications (June 26, 2026)
Adds a conversation-based Configure Notify Node window on the custom workflow builder page to assist with configuring user or escalation notifications.
Enables time zone selection for time-related merge tags on notifications created via Incident Details page, custom workflow builder, Notification Template page, or Admin Assignment window (defaults to UTC+00:00 if not set).
2 details in Everything
34 more releases in this issue
· 2026-06-01 → 2026-06-26
ZIA adds domain fronting exemptions and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. log fields to NSS feeds.
Adds URL Category Exemptions for Block Domain Fronting option in Advanced Settings to exempt specific URL categories from blocking
Adds Exempted Cloud Applications for Block Domain Fronting option in Advanced Settings to exempt cloud app categories or apps
Adds DLP Policy Action filter and column to Web Insights Logs and Endpoint DLP Insights Logs
Adds DLP Confirmation Message filter and column to Web Insights Logs and Endpoint DLP Insights Logs
Adds %s{dlp_policy_action} field to NSS and Cloud NSS feed output formats for web logs
+4 moreshow less
Adds %s{dlp_confirm_justification_msg} field to NSS and Cloud NSS feed output formats for web logs
Adds %s{dlp_confirm_justification_msg} field to NSS and Cloud NSS feed output formats for Endpoint DLP logs
Adds Unclassified and Under Review labels in SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Report for application classification
Displays certificate validity, WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. name, CVE ID, and breach URL in the SaaS Security Report for cloud applications
AI Asset Management adds GitHub integration for code repos, embedded AI app visibility, and new dashboard widgets.
Administration > Account Onboarding flow added to connect GitHub as a Code Repository provider for automated discovery of AI models and workflows in source code
Automated discovery capability now maps all discovered repositories to the Default Business Unit by default, with post-discovery reassignment support
Granular scan rule configuration available to control which connected repositories are scanned for embedded AI components
Public AI Overview page adds Upload Volume, Download Volume, and Embedded AI Apps widgets while removing Sensitive Data and Sensitive Data Transactions widgets
Locations tab introduced on the Usage Insights page to drill down into AI usage data by geographic location
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The Sensitive Data and Sensitive Data Transactions widgets are removed from the Public AI Overview page
ZIA adds Unclassified and Under Review application status labels and enriched security attributes to the SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Report.
Adds Unclassified and Under Review values for Application Status in the SaaS Security Report instead of defaulting to Unsanctioned
Expands SaaS Security Report to display certificate validity, WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. name, CVE ID, and breach URL next to Yes/No signals
Adds a Caution Interval drop-down menu to Browser EUN Template configuration for custom caution timing
ZPA adds Device Posture failure notifications, App Connector health API, and new VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. diagnostics dashboards
Adds Device Posture Profile Failure Notification configuration via the Manage Notifications button in the Add Access Policy UI
Adds a new Event Monitoring & Notification API service to monitor App Connector health diagnostics (CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware., memory, disk, bandwidth, etc.)
Adds an Access Policy Data Diagnostics page for viewing VPN access policy logs and diagnostic data
Adds a Traffic Flow Logs Diagnostics page for viewing VPN connection traffic flow logs
Adds a User Logs Diagnostics page for viewing VPN user connection logs
+1 moreshow less
Adds a VPN Service Edges Dashboard showing connector counts and total data transfer
ZIA adds custom application service groups, new UI columns, and associated REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints.
Adds GET /apps-services, POST /apps-services, GET /apps-services/{appServiceId}, PUT /apps-services/{appServiceId}, and DELETE /apps-services/{appServiceId} to the cloud service API for managing custom application service groups
Adds Definition column and filter controls to the Application Services page UI for viewing, editing, and filtering custom groups
Expands Forwarding policy, IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. Control policy, and Firewall Filtering policy configurations to select custom (CU) application service groups
ZIA introduces custom application service groups with API endpoints and policy integration
Adds ability to create custom Application Service Groups in the UI via the Definition column when Advanced Firewall is enabled
Allows Forwarding, IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. Control, and Firewall Filtering policies to select custom (CU) application service groups
Adds REST endpoints GET, POST, PUT, DELETE /apps-services for managing custom application service groups
ZIA adds Snowflake SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. integration, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. channel selection, domain profile API endpoints, and browser EUN caution intervals
Adds GET /domainProfiles, POST /domainProfiles, GET /domainProfiles/{id}, PUT /domainProfiles/{id}, and DELETE /domainProfiles/{id} to the Cloud Service API for domain profile management
Adds support for Snowflake as an API-Based Platform in Advanced SSPM, including visibility into posture misconfigurations via the SSPM Scan checkbox during tenant onboarding
Adds ability to select specific channels (e.g., Endpoint DLP, DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores.) for custom and predefined DLP engines to reduce unnecessary noise
Adds a Caution Interval drop-down menu in the Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window to configure per-browser caution intervals
Adds Caution Interval drop-down menu in Administration > End User Notifications > Browser > EUN Templates > Add Custom Message window to configure different caution intervals for different browser EUNs
ZPA adds LSS log receiver configuration at the Microtenant level in Limited Availability
Adds ability to configure and manage Log Streaming Service (LSS) receivers directly within Microtenants on both private.zscaler.com and zpatwo.net platforms
ZPA Resource Policy rules now support Application Catalog port selection and manual TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port ranges for microsegmentation
Adds the Application Port Template option in Resource Policy rules to select destination ports directly from the Application Catalog.
Zscaler AI Asset Management adds AWS Bedrock activity-based detection, report exports across pages, and Microsoft Copilot Studio integration
Adds activity-based detection for AWS Bedrock models using CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. events to include only those accessed in the preceding 90 days.
Enables report export on AI Assets (Models, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers, Agents) and AI Resources (Data Stores, Workloads, Guardrails, Identities) pages.
Adds Microsoft Copilot Studio support for automated agent discovery, security posture assessment, and entitlement visibility.
ZIA introduces custom application service groups, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. channel scoping, and new domain profile APIs
Adds GET /apps-services, POST /apps-services, GET /apps-services/{appServiceId}, PUT /apps-services/{appServiceId}, and DELETE /apps-services/{appServiceId} endpoints to manage custom application service groups via API
Adds new UI columns (Definition, view/edit/filter controls) on the Application Services page to define and manage custom application service groups when Advanced Firewall is enabled
Adds Channels selection capability when creating, editing, or cloning DLP engines to scope them to specific channels like Endpoint DLP or DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores.
Adds GET /domainProfiles, POST /domainProfiles, GET /domainProfiles/{id}, PUT /domainProfiles/{id}, and DELETE /domainProfiles/{id} endpoints for domain profile management via API
Zscaler AI Security adds standalone prompt hardening for shadow apps and in-UI RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. progress indicators
Adds standalone App Hardening enabling manual application registration via AI Infrastructure > Remediation page for unmanaged applications without standard onboarding.
Removes mandatory probe prerequisite for prompt hardening, allowing baseline hardening instructions to be activated immediately upon onboarding.
Adds visual progress indicator and background processing for RAG initiation from the App Configuration page.
ZIA adds Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. coverage for Box with 4 new controls
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. data inventory, on-prem SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. entitlement scanning, new AWS/Azure/GCP posture policies, VM directory excludes, Databricks catalog selection, and KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. auth fo
Adds SaaS data findings to the Data Inventory report for Out-of-Band CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. subscribers
Adds on-premises SMB file share scanning with LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory.-based identity entitlement detection
Adds 18 new data posture policies for AWS, Azure, and GCP tagging/labeling of sensitive data
Adds VM folder/directory exclusion paths in scan rules for AWS, GCP, and Azure virtual machines
Adds Databricks catalog selection within workspace scan rules for granular discovery
+2 moreshow less
Adds evidence snippet storage to customer-managed cloud storage for on-premises scans
Adds Kerberos authentication support for scanning On-Premises NetApp NFS and SMB shares
ZIA adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. channel scoping and new Domain Profile API endpoints
GET /domainProfiles, POST /domainProfiles, GET /domainProfiles/{id}, PUT /domainProfiles/{id}, DELETE /domainProfiles/{id} endpoints for Domain Profiles in Cloud Service API
Channel filtering for DLP engines (e.g., Endpoint DLP, DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores.) via the DLP Engines page
Adds httpAuthAllowedHosts config parameter to support SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. redirect authentication
Supports the httpAuthAllowedHosts configuration parameter to allow redirected hostnames to be added to the exception list for SAML-based IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. authentication.
ZIA adds Endpoint Context UI/API and JA4JA4A network fingerprinting method that hashes observable TLS handshake fields into a short, readable tag, giving cyber tools a stable, version-agnostic way to classify clients and detect anomalies. logging capabilities for encrypted traffic visibility
Adds new API endpoints GET /endPointApplications/customApps, POST /endPointApplications/customApp, PUT /endPointApplications/customApp/{id}, DELETE /endPointApplications/customApp/{id}, GET /endPointApplications/customApps/{id}, GET /endPointApplications/customApps/lite, GET /endPointApplications, GET /endPointApplications/lite, PUT /endPointApplications/{id}, GET /endPointApplications/cloudApps, GET /endPointApplications/policies, GET /endPointApplications/getCategoriesWithNonEmptyApps, GET /endPointApplications/count, GET /endPointApplications/cloudApps/count for managing endpoint application resources.
Adds new API endpoints GET /endPointApplicationGroups, POST /endPointApplicationGroups, GET /endPointApplicationGroups/{id}, PUT /endPointApplicationGroups/{groupId}, DELETE /endPointApplicationGroups/{id}, PUT /endPointApplicationGroups/resources/{groupId}, GET /endPointApplicationGroups/policies for managing endpoint application tag groups.
Adds new model attributes endPointApplications, endPointApplicationGroups, endPointApplicationThreatLevels, and excludeContextShieldEndPoint to SSLInspectionRule, FirewallFilteringRule, and FirewallDnsRule policy models to enable endpoint-based conditions.
Adds UI pages Application Investigation, Overview, and Inventory under Policies > Cybersecurity > Endpoint Context for endpoint application visibility.
Adds new columns and filters JA4 Fingerprint, JA4 Fingerprint A, JA4 Fingerprint B, and JA4 Fingerprint C to Web Insights Logs.
+1 moreshow less
Adds field %s{ja4_str} to NSS Feed Output Format for web logs to stream JA4 network fingerprints.
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. data inventory, on-prem SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. scanning with LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application., and 20 new tagging policies across AWS/Azure/GCP
Adds unified SaaS data findings in the Data Inventory report for customers subscribed to Out-of-Band CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic..
ZIA adds appInventory* filter fields to NSS /nssFeeds API and File Type Control rule expiration
appInventoryAppTypes, appInventoryThreatTypes, and appInventoryThreatCategories fields are available in the ZmanageNssFeed model for the /nssFeeds APIs to filter Application Inventory logs.
Admins can now set an expiration date for File Type Control policy rules.
ZPA Private Cloud Controllers now support OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. enrollment (requires v25.47.3+) and updated STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against.-hardened images for Azure/GCP with FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. enabled.
Adds OAuth 2.0 enrollment support for Private Cloud Controllers, allowing devices to obtain OAuth tokens via the zpa-oauth.private.zscaler.com server instead of provisioning keys
Updates App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened VM images on Microsoft Azure with FIPS enabled by default
Updates App Connector, Private Service Edge, and Private Cloud Controller STIG-hardened VM images on Google Cloud Platform (GCP) with FIPS enabled by default
ZPA adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. enrollment for PSEs and redaction of sensitive text in isolation profiles.
Adds OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..0 enrollment support for Private Service Edges (PSEs) on private.zscaler.com and zpatwo.net clouds
Allows admin to enable redaction of sensitive text in Zero Trust Browser isolation profiles
Zscaler DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. data inventory, on-prem SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. scanning with LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application., Databricks catalog selection, and exclusion paths.
Adds unified Data Inventory reporting that includes SaaS data findings from Out-of-Band CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. subscriptions
Adds Entitlement Findings support for on-premises SMB file shares to detect identities accessing sensitive data
Adds Kerberos authentication support for scanning NetApp NFS and SMB file shares
Adds ability to exclude specific VM folders or directories from scans by specifying file and directory paths in scan rules
Adds Databricks Catalog Management to select specific catalogs within a workspace during scan rule configuration
+1 moreshow less
Adds evidence collection for on-premises sensitive data stored in customer-managed cloud storage
Android/Linux/ChromeOS Client Connector adds step-up auth, Z-Tunnel override, key export and PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. PROXY support
Adds support for step-up authentication for conditional access to Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA)
Enables overriding the Z-Tunnel 2.0 protocol settings
Adds support for exporting the data-channel encryption key for debugging Z-Tunnel 2.0 traffic
Adds support to use a PROXY return statement in the PAC file used with ZIA Disaster Recovery Configuration
ZIA adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. justification logs to NSS feeds, Snowflake SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. support, and text redaction in isolation profiles.
Adds %s{dlp_policy_action} and %s{dlp_confirm_justification_msg} fields to NSS/Cloud NSS Feed Output Format for web logs
Adds %s{dlp_confirm_justification_msg} field to NSS/Cloud NSS Feed Output Format for Endpoint DLP logs
Adds Snowflake as an API-based platform in Advanced SSPM with tenant onboarding via the SSPM Scan checkbox
Headscale v0.29.0 adds SSH check-mode auth, policy tests, grants, nodeAttrs, Taildrive, and HA subnet router probing.
└──▷ GET THIS VERSION
$ git clone --branch v0.29.0 https://github.com/juanfont/headscale.git
# already have the repo? check out this version:$ git checkout v0.29.0
└──▷ TRY IT
Approve a pending SSH check-mode authentication request from the CLI without waiting for OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user..
$ headscale auth approve --auth-id <id>
Validate that a policy change won't break existing reachability assertions before applying it.
$ headscale policy check
Disable HA subnet router probing when you want to rely solely on disconnect-based failover.
yaml
node:
routes:
ha:
probe_interval: 0
Adds SSH check action support: when a policy rule uses "action": "check", connecting users must authenticate via OIDC or CLI approval before SSH access is granted.
New headscale auth CLI command group with approve, reject, and register subcommands for managing pending SSH-check and web-auth flows.
Evaluates the tests block in policy files (beta): reachability assertions run on headscale policy set, SIGHUP reload, and headscale policy check, rejecting bad policy before it is applied.
Evaluates the sshTests block in policy files (beta): per-SSH-rule accept/deny/check reachability assertions with the same rejection semantics as the tests block.
Supports Tailscale grants in policy files, enabling application-level controls (app field for Taildrive, peer relay) and traffic steering (via field for subnet routers/exit nodes) alongside ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource..
+7 moreshow less
Adds autogroup:danger-all as a source that resolves to 0.0.0.0/0 and ::/0 for policies that need to match all IPs including non-Tailscale addresses.
Supports nodeAttrs block in ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. policy files to assign Tailscale node capabilities (e.g. disable-captive-portal-detection, nextdns:<profile>, drive:share, drive:access) to targeted nodes.
Adds top-level randomizeClientPort policy field to control per-node client port randomization tailnet-wide.
Adds auto_update.enabled config option to set the tailnet-wide default for client auto-update via CapMap.
Taildrive file-sharing is now configurable through policy using drive:share/drive:access node attributes and tailscale.com/cap/drive grants.
Hostname sanitisation now uses Tailscale's MagicDNS rules, allowing previously-rejected hostnames with apostrophes, special characters, and dots to register successfully.
Enforces a strict one-minor-version-at-a-time upgrade path; skipping minor versions or downgrading is now blocked at startup.
12 details in Everything
└──▷ BREAKING ON UPGRADE
!Wildcard (*) in ACL sources and destinations now resolves to the Tailscale CGNAT range (100.64.0.0/10) and ULA range (fd7a:115c:a1e0::/48) instead of all IPs (0.0.0.0/0 and ::/0); policies that need to match all IPs must use autogroup:danger-all as a source or explicit CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. ranges as destinations.
!The randomize_client_port server-config key is removed; headscale refuses to start when it is set. Move the toggle to the policy file as the top-level randomizeClientPort field.
!The GivenName collision suffix changed from an 8-char random hash (laptop-abc12xyz) to a monotonic numeric suffix (laptop-1, laptop-2, …); MagicDNS names change on upgrade for any node whose label was previously in random-suffix form.
!Empty or all-non-ASCII hostnames now resolve to the literal node instead of invalid-<rand>.
!proto:icmp now matches only ICMPv4 (protocol 1); it no longer includes ICMPv6. Use proto:ipv6-icmp or protocol number 58 for ICMPv6.
!Tags, hosts, and IP addresses are now rejected as sources for autogroup:self destinations; policies using them will fail validation.
!Skipping minor versions (e.g. 0.27 → 0.29) or downgrading to a previous minor version is blocked; upgrade one minor version at a time.
!Minimum supported Tailscale client version is now v1.80.0.
Windows Client v2 beta adds adapter-aware resolver selection for internal namespaces in local forwarders
└──▷ HOW TO FIND IT
Configure split-DNS so that specific internal namespaces resolve through the active VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. tunnel's DNS instead of a static address.
📍In the Windows Client (v2) Local Forwarders settings, configure adapter-aware resolver selection for your internal namespaces.
1 more release in this issue
· 2026-06-04 → 2026-06-10
ScoutDNS Windows Client v2 public beta introduces WFP kernel-level DNS interception to enforce policy.
