The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Adds OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. and NVIDIA NIM LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. support, parallel task dispatch, and macOS Apple Silicon compatibility.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.12 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.12
Adds OPENROUTER_API_KEY and NVIDIA_API_KEY environment variables in the onboarding wizard to enable Claude via OpenRouter and Llama/Nemotron via NVIDIA NIM
Enables parallel execution of independent objectives by defaulting the orchestrator to concurrent task() calls for goals without blocked_by dependencies
Orders credential fallback chains based on configured availability, controlled by the DECEPTICON_AUTH_PRIORITY environment variable
Adds macOS Apple Silicon compatibility by forcing linux/amd64 platform in docker-compose.yml for Kali-based services and target containers
4 details in Everything
7 more releases in this issue
· 2026-04-04 → 2026-04-30
Decepticon v1.0.7 introduces Go CLI binary, MiniMax provider, Claude OAuth, interactive wizard, and dashboard sync
└──▷ GET THIS VERSION
$ git clone --branch v1.0.7 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.7
└──▷ USE IT
Run docker compose in CI/CD to skip local image builds using the new flag
shell
docker compose run --no-build decepticon
decepticon is now a native Go binary with an Interactive onboard wizard (Charmbracelet Huh v2)
Native cross-platform binaries for Linux (amd64/arm64), macOS (amd64/arm64), and Windows
Bash fallback launcher at scripts/launcher.sh remains available if Go binary is missing
Install scripts (install.sh, Go launcher, bash launcher) pin downloads to the specific release v{version} tag
Added DECEPTICON_MODEL_PROVIDER=auth environment variable for Claude Code OAuth Gateway access
+4 moreshow less
ModelProvider and ModelProfile configuration fields are now separated
MiniMax added as a fourth LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider alongside Anthropic, OpenAI, and Google
Web Dashboard gains Octogent integration for workspace sync, plan viewer, and agent canvas
Dashboard supports thread persistence to resume sessions across restarts
Decepticon v1.0.4 adds web dashboard, offensive vaccine agents, and OPPLAN persistence.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.4 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.4
└──▷ TRY IT
Run Decepticon with a custom port for the new default web dashboard.
$ WEB_PORT=8080 decepticon
Disable the Claude 4.x prompt compatibility shim if needed.
$ DECEPTICON_CLAUDE4_COMPAT=0 decepticon
Load an existing operational plan from a specific workspace directory.
code
load_opplan(workspace_path)
Web dashboard is now in the default stack with WEB_PORT env var override
Adds 12 new specialized agents for the Offensive Vaccine loop including defender, detector, and exploiter
OPPLAN persistence via plan/opplan.json with save_opplan / load_opplan tools
Claude 4.x compatibility layer via DECEPTICON_CLAUDE4_COMPAT=0 opt-out env var
SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. vulnerability findings ingest into the Knowledge Graph
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Python direct execution entry point has been removed in favor of the web dashboard
Decepticon v1.0.3 introduces Makefile shortcuts, structured finding models, and editable Docker development workflow.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.3 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.3
Adds make dev, make cli, make start, make test, and make lint targets to the new Makefile for streamlined local development
Introduces decepticon command entry point that launches a full Docker stack matching production environments
Adds Pydantic models for Finding, Evidence, and AttackPath with CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. v4.0 scoring and confidence levels
Implements new engagement directory layout with findings/, findings/evidence/, findings/attack-paths/, report/, and timeline.jsonl
Adds allowed-tools field to skill frontmatter for progressive tool disclosure
+1 moreshow less
Enables Docker Compose Watch for automatic source-to-container syncing without manual rebuilds
Adds Soundwave agent for engagement docs, OPPLANMiddleware CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. tools, dual-screen CLI with ctrl+o toggle
└──▷ GET THIS VERSION
$ git clone --branch v1.0.2 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.2
Dual-screen CLI adds ctrl+o toggle between Prompt mode (compact) and Transcript mode (full history)
Adds OPPLANMiddleware with domain-specific CRUD tools for objectives (add/get/list/update) including state transition validation and dependency checking
Introduces DecepticonSkillsMiddleware, a MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior.-aware skill system supporting phase grouping and progressive disclosure
Soundwave agent replaces the deprecated Planner agent for engagement document generation (RoE, ConOps, Deconfliction Plan, OPPLAN)
SafeCommandMiddleware expands its blocklist to include session-destroying commands such as pkill, nsenter, and docker exec
+1 moreshow less
PromptBuilder introduces static/dynamic prompt separation with cache boundary markers and cross-cutting patterns
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The skills/planning/ directory is renamed to skills/soundwave/
!Model profiles DEFAULT and HIGH are renamed to eco and max respectively
Shannon v1.1.0 adds library-pipeable pipeline core, provider extensions, and read-only user repos.
└──▷ GET THIS VERSION
$ git clone --branch v1.1.0 https://github.com/KeygraphHQ/shannon.git
# already have the repo? check out this version:$ git checkout v1.1.0
extract_pipeline_core for library consumption
mount user repo as read-only with writable shannon overlay
provider extensions support (drops claude-code-router mode)
use structured outputsstructured outputsForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. for vuln agent exploitation queues
4 details in Everything
└──▷ BREAKING ON UPGRADE
!claude-code-router mode is removed and no longer supported.
Hacktron adds Public REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for programmatic access to scans and findings, plus new Slack and Linear integrations
Adds public REST API to reach scans, findings, and repositories programmatically with API keys
Enables Slack link unfurling for finding and scan links showing live status, severity, and triage
Allows creating a Linear issue directly from a finding with details pre-filled
Hacktron adds public REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for programmatic access to scans and findings
Adds public REST API with interactive docs to programmatically reach scans, findings, and repositories using API keys
Enables Slack link unfurling for finding and scan links showing live status, severity, and triage
Adds ability to create Linear issues directly from findings with pre-filled details
xalgorix v4.2.5 adds natural shorthand aliases for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. agent skills like read_skill(name="sql-injection").
└──▷ GET THIS VERSION
$ git clone --branch v4.2.5 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.2.5
└──▷ USE IT
Scan for SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. using a short, memorable alias instead of the full skill name.
code
read_skill(name="sql-injection")
Adds support for ~100 natural shorthand aliases (e.g., sql-injection, xss, k8s-privesc) in the read_skill function to map to existing verbose skill directory names
xalgorix v4.2.0 adds Phase 21 behavioral fuzzing and new zero-dayzero-dayA vulnerability for which defenders have had no prior opportunity to apply a fix, often because it was previously unknown. A zero-day exploit takes advantage of that gap. hunting skills
└──▷ GET THIS VERSION
$ git clone --branch v4.2.0 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.2.0
Introduces Phase 21 to the execution methodology, enabling behavioral fuzzing, parser differential testing, timing side-channels, type confusion, and state machine attacks
Adds zero-day-hunting and response-anomaly-detection as new actionable skills that auto-load when relevant keywords are detected in instructions
v4.1.17 expands single-site scan scope to include sibling subdomains and root domain
└──▷ GET THIS VERSION
$ git clone --branch v4.1.17 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.1.17
Automatically follows auth/SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./API redirects to sibling subdomains
v4.1.0 adds Clickjacking, SSTISSTIServer-Side Template Injection, a vulnerability class where attacker-controlled input is evaluated by a server-side template engine, enabling remote code execution or data exfiltration., and Web LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. attack skills to xalgorix cyber tooling
└──▷ GET THIS VERSION
$ git clone --branch v4.1.0 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.1.0
Adds Clickjacking vulnerability skill with detection and exploitation techniques.
Adds Web LLM Attacks skill for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. via AI integrations.
LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Settings UI upgrade adds model and API base dropdowns plus explicit API base support.
└──▷ GET THIS VERSION
$ git clone --branch v4.0.4 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.0.4
└──▷ HOW TO FIND IT
Select a specific provider model directly from the LLM Settings dropdown instead of manual typing.
📍Open the LLM Settings UI and select the desired Model from the dropdown menu.
Configure MiniMax to use its China-specific endpoint via the API Base dropdown.
📍Open the LLM Settings UI and select api.minimax.cn from the API Base dropdown.
Adds Model dropdown to LLM Settings UI that populates current models per provider
Adds API Base dropdown with provider-specific options including MiniMax Global (api.minimax.io) and China (api.minimax.cn) endpoints
Backend resolveEndpoint() now respects explicit API base provided via the web UI
RedAmon v4.0.0 adds Fireteam multi-agent mode, SG-ReAct architecture, and XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. attack skill
└──▷ GET THIS VERSION
$ git clone --branch v4.0.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v4.0.0
Adds FIRETEAM_ENABLED, FIRETEAM_MAX_CONCURRENT, FIRETEAM_MAX_MEMBERS, and other FIRETEAM_* environment variables to enable the Fireteam scatter-gather multi-agent execution mode
Adds TOOL_MUTEX_GROUPS config key to serialize singleton tools like metasploit_console across Fireteam members
Adds new Agent Behaviour settings in the Webapp UI with per-member live badges, spinners, and stop buttons for Fireteam control
Adds PLAN_MAX_PARALLEL_TOOLS environment variable (default 10, range 1-50) and Prisma field agentPlanMaxParallelTools to cap concurrency and prevent SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. head-of-line blocking
Adds built-in XSS attack skill (#6) with 8-step workflow for reflected, stored, DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime., and blind XSS
+3 moreshow less
Adds XSS_DALFOX_ENABLED, XSS_BLIND_CALLBACK_ENABLED, and XSS_CSP_BYPASS_ENABLED project settings to control XSS payload execution
Adds kxss Go binary for per-character XSS filter probing to the kali-sandbox
Adds Argentum Digital XSS practice lab (guinea_pigs/dvws-node/xss-lab/) with ~1,650 LoC embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. all XSS vectors
Amass v5.1.1 ships a new engine REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. server, durable dispatcher backlog, and asset-db schema improvements for better performance.