Adds a Microsoft-attested Windows Filtering Platform (WFP) kernel driver that intercepts outbound DNS at the network stack for system-level enforcement
Protected Browser 2026.23 adds Generative AI app grouping and File Transfers reporting
Groups applications into categories (ZTNAZTNAZero Trust Network Access, a framework that grants users access to specific applications only after continuously verifying identity and device posture, replacing broad VPN-style network access with least-privilege connections. resources, Popular web apps, Generative AI) for faster policy management
Adds File Transfers report template to log upload/download events with user, application, and status details
Use the beta feature to troubleshoot a failing site-to-site IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications. connection by getting AI diagnostics from the controller UI.
📍In the VNS3 Controller UI, navigate to the Connection Advisor tab and click the Advice option for the target clientpack.
Upgrade a running plugin instance in-place without changing its network address or interrupting service traffic.
📍Migrate the running plugin configuration to a new plugin instance/version on the same VNS3 controller, then start the new instance at the existing network address after stopping the old one.
Adds an Advice option to VNS3 Controllers for AI-assisted configuration and IPsec troubleshooting
Enables in-place upgrades by allowing plugin instances to be migrated and upgraded on the same controller
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Cannot import configurations based on releases before 3.5.0.5; OpenVPN server will fail to start if the snapshot contains an OpenVPN static key entry without a full new deployment.
Druva is a SaaS data protection platform that backs up enterprise workloads, endpoints, and SaaS applications and restores them after ransomware.
Druva Endpoints adds granular backup/restore for Claude Desktop profiles and enforces geofencing during device replacement workflows.
Adds Claude Configurations, Cowork components (Settings, Memories, Tasks, Artifacts, Projects, Scheduled tasks, Extensions), and Claude code components (Settings, Sessions, Routines, Projects metadata) to the protected workload list for Endpoints console.
1 detail in Everything
11 more releases in this issue
· 2026-06-01 → 2026-06-27
Automated Workspace Authorization replaces manual Azure AD group assignment for Power Platform protection.
Adds automated workspace authorization that removes the need to manually add an Azure security group to individual Power BI workspaces, requiring the exact name DRUVA-SG-DPPSPN-DR
Updates license counting logic to align with user access patterns for more accurate reporting
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Backup will fail if the Azure security group is not named exactly DRUVA-SG-DPPSPN-DR
Druva AWS Workloads adds native air-gapped backup and recovery for Amazon EFS
Adds support for Amazon Elastic File System (EFS) data protection via a fully managed SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. platform.
Enables file-level searches, individual file restores, and full filesystem recovery for EFS volumes.
Introduces an air-gapped backup framework that isolates backups outside the primary AWS environment to mitigate ransomware risks.
Druva adds Nutanix AHVAHVAcropolis Hypervisor, Nutanix's built-in bare-metal hypervisor for running VMs on their hyper-converged infrastructure, giving cyber tools a tightly integrated compute and storage layer without a separate hypervisor license., Oracle PBS, SAP HANA to FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. GovCloud; introduces TurboTier for VMware cyber recovery runbooks
Adds Nutanix AHV workload support in FedRAMP-certified GovCloud
Adds Oracle PBS workload support in FedRAMP-certified GovCloud
Adds SAP HANA workload support in FedRAMP-certified GovCloud
Introduces Cyber Recovery Runbooks for VMware with Threat-Aware Recovery and Isolated Recovery Environment (IRE)
Adds automated prechecks for NAS backup set creation to validate proxy connectivity, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. credentials, and mount status
+6 moreshow less
Adds support for MS SQL Server 2025 data protection
Adds support for Transparent Data Encryption (TDE) in MS SQL Server backups and restores
Adds support for Contained Availability Groups (AGs) in MS SQL Server data protection
Supports TLS 1.3 for secure communications across Enterprise Workloads agents
Replaces CloudCache branding with TurboTier high-performance local recovery appliance
Extends TurboTier local retention period from 30 days to 90 days
Adds Threat Watch, Threat Hunting, and Cyber Recovery Runbooks to Microsoft 365 backups
Adds Threat Watch automated monitoring for ransomware IoCs in M365 backups with auto-quarantine of affected snapshots.
Adds Threat Hunting capability for deep-dive forensic investigation of breach entry points across historical M365 data.
Introduces Cyber Recovery Runbooks allowing Threat-Aware Recovery and targeted execution via Scheduled Cyber Recovery Testing Plan (SCRT) or Live Incident Recovery Plan (LIR).
Adds a new Cyber Recovery tab in the M365 Backups interface for Recovery Intelligence, enabling pre-recovery threat hunts and automated snapshot health visibility.
Druva Enterprise Workloads adds Azure Government to AWS GovCloud backup, automated Azure resource tagging, and new agent versions for Azure GovCloud
Supports backing up and restoring Azure Files in Azure Government to AWS GovCloud with network isolation via Azure Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. or Virtual Network service endpoints
Supports backing up and restoring Azure Blob Storage in Azure Government to AWS GovCloud with network isolation via Azure Private Link or Virtual Network service endpoints
Automatically propagates organizational tags from Azure subscriptions to Druva-created backend resources during onboarding to comply with strict Azure Policy rules
Veeam Kasten is a Kubernetes-native platform for backing up, restoring, and migrating containerized applications and their persistent data.
Kasten K10 8.5.13 adds dual-location export in a single policy and native Veeam B&R repository support for app metadata and volume data.
Adds ability to specify an additional export location within a single policy or policy preset, providing redundancy of backup data (Technical Preview).
New Kasten policies now support export of both application metadata and volume data to a single Veeam Backup & Replication repository.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The catalog schema upgrade in this release may require increasing the catalog-pv-claim PVC size; the schema upgrade requires at least 50% free space in the catalog-pv-claim PV before upgrading.
2 more releases in this issue
· 2026-06-01 → 2026-06-22
Kasten K10 8.5.12 adds app_namespace label to per-application metrics and automatic export-pod garbage collection.
└──▷ TRY IT
Filter Prometheus backup metrics by namespace to alert on per-application backup failures after the app_namespace label is available.
$ sum(action_backup_ended_count{app_namespace="production"}) by (app_namespace, status)
Export pods are now automatically cleaned up by Kasten's garbage collection daemon after the configured grace period.
Reduced catalog resource usage during policy runs.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The app_namespace label is added to per-application backup, restore, export, import, and report metrics; Prometheus queries that pin the exact label set on any of the 22 affected metrics (action_backup_skipped_count, action_backup_started_count, action_backup_ended_count, action_backup_duration_seconds_sum, action_restore_skipped_count, action_restore_started_count, action_restore_ended_count, action_restore_duration_seconds_sum, action_export_skipped_count, action_export_started_count, action_export_ended_count, action_export_duration_seconds_sum, action_export_processed_bytes, action_export_transferred_bytes, action_import_skipped_count, action_import_started_count, action_import_ended_count, action_import_duration_seconds_sum, action_report_skipped_count, action_report_started_count, action_report_ended_count, action_report_duration_seconds_sum) may need to be updated.
Adds --snapshot (and related snapshot-filter flags) to check to limit integrity verification to only the data referenced by selected snapshots
Supports fastest and better zstd compression levels via --compression (in addition to the existing auto/off/max)
Adds include-filter support to the rewrite command (mirrors existing exclude-filter capability)
Supports excluding cloud-backed (locally evicted) files on macOS during backup
Makes --host flag override the RESTIC_HOST environment variable when both are set
+14 moreshow less
Supports configuring nice and ionice priorities in the official Docker image
Adds an optional GitHub token for self-update API requests to avoid rate limiting
Copies multiple snapshots in batches in the copy command for improved throughput
Adds status counters (files, bytes transferred) to copy verbose text output
Includes the repository ID in the FUSEFUSEA Linux kernel interface that lets userspace programs implement a filesystem without kernel code, maintained as part of the kernel project; tools use it to mount virtual or synthetic filesystems without requiring root or kernel modules. filesystem name used by mount
Supports restoring file ownership by user/group name (not just UID/GID) on UNIX systems
Enables Windows filesystem privileges (e.g. SeBackupPrivilege, SeRestorePrivilege) before file access during backup and restore
Adds Open Container Initiative (OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant.) labels to the release Docker image
Shows timezone context in snapshots command output
Shows more detailed per-file progress for the stats command
Significantly speeds up index loading across all commands
Reduces memory usage for check, copy, diff, and stats commands
Reduces Azure storage costs by optimizing multi-part uploads
Prunes small packfiles more aggressively during prune
19 details in Everything
└──▷ BREAKING ON UPGRADE
!The backup command now exits with code 3 (instead of 0) when a top-level source path does not exist — scripts treating a missing path as success will now see a failure.
!The forget command now exits with code 3 (instead of 0) when it fails to remove one or more snapshots.
!Restic now exits with code 130 (instead of 1) when interrupted via SIGINT / Ctrl-C.
!If RESTIC_COMPRESSION, RESTIC_PACK_SIZE, or RESTIC_READ_CONCURRENCY contain invalid values, restic now fails with an error instead of silently ignoring them (unless the same setting is overridden on the command line).
!Explicitly passed backup source paths can no longer be silently dropped by exclude rules — setups relying on that behaviour will now back up those paths.
!Small packfiles are pruned more aggressively by prune, which may increase network/storage activity on first run after upgrade.
JumpCloud introduces Workflows, a visual drag-and-drop automation system for identity and device tasks in the Admin Portal.
└──▷ HOW TO FIND IT
Automate employee offboarding using a prebuilt template without manual scripting.
📍In the Admin Portal, navigate to Workflows › Templates and select Employee Offboarding.
Adds JumpCloud Workflows, a new centralized automation feature with a visual drag-and-drop canvas for building identity, device, and access automations.
Provides prebuilt templates for common workflows including employee onboarding/offboarding, managing inactive users, and enforcing device compliance.
Introduces centralized management capabilities to enable, disable, edit, and review automation history/status from the Admin Portal.
3 details in Everything
5 more releases in this issue
· 2026-06-01 → 2026-06-22
JumpCloud adds per-desktop-app usage tracking and granular Office 365 app inventory in AI & SaaS ManagementSaaS ManagementA category of software that tracks, governs, and optimises an organisation's portfolio of SaaS subscriptions, covering spend, access, and licence utilisation from a single control plane.
└──▷ HOW TO FIND IT
Enable the feature to start tracking desktop app usage data in the console.
📍Navigate to AI & SaaS Management › Settings › General Settings and toggle Device Agent Enabled on
Adds active usage tracking for discovered locally installed desktop apps on macOS, Windows, and Linux devices
Adds support to monitor individual Microsoft Office 365 apps (Word, Excel, PowerPoint, Outlook) as distinct entries instead of a bundled suite
New policy management capability allows admins to create policies for installing the JumpCloud Go extension in selected browsers across Windows, Mac, and Linux.
└──▷ HOW TO FIND IT
For admins needing to standardize browser extensions across mixed OS environments via policy.
📍Create a Policy to Install JumpCloud Go Extension in Selected Browsers
Adds a policy management feature to install the JumpCloud Go extension in selected browsers on Windows, Mac, and Linux devices managed by the JumpCloud agent.
JumpCloud adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. group-sourced attribute inheritance and manual sync trigger
Adds the ability to use JumpCloud group custom attributes as the source for SCIM user mappings, enabling group-based license and role inheritance.
Adds EXPR function support in SCIM mappings to evaluate group membership logic for specific user attribute values.
Adds a manual Sync Now trigger at the application level to immediately reconcile SCIM metadata and memberships.
Enhances active status mapping logic in SCIM integrations to allow custom activation/deactivation control.
Castle extends IP intelligence to detect VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. traffic alongside residential proxy detection.
2 more releases in this issue
· 2026-06-02 → 2026-06-18
1Password SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Manager #680 adds public API docs, new Claude providers, and Lark integration details
Adds interactive GET /api/docs endpoint for Applications, Devices, Contracts, People, Teams, Workflows, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., OAuth, and Audit Log endpoints
Introduces Claude AI and Claude Console providers for Claude integrations in the management interface
Adds description and help article link display for Lark integration in the provider details panel
Improves load performance for Person and API key report pages via database-level pagination
Brave Origin auto-connect and TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. refresh window increase in 1Password for Windows 8.12.24
Adds automatic connection support between the Brave browser extension (Brave Origin) and the 1Password desktop app
Brave Origin auto-connection, TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. refresh fix, Passport expiry banner fix, search scope expansion, and Universal Autofill reliability improvements in 1Password for Mac 8.12.
Browser extension Brave Origin can now automatically connect to the 1Password app.
Expiration banners no longer appear for the date in the Issued on field in Passport items.
Search results now include contents from some fields, such as the Type field for credit cards.
1Password SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Manager v599 adds OpenAI tracking, editable API keys via UI, expandable AI chart, Okta staging, and /api/docs
/api/docs public API documentation endpoint is now available for browsable reference of all public API services.
API key management: Admins can now edit and delete API keys directly from the UI table (changes tracked in audit log).
Expandable AI usage chart can be expanded to full screen for detailed spend/consumption analysis.
OpenAI Platform integration now retrieves and tracks API usage and spend data for visibility.
Okta integration adds stage new users on create option to delay activation of newly provisioned users.
1Password SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Manager #559 adds closed-beta AI Consumption tab, spend notifications, and auto-currency conversion for contracts.
Adds (Closed beta) AI Consumption tab: The App view now includes a dedicated Consumption tab with a stacked area chart and detailed table for tracking AI usage over time. View spend broken down by model, user, or API key, and use the new cached token columns for more granular cost visibility.
Adds (Closed beta) AI spend notifications: Admins can now configure notification settings for AI data gaps and over-budget spend, including customizable alert frequency to stay informed on AI usage and costs.
Android beta adds Open 1Password option to autofill suggestions and improves SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. error messaging
Adds an Open 1Password option in the autofill list alongside suggested logins during sign-in flows
1Password Linux Beta adds default home section setting and improves SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. error messaging.
Adds Settings > General > Defaults to choose the section shown on first open or after long idle
Updates audit logging for moving/duplicating items between accounts to use Export Vault event type
Improves lock screen error message for specific SSO-related unlocking issues
1Password for Windows adds automatic Brave Origin extension connectivity and fixes TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. refresh and search bugs.
Brave Origin browser extension can now automatically connect to the 1Password app
One-time password items with custom refresh windows longer than 255 seconds are now supported
1Password for Mac 8.12.24 Beta adds Brave Origin auto-connection and prioritizes default vault in passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. saving.
Adds automatic connection from the 1Password browser extension to the 1Password app when using Brave Origin, enabling seamless credential injection without manual bridge setup.
Prioritizes the user's default vault as the first selection option when saving a passkey via macOS AutoFill provider, streamlining the save workflow for primary credentials.
1Password browser extension beta adds visibility into hidden pages in Autofill settings
The Autofill & save settings page now displays a list of sites where 1Password has been manually hidden.
When connecting the browser extension to the desktop app, Security Review can be completed directly in the desktop app UI instead of the extension pop-up.
Adds notify_previous_addresses hook to enable notification of an identity's previous email address upon self-service changes
Introduces a new customizable email template for the previous-address notification with placeholders for user name, new email, and account security link
Ory Kratos v26.2.19 adds org-scoped settings flow, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. cursor pagination and group filtering, browser logout hardening, and W3C change-password endpoint
Adds organization query parameter to the self-service settings flow (createBrowserSettingsFlow / createNativeSettingsFlow) to bind an identity to a specific organization's SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. providers.
Supports opt-in SCIM cursor pagination: send an empty cursor, then follow nextCursor; existing offset pagination remains the default.
Adds SCIM group membership filtering via the groups.value filter parameter on GET /Users (e.g., GET /Users?filter=groups.value eq "<group-id>").
Enables browser logout data clearing via the new config key selfservice.flows.logout.clear_browser_data and sends the Clear-Site-Data header when enabled.
Exposes a new public endpoint GET /.well-known/change-password that redirects to the settings UI for password manager deep-linking.
+1 moreshow less
Adds one-time code inputs in login/registration/verification flows carry autocomplete="one-time-code" for Web OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. API support.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The upstream parameter login_hint is removed from the upstream_parameters of login, registration, and settings OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. methods; if you previously sent upstream_parameters.login_hint when submitting one of these flows, the value is now ignored and no longer reaches the upstream provider.
Ory v26.2.18 adds event stream pause/resume, Talos key hardening, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. fixes, configurable retention and login hints.
Adds status field to Event Streams allowing pause and resume via API or Console, enabling temporary suspension without deleting the stream
Hardens Talos by redacting signing-key material in logs/traces and fixing audit event drops when OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing is enabled
Talos rotation now retains revoked records until the later of 30 days or their original expiry, and batch imports validate each item independently.
Adds DSYNC_WEBHOOK_LOGS_TTL environment variable to Ory Polis for configurable SCIM webhook log retention duration
Pre-fills email/identifier in Ory Elements login screens when login_hint query parameter or OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. flow hint is provided
Ory Kratos v26.2.17 adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. enterprise extensions, configurable passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. options, and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. test-login endpoint.
Adds support for the urn:ietf:params:scim:schemas:extension:enterprise:2.0:User schema in SCIM provisioning endpoints
Exposes advanced passkey configuration under selfservice.methods.passkey.config including authenticator_selection, attestation.preference, and timeout settings
Adds /scim/{client}/v2/ResourceTypes discovery to advertise the SCIM enterprise user extension.
Adds a last_characters field to project and workspace API keys in the console
Adds an admin endpoint POST /organizations/onboarding-portal-links/{token}/test-login-flows to dry-run OIDC sign-in from the onboarding portal
+2 moreshow less
Makes passkey authenticator options (attachment, resident_key, user_verification) configurable via config keys instead of hardcoded defaults
Adds an identity external variable to the SCIM Jsonnet mapper to preserve existing identity traits during provisioning
Ory Hydra accepts prompt=select_account; Ory Kratos SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. supports schema-qualified attribute paths and filters with size limits
Hydra now accepts prompt=select_account values in OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. authorization requests instead of rejecting them.
Kratos SCIM list endpoints now accept filter query parameters qualified with a full schema URN.
Ory Network adds per-organization session lifespans; Ory Kratos normalizes invisible characters in email and username identifiers.
Adds session_lifespan field to organizations API to override project-level session duration
Normalizes email and username identifiers by removing invisible characters (zero-width spaces, joiners, BOMBOMA Bill of Materials listing every component, library, and dependency in a software project; cyber tools use it to track what is in a codebase and flag known-vulnerable components quickly.) and normalizing case/width before storage
Okta Identity Engine adds extended AD group attributes via API, system log event for privileged access managementprivileged access managementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded., and Search/filtering for AI agents.
/directories integration endpoints now expose extended Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. group attributes.
New System Log event type for database privileged access management.
Search, filtering, and configurable views are available for AI agents.
Keycloak 26.6.3 adds DB startup checks, FD_SOCK2SPISPISerial Peripheral Interface, a synchronous communication bus standard used to connect microcontrollers to sensors, flash memory, and other peripherals at short range; cyber tools use it to read or write firmware on embedded devices., and SQL Server collation fix.
Adds startup check for missing database indexes to detect schema drift before boot
Adds SPI option to disable FD_SOCK2 failure detection for advanced cluster tuning
Ping Identity is an identity and access management platform providing authentication, single sign-on, multi-factor authentication, and identity governance services.
PingOne adds Agent Governance for AI identities and node versioning for Auth Trees
└──▷ HOW TO FIND IT
Govern AI agents alongside human identities in Identity Governance.
📍Use Agent Governance to detect and onboard AI agents
Restrict application access to a subset of users authenticated through a specific journey.
📍Assign an authorization policy to a SAML or OIDC application via IAM-4646
Configure node versioning for authentication trees via the API.
shell
curl -X PUT 'https://<tenant-env-fqdn>/am/json/realms/root/realms/alpha/realm-config/authentication/authenticationtrees/nodes/UsernameCollectorNode/2.0' -H 'Accept-API-Version: protocol=2.1,resource=3.0' -d '{...}'
Identity Governance role LCM (IGAIGAIdentity Governance and Administration: a framework for managing user access rights, roles, and lifecycle across systems, giving cyber tools a structured data source for detecting privilege abuse or access anomalies.-4265): Allows designated end users to create, update, and delete roles on behalf of others via workflow-driven requests without full admin access.
Identity Governance for AI agents (IGA-4223): Detects, onboards, and governs AI agents alongside human identities using Agent Governance.
Advanced Identity Cloud now supports the WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. conditional UI (passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. autofill) in authentication nodes.
You can now assign an authorization policy to a SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. or OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. application via IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.-4646 to restrict access to specific authenticated subsets.
SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. REST and SaaS REST (connector server) applications now let you add filter policies to object types when configuring provisioning to reduce network overhead.
+5 moreshow less
The PingOne worker service now lets you configure the connection to PingOne using a credential JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store..
You can now configure a trusted CA certificate for each OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. client using the tls_client_auth authentication method via OPENAM-27540.
Advanced Identity Cloud supports node versioning with new versions for Page, Username, WebAuthn Authentication, and WebAuthn Registration nodes.
Adds Resource version 3.0 to the realm-config/authentication/authenticationtrees endpoint requiring Accept-API-Version: protocol=2.1,resource=3.0.
The realm-config/authentication/authenticationtrees/nodes endpoint is now versioned; specify the node version in the URL (e.g., .../nodes/UsernameCollectorNode/2.0).
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Resource versions 1.0 and 2.0 for the authenticationtrees REST endpoint are deprecated.
!Versionless node endpoints are deprecated; you must specify the node version in the request URL (e.g., .../nodes/UsernameCollectorNode/2.0).
1 more release in this issue
· 2026-06-04 → 2026-06-05
PingOne adds AI agent governance, role LCM, WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. conditional UI, and node versioning to Identity Governance and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.
└──▷ USE IT
Configure a version-aware request to retrieve Username nodes.
Adds Agent Governance capabilities to detect, onboard, and govern AI agents alongside human identities.
Introduces role lifecycle management (LCM) allowing end users to create, update, and delete roles via workflow-driven requests.
Adds support for WebAuthn conditional UI (passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. autofill) in the authentication journey nodes.
Adds node versioning support for Username, WebAuthn Authentication, and WebAuthn Registration nodes with version-aware API endpoints.
Enables assigning authorization policies to SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. or OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. applications via the IAM-9608 enhancement.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Resource versions 1.0 and 2.0 for authenticationtrees REST endpoint are deprecated; clients must set Accept-API-Version: protocol=2.1,resource=3.0.
!Versionless node endpoints are deprecated; the realm-config/authentication/authenticationtrees/nodes URL must specify the node version (e.g., /nodes/UsernameCollectorNode/2.0).
Nudge Security is a SaaS security platform that discovers shadow IT assets, manages identity governance, and hardens security posture.
Security posture findings mapped to SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 Agentic AI Security frameworks.
Adds filtering of security posture findings by specific compliance framework
Enables exporting audit-ready reports with compliance framework and control columns
Shows specific controls violated within the finding detail panel
3 details in Everything
4 more releases in this issue
· 2026-06-05 → 2026-06-25
Nudge Security adds connected apps for GitLab, Informatica, and Logz.io to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.
Adds support for a new GitLab connected app to Nudge Security integrations.
Adds support for a new Informatica connected app to Nudge Security integrations.
Adds support for a new Logz.io connected app to Nudge Security integrations.
SailPoint adds Quick Compliance connectors, BeyondTrust/Delinea discovery, sampling for data classification, and workflow start dates
└──▷ HOW TO FIND IT
Configure a new Quick Compliance source (e.g., Logrhythm) for rapid read-only account aggregation via the platform UI.
📍Go to SaaS Connectors, select Quick Compliance sources, and configure the Logrhythm connector settings.
Enable sampling in Data Access Security to quickly map sensitive data landscapes without network overhead.
📍Navigate to Compliance › Data Classification › Application Scope and configure the new sampling rate technology.
Set a future effective date for an approved access request using the new workflow field.
📍In the Workflows Manage Access action, select the Access Start Date field to define when the approved access takes effect.
Adds 13 new SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. connectors as Quick Compliance sources for read-only account and entitlement aggregation: 8x8 XCaaS, Appspace, Bytebase, Calibre, Crowdin, Exasol, Freshchat, Hexnode, iDeals, Incident.io, Logrhythm, Planview AgilePlace, SuperTokens.
Adds the BeyondTrust Cloud PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. Discovery SaaS connector for enterprise application discovery.
Adds the Delinea PAM Discovery connector to discover applications and metadata from the Delinea Platform.
Introduces sampling rate technology in Data Access Security > Data Classification to map data assets with minimal network impact.
Adds an Access Start Date field to the Workflows Manage Access action to defer granted access.
+3 moreshow less
Adds a new Account Requests tab on the Approvals Administration page for centrally tracking and managing account creation/deletion approvals.
Enables Claude Enterprise connector aggregation of login activity metadata (last_login, last_login_method), archived managed agents, multiple workspaces, and Express Source Setup.
Enables excluding inherited appRoleAssignments during Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. account aggregation to aggregate only direct assignments.
8 details in Everything
3 more releases in this issue
· 2026-06-05 → 2026-06-26
SailPoint adds Quick Compliance connectors (Enclave, Firebolt, Flowlu) and Harbor Pilot region/FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. expansion
Identity Security Cloud now supports Enclave, Firebolt, and Flowlu as Quick Compliance connectors for expedient read-only account and entitlement aggregation.
Harbor Pilot is now available in Amazon sa-east-1 and us-gov-west-1 regions.
Harbor Pilot has been approved for availability in FedRAMP environments.
Harbor Pilot now shows reasoning process by revealing responses word by word instead of as a block of text.
Access Risk Management now supports extracting SAP Security Audit Log data with the RSAU_CONFIG recording target of Record in Database.
+5 moreshow less
Within Identity Graph, users can now switch between the graph and table view when viewing data.
Identity selector match criteria using GT, LT, GTE, and LTE operators now allow comparisons between mixed numeric types.
SailPoint SuccessFactors connectors updated to support multi-level nested OData account schema attributes for user and employee data.
Epic EMP connector adds disableRemoveBlockOnAccountEnable configuration parameter (default: false) to retain existing blocks when an account is enabled.
Epic EMP connector adds disableAddBlockOnAccountDisable configuration parameter (default: false) to not add blocks when an account is disabled.
Adds locale parameter to SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels. and WhatsApp OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. API for Japanese, Russian, Dutch, Polish, Turkish, Persian, Vietnamese, and Czech languages
locale API parameter now accepts ja, ru, nl, pl, tr, fa, vi, and cs to set the language of SMS/WhatsApp OTP messages
ConductorOne is an identity governance platform that automates workforce access management and deploys AI agents to streamline access reviews and provisioning.
Adds bridge-client agent and private MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server governance via outbound connection
Introduces the bridge-client lightweight bridge agent to connect on-prem or air-gapped MCP servers to ConductorOne without inbound firewall rules.
Enables governing tools for private MCP servers through C1 with standard entitlement requests, approvals, reviews, and audits.
2 details in Everything
7 more releases in this issue
· 2026-06-11 → 2026-06-26
Role mining refresh, custom email provider early access, bulk role assignment, CSV exports, and campaign task filtering
Adds Role mining interface with token-based filter bar, inline recommendations, and floating action bar for refined cohort analysis.
Early access to Custom email provider allowing C1 notifications to be sent from your own domain (Google Workspace, AWS SESAWS SESAmazon's cloud email-sending service, used by tools that need to deliver alerts, reports, or notifications without running their own mail infrastructure., Microsoft 365, SendGrid).
Adds Bulk role assignment capability via the Change role action on the Users page to select and assign roles to multiple users at once.
Enables customizable columns and CSV export for Apps, App accounts, Entitlements, and Resources tables via the Download to CSV drawer.
Adds filtering for campaign task lists by outcome (granted, denied, revoked, certified, error, canceled, timed out).
+2 moreshow less
Provides setup guides for 38 catalog MCP servers covering credential creation, authentication, and tool discovery.
Adds Export policy rules to CSV directly from a policy's detail page or the policy list page.
ConductorOne adds role mining UI refresh, custom email providers, bulk role assignment, CSV exports for tables and policy rules, and task filters.
└──▷ HOW TO FIND IT
Assign roles to multiple users simultaneously on the Users page.
📍Select multiple users › Bulk Change role
Filter campaign tasks by specific outcome to surface issues.
📍Campaign Task List › Filter by outcome: denied
Adds custom email provider setting to send C1 notifications from your own domain (Google Workspace, AWS SESAWS SESAmazon's cloud email-sending service, used by tools that need to deliver alerts, reports, or notifications without running their own mail infrastructure., Microsoft 365, SendGrid)
Adds Bulk Change role action on the Users page for assigning roles to multiple users at once
Adds CSV export via the Download to CSV drawer with customizable column selection for Apps, App accounts, Entitlements, and Resources tables
Adds filtering of campaign task lists by outcome (granted, denied, revoked, certified, error, canceled, timed out)
Adds a Current step filter in the Task log to find tasks awaiting approval or provisioning
+1 moreshow less
Enables export of policy rules to CSV from a policy's detail page or the policy list page
Early access to Enterprise-managed authorization for AI agents via XAA standard
Adds Enterprise-managed authorization feature enabling AI agents (e.g., Claude, VS Code) to reach MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers using short-lived scoped tokens instead of per-tool auth prompts or persistent secrets
ConductorOne adds Slack AI assistant for actions, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server verification, annotation-based routing, customizable campaign columns, and multi-recipient credential delivery.
└──▷ HOW TO FIND IT
Test the configuration of an external MCP server before saving it to avoid connection errors.
📍In the ConductorOne console, go to Integrations › MCP Servers. When adding a new server, enter your credentials and click the Test auth config button to verify connectivity before saving.
Adds AI assistant integration to discover and trigger requestable actions directly from Slack
Adds connection verification for external MCP servers via Test auth config button and pre-filled recommended authentication configs
Allows assigning any entitlement (group, role) as a resource owner so ownership tracks membership changes automatically
Enables acting on object annotations in policies, approver rules, and entitlement routing rules using CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine. expressions like entitlement.annotations["team"]
Adds customizable columns for Campaigns screens including On-time status, Time remaining, and Due date via the column picker
New AI-triggered actions via Slack, resource owners as entitlements, annotations in policies, and multi-recipient credential delivery.
└──▷ HOW TO FIND IT
Verify an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server's URL and credentials are correct before committing the configuration.
📍Click Test auth config in the Add MCP Server dialog.
Adds Test auth config button to verify MCP server connections before saving
Enables assigning any entitlement (group, role) as a resource owner instead of individuals
ConductorOne adds hierarchical cloud access modeling, inheritance-scoped reviews, and CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine.-based entitlement rules.
└──▷ HOW TO FIND IT
Create an access review campaign scoped by inheritance to evaluate all inherited roles.
📍In the UI, start a new access review and select By inheritance as the scope type.
Define a CEL condition to apply specific emergency grant behavior to Azure roles.
📍In entitlement configuration rules, write a CEL expression matching on the granted role and scope.
Adds support for hierarchical access modeling in early access to represent cloud infrastructure access as principal-role-scope bindings with breadcrumb navigation.
Adds a new By inheritance scope type for access review campaigns that resolves inherited access from parent resources and group membership.
Adds entitlement configuration rules evaluated via CEL expressions to automatically apply request policies, emergency grant behavior, and max duration to cloud infrastructure apps.
Netskope Private Access 138 adds auto-reconnect publisher via GSLB latency threshold and KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed. QCOW2 support
Adds Auto Reconnect Publisher feature that uses a Resolution Loop to monitor network latency and automatically shift connections to optimal PoPs when thresholds are exceeded (Beta)
Enables deployment of the NPA Publisher on KVM-based virtual environments using the new QCOW2 image format
Adds OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles., VHDX, and QCOW2 hosting for the Netskope Private Access Publisher on AliCloud
New MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Security Dashboard and 22 new data attributes for monitoring AI-agent activity
Adds the MCP Security Dashboard under Advanced Analytics → Netskope Library for monitoring AI-agent activity
Makes 22 new MCP data attributes available in application events and alerts schemas for custom dashboards and widgets
Netskope 138 adds AI Guardrails On Demand VM, Enterprise Browser Screen Share Guard, and granular Access Methods for NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions..
Adds the AI Guardrails On Demand VM deployment option to scan AI prompts and responses via existing AI Gateways or Agents using an API.
Introduces Screen Share Guard in Enterprise Browser to detect sensitive content in real-time and apply an opaque gray privacy overlay during virtual meetings.
Replaces the generic Explicit Proxy label with granular Access Methods (PXC, CEP HTTP Trusted/Roaming, Isolation) in traffic events and security policies.
Adds a new transaction event field x-cs-access-proxy to capture Access Proxy object matches for auditability in NPA/SWG contexts.
Expands Next Generation API Data Protection to Anthropic Claude Enterprise with Skope IT audit events, threat protection scanning, and retroactive scans (90-day default window).
+4 moreshow less
Adds a delete remediation action for Next Generation API Data Protection policies on ChatGPT Enterprise files and Microsoft Viva Engage chat messages.
Introduces Created By attribute on the Next Generation API Data Protection Inventory page to show ownership of content objects (e.g., file, email, wiki).
Adds Netskope Private Access Publisher.qcow2 image support for deploying NPA Publishers on KVMKVMA Linux kernel module that turns the kernel into a hypervisor, letting a process run fully isolated virtual machines using hardware virtualisation extensions. Cyber tools use it to sandbox execution environments at near-native speed.-based virtual environments like Nutanix AHVAHVAcropolis Hypervisor, Nutanix's built-in bare-metal hypervisor for running VMs on their hyper-converged infrastructure, giving cyber tools a tightly integrated compute and storage layer without a separate hypervisor license. and OpenStack.
Enables Dynamic URL Classification by default for all new tenants via a backend feature flag in NG SWG.
Netskope DEM adds Aggregated Traceroute with three new views for unified network path and latency analysis.
Aggregated Traceroute gives a unified view of the network path between a user’s device and the Netskope cloud across time, aggregating probe data over a selected window to show path and latency evolution, identify consistently problematic hops, and correlate issues with user location
New End-to-End Underlay Latency view provides a time-series chart of round-trip time from client to POP
New Hop-by-Hop Path View displays an aggregated network graph showing every hop, link latency, and probe distribution
New Time Slider with Location Awareness contextual filter ties network behavior to where the user was
Bytebase 3.19 adds just-in-time data export approval flows and active VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. user tracking for GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control.