└──▷ GET THIS VERSION
$ git clone --branch v5.1.1 https://github.com/OWASP/Amass.git
# already have the repo? check out this version:$ git checkout v5.1.1
Dispatcher now has a durable backlog plus a bounded in-memory work queue, preventing job loss under load.
Enhanced dynamic scope expansion rules for broader, more accurate target coverage.
Updated asset-db to v0.24.4 with schema changes that improve database performance.
Updated HTTP probe transport for improved network reconnaissance handling.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Uses the new Asset Database schema (asset-db v0.24.4) with schema changes that impact performance; existing databases may require migration.
Hunter launches managed email account provisioning and automated inbox warm-up
└──▷ HOW TO FIND IT
Use the UI to purchase a new domain and provision an email account with automated DNS configuration for immediate use in outreach sequences.
📍In the Email accounts center, select Buy Domain and follow the setup wizard to configure sender name(s) and create accounts with SPF/DKIM/DMARC auto-applied.
Activate Inbox Protection for a new email account to initiate the 30-day warm-up period and monitor engagement signals in the dashboard.
📍In the Email accounts center, select an active account and toggle Inbox Protection as an add-on; track progress via open rates, reply rates, and spam placement metrics.
Enables buying domains and creating pre-configured email accounts directly within Hunter with SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders., DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit., and DMARC automatically set up.
Adds Inbox Protection to automate progressive email warm-up over 30 days, tracking open rates, reply rates, and spam placement.
SharpHound Enterprise adds IWA auth; OpenHound collects GitHub/Jamf/Okta data; new Explore filters and graph controls.
Adds IWA (Integrated Windows Authentication) support for SharpHound Enterprise to authenticate with ADFS
Introduces OpenHound data collector framework with initial collectors for GitHub, Jamf, and Okta
Adds OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. Extension Management page in Administration for managing custom extensions
Enables analyzing custom graph findings in Attack Paths and Posture using extension-specific schemas
Adds Environment Targeted Access Control to scope User/Read-only access by environment with dynamic policy controls
+11 moreshow less
Improves Explore graphs with clearer directional arrows, improved node labels, and intuitive selection behavior
Allows reordering and pinning columns via drag-and-drop in Explore Table View
Generates more useful filenames for graph exports to reduce filename collisions
Modernizes Navigation Sidebar with improved expand/collapse behavior for more predictable access
Improves Azure Hybrid Post-Processing data hygiene to reduce graph churn for large tenants
Adds OpenGraph Node Type Filtering in Explore Search to filter results by node type
Adds HasSession Edge Deletion capability to delete only HasSession edges without clearing the entire graph
Improves Accessibility with clearer component naming and better non-text content labeling
Updates Zone Builder Certification Selection Behavior for clearer list selection aligned with details panel
Refines Posture Metric Abbreviation for more precise counts in Posture view
Adds Custom Range Validation for more reliable custom date/time range behavior in Posture
16 details in Everything
1 more release in this issue
· 2026-04-09 → 2026-04-13
Naabu v2.6.0 adds predictive scanning, Windows SYN scan via npcap, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. DNS resolution, and goes CGo-free.
└──▷ GET THIS VERSION
$ git clone --branch v2.6.0 https://github.com/projectdiscovery/naabu.git
# already have the repo? check out this version:$ git checkout v2.6.0
└──▷ TRY IT
Route all DNS queries through a SOCKS5 proxy during a scan — useful when targeting internal hosts only reachable via a jump proxy.
Run a SYN scan on Windows (requires npcap installed) to get accurate port results without relying on connect-scan fallbacks.
$ naabu -host 192.168.1.0/24 -s syn -p 80,443,8080,8443
Adds predictive scanning to anticipate and prioritize likely open ports during discovery.