└──▷ GET THIS VERSION
$ git clone --branch 3.19.0 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.19.0
└──▷ USE IT
Configure JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. data export rules in Terraform to ensure exports go through approval.
config
# In your Terraform config, add the following rule under REQUEST_ACCESS source:
rule {
source = "REQUEST_ACCESS"
condition = "request.data_export == true"
# ... other settings
}
Verify that your CI/CD pipeline uses a compatible bytebase-action version to avoid failure during database operations.
$ # Pin your CI to a specific cloud tag or dated version within the compatibility window
export BYTEBASE_ACTION_VERSION=cloud
Adds just-in-time data export access workflow via the SQL Editor with an approval process and migration of existing rules to the Custom Approval page
Adds support for configuring just-in-time data export rules in Terraform using request.data_export == true under the REQUEST_ACCESS source
Adds active VCS user tracking for GitOps where non-bot PR/MR authors seen by bytebase-release workflows count toward license limits over a 90-day window, with CSV download from the Subscription page
3 details in Everything
└──▷ BREAKING ON UPGRADE
!bytebase-action check and bytebase-action rollout now fail with an error (previously a warning) when the action version is outside the compatibility window
Bytebase 3.18.1 adds PostgreSQL 18 support, MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., and removes the --demo flag
└──▷ GET THIS VERSION
$ git clone --branch 3.18.1 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.18.1
Adds support for PostgreSQL 18 with recognition of built-ins like uuidv7() in SQL analysis and schema diff.
Enables automatic MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. OAuth flow completion against cloud.bytebase.com for SaaS deployments without manual configuration.
Makes non-read-only Query data source use the admin data source when the query data policy allows it.
Allows gh-ost migrations to honor the configured data-source SSH tunnel for MySQL connections and binlog reading.
Adds APP_IM support to the bytebase_setting Terraform resource in provider 3.18.1.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The --demo server flag has been removed and will cause startup errors if used.
!Terraform provider 3.18.1 marks the webhook URL in settings as write-only.
Varonis adds prioritized folder rescanning, Hitachi NFS support, Windows Explorer access requests, and multi-select data source filters to the DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. API.
on_demand_rescan allows admins to trigger scans on specific folders with priority ordering, accelerating validation of policy changes.
New NFS data source type for Hitachi NAS enables file/folder activity auditing and permissions tracking for Hitachi NFS volumes.
Right-click context menu in Windows Explorer now offers a direct Request Access shortcut, removing the need to copy paths or contact IT manually.
Data source filters across dashboards, analytics, and policy pages now support multi-selection of up to 1,000 sources with preview and deselection capabilities.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Classification records are now called classification hits in the web interface; classification rules are renamed to classification policies.
!Data source types Windows and Unix are renamed to Windows Server and Unix Server respectively.
2 more releases in this issue
· 2026-06-02 → 2026-06-16
Varonis adds Salesforce ECA support, AWS EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. multi-select scopes, Snowflake nested logic, and active role display.
Varonis adds keyless GCP auth via WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys., regional collectors, and cloud secret manager integrations.
Adds support for AWS Secrets Manager, Azure Key Vault, and Google Cloud Secret Manager as credential sources for database integrations
Adds the ability to assign cloud collectors by region for GCP
Adds support for Workload Identity Federation (WIF) for keyless GCP authentication
Adds integration with CyberArk for database credential retrieval and automatic rotation
Adds automatic deletion of GCP log files after ingestion
+1 moreshow less
Improves classification monitor visibility to include all scan types
fhEVM v0.13.0 adds PRSS key shares re-sharing, FHE handle ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. deny lists, and new hardhat deployment scripts
└──▷ GET THIS VERSION
$ git clone --branch v0.13.0 https://github.com/zama-ai/fhevm.git
# already have the repo? check out this version:$ git checkout v0.13.0
Adds PRSSInit and KeyReshareSameSet flows for threshold key share regeneration.
Adds IsAccountDenied function to library-solidity to check account restrictions.
Adds ACL deny list support in host-contracts to block specific accounts from persisting FHE handles.
Cyera adds eight new ecosystem partnerships and extends Claude Enterprise integration
└──▷ HOW TO FIND IT
Leverage new integrations for policy enforcement across eight additional vendors in the cyber tooling stack.
📍In the console, go to Integrations › Ecosystem Partnerships and enable Abnormal Security, Cohesity, Cato Networks, Island Enterprise Browser, Delinea, Mave Security, Mate Security, and Shift Security.
Adds support for eight new ecosystem partnerships: Abnormal Security, Cohesity, Cato Networks, Island Enterprise Browser, Delinea, Mave Security, Mate Security, and Shift Security.
Extends the existing Claude Enterprise integration.
Cyera adds Remediation Center for data owners to triage, resolve issues and track completion via SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets.
└──▷ HOW TO FIND IT
Allow data owners to triage assigned security issues in a dedicated workspace with audit trails.
📍In the Cyera console, navigate to Remediation Center to access your assigned tasks and workflow.
Introduces the Remediation Center — a dedicated workspace giving data owners a clear To Do vs. Completed workflow, consolidated notifications, event logs for audit, and secure access via SSO or OTP.
Cyera Omni DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Introduces Memories View for retaining investigation context and managing recurring pattern automation.
Introduces the Memories view to retain investigation context (users, destinations, organizations, departments) for recurring DLP patterns
Allows analysts to review and delete Memories entries to maintain predictable automation behavior
Adds tsh workload-identity issue-jwt command for JWT-SVIDJWT-SVIDA SPIFFE Verifiable Identity Document encoded as a JSON Web Token, used to prove workload identity across trust boundaries where X.509 certificates are impractical, such as HTTP headers. issuance and identity/key-agent service to tbot.
└──▷ GET THIS VERSION
$ git clone --branch v18.8.3 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.8.3
Introduced tsh workload-identity issue-jwt command for human issuance of JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-SVIDs.
Added identity/key-agent service to enable tbot to generate un-exfiltratable credentials.
Added web_terminal_clipboard_mode role option to restrict copying text from a web terminal SSH session.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The embedded session helper functionality is now disabled by default, requiring setting the TELEPORT_UNSTABLE_DISABLE_EMBEDDED_REEXEC environment variable to no to enable it.
New credential providers use a new callback URL format for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. user-based access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
Existing Credential Providers retain their original URL format and require no re-registration
New Credential Providers generate the updated callback URL upon save
2 details in Everything
7 more releases in this issue
· 2026-06-03 → 2026-06-26
Aembit now supports cascading deletion of Resource Sets via UI and Terraform.
Adds the ability to delete a custom Resource Set and all its contained entities (Access Policies, Workloads, Trust Providers, etc.) in a single cascading operation through the console
Introduces Terraform support for Resource Set lifecycle management via the aembit_resource_set resource type
Exposes the resource_set_id argument in Terraform to assign or filter entities by Resource Set
Aembit CLI gains AWS/K8s Trust Provider attestation and deployment model flags; Secrets Operator expands credential types.
Adds aembit credentials get support for AWS Metadata Service, AWS Role, and Kubernetes Service Account Trust Providers with automatic local attestation
The --deployment-model option now accepts vm, kubernetes, ecs_fargate, and lambda_container; the AWS Role Trust Provider requires it.
Expands Aembit Secrets Operator 1.32.322 credential retrieval to any type issued by an Access Policy, beyond previous HashiCorp Vault token limitation
Aembit adds a Claude WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys. Credential Provider with Terraform support and built-in verification
Adds the Claude WIF Credential Provider type to exchange assertions for short-lived Claude API tokens through Workload Identity Federation.
Adds a Verify action to confirm trust between Aembit and the Claude federation rule before applying to an Access Policy
Adds Terraform provider support to manage the Claude WIF Credential Provider resource
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Identity Gateway adds MCP ping support, authorization chain in workload events, and accurate health endpoint status
Adds MCP ping method support for client connection-health checks per the MCP specification.
Workload events now include an ordered authorization chain of context IDs to trace requests end-to-end across agent, gateway, and server sides.
Health endpoint returns HTTP 503 status when the Gateway is unhealthy, enabling accurate detection by orchestrators and load balancers.
Aembit Secrets Operator 1.32.322 adds credentialType field for OAuth, API keys, AWS STSAWS STSAWS Security Token Service, an Amazon Web service that issues short-lived credentials for IAM roles, letting tools authenticate to AWS APIs without storing long-term secrets., and Workload Identity federation
Adds credentialType field to AembitSecretRefreshSchedule resource to select the Credential Provider type (default: OAuthToken).
Supports ApiKey, UsernamePassword, AwsStsFederation, and GoogleWorkloadIdentityFederation credential types, each producing specific Secret data keys.
Redacts AWS access key, secret access key, and session token values from debug logs in Secrets Operator.
Adds CLI X.509-SVIDX.509-SVIDAn X.509 certificate formatted to carry a SPIFFE Verifiable Identity Document, binding a cryptographic identity to a workload so cyber tools can authenticate services without passwords or static secrets. retrieval, configurable gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. keep-alives and Windows HTTP idle timeout, and restores custom CA configuration.
aembit credentials get --client-tls-private-key retrieves X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols.-SVID certificates using a local PEM private key without sending the key to the server.
AEMBIT_TENANT_GRPC_PING_INTERVAL_SECS and AEMBIT_TENANT_GRPC_PING_TIMEOUT_SECS environment variables configure gRPC keep-alives for Agent Proxy reconnects. Keep-alives are off by default.
AGENT_TRUST_PATH again supports supplying a custom CA certificate for Agent Proxy connections to Aembit Cloud.
AEMBIT_HTTP_IDLE_TIMEOUT_SECS configures the HTTP idle timeout on Windows in the Agent Proxy.
Improved upstream proxy diagnostics now show the full error source chain in logs.
Aembit CLI aembit credentials get now accepts --client-tls-private-key to retrieve X.509-SVIDX.509-SVIDAn X.509 certificate formatted to carry a SPIFFE Verifiable Identity Document, binding a cryptographic identity to a workload so cyber tools can authenticate services without passwords or static secrets. certificates.
aembit credentials get command gains --client-tls-private-key flag for retrieving SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials.-compliant X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols.-SVID certificates
X.509-SVID retrieval generates the CSRCSRA Certificate Signing Request is a block of encoded data submitted to a certificate authority, containing a public key and identity details, so the CA can issue a signed TLS certificate without ever seeing the private key. locally and returns the signed certificate chain in CLIENT_CERT_CHAIN.
Warden v0.16.0 adds first-class SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials. auth (SVID + JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.), generic MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. provider, and audit subject metadata.
└──▷ GET THIS VERSION
$ git clone --branch v0.16.0 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.16.0
spiffe auth method accepts X.509-SVIDX.509-SVIDAn X.509 certificate formatted to carry a SPIFFE Verifiable Identity Document, binding a cryptographic identity to a workload so cyber tools can authenticate services without passwords or static secrets. (mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with./header) and JWT-SVIDJWT-SVIDA SPIFFE Verifiable Identity Document encoded as a JSON Web Token, used to prove workload identity across trust boundaries where X.509 certificates are impractical, such as HTTP headers. (bearer) on one mount
API listener serves TLS cert from SPIFFE Workload API for automatic short-lived rotation
Scrut adds conflict warnings for assignee/approver collisions and syncs charts with filtered tables across all modules.
└──▷ HOW TO FIND IT
Catch an assignee/approver conflict before submitting a task for approval, ensuring independent review is enforced.
📍In Risk -> Risk Management (or any approval-enabled module), open a task and set the same user as both assignee and approver. A warning modal will appear — reassign one role to a different user, then select Submit for Approval.
Adds a warning modal when the same user is set as both assignee and approver on a task, prompting reassignment to ensure independent review.
Charts and tables in policies, evidence, risk, vulnerabilities, people, training, and access reviews now update together when filters are applied or cleared.
Approval workflows across Risk, Vendors, Access Reviews, Policies, Evidence Tasks, and Vulnerabilities now share common CTAs, modal behavior, and risk rules.
3 details in Everything
16 more releases in this issue
· 2026-06-04 → 2026-06-12
Scrut allows standard punctuation in organization and legal name fields via Settings.
Enables use of periods, commas, apostrophes, ampersands, parentheses, slashes, hyphens, and underscores when entering the Organization Name or Legal Name field
Scrut Automation adds custom fields for vulnerability findings and resources to capture bespoke severity, ownership, and SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. metadata.
Scrut's Task Center unifies the Setup Wizard and ongoing compliance tasks into one hub with three dedicated tabs.
└──▷ HOW TO FIND IT
Track what stands between you and your next SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. or ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001 audit without jumping between modules.
📍In Scrut, click Task Center in the left sidebar, then select the Audit Prep tab to see framework-specific readiness for SOC 2, ISO 27001, GDPR, and other frameworks, along with remaining items before your next audit.
Keep recurring compliance work visible after achieving audit readiness — evidence collection, failing tests, and vendor re-evaluations in one view.
📍In Scrut, click Task Center in the left sidebar, then select the Continuous Compliance tab to review evidence collection tasks, failing tests, risks to reassess, and vendors to re-evaluate.
Adds a unified Task Center replacing the standalone Setup Wizard, consolidating onboarding and ongoing compliance tasks in one place accessible from the left sidebar.
Introduces a My Tasks tab in the Task Center showing every task assigned to the current user across modules, with next actions and progress counters.
Introduces an Audit Prep tab for tracking framework-specific readiness (SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2, ISO 27001, GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., and others) and surfacing outstanding items before internal or external audits.
Introduces a Continuous Compliance tab for managing recurring post-audit work including evidence collection, failing tests, risks to reassess, and vendors to re-evaluate.
Scrut Automation access reviews gain bulk identity assignment, letting you categorize multiple accounts in a single action.
└──▷ HOW TO FIND IT
Categorize all service/bot accounts and external contractors at once during an access review instead of updating each account one by one.
📍In Access Reviews, select all target accounts using the row checkboxes, open the Bulk Actions menu, choose Update Identity, and set the identity to Non-personnel or External contractor, then confirm.
Customizable layout and sorting order for the public Trust Portal via Settings
The Portal Layout tab under Trust -> Trust Vault > Settings supports rearranging eligible public portal sections.
Sort options vary by section and include newest first, alphabetical, or manual ordering where applicable; Updates stays Newest First and cannot be reordered.
Compliance section now supports custom display order for frameworks.
New DPDPA (2025 Act rules) framework with cross-framework evidence mapping.
└──▷ HOW TO FIND IT
Add the new DPDPA framework to your workspace to begin tracking posture.
📍Navigate to Compliance -> Frameworks and locate DPDPA (2025 Act rules)
Adds DPDPA (2025 Act rules) framework to the Frameworks Library under Compliance -> Frameworks
Enables automatic cross-framework mapping from ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 27001:2022 and EU GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., auto-populating up to 65% of requirements
Drata introduces the Trust User role for dedicated access to Trust Center and AIQA SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. links.
This release introduces a feature enhancement for the Trust Center module. It enables customers with an unpublished Trust Center to use AI to analyze documents and evidence to accelerate content creation.
New writable Trust Center URL and contact fields plus security review list endpoint for vendor automation
Makes trustCenterUrl writable on vendor create and update endpoints to programmatically attach a Trust Center URL.
Allows setting vendorRelationshipContact.userId on vendor creation and update for programmatic ownership assignment.
Adds GET /vendors/{vendorId}/security-reviews endpoint to list security reviews with cursor pagination and multi-value filters.
Adds GET /vendors/:vendorId/security-reviews/:securityReviewId/security-questionnaires endpoint to return questionnaire completion state, recipient, and send date.
Drata introduces automated recurring vendor security reviews via the TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. Agent.
Adds account-level automation for recurring security reviews through Vendors → Settings in the Drata console
Enables the TPRM Agent to automatically collect documents from a vendor's SafeBase Trust Center URL when a review start date arrives
Introduces proactive notifications to the Security Owner 7 days before a scheduled recurring review if agent access to the Trust Center fails
New AI-Powered Connection Insights UI adds health states, sync status details, and AI summaries for MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies./IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. connections in the New Drata Experience.
Active connections now display a Healthy or Unhealthy state.
Operational status filter allows quick identification of connections that need attention.
Connection detail page Overview tab includes a Sync Status section with sync step details.
AI-generated summaries are available for connections with erroring sync steps.
Guide a team through quantitative risk analysis using the new FAIR flow to get loss estimates before creating a record.
📍Initiate the FAIR Analysis flow from the Risk module; complete the five-step identification and simulation to export ALE, ownership, status, and due dates.
Grant an external auditor dedicated access to review portfolio posture without giving them full platform access.
📍Invite the user as an External Auditor to assign them the External Auditor Portal role, allowing them to view register visualizations and progress via Tasks.
Automate blueprint creation for new compliance requirements using natural language input.
📍Use the Blueprint Building AI agent to describe systems or data to monitor, which generates SQL queries and attaches relevant controls; configure the schedule output type to report-only or require human attestation.
FAIR Analysis flow provides a five-step risk simulation outputting minimum, average, and maximum loss estimates plus ALE, ownership, status, and due dates
External Auditor Portal gives third-party auditors dedicated access while auditees collaborate via Tasks within the main UI
Policy Acknowledgement monitoring and logging tracks receipt, reviews, and acknowledgments of policies for audit purposes
Evidence Examiner analyzes control-linked evidence submissions for completeness, relevance, and quality before formal review
Vendor Vanguard enriches vendor records with financial and organizational signals and surfaces criticality, data-protection posture, and recommended actions in the register
+2 moreshow less
Compyl Notification System (CNS) replaces scattered emails with a priority-tiered pipeline bundling actionable items every 10 minutes into a daily digest with deduplicated cards
Blueprint Building AI agent drafts blueprints from natural language descriptions including SQL queries and control mappings, with schedules configurable for report-only or human attestation
TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. questionnaire builder adds select types and evidence; SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. Guide gains Cloud module and Agent-led policy workflow; performance boost for vulnerabilities.
Adds single-select and multi-select question types to the TPRM Questionnaire Builder for richer vendor assessments
Enables attachment of multiple follow-up questions to a single answer using conditional logic in TPRM questionnaires
Allows vendors to attach evidence directly to individual questions within the TPRM questionnaire builder
Supports import of questionnaires from spreadsheets including select questions and sections in TPRM
Adds Agent support for querying Customer Commitments data against GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. program data with natural language
+11 moreshow less
Enables notifications via email, Slack, and Teams for new vendor incidents, weekly digests, and external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. alerts in TPRM
Allows Trust Center preview, review, edit, publish, and go-live actions directly from the Vanta Agent instead of the dedicated Trust Center page
Generates assessment shells only for a vendor's tier and risk score in TPRM Assessment Quality
Adds ability to set due dates and owners on scheduled assessments upfront in TPRM
Automatically assigns default owners inherited from assessment rules in TPRM
Allows safe deletion of assessment types with full visibility into in-progress assessments in TPRM
Introduces a new Assessment Types API for programmatic differentiation in TPRM
Provides an Agent-led workflow to guide users through reviewing and approving all 15 required SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2 policies end-to-end with pre-generated drafts and progress tracking
Adds a new SOC 2 Guide Module: Cloud that generates compliance plans, connects cloud integrations via the Agent, groups tests for batch remediation, and tailors instructions
Implements approximately 80% improvement in Findings by Vulnerability page load times (from ~5.2s to ~1.0s at p99) and elimination of API timeout spikes causing 5xx errors
Reduces Reopen Vulnerabilities processing from 1,000 MongoDB operations to 50 for faster performance
16 details in Everything
3 more releases in this issue
· 2026-06-07 → 2026-07-04
New Vanta MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools for privacy and API endpoints for risk-control linking; new audit export and agent onboarding.
Adds GET and POSTREST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints to manage risk-to-control link relationships
Adds Privacy Read and Write MCP Tools (20 new tools) via MCP for managing privacy data inventory
Enables exporting the full controls table directly from within a Vanta audit
Adds multi-tenant support for Azure DevOps and CrowdStrike CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. integrations
Adds Deactivation Reason column on deactivated controls page
+1 moreshow less
Adds optional reason input when deactivating controls individually or in bulk
Vanta adds TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. commenting, Agent-driven vendor guides, and in-app framework purchases.
Adds internal and external commenting on individual TPRM questionnaire items
Enables the Vanta Agent to suggest controls for risk scenarios via natural language
Delivers proactive notifications for new domain tests and test owner alerts via email or Slack/Teams
Introduces an Agentic SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. Guide module for vendor management setup and documentation analysis
Allows customization of risk scoring scales at the individual register level with a heatmap grid view
+3 moreshow less
Moves the Vanta Agent interface into a slide-in panel that sits alongside page content
Supports creating, renaming, updating, and deleting risk registers via the Vanta Agent or MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocol
Enables direct purchase of GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., AUE8, CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. v8, and CRI frameworks in-app with user-selectable variants
Vanta adds Vanta Agent search, privacy processor writes, SIG Lite QAuto template, Splunk on-prem integration
Adds a persistent top-nav entry point for Vanta Agent with Command+K shortcut and rotating prompt suggestions
Enables filtering and sorting framework/certification commitments by structured commitment type across the entire contract base
Extends Vanta Agent agentic write capabilities to the processor side of the Privacy Data Inventory (create, update, delete processing categories and data controllers)
Allows mapping requests directly to controls during IRL upload with real-time Control ID validation against Vanta
Adds a SIG Lite questionnaire template in QAuto as the new default starter or via Import modal
+3 moreshow less
Links existing controls to risks from a new risk context section on the risk detail page
Allows creation of custom assessment templates (free text, single/multi-choice) for Privacy assessments
Adds Splunk Enterprise (on-prem) integration via the new Integration Builder platform
New Trust Center filters, custom legal text, and v2 questionnaire export API
Adds filtering for email address, email domain, access status, and access groups to the Contacts and Requests tabs in the Trust Center audience view
Enables custom agreement and legal text (including NDA confirmation language, Terms of Service, and Privacy Policy) with markdown support via your Conveyor team
Adds new v2 API endpoints for exporting completed questionnaires, supporting CSV, XLSX, and doc formats via POST request and GET polling
Conveyor adds customizable Legal Text and NDA confirmation language for Trust Centers.
└──▷ HOW TO FIND IT
Customize the NDA and legal terms displayed on your Trust Center to match your company's specific requirements.
📍Reach out to your Conveyor team to update your Trust Center legal text
Allows customization of the agreement and legal text on your Trust Center, including NDA confirmation language and Terms of Service and Privacy Policy sections.
Adds Salesforce integration to submit RFPs from Opportunities via Projects v2 API
└──▷ HOW TO FIND IT
Install the new managed package and configure the Connected App to enable RFP submission from Salesforce Opportunities.
📍Install Salesforce managed package v1.51 and configure a Connected App.
Adds ability to submit multiple questionnaire files grouped into a single project directly from a Salesforce Opportunity via the new Projects v2 API and Salesforce managed package v1.51.
Enables project status (draft, started, completed) flow-back to the Salesforce Opportunity for sales teams.
Show evidence for domains directly in the UI and centralize field rendering.
└──▷ GET THIS VERSION
$ git clone --branch v3.18.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.18.3
└──▷ HOW TO FIND IT
View all evidence linked to a specific compliance domain without leaving the domain context.
📍Navigate to the Domain details page in the CISO Assistant web interface and locate the new Evidence tab or section.
Adds the ability to view associated evidence items directly within a domain's view.
Centralizes the rendering logic for folder and domain fields in ModelForm.svelte for consistent UX.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Hardened IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. checks on the integration and decomission fallback login endpoint may affect existing integrations that relied on permissive access.
6 more releases in this issue
· 2026-06-03 → 2026-06-22
CISO Assistant v3.18.2 adds dark mode UI, custom fields for Pro users, and evidence export to audit action plans.
└──▷ GET THIS VERSION
$ git clone --branch v3.18.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.18.2
Adds dark mode toggle in the UI theme settings
Adds custom fields capability in the Pro edition for modeling additional attributes on entities
Adds evidences column/section to the audit action plan export output
CISO Assistant v3.18.1 adds mapping-from relationships and audit log forwarding
└──▷ GET THIS VERSION
$ git clone --branch v3.18.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.18.1
Adds mapping from capability to allow frameworks to reference other frameworks as sources
Introduces audit log forwarding for pro subscriptions
CISO Assistant v3.18.0 adds CCC-1:2020 framework support, dynamic Jira field mappings, per-object audit trails, and minimal JSON logging.
└──▷ GET THIS VERSION
$ git clone --branch v3.18.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.18.0
Add CCC-1:2020 (NCA Cloud Cybersecurity Controls - Saudi Arabia) framework
Add dynamic field/value mappings for Jira with auto-suggested defaults in integrations
Add audit trail per object in the Pro edition
Add minimal json logger on frontend and align default logs level
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Dependencies management switched from poetry to uv. If you have local scripting or configuration relying on poetry, replace references to it with uv.
CISO Assistant v3.17.3 adds NCNICC-1:2025 framework support and UI tweaks
└──▷ GET THIS VERSION
$ git clone --branch v3.17.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.17.3
steps: Add NCNICC-1:2025 (NCA - Saudi Arabia) as a selectable framework in the tool
steps: View ID before Name in all forms with category moved to front section for applied controls
CISO Assistant v3.17.2 adds ABRO Framework support, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. vulnerability CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information., cost breakdowns, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. redirect handling
└──▷ GET THIS VERSION
$ git clone --branch v3.17.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.17.2
feat(lib): ABRO Framework is now supported as a built-in framework library.
The MCP server now exposes vulnerability CRUD operations (create, read, update, delete) for vulnerabilities managed by the cyber tooling.
The MCP server adds support for querying asset classes. The MCP server also supports reading richer risk scenario data.
feat: tables columns selector adds a UI control allowing users to customize which columns are displayed in table views.
feat: show description for task’s occurrence adds the description field display to task occurrences in the UI.
+4 moreshow less
feat: cost breakdown on action plan adds a cost breakdown view to the action plan interface.
feat: implement sso redirect handling enables SSO flows that return users to their originally requested URL after authentication.
feat(ui): add journey's preset filter adds a preset filter for journey in the library list UI.
feat: support 1-3 properties scale on assets allows assigning values on a 1-3 scale for up to three custom properties on asset objects.
CISO Assistant v3.17.1 adds Prometheus metrics endpoint, audit aggregation through ancestors, and configurable date format.
└──▷ GET THIS VERSION
$ git clone --branch v3.17.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.17.1
Adds a /metrics endpoint for Prometheus metrics fetching
Enables audit aggregation through ancestors for inherited findings
OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 A01 course added; redesigned Inbox view with new tabs and one-click sender actions for Riot.
└──▷ HOW TO FIND IT
Block a sender and auto-resolve reports from a resolved ticket.
📍Click Block sender on the Inbox ticket detail view
Remove an unauthorized auto-forward rule detected by Sonar.
📍Click to remove the auto-forward rule in the Sonar dashboard alerts
Adds the OWASP Top 10 A01 Broken Access Control course to the catalog
Redesigns the Inbox ticket detail view to include Recipients and Reporters tabs
Adds a one-click Block sender action on ticket resolution with automatic threat handling
Adds Sonar alerts for auto-forward rules and a one-click removal capability
Revamps the Sonar dashboard with exposure evolution metrics
Riot adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Broken Access Control course, redesigned ticket views with Recipients/Reporters tabs, sender blocking in Inbox, and Sonar auto-forward monitoring.
Adds Broken Access Control to the training catalog as part of the new OWASP course series for engineering and IT teams
Introduces Recipients and Reporters tabs in the Inbox ticket detail view to show the scope of an attack by identifying who received emails and who reported them
Enables blocking a sender with one click when resolving an Inbox ticket, treating them as always malicious and auto-resolving their reports
Adds Sonar alerts for auto-forwarded emails to non-business addresses with a one-click removal option for the forwarding rule
Revamps the Sonar dashboard to display current exposure level and its evolution since onboarding
Runlayer is an MCP gateway that enforces identity-mapped permissions and detects threats across the agents and MCP servers employees use.
Runlayer v1.28.102 adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. spend analytics by agent, shareable agent artifacts, and a Tinybird connector.
Adds Agent spend analytics that breaks down LLM spend by agent
Makes Agent artifacts shareable with other users
Adds Tinybird as a new catalog connector
3 details in Everything
11 more releases in this issue
· 2026-06-01 → 2026-06-25
Runlayer 1.28.99 adds self-improving agents with cost budgets, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. artifact APIs, and browser extension delivery via MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies..
Adds opt-in self-improving agent capability that distills reusable Skills from successful runs
Adds agent_cost_budgets per-agent LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. cost budget configuration
Runlayer AI Watch for Windows now uses device-local Scheduled Tasks instead of Intune Remediations.
AI Watch on Windows registers device-local Scheduled Tasks (SYSTEM hook + per-user S4U scan fan-out) to run scans in each user’s context without interactive logon
Intune P2 / Remediations dependency removed for AI Watch on Windows; use detect-install.ps1 as the custom detection rule instead
Runlayer 1.28.96 adds Azure AI Foundry provider, device monitoring dashboard, and incident filtering.
Adds Azure AI Foundry as a new LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider option for agents
Introduces the AI Watch Devices tab on the Shadow dashboard for per-feature check-in and health monitoring of device inventory
Adds VS Code hooks to enable session monitoring and enforcement within VS Code
Adds Goose hooks support for the Goose client
Enables team owners to share skills with their team via Teams: skill sharing
+3 moreshow less
Adds filtering capability to the incidents list and renames Severity to Priority for better Slack formatting
Allows admins to change an agent’s owner from the Share modal via Agent ownership transfer
Includes unique user counts in Connector metrics activity data
Runlayer 1.28.82 adds AI Providers settings, AWS Bedrock support, interactive test connections, and OAuth redirect-URI consent
Adds Settings → AI Providers page to configure LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers per agent
Enables configuring AWS Bedrock as an agent LLM provider
Generates automatic titles for sessions
Adds interactive tool runner in the Test Connection drawer for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools
Runlayer 1.28.77 adds Artifacts gallery, single-org AI Watch deployment with capability flags, and auto-created access policies for new connectors.
Adds Artifacts gallery to browse all artifacts published by agents
Changes AI Watch MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. deployment to use one org API key with capability flags instead of per-feature credentials
Enables hosted stdio connectors to prompt each user for their own environment variables (e.g. personal API keys)
Adds icon picker when creating a custom connector
Auto-creates an access policy for every new connector at creation time
Runlayer 1.28.65 improves SharePoint and Outlook integration fidelity: exact site resolution for sharepoint_search_sites and lightweight calendar summaries for list views.
Runlayer 1.28.73 adds skill editing in UI, unredacted audit log filters, and native Metabase and Deel MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connectors.
Enables direct editing and renaming of skills within the web interface
Adds an Unredact filterable event type to the Audit Logs view
Replaces the Runlayer-deployed server with a native Metabase MCP connector
Microsandbox v0.6.0 adds Windows platform support and host-directory bind rootfs for the SDK
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.6.0
Adds windows platform support to the microsandbox library, enabling sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. on Windows hosts.
Adds host-directory bind rootfs support in the SDK, allowing the sandbox root filesystem to be bound from a host directory.
2 details in Everything
6 more releases in this issue
· 2026-06-01 → 2026-06-27
microsandbox v0.5.10 adds exec --stream for bidirectional streaming and guest-write quotas for virtiofs mounts.
└──▷ GET THIS VERSION
$ git clone --branch v0.5.10 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.5.10
microsandbox v0.5.8 adds local/cloud backend routing, secret substitution over HTTP CONNECTHTTP CONNECTAn HTTP method that asks a proxy server to open a raw TCP tunnel to a target host, letting clients relay arbitrary traffic — including TLS — through the proxy without the proxy inspecting it. tunnels, detached auto-init, and ephemeral sandbox cleanup.
└──▷ GET THIS VERSION
$ git clone --branch v0.5.8 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.5.8
Supports secret substitution through HTTP CONNECT tunnels for network requests
Adds shared microsandbox-types crate with common types and sandbox spec contract
Supports detached auto init entrypoints during sandbox initialization
Adds upper disk usage metrics to observability output
Owns and performs ephemeral sandbox cleanup at runtime
Redis multi-auth and discovery URL support; SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. checks for external calls in Portkey Data Service 1.9.0
Adds REDIS_CLUSTER_DISCOVERY_URL environment variable to enable Redis connection through Discovery URL.
Adds support for multiple auth modes in Redis improvements for Azure Redis.
Adds SSRF checks for external calls.
3 details in Everything
6 more releases in this issue
· 2026-06-10 → 2026-06-24
Portkey Enterprise Gateway 2.12.0 adds OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. guardrail spans, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./Agent token metering, Azure MAI image gen, and Vertex MoonshotAI support
Guardrail checks now emit dedicated OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. spans under the portkey.guardrail.* namespace for phase, verdict, action, deny, async, and per-check events.
Token usage from MCP requests (prompts, completions, tools) is tracked and reported in analytics and logs alongside LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. usage.
Token usage from agent endpoints (messages and tasks) is tracked and reported in analytics and logs alongside LLM usage.
Image generation and editing are supported for MAI models (e.g., MAI-Image-2.5) on Azure AI Inference.
Vertex AI integration now supports the moonshotai model provider.
+1 moreshow less
The /dataservice/metrics endpoint is gated behind the ENABLE_PROMETHEUS env flag, matching the behavior of the /metrics endpoint.
Portkey Backend 1.18.0 adds saved-only mode, MiniMax provider, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. multi-workspace mapping, unified /models endpoint, and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. agents.invoke scope.
Enables block_inline_config data-plane security setting to reject inline provider/endpoint/config selections in favor of admin-curated resources
Adds BLOCK_INLINE_CONFIG=true environment variable for self-hosted Gateways to force saved-only mode
Adds MiniMax (minimax) model provider to the Model Catalog with model and pricing configs
Expands SCIM integration: GET /v1/scim/workspaces now supports pagination (page, page_size, total_count) and groups can map to multiple workspaces
Removes include_mapped_groups filter from GET /v1/scim/groups as groups can now map to many workspaces
+2 moreshow less
Adds fetch_integrated_models config flag and x-portkey-models-endpoint request header to fetch the integrated catalog model list through the Gateway
Adds agents.invoke data-plane scope for JWT tokens
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The include_mapped_groups filter is removed from GET /v1/scim/groups endpoint responses
Adds x-portkey-fetch-integrated-models header to override models API routing, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. metrics-only logging, and S3 log store circuit breaker via env vars.