Enables SYN scan support on Windows via npcap, bringing raw-packet scanning to Windows hosts.
Supports DNS resolution over SOCKS5 proxies, keeping all traffic — including DNS — through the proxy.
Adds configurable DNS resolution order via -dns-order flag, controlling whether DNS queries go to local resolvers, the proxy, or both in a specified sequence.
Goes CGo-free, enabling simpler cross-compilation and deployment without C toolchain dependencies.
subfinder v2.14.0 adds the Sub.md passive source and removes the defunct Facebook/Meta CT integration.
└──▷ GET THIS VERSION
$ git clone --branch v2.14.0 https://github.com/projectdiscovery/subfinder.git
# already have the repo? check out this version:$ git checkout v2.14.0
└──▷ BREAKING ON UPGRADE
!The Facebook source (Meta CT) has been removed; any automation, CI jobs, or saved source lists that reference this source must be updated to remove it.
Adds Facebook, Linktree, Dribbble, and other new module targets to user_scan and email_scan in v1.3.6
└──▷ GET THIS VERSION
$ git clone --branch v1.3.6 https://github.com/kaifcodec/user-scanner.git
# already have the repo? check out this version:$ git checkout v1.3.6
Adds user_scan modules for Facebook, Linktree, Dribbble, daily.dev, Mix.com, Pastebin, and OpenStreetMapOpenStreetMapA free, community-maintained world map database anyone can query or download, giving cyber tools access to geographic and infrastructure data without licensing fees or API rate limits tied to commercial providers..
Adds email_scan modules including Allen (learning), a Fitness category with 2 modules, 4 new adult sites, and 1 community site.
New persistence modules, HWBridge command execution, RISC-V fileless payloads, and improved module metadata performance
Adds new persistence module exploit/windows/persistence/telemetry that abuses the Windows Telemetry scheduled task to establish persistence.
Enables command execution for non-interactive HWBridge sessions via the sessions -c flag.
Adds a new payload linux/loongarch64/chmod to change file permissions on LoongArch64 targets.
Adds riscv64le and riscv32le architecture support to the fileless fetch payload adapter, enabling in-memory ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. execution via memfd_creatememfd_createA Linux system call that creates an anonymous, file-descriptor-backed memory region that never touches disk, giving cyber tools a way to load and execute code entirely in RAM without leaving filesystem artifacts..
Updates the network topology graph to show bruteforcible services present on a host.
+2 moreshow less
Updates db.hostsRPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. call to include comments associated with hosts.
Improves module metadata cache performance and reduces memory footprint for faster module listing.
7 details in Everything
1 more release in this issue
· 2026-04-03 → 2026-04-27
PhoneSploit-Pro v2.0 adds modular package architecture, Nmap-driven LAN scanning, and Rich-based console UX with new device management actions.
└──▷ GET THIS VERSION
$ git clone --branch v2.0 https://github.com/AzeemIdrisi/PhoneSploit-Pro.git
# already have the repo? check out this version:$ git checkout v2.0
Adds configurable resolution of external tools (ADBADBAndroid Debug Bridge, a command-line tool maintained by Google that lets a host machine communicate with an Android device over USB or TCP, giving cyber tools shell access, file transfer, and app control., Metasploit, scrcpy, Nmap) via resolve_external_tools() populating adb_path, msfvenom_path, msfconsole_path, scrcpy_path, and nmap_path on AppConfig.
Adds python-nmap driven LAN scanning with host discovery on /24, targeted scan of ports 5554/5555, and ADB-oriented summaries via the new connection.py module.
Switches console output to Rich-based UX using Table, Panel, and console.status(..., spinner="dots") for structured device lists, network results, and progress feedback.
Expands menu to five pages with 62 numbered actions including TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port forward/reverse, WiFi utilities, root heuristics, split APKs support, logcat (snippet + live), and app lifecycle management.
Empire v6.5.0 adds C stagers with shellcode compilation, six new offensive modules, and a runtime Background option for C# tasks.
└──▷ GET THIS VERSION
$ git clone --branch v6.5.0 https://github.com/BC-SECURITY/Empire.git
# already have the repo? check out this version:$ git checkout v6.5.0
└──▷ TRY IT
Run the new AWS IMDS module against a compromised EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. agent to steal IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. role credentials without touching disk.