Adds the x-portkey-fetch-integrated-models HTTP header and fetch_integrated_models config field to force GET /v1/models to return gateway-configured models regardless of routing signals
Introduces metrics-only logging mode for the MCP gateway, dropping request/response bodies from persisted logs while retaining span info and preserving response bodies on failures
v2.11.1 updates Bedrock Guardrails action handling, cost attribution, and SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. validation.
Guardrails now only block requests when the action field is explicitly blocked, allowing non-blocking actions to pass through.
ongrid v0.9.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client, parallel multi-agent, task abstraction, and agent write-permission toggles.
└──▷ GET THIS VERSION
$ git clone --branch v0.9.0 https://github.com/ongridio/ongrid.git
# already have the repo? check out this version:$ git checkout v0.9.0
Adds mcp__<server>__<tool> tool registration for external MCP servers via Streamable HTTPStreamable HTTPAn MCP transport protocol that lets a client send JSON-RPC requests over HTTP POST while the server streams responses back using Server-Sent Events, replacing the older stdio and SSE transports for remote tool communication.
Adds parallel expert execution in a single coordinator turn
Adds unified task interface merging recurring and one-off tasks under task_id
Adds AI assistant write-permission gate at Settings > Assistant with fail-safe default
Adds skill marketplace for installing and uploading skills with sandboxed cloud_bash execution
5 details in Everything
└──▷ BREAKING ON UPGRADE
!AI assistant write operations default to disabled (read-only) after upgrade; host_bash and other write tools are no longer exposed by default.
6 more releases in this issue
· 2026-06-03 → 2026-06-28
ongrid v0.8.5 adds ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. server support and database metric collection to its agent capabilities.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.5 https://github.com/ongridio/ongrid.git
# already have the repo? check out this version:$ git checkout v0.8.5
Adds ongrid-v0.8.5-linux-arm64 package for ARM64 server installations
Enables complete database metric subplugin collection via the metrics agent
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The HostID/hostname host fingerprinting is replaced by hardware-based keys (MAC|CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware.|disk) in the device agent
Ongrid v0.8.0 introduces scheduled report center with custom cron, PDF export, and chat history integrity fixes
└──▷ GET THIS VERSION
$ git clone --branch v0.8.0 https://github.com/ongridio/ongrid.git
# already have the repo? check out this version:$ git checkout v0.8.0
Adds Scheduled Reports feature with daily/weekly/monthly generation and custom cron scheduling for ops reports including cluster metrics, alerts, and usage stats.
Adds Export PDF capability for report center items using browser print isolation.
Adds sharing link functionality for generated reports to channels like Feishu or Slack.
ongrid v0.7.167 adds auto-install of Docker dependencies and CN registry mirroring to install.sh
└──▷ GET THIS VERSION
$ git clone --branch v0.7.167 https://github.com/ongridio/ongrid.git
# already have the repo? check out this version:$ git checkout v0.7.167
install.sh now auto-detects missing docker and installs it via get.docker.com with apt/dnf fallback for docker-ce + compose v2.
install.sh detects unreachable Docker Hub and writes CN registry mirrors to /etc/docker/daemon.json before pulling images.
The ONGRID_PUBLIC_URL environment variable is now auto-suggested from cloud metadata (Tencent / Aliyun / AWS / GCP / Azure IMDS) instead of internal NICNICA network interface card or adapter, the hardware that connects a computer to a network. It sends and receives packets over the link. IP.
nono v0.63.0 adds static env injection, keyring timeout control, $PACK_DIR in session hooks, and XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. state dir migration.
└──▷ GET THIS VERSION
$ git clone --branch v0.63.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.63.0
└──▷ TRY IT
Prevent keychain prompts from hanging indefinitely in automated pipelines by capping how long nono waits for keyring access.
$ NONO_KEYRING_TIMEOUT_SECS=10 nono run -- <command>
Adds set_vars for static environment variable injection into sandboxed sessions.
Adds NONO_KEYRING_TIMEOUT_SECS environment variable to control keychain access timeout.
Adds $PACK_DIR variable support in session hooks, enabling store pack workflows.
Moves runtime state to XDG state directories for cleaner system integration.
nono v0.61.0 adds a profile option to suppress system service diagnostics output.
└──▷ GET THIS VERSION
$ git clone --branch v0.61.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.61.0
└──▷ BREAKING ON UPGRADE
!Credentials are no longer enabled by default in network-policy profiles; existing profiles that relied on credentials being enabled by default will need to explicitly enable them.
OpenShell runs autonomous AI agents in policy-controlled sandboxes with isolated filesystem, network, and credential access.
OpenShell v0.0.71 adds support for out-of-tree compute drivers via a new server socket flag.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.71 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.71
└──▷ TRY IT
Load a custom or out-of-tree compute driver without rebuilding the server — useful when running non-standard GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. drivers in air-gapped or specialized environments.
OpenShell v0.0.69 adds AWS Bedrock as an inference provider, GCEGCEGoogle Compute Engine, Google's infrastructure-as-a-service platform for running virtual machines in the cloud; cyber tools use it for scalable, on-demand compute without managing physical hardware. metadata emulation, GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. count requests, and profile updates.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.69 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.69
Adds AWS Bedrock as a recognized inference provider in sandbox and provider configurations.
Adds a GCE metadata emulator for Google Cloud sandbox environments.
OpenShell v0.0.65 adds TLS certificate hot-reload and DeepInfra as a built-in inference provider.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.65 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.65
Supports TLS certificate hot-reload on the server, eliminating restarts when rotating certificates.
Adds DeepInfra as a built-in inference provider, expanding the set of natively supported LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. backends.
OpenShell v0.0.58 adds Kubernetes driver config passthrough, path-based auth style for providers, and local embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. routing.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.58 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.58
Supports driver config passthrough for Kubernetes deployments.
Adds path auth style option for providers v2 configuration.
OpenShell v0.0.53 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. Bearer auth for the Python SDK, an agentic approval loop for policies, multi-device PCIe passthrough, and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. pane scrolling.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.53 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.53
Supports OIDC Bearer authentication on SandboxClient in the Python SDK.
Adds an agentic approval loop to the policy engine for human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. control over agent actions.
Generalizes PCIe passthrough crate to support multi-device configurations.
Adds PageUp/PageDown scrolling to all panes in the terminal UI.
varmor v0.10.2 adds a Vulnerability Policy Generator Skill for automated CVE analysis
└──▷ GET THIS VERSION
$ git clone --branch v0.10.2 https://github.com/bytedance/varmor.git
# already have the repo? check out this version:$ git checkout v0.10.2
Adds the vulnerability_policy_generator skill (introduced as PR #329) to automate CVE analysis and generate mitigation policies.
Raises mount-rule capacity to 64 via the new bpf_loopBPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. variant on kernels >= 5.17.
Increases file, process, and network inner-map capacity from 50 to 64.
ToolHive v0.31.0 adds opt-in code mode decorator for vMCP and allows private IPs for OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user./OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs.
└──▷ GET THIS VERSION
$ git clone --branch v0.31.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.31.0
└──▷ USE IT
Launch a vMCP instance with the new code mode decorator enabled for enhanced session handling
shell
toolhive run my-service --code-mode
Configure an in-cluster OIDC provider using a private IP address (previously blocked)
ToolHive v0.30.1 adds network isolation defaults, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. subjectClaim selection, global Redis store config, and new Go APIs.
└──▷ GET THIS VERSION
$ git clone --branch v0.30.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.30.1
└──▷ TRY IT
Allow a local MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server to reach the host while keeping network isolation enabled.
$ thv run my-server --allow-docker-gateway
Use the new Go API to create a backend registry that discovers backends from Kubernetes resources.
New --isolate-network and --allow-docker-gateway flags on thv run enable default network isolation for local MCP servers
New optional subjectClaim field on MCPOIDCConfigCRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. and Go config allows selecting the OIDC subject claim instead of hardcoded sub
New operator.defaultRedis (or global.redis) operator config key sets a global default Redis/Valkey session store for workloads lacking explicit storage
New public NewKubernetesBackendRegistry constructor enables live Kubernetes-driven backend discovery for vMCP embedders
REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.network_isolation field now defaults to enabled (optional *bool) when omitted in create/modify requests
5 details in Everything
└──▷ BREAKING ON UPGRADE
!thv run and REST API-created workloads now have network isolation ON by default; omitting --isolate-network=false or "network_isolation": false will block host access
!The thv mcp serve command and --experimental-mcp* flags are removed, breaking scripts relying on the unauthenticated embedded MCP control-plane server
!A non-Cedar authzConfigRef on a VirtualMCPServer now fails reconciliation instead of being silently ignored
ToolHive v0.30.0 adds rate limiting, header passthrough, CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it.-based auth, and headless OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. for virtual MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers.
└──▷ GET THIS VERSION
$ git clone --branch v0.30.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.30.0
└──▷ USE IT
Configure rate limits for a virtual MCP server using Redis-backed token buckets.
Forward specific headers like API keys to upstream backends.
config
spec:
passthroughHeaders:
- 'x-mcp-api-key'
Run LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. setup in a CI/CD pipeline without a browser.
shell
thv llm setup --skip-browser
spec.config.rateLimiting on VirtualMCPServer enables shared and per-user token bucket rate limiting backed by Redis session storage
New MCPAuthzConfig CRD allows any registered authorizer backend (e.g. Cedar, HTTP PDP) to be referenced via authzConfigRef on MCPServer, MCPRemoteProxy, and VirtualMCPServer
spec.passthroughHeaders on VirtualMCPServer allows an allowlist of incoming header names to be forwarded unchanged to backend services
spec.replicas and spec.sessionStorage on MCPRemoteProxy enable high-availability deployments with load balancing and Redis-backed shared session state
OBO external-auth type on MCPExternalAuthConfig now exposes a configuration schema (tenantId, authority, clientId, etc.) for Microsoft Entra On-Behalf-Of flow
+2 moreshow less
New disableUpstreamTokenInjection flag on the embedded auth server allows MCP clients to authenticate via OAuth while forwarding unauthenticated requests to the backend
--skip-browser flag on thv llm setup, thv llm token, and thv llm proxy start prints the OIDC authorization URL instead of opening a browser
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Go code implementing AuthorizerFactory must add the required ConfigKey() string method to compile.
ToolHive v0.29.2 adds security headers to REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and fixes OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. header delivery
└──▷ GET THIS VERSION
$ git clone --branch v0.29.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.29.2
Adds X-Content-Type-Options: nosniff and Cross-Origin-Resource-Policy: same-origin headers to all thv REST API responses.
OTLP exporter headers from the OTEL_EXPORTER_OTLP_HEADERS environment variable are no longer dropped on POST /api/v1/workloads.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The MCPRegistryCRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. is deprecated and will be removed in a future release.
ToolHive v0.29.1 adds --lazy flag to thv llm setup and defines VMCP core interface.
└──▷ GET THIS VERSION
$ git clone --branch v0.29.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.29.1
└──▷ TRY IT
Defer LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. key acquisition until the first tool invocation to speed up startup.
$ thv llm setup --lazy
Adds --lazy flag to thv llm setup to enable lazy mode for deferred LLM configuration
Defines VMCP core interface and Config contract to standardize MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. backend interactions
Adds HMA_SCANNER_SIGNING_KEY (Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. seed, runtime-env only) to enable first-party scanner provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build.: signed publishes self-tag source=first_party_scanner and sign the canonical string name|version|score|maxScore|source|nonce|signedAt; unsigned --publish runs default to source=community.
Adds detection AST-SCOPE-004 — adversarial configuration directives — flagging agent_config / mcp_config artifacts whose configuration flags are themselves the attack vector (self-escalation, RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists./validation bypass, audit evasion, covert persistence, credential harvesting), validated against the OASB benign corpus with zero false positives.
2 details in Everything
1 more release in this issue
· 2026-06-05 → 2026-06-07
Adds --branch to share push, nested h5i hook claude|codex commands, per-env credential isolation, and team worktree snapshots.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.2 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.2.2
Adds --branch flag to h5i share push to scope context-DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. pushes to a single branch
Nests agent hooks under h5i hook claude and h5i hook codex subcommands
Enables per-env credential and session isolation for agent boxes
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed the h5i claims, h5i rewind, and h5i rollback commands/features
h5i v0.1.7 adds --branch filter to msg history/replay, TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. for Agent Radio, and token-reduction object store
└──▷ GET THIS VERSION
$ git clone --branch v0.1.7 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.1.7
--branch filter added to h5i msg history and h5i msg replay commands to limit output by Git branch.
TUI mode support added for Agent Radio interaction.
New token-reduction object store captures run data with filtered summaries to reduce context usage.
Docker Sandboxes v0.34.0 adds a native SSH endpoint, sbx setup onboarding command, and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. v2 kit streaming.
└──▷ GET THIS VERSION
$ git clone --branch v0.34.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.34.0
└──▷ TRY IT
Connect to a running sandbox over SSH for an interactive shell without needing a separate tunnel.
Allow kit installs from a private registry in addition to Docker Hub.
$ sbx settings set kit.allowedSources docker.io/,registry.example.com/
Bootstrap agent credentials on a new machine using environment variables.
$ sbx setup
Adds experimental native SSH endpoint in sandboxd: connect with ssh <sandbox-name>@127.0.0.1 -p 2222 (publickey auth, connect-to-create, interactive shell and exec), enabled via sbx settings set feature.ssh true.
Adds experimental sbx setup command that imports agent credentials from environment variables for smoother first-time onboarding.
Adds OCI v2 kit artifact streaming that decompresses layers once to a cache directory and uses seek-based random access, reducing memory usage between reads.
Restricts kit installs to an allowlist of sources (defaulting to Docker Hub docker.io/ only), configurable via sbx settings set kit.allowedSources.
Restores published sandbox ports on restart, with CLI/TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. able to recover explicit host-port conflicts by selecting a new host port.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Installing a kit from a registry other than docker.io/ or from a Git URL now fails until you add its prefix with sbx settings set kit.allowedSources.
!sbx policy set-default is renamed to sbx policy init; the old name remains as a hidden, deprecated alias.
2 more releases in this issue
· 2026-06-09 → 2026-06-26
Allow a CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. subnet in sandbox network policy, then confirm the stable sandbox ID is present in JSON output.
New --name flag for sbx run identifies a sandbox independent of working directory, enabling multiple named sandboxes per workspace and re-attachment from any directory.
sbx ls --json now reports a stable per-sandbox id field.
sbx cp -L now follows symlinks in the source path for sandbox-to-host copies.
Sandbox DNS lookups are now gated on network policy, closing a DNS-based data-exfiltration channel (CVE-2026-12039); loopback names remain exempt.
Outgoing ICMP from sandboxes is now blocked across daemon restarts (CVE-2026-12539).
+8 moreshow less
MITM proxy now publishes a CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. and embeds a CRL distribution point in generated certificates, enabling revocation-strict clients (e.g. .NET) to work inside sandboxes.
sbx secret set-custom --host and serviceDomains in kits now accept wildcard host patterns (* for one label, ** for any number) and are repeatable to cover multiple subdomains/domains.
Cursor OAuth is now supported as an agent.
virtiofs cache is now enabled by default on macOS and Linux for improved filesystem performance.
Build packages for linux/arm64 are now produced.
Linux keychain backend now falls back to the encrypted on-disk store when dbus-launch is unavailable, supporting headless/server hosts.
Claude connectors (Slack, Gmail, Notion, Atlassian, etc.) now work inside sandboxed Claude Code without manual policy overrides.
Daemon inspect output is now included in the diagnostics bundle.
13 details in Everything
└──▷ BREAKING ON UPGRADE
!The positional argument to sbx run <sandbox> for re-attaching to an existing sandbox is deprecated and will be removed in a future release; use sbx run --name <sandbox> instead (a deprecation warning is printed now).
!sbx run --name no longer auto-creates numbered sibling sandboxes and errors when the requested agent doesn't match the named sandbox.
!Sandbox DNS resolution is now blocked for domains denied by network policy, which may break sandboxed processes that previously resolved policy-denied domains.
Docker Sandboxes v0.32.0 adds audit logging, sign-in enforcement, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. secrets, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. v2 kit support, and unhides custom secrets.
└──▷ GET THIS VERSION
$ git clone --branch v0.32.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.32.0
└──▷ TRY IT
Set an OpenRouter API key as a built-in secret so the proxy automatically injects the Authorization header for all agent requests.
$ sbx secret set my-sandbox openrouter
Review active network policy rules for a sandbox and reveal hidden inactive governed rules for compliance auditing.
$ sbx policy ls --include-inactive
New audit logging emits structured JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. records for every policy decision, written to a per-OS log directory and forwardable to any SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. for enterprise compliance (requires Docker AI Governance subscription).
New sign-in enforcement lets admins require Docker organization membership verification, deployed via macOS configuration profiles, the Windows registry, or a JSON policy file on Linux.
Adds interactive Sign in with ChatGPT OAuth flow on first sbx create/sbx run codex when no Codex credentials are configured.
Makes global the default scope for policy network allow|deny and policy rm; adds --sandbox flag to target a specific sandbox (drops the -g/--global flag).
Unhides sbx secret set-custom as an experimental command for setting custom secrets.
+7 moreshow less
Adds OpenRouter as a built-in service provider so sbx secret set <sandbox> openrouter works without set-custom, with automatic Authorization: Bearer <token> injection.
Adds encrypted on-disk secrets store fallback on Linux/WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host. hosts where no working keychain is available.
Hides inactive governed policy rules by default in sbx policy ls and the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. Network Rules view; adds --include-inactive flag (TUI i toggle) to reveal them.
Supports v2 OCI kit artifact format end-to-end, making kits standard OCI images inspectable by Hub, oras, crane, and skopeo without kit-specific knowledge.
Simplifies sbx version to a single line by default; gates detailed output behind -D/--debug.
Keeps virtiofs caching enabled for sandboxes using --clone, speeding up git status, grep -r, and tree walks by avoiding a FUSEFUSEA Linux kernel interface that lets userspace programs implement a filesystem without kernel code, maintained as part of the kernel project; tools use it to mount virtual or synthetic filesystems without requiring root or kernel modules. round-trip on every stat().
12 details in Everything
└──▷ BREAKING ON UPGRADE
!The -g/--global flag is removed from policy network allow|deny and policy rm; global is now the default scope and --sandbox targets a specific sandbox instead.
Ai-Safe2-Framework provides governance, risk, and compliance controls for securing agentic AI systems and non-human identities.
AI SAFE2 framework adds Sovereign Runtime pre-execution enforcement for AutoGen CodeExecutorAgent with CP.8 and HEAR doctrine support
└──▷ GET THIS VERSION
$ git clone --branch Sovereign_Runtime https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout Sovereign_Runtime
Adds the AutoGen 0.4 Sovereign Runtime which evaluates every generated code block before it reaches the executor to prevent prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. resulting in arbitrary code execution
Introduces mandatory CP.8 Catastrophic Risk Threshold enforcement for every CodeExecutorAgent instance
Implements HEAR Doctrine enforcement specifically for Class-H code patterns within the runtime
3 details in Everything
4 more releases in this issue
· 2026-06-09 → 2026-06-26
AI SAFE2 v3.0 introduces Langflow Sovereign Runtime with external proxy and inline DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. node enforcement.
└──▷ GET THIS VERSION
$ git clone --branch 2026-06-24_Langflow-Sovereign-Rruntime https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-06-24_Langflow-Sovereign-Rruntime
└──▷ USE IT
Deploy the external proxy to scan webhook and header injections before they touch the Langflow server.
shell
cd examples/langflow-sovereign-runtime && PYTHONPATH=enforcement python3 smoke_test.py
Configure Langflow to stop auto-exposing flows as MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools by disabling the relevant environment variables.
Adds examples/langflow-sovereign-runtime providing a defense architecture for visual DAG builders via an external API proxy that scans requests before they reach Langflow's HTTP endpoints.
Introduces the inline DAG node safe2_guardian_component.py as a CustomComponent to intercept LF-COMP surface injections between data-fetching and Agent nodes.
Adds validation of LANGFLOW_ADD_PROJECTS_TO_MCP_SERVERS and LANGFLOW_AUTO_LOGIN environment variables via the new scan_mcp_config() startup function to prevent unauthenticated MCP exposure.
Introduces LangGraph Sovereign Runtime for AI SAFE2 v3.0 enforcement
└──▷ GET THIS VERSION
$ git clone --branch 2026-06-22_LangGraph-Sovereign-Runtime https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-06-22_LangGraph-Sovereign-Runtime
Adds SovereignCallbackHandler to enforce 15 controls from AI SAFE² v3.0 on LangGraph chains
Shares the AISAFE2Engine kernel across LangGraph, CrewAI, AutoGen, and n8n for unified compliance scoring
Ships LangChain Sovereign Runtime for AI SAFE² v3.0 with hard loop ceilings and memory governance
└──▷ GET THIS VERSION
$ git clone --branch 2026-06-19_Langchain-Sovereign-Runtime https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-06-19_Langchain-Sovereign-Runtime
└──▷ USE IT
Sanitize tool outputs and enforce safety controls on a standard LangChain chain invocation.
Adds governance-enforcer plugin for Antigravity, hardened safe_gateway.js covering 10 threat classes, SARIF 2.1.0SARIF 2.1.0A JSON-based file format, standardized by OASIS, for expressing static analysis results so that cyber tools from different vendors can share findings through a single, machine-readable schema. reports via audit_logger.js, and subagent memory governance.
└──▷ GET THIS VERSION
$ git clone --branch 2026-06-09_Anti-Gravity_Sovereign_Runtime_v2 https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-06-09_Anti-Gravity_Sovereign_Runtime_v2
Adds governance-enforcer plugin with 'autoLoad': true to load constraints in every Antigravity session without per-project config
Expands safe_gateway.js coverage from 4 to 10 threat classes including symlink/junction escape, domain confusion, raw IP literal blocking, and non-HTTP scheme blocking (file://, ftp://, data://)
Adds audit_logger.js that computes SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. hashes for verified files and generates SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. 2.1.0 output for GitHub Security / CodeQL integration
Introduces controls/policy.yaml machine-readable manifest with maturity levels (attested, tested, implemented, documented, planned) and loaded_at_runtime fields per control
Adds circuit_breaker.js methods validateSubagentSpawn() and validateMemoryWrite() to deny unsandboxed spawns and block injection payloads in memory writes
humanbound 2.1 adds SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. streaming transport and permissive content key extraction
└──▷ GET THIS VERSION
$ git clone --branch 2.1.0 https://github.com/humanbound/humanbound.git
# already have the repo? check out this version:$ git checkout 2.1.0
Adds Server-Sent Events (SSE) as a chat-completion transport via the streaming config field in agent configuration.
Enables permissive content extraction by recognizing content, text, response, resp, answer, ans, message, reply, and output keys in streaming JSON payloads.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The streaming config field is now an enum; legacy boolean values (true/false) are rejected and must be migrated to "websocket" or null respectively.
v2.0.5 adds --no-test, --test-category, and --scope flags to hb connect, plus domain field in presenter output.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.5 https://github.com/humanbound/humanbound.git
# already have the repo? check out this version:$ git checkout v2.0.5
Adds --no-test flag to hb connect to skip the auto-test step after project creation while still rendering the risk dashboard
Adds --test-category flag to hb connect (default: humanbound/adversarial/owasp_agentic) to choose the test family for the auto-test step, mirroring hb test behavior
Adds --scope <path> flag to hb connect to load a pre-made scope file (YAML or JSON) as input, sent to POST /scan as a text source with additive intent diffing
Includes a new domain field (security / quality) in presenter posture output, derived from the test category
ifixai v3.0.2 adds pip installability, Claude Code plugin, live-run safety gates, and Windows support with sut_via_bridge flag.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.2 https://github.com/ifixai-ai/ifixai.git
# already have the repo? check out this version:$ git checkout v3.0.2
Adds Claude Code plugin that discovers agent setup, builds fixtures, runs inspection suites, and explains scorecards for providers like Anthropic, OpenAI, Gemini, Azure, and Bedrock.
Enables installation via PyPI using pip install ifixai with per-provider extras such as [anthropic], [openai], and [all].
Introduces live-run preflight and run-health gates to validate the chosen model and SDK before any billed call, failing fast on broken configurations.
Adds Windows support including UTF-8 console output, enforced LF line endings via .gitattributes, Python/PowerShell bootstrap shims, and a deduped session hook.
Adds sut_via_bridge flag (off by default) to restrict platform-refusal detection to bridge-routed replies only.
5 details in Everything
2 more releases in this issue
· 2026-06-03 → 2026-06-23
Agentic Security scans AI agents and LLM applications for prompt injection, insecure tool use, and other vulnerabilities.
Adds PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. leak detector, full event log export, Google Sheets dataset support, LiteLLM provider, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. prompt templates
└──▷ GET THIS VERSION
$ git clone --branch 0.7.5 https://github.com/msoedov/agentic_security.git
# already have the repo? check out this version:$ git checkout 0.7.5
Add LiteLLM as a provider for 100+ LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. backends
Support Google Sheets URLs in dataset loader
Add pii-leak-detector to detect personally identifiable information leaks
Garak scans language models and applications for vulnerabilities including prompt injection and data leakage.
garak v0.15.1 adds ProPILE PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. probes, simonw/llm generator support, and JSON/file output for garak.analyze.qual_review
└──▷ GET THIS VERSION
$ git clone --branch v0.15.1 https://github.com/NVIDIA/garak.git
# already have the repo? check out this version:$ git checkout v0.15.1
proPILE probes now available in the probes module for PII leakage detection.
Generator plugin can now use the simonw/llm library.
garak.analyze.qual_review output mode now supports JSON and file writing.
Adds mcp_scan and ai_infra_scan model token flexibility; new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. threat detections
└──▷ GET THIS VERSION
$ git clone --branch v4.1.15 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.1.15
mcp_scan and ai_infra_scan commands now allow omitting the model token argument to fall back to the system default model instead of failing.
New MCP threat detection rules added for tool poisoning, credential exfiltration, and command injectioncommand injectionAn attack that makes an application execute operating-system commands supplied through untrusted input. It often happens when input is passed unsafely to a shell..
2 details in Everything
3 more releases in this issue
· 2026-06-08 → 2026-06-25
Giskard tests and evaluates LLM applications for performance, bias, and security issues.
Giskard adds parallel Suite.run execution, GOAT scenario generator, Rego policy checks, stereotype/discrimination adversarial generation, and provider transport passthrough.
└──▷ GET THIS VERSION
$ git clone --branch giskard-llm/v1.0.0b4 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-llm/v1.0.0b4
└──▷ USE IT
Run a validation suite in parallel to reduce overall evaluation time.
python
suite.run(parallel=True)
Suite.run now accepts parallel=True to execute scenarios concurrently
Adds GOAT scenario generator for vulnerability-focused testing
Adds adversarial scenario generator targeting stereotypes and discrimination
Enables passing provider transport configuration through Giskard's LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integration
CalypsoAI tests AI systems for security, safety, and compliance risks before deployment.
v10.42.6 adds Spanish PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. support, streaming, resizable fingerprint UI panel, Cyberpunk attack pack, /refusal-catalogs/ API, and OKE deployment
Adds es-ES (Spanish) PII package to AI Guardrails by default
Adds resizable fingerprints panel in the UI for navigating agentic traces
Adds Cyberpunk stories new attack pack to AI Red Team
Adds Oracle Kubernetes Engine (OKE) support for on-premises deployments
Zenity discovers, secures and governs enterprise AI agents from buildtime to runtime across SaaS, endpoint and cloud.
Zenity integrates with Claude Compliance API for post-session correlation and inline prevention of prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and exfiltration.
Integrates with Claude's Compliance API to bring Claude activity into Zenity's AI security and governance platform
Provides session replay of prompts, responses, tool interactions, and execution context for Claude agents
Correlates agent sessions in Claude Code with pull requests, commits, and code changes
Maintains an inventory of MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, skills, plugins, and connected extensions across the Claude estate
Evaluates configuration posture across managed, user, project, and local scopes before sessions begin
+6 moreshow less
Enforces organization-level policy for MCP servers, skills, plugins, and other agent extensions (allow, block, review)
Detects embedded credentials, suspicious payloads, and injection patterns in configuration and extension layers
Provides real-time AIDR detection of prompt injection across user, AI, and tool planes
Blocks destructive actions that exceed the intended task before they reach source code or secrets
Detects memory poisoning, behavioral drift, and C2/exfiltration attempts through agent prompts and tool calls
Preserves structured evidence of Claude activity for compliance teams to map to audit requirements
pipelock v2.8.0 adds CLI diagnostics, license CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. inspection, offline fleet reporting, and live demo playground
└──▷ GET THIS VERSION
$ git clone --branch v2.8.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.8.0
Adds explain, keys status, support bundle and update CLI commands
Adds license crl inspect and license crl verify commands
Gates CLI issuance on paid capability + signed service import table; enforces intermediate requirements, issuer-side revocation, and CRL freshness
Adds offline fleet-report export/verification, operator credential/enrollment-token lifecycle management, and operator recovery commands in conductor
Wires follower audience labels into policy/rollback/remote-kill paths; verifies emergency-control signatures at leader read paths; adds deferred authorization with fail-closed resolution in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
+2 moreshow less
Adds per-server response suppression + airlock reset for first-party tools in MCP; gates live-chat backend with stream seam/gate/fail-closed limits/SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. server; adds honest live-chat demo backend and live-demo engine with offline-verifiable evidence
Split-proof contained mode with signed host-containment witness
7 details in Everything
1 more release in this issue
· 2026-06-12 → 2026-06-18
pipelock v2.7.0 adds pipelock skill-scan, contain doctor, pipelock conductor bootstrap, AARP verification, and enhanced DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. detections.
└──▷ GET THIS VERSION
$ git clone --branch v2.7.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.7.0
Adds skill scan subcommand to CLI for scanning agent capabilities
Adds contain doctor self-test command and runtime contract validation for containerized operators
Adds conductor bootstrap subcommand to initialize a self-verifying development fleet
Adds support for detecting DB connection strings, GitLab token families, and cloud service-account keys in DLP scans
Enables flight recorder by default and seals transcript root on shutdown for audit reliability
+2 moreshow less
Adds offline X.509-SVIDX.509-SVIDAn X.509 certificate formatted to carry a SPIFFE Verifiable Identity Document, binding a cryptographic identity to a workload so cyber tools can authenticate services without passwords or static secrets. validation against pinned trust-bundle history via the SVID feature set
Enables cross-agent contamination tracking across A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools. and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocols in the taint module
SysReptor 2026.50 moves LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. config to the web UI, adds multi-model selection, and extends auto-delete to finished projects.
└──▷ GET THIS VERSION
$ git clone --branch 2026.50 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.50
└──▷ USE IT
Set a global auto-delete window that applies to both archived and finished projects, replacing the old archives-only setting.
ini
AUTOMATICALLY_DELETE_PROJECTS_AFTER=90 # in your SysReptor environment/config, replaces AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER
Moves LLM configuration (AI_AGENT_MODELS) from environment variables to the web UI for live management without restarts.
Supports multiple LLM models with in-UI model selection per session.
Extends AUTOMATICALLY_DELETE_PROJECTS_AFTER to cover both finished and archived projects (previously archives only).
Enables per-project customization of the auto-delete date.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The configuration key AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER is renamed to AUTOMATICALLY_DELETE_PROJECTS_AFTER; existing setups using the old key will stop applying auto-deletion on upgrade.
1 more release in this issue
· 2026-06-03 → 2026-06-17
lsof 4.99.7 adds JSON and JSON Lines output formats and displays UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. connection state via -T.
└──▷ GET THIS VERSION
$ git clone --branch 4.99.7 https://github.com/lsof-org/lsof.git
# already have the repo? check out this version:$ git checkout 4.99.7
└──▷ TRY IT
Inspect UDP socket connection states on Linux to identify sockets stuck in unexpected states.
$ lsof -i UDP -T s
Adds -J flag for JSON output wrapping process and file information in a structured envelope.
Adds -j flag for JSON Lines output where each line is a JSON object representing a file descriptor.
Enables UDP socket connection-state display on Linux via the existing -T option.
goshs v2.1.3 adds a TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. server and a reverse-shell payload generator to its multi-protocol file-sharing toolkit.
└──▷ GET THIS VERSION
$ git clone --branch v2.1.3 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.1.3
└──▷ TRY IT
Quickly serve your current directory over TFTP so a network device or Windows host can pull files with its built-in tftp.exe client.
$ sudo ./goshs -tftp
Run the TFTP server on an unprivileged port (e.g. in a lab environment where you can't bind UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. 69) while still serving HTTP alongside it.
$ ./goshs -tftp-tftp-port 6900
Adds TFTP server support (-tftp / --tftp-server) serving files over UDP port 69 by default, with RRQ/WRQ (download/upload), blksize/tsize option negotiation, path-traversal rejection, IP whitelist enforcement, --read-only/--upload-only support, and mDNSmDNSA zero-configuration protocol that resolves hostnames to IP addresses on a local network segment without a central DNS server, using multicast UDP on 224.0.0.1:5353. Cyber tools use it to discover hosts and services without active probing. advertisement.
Adds a reverse-shell payload generator tab in both the web UI and --tui dashboard, producing one-liners for Bash, nc, Python, PHP, PowerShell, Perl, Ruby, and more, with LHOST/LPORT substitution and optional URL or Base64 (-EncodedCommand) encoding.
2 details in Everything
2 more releases in this issue
· 2026-06-17 → 2026-06-25
goshs v2.1.2 adds on-the-fly payload templating and resumable HTTP Range downloads.
└──▷ GET THIS VERSION
$ git clone --branch v2.1.2 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.1.2
Adds payload templating: serve files as Go templates rendered at download time, with {{.VAR}} placeholders substituted via --template and repeatable --tpl-var KEY=VALUE flags.
Supports HTTP Range requests for resumable and partial downloads of large files.
goshs v2.1.1 adds a full-screen TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. dashboard (--tui) and a TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. self-destruct timer (--ttl) for time-boxed engagements.
└──▷ GET THIS VERSION
$ git clone --branch v2.1.1 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.1.1
└──▷ TRY IT
Run a full catcher stack with DNS, a 4-hour self-destruct, and the TUI dashboard — ideal for a time-boxed engagement over SSH without forwarding the web UI port.
Start goshs with a 2-hour self-destruct for automated drop-and-forget file serving during a CI pipeline or timed engagement.
$ goshs --ttl 2h
New --tui flag launches an interactive Bubble Tea terminal dashboard with live event panes for HTTP, DNS, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments., LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure., Shells, and Clipboard — no web UI port-forwarding needed over SSH.
Clipboard management directly in the TUI: add (a), delete (d), and clear (C) entries without touching the web interface.
Save SMTP attachments to disk from the TUI with the s key.
Export any pane's event log to JSON from the TUI with e (current pane) or E (all panes).
New --ttl flag arms a graceful self-destruct timer using Go duration strings (30m, 2h, 1h30m); also settable as "ttl": <seconds> in the JSON config file.
+2 moreshow less
TTL countdown is surfaced in the TUI status bar when --ttl is active.
ConPtyShell.ps1 is no longer embedded in the binary; goshs now serves it on demand at /ConPtyShell.ps1?conpty, using a local webroot copy if present or downloading and caching from upstream — reducing antivirus false positives.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!ConPtyShell.ps1 is no longer compiled into the goshs binary; Windows upgrade flows that relied on the embedded script must now ensure the route /ConPtyShell.ps1?conpty is reachable (it is exempt from authentication), or place a ConPtyShell.ps1 in the webroot.
Autoruns aligns CLI with GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands.; ZoomIt gains webcam/mic features; ProcDump Linux gets .NET counters; LiveKd adds agent skills.
Adds packaged apps support to the autorunsc command-line utility
Adds image backgrounds, webcam background blur and microphone noise cancellation support in ZoomIt v12.1
Adds Ctrl-Shift-A for selecting all output in DebugView
Adds agent skills support for the LiveKd CLI utility
Adds .NET counters and a custom core dumper to ProcDump for Linux
Joplin 3.7.3 adds AI chat backend, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, note embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. indexer, and whiteboard groups
Adds joplin.ai.search plugin API for semantic searchsemantic searchSearching by meaning rather than requiring the same words. It commonly compares vector representations to find related content, even when the wording differs. in plugins
Adds a built-in MCP (Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) server
Adds a note embeddings indexer to vectorize note content for AI features
Adds a new AI chat backend infrastructure within the application
Adds drag-and-drop support for files onto whiteboards
curl 8.21.0 adds named globs for upload filenames and HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. proxy CONNECT support
Adds MASQUE CONNECT-UDP support via ngtcp2 QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. backend for HTTP/3.
tmux 3.7 adds floating panes, copy mode line numbers, and configurable message formatting.
└──▷ GET THIS VERSION
$ git clone --branch 3.7 https://github.com/tmux/tmux.git
# already have the repo? check out this version:$ git checkout 3.7
Adds floating panes created via the new-pane command (bound to * by default) which sit above tiled panes like popups but are not modal
Adds copy-mode-line-numbers, copy-mode-line-number-style, and copy-mode-current-line-number-style options to show and style line numbers in copy mode
Adds message-format option and refactors message drawing so prompts occupy only a portion of the status bar instead of replacing the entire line
Adds -g flag to kill-session to kill all sessions in a session group
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The default behavior of message drawing changes: prompts now overlay normal status content rather than replacing the entire line; the message-style option no longer implies full width filling by default (requires fill to cover whole width)
Adds Service Token support for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server portals allowing bot access without OAuth flows
Supports Access service token authentication for MCP server portals via CF-Access-Client-Id and CF-Access-Client-Secret headers.
Introduces the on_behalf: false setting to disable per-user OAuth in favor of admin credential usage.
Adds evictDurableObject and evictAllDurableObjects test helpers in @cloudflare/vitest-pool-workers for Durable Object eviction testing
Adds evictDurableObject(stub) and evictDurableObject(stub, { webSockets: 'close' }) to test specific Durable Object instance eviction behavior in vitest tests
Adds evictAllDurableObjects() helper to evict all running Durable Objects in evictable namespaces during testing
New WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Analytics Logpush dataset and expanded Firewall events scope
Adds a new WebSocket Analytics Logpush dataset with fields including BytesReceivedClient, BytesSentOrigin, ColoCode, and EdgeEndTimestamp for real-time WebSocket monitoring
Extends Firewall events dataset to support account-scope Logpush via the ZoneName field, in addition to existing zone scope
Adds BCC, DKIMResult, DMARCPolicy, DMARCResult, and SPFResult fields to the Email Security Alerts Logpush dataset
AI Search similarity cache now supports configurable TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. via cache_ttl setting and on-demand purge endpoint.
Adds cache_ttl setting (10 minutes to 6 days) to AI Search instances, defaulting to 48 hours for similarity cache freshness
Adds POST /accounts/$ACCOUNT_ID/ai-search/instances/$INSTANCE_NAME/purge_cache endpoint to clear cached responses on demand
New Regionalized IP Bindings let you bind BYOIPBYOIPBring Your Own IP — a cloud provider feature letting customers move their own publicly routable IP blocks into the provider's network, so traffic to those addresses routes through the cloud without renumbering. CIDRs to regions for data localization.
Adds support for Regionalized IP Bindings to map BYOIP CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. blocks directly to specific geographic regions, enabling traffic regionalization at the IP layer rather than by hostname.
QUALIFY clause to filter rows based on window function results
Window functions: ROW_NUMBER, RANK, DENSE_RANK, PERCENT_RANK, CUME_DIST, NTILE, LAG, LEAD, FIRST_VALUE, LAST_VALUE, NTH_VALUE, and aggregates with OVER (...) including PARTITION BY and frames
SELECT DISTINCT, DISTINCT ON (...), and DISTINCT modifier on aggregates like COUNT(DISTINCT ...)
Grouping extensions: GROUPING SETS, ROLLUP, and CUBE
Exact aggregates: MEDIAN, PERCENTILE_CONT, ARRAY_AGG, and STRING_AGG
Wrangler now supports deploying Workers to temporary preview accounts via the --temporary flag for unauthenticated agent workflows
Adds --temporary flag to wrangler deploy command enabling deployment without a Cloudflare account or API token
Adds support for temporary preview accounts supporting Workers, Workers Static Assets, Workers KV, D1, Durable Objects, Hyperdrive, Queues, and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS certificates
Cloudflare Zero Trust orgs now default to Cloudflare identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. instead of OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. for new accounts.
Cloudflare Fonts forwards invalid path requests to origin instead of returning 4xx/5xx errors
Cloudflare Fonts now forwards /cf-fonts requests for invalid paths or unexpected runtime errors to your origin server, replacing previous direct 4xx or 5xx responses
Adds additional input validation to enhance security in Cloudflare Fonts
Cloudflare dashboard adds UI for managing Artifacts namespaces, repos, and tokens
Enables viewing, creating, forking, and searching repositories within a namespace directly from the dashboard.
Allows provisioning of scoped Git access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. (read or write) for specific repositories via the dashboard interface.
Cloudflare adds Post-quantumPost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA.ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. certificate support for Authenticated Origin Pulls and Custom Origin Trust Store.
Adds ML-DSA (FIPS 204FIPS 204NIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code.) post-quantum client certificate upload to Authenticated Origin Pulls at zone-level and per-hostname scopes for Cloudflare-to-origin mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. handshakes
Adds ML-DSA certificate authority upload to Custom Origin Trust Store for validating origin server certificates in Full (strict) encryption mode
Cloudflare Workers VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. networks now support raw TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. connections via connect() on VPC bindings
Adds connect() Socket API to Workers VPC Network bindings for raw TCP connections to private destinations
Enables TCP-based protocols (Redis, Memcached, MQTT) over Cloudflare Tunnel, Mesh, and WAN on-ramp in addition to existing HTTP via fetch()
Cloudflare Agents SDK v0.16.1 adds browser_executeCDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure. automation, durable Code Mode with createCodemodeRuntime, client tools for Think, and voice output routing.
Adds the browser_execute tool (via createBrowserTools) that lets agents write code against the Chrome DevTools Protocol (CDP) for browser automation
Introduces createCodemodeRuntime to enable resumable code execution with durable logs and approval-gated actions in Code Mode
Enables client-provided tools in Think sub-agents via the clientTools and onClientToolCall parameters on the chat()RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. path
Adds outputDeviceId parameter to useVoiceAgent and client.setOutputDevice() method for voice output device selection
GLM-5.2 agentic coding model now available on Workers AI with function callingfunction callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. and reasoning support
Adds @cf/zai-org/glm-5.2 model to Workers AI for agentic coding workflows
Enables function calling and step-by-step reasoning capabilities in the new GLM-5.2 model
Adds Cloudforce One threat intelligence fields (cf.intel.ip.*) to WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. custom and rate limiting rules
└──▷ HOW TO FIND IT
Block requests from IPs associated with DDoSDDoSDistributed Denial of Service: an attack that floods a target system with traffic from many sources simultaneously, exhausting its resources so legitimate requests cannot be served. activity targeting France using Cloudforce One intel.
📍any(cf.intel.ip.target_countries[*] == "FR") and any(cf.intel.ip.datasets[*] == "ddos")
Adds cf.intel.ip.datasets field populated with threat intelligence data for matched IP addresses in WAF rules
Adds cf.intel.ip.target_industries, cf.intel.ip.attacker_names, cf.intel.ip.attacker_countries, and cf.intel.ip.target_countries fields to WAF rule expressions
Enables use of the any() function with [ * ] wildcard to match array values in these new intelligence fields within custom rules and rate limiting rules
Cloudflare Terraform v5.20 adds 24 new resources for AI, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and Zero Trust; supports smart tiered cache creation via API
Adds cloudflare_ai_search_namespace resource to manage AI Search namespaces
Adds cloudflare_custom_csr resource to manage custom certificate signing requests
Adds cloudflare_dls_prefix_binding resource to manage DLS regional service prefix bindings
Adds cloudflare_flagship_app resource to manage Flagship feature flag apps
Adds cloudflare_flagship_flag resource to manage Flagship feature flags
+23 moreshow less
Adds cloudflare_google_tag_gateway resource to manage Google Tag Gateway
Adds cloudflare_load_balancer_monitor_group resource to manage load balancer monitor groups
Adds cloudflare_oauth_client resource to manage IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. OAuth clients
Adds cloudflare_origin_cloud_region resource to manage origin cloud regions (v2 endpoints)
Adds cloudflare_secrets_store resource to manage Secrets Store instances
Adds cloudflare_secrets_store_secret resource to manage Secrets Store secrets
Adds cloudflare_share resource to manage resource shares
Adds cloudflare_share_recipient resource to manage share recipients
Adds cloudflare_share_resource resource to manage shared resources
Adds cloudflare_zero_trust_device_deployment_groups resource to manage Zero Trust device deployment groups
Adds cloudflare_zero_trust_dlp_data_class resource to manage DLP data classes
Adds cloudflare_zero_trust_dlp_data_tag resource to manage DLP data tags
Adds cloudflare_zero_trust_dlp_data_tag_category resource to manage DLP data tag categories
Adds cloudflare_zero_trust_dlp_sensitivity_group resource to manage DLP sensitivity groups
Adds cloudflare_zero_trust_dlp_sensitivity_level resource to manage DLP sensitivity levels
Adds cloudflare_zero_trust_dlp_sensitivity_level_order resource to manage DLP sensitivity level ordering
Adds cloudflare_zero_trust_resource_library_application resource to manage Zero Trust resource library applications
Adds cloudflare_zero_trust_resource_library_category resource to manage Zero Trust resource library categories
Adds cloudflare_zero_trust_tunnel_warp_connector_config resource to manage WARP connector tunnel configurations
Adds POST method support for smart_tiered_cache to create new cache configurations
Updates OPCR config to use v2 endpoints
Promotes DLP Stainless classification config to main
Introduces custom AI prompt topics for Cloudflare DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., enabling detection of proprietary concepts in Gateway HTTP policies
Adds Custom Prompt Topic creation in Zero Trust > Data loss prevention > Detection entries to detect unique concepts via natural language description
Extends AI prompt protection coverage to ChatGPT, Google Gemini, Perplexity, and Claude with custom topic detection
Browser Run /snapshot endpoint now supports a formats parameter to return screenshot, Markdown, and accessibility tree in one call
Adds the formats parameter to the Browser Run /snapshot endpoint to request multiple page formats (screenshot, markdown, accessibilityTree) in a single API response
Cloudflare Email Service adds authenticated SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. submission via smtp.mx.cloudflare.net:465
Enables sending email via smtp.mx.cloudflare.net:465 using PLAIN or LOGIN authentication with an API token as username.
Cloudflare introduces Threat Actor Profiles in Threat Events to provide immediate Who, Why, and How context for security teams.
Threat Actor Profiles provide aliases, origin tracking, historical volume, and MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. mapping derived from Cloudforce One research.
Cloudflare enables direct WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. rule generation from Threat Events Saved Views to bridge threat discovery and mitigation.
Cloudflare Workers egress through Gateway via VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware.EGRESS binding for Zero Trust policy enforcement
Cloudflare Access now supports IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. federation to share identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. across multiple accounts via a source account bridge.
Billable usage and budget alerts now available directly in product sidebars for Workers, D1, R2, KV, Queues, Vectorize, DO, and Containers.
Adds a new sidebar widget to the overview pages for Workers & Pages, D1, R2, Workers KV, Queues, Vectorize, Durable Objects, and Containers showing current-period spend and billing cycle date range.
Adds an inline Create budget alert flow from product sidebars that allows setting a dollar threshold for account-level spend without leaving the product page.
Wrangler adds --use-keyring flag to store OAuth credentials in OS keychain instead of plaintext TOML
└──▷ TRY IT
Opt in to storing Wrangler credentials securely in the OS keychain during login.
$ npx wrangler login --use-keyring
Verify where your credentials are currently stored after changing configuration.
$ wrangler whoami
Adds the --use-keyring flag to wrangler login to opt into AES-256-GCMAES-256-GCMAES encryption in Galois/Counter Mode, which encrypts data and detects tampering in one pass. It is the default cipher for TLS and most disk and cloud encryption. encrypted storage backed by the OS keychain.
Adds support for the CLOUDFLARE_AUTH_USE_KEYRING environment variable to override keyring behavior per-command or globally.
Updates wrangler whoami output to display the current credential storage location (keychain vs plaintext file).
Cloudflare Access introduces SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. assertion encryption with automatic certificate lifecycle management for identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
Adds the ability to encrypt SAML assertions transmitted through the user's browser using a Cloudflare-managed certificate
Introduces automatic certificate generation when enabling SAML encryption for an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.
Provides certificate rotation capabilities allowing overlap between old and new certificates to prevent downtime
Enables PEM format export of the encryption certificate or points IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. to the SAML metadata endpoint for automatic retrieval
Cloudflare Workers introduces wrangler secret bulk CLI command and a new API endpoint for bulk secrets management.
Adds the /accounts/:account_id/workers/services/:service_name/secrets/bulk API endpoint to create, update, or delete multiple Worker secrets in a single HTTP request.
Cloudflare WAN third-party integration guide for Cisco IOS XE updated with PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA., PBR, and IP SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. sections
Documentation update for Cisco IOS XE integration adds Post Quantum Cryptography (PQC) guidance
Cloudflare Logs now includes a new Turnstile Events Logpush dataset with 14 fields for bot challenge telemetry.
Adds the Turnstile Events dataset to Cloudflare Logs Logpush, enabling push-based delivery of human/bot interaction telemetry
Exposes 14 specific log fields in the new dataset including ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses., Action, BrowserMajor, BrowserName, ClientIP, CountryCode, EventType, Hostname, OSMajor, OSName, Sitekey, Timestamp, and UserAgent
Vigolium v0.1.25-beta adds SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly./OS injection detections, --ingest-proxy-port, --skill overrides, and /api/agent/scans/:uuid/cancel endpoint
└──▷ GET THIS VERSION
$ git clone --branch v0.1.25-beta https://github.com/vigolium/vigolium.git
# already have the repo? check out this version:$ git checkout v0.1.25-beta
└──▷ USE IT
Cancel a running agentic scan via the API using its UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide.
shell
curl -X POST https://vigolium-api:8080/api/agent/scans/550e8400-e29b-41d4-a716-446655440000/cancel
Start an HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.-intercepting ingest proxy on port 8443 with MITM capabilities
shell
vigolium server --ingest-proxy-port 8443 --proxy-mitm
http.Options.RawRequestTarget request-line primitive for raw HTTP request construction in detection modules
New routing-based SSRF detection modules (routing-ssrf, upgrade-routing-ssrf) with OASTOASTOut-of-band Application Security Testing: a technique for detecting vulnerabilities by having a target system make DNS or HTTP callbacks to an attacker-controlled server, revealing flaws that produce no visible in-band response. header fan-out via oast-probe
Three new OS command injectionOS command injectionAn attack that makes an application execute operating-system commands supplied through untrusted input. It often happens when input is passed unsafely to a shell. detection modules: results-based, out-of-band, and time-based blind
vigolium server --ingest-proxy-port N --proxy-mitm for HTTPS-intercepting ingest proxy with auto-generated CA
+5 moreshow less
--skill, --skill-tag, --no-skill-filter CLI flags for overriding attack-vector skill selection in agentic scans
Attack-vector skill playbooks (xss-browser-confirm, idor-blast-radius) materialized to ~/.vigolium/skills
Runtime agent configuration reload without server restart
OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code.provider_routing knob + extra_body passthrough for OpenAI-compatible backends
-P/--parallel multi-target fan-out with isolated child processes, paired with --split-by-host or --db-isolate
THE CYBER TOOLCHAIN