Adds a C stager for lightweight stage0 shellcode injection via Fibers
Adds shellcode_compiler utility to compile position-independent C stagers into raw x64 shellcode for BOFBOFA Buffer Overflow exploit technique where attacker-controlled input overwrites adjacent memory to hijack program execution; cyber tools use it to develop and deliver shellcode-based exploits against vulnerable binaries. process injection
Adds clipboard_window_inject_list BOF module for enumerating processes with clipboard window class
Adds a runtime Background option to C# modules, letting operators override background/foreground execution at task time
Adds C# PatchETW module for in-process ETWETWEvent Tracing for Windows, a Microsoft kernel-level logging framework that lets applications and drivers emit structured events; cyber tools use it to observe process, network, and file activity without installing additional sensors. patching via ntdll!EtwEventWrite
+10 moreshow less
Adds C# PatchlessAMSI module for patchless AMSI bypass using hardware breakpoints and vectored exception handling
Adds PowerShell Invoke-VSSExtract module for NTDS.dit and SYSTEM hive extraction via Volume Shadow Copy
Adds PowerShell Invoke-RDPHijack module for RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. session hijacking via tscon.exe
Adds Python linux_keyring module for credential extraction from the Linux kernel keyring subsystem
Adds Python aws_imds module for AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. role credential theft via EC2 Instance Metadata Service
Adds BOF spawn module for EarlyBird process hollowing with suspended process creation, shellcode injection, and APC thread hijacking
Logs Empire version and git commit SHA at startup for easier production diagnostics; SHA is baked into Docker images via --build-arg
Adds Python 3.14 support (3.13 and 3.14); Dockerfile now uses python:3.14.3-trixie
Refactors bof_packer into a Packer class with granular packing methods (addbytes, addstr, addWstr, addbool, adduint32, addint, addshort)
Adds format_bof_output() to ModuleService to centralize BOF output formatting for Go and .NET agents
15 details in Everything
└──▷ BREAKING ON UPGRADE
!The secinject BOF module and its pre-compiled binary have been removed; any playbooks or profiles referencing it will break.
!stager_generation_service now uses install_path (Path) instead of the deprecated installPath (str); any code or plugins referencing installPath on this service will break.
!All remaining core usages of installPath have been migrated to install_path (Path); external plugins or integrations that reference installPath on core services will break.
!The terminaltables dependency has been replaced with prettytable; code or plugins that import terminaltables directly will break.
!bof_packer standalone functions have been replaced by a Packer class API; any code calling the old standalone functions will break.
Dradis 5.0 adds Personal Access Token authentication, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 2025 kit with three new report templates, and Dradis Echo as a standard framework module.
└──▷ HOW TO FIND IT
Organize an audit using the new OWASP Top 10:2025OWASP Top 10:2025A ranked list of the ten most critical web application risk categories, maintained by the Open Worldwide Application Security Project, used by cyber tools to prioritize detection, testing, and remediation coverage. methodology and sample project structure.
📍Select OWASP Top 10:2025 schema when creating a new Dradis project
Adds Personal Access Token strategy for authenticated API access with scope and expiration controls
Ships OWASP Top 10:2025 methodology schema, sample project, and three new report templates
2 details in Everything
1 more release in this issue
· 2026-04-20 → 2026-04-24
Adds Docker deployment via curl -fsSL https://get.dradis.com | /bin/bash with pre-installed add-ons
Adds support for Dark Mode (light, dark, auto) in the sidebar toggle and QA scheduler
Adds scoped Personal Access Tokens (PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.) with per-user, CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.-per-type permissions and expiry dates via the REST/JSON API
Adds configurable, reusable prompts for Dradis Echo to connect a local LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to Dradis
Adds Business Intelligence data access for Read-only Contributor users on assigned projects
5 details in Everything
└──▷ BREAKING ON UPGRADE
!ActivityTracking is removed for Issues in favor of EventPublisher
!Recurring tasks are migrated to SolidQueue background jobs
!Default attachments, templates and themes locations moved to storage/
CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. Calculator adds CVSS 4.0 support with UI toggle and bulk API updates
Program Settings > Submissions now allows enabling CVSS 4.0 for new submissions
Proxmark3 v4.21611 adds 30+ new commands spanning iClass, DESFire, FeliCaFeliCaA contactless smart card standard developed by Sony, widely used in Japanese transit and payment systems, operating at 13.56 MHz with its own proprietary protocol distinct from ISO 14443., Aliro, GST, VAS, NFCNFCNear Field Communication, a short-range (≤4 cm) wireless standard maintained by the NFC Forum, enabling data exchange between devices; cyber tools use it to probe, emulate, or intercept contactless card and tag transactions. tearoff attacks, and internet-relayed LF/HF.
└──▷ GET THIS VERSION
$ git clone --branch v4.21611 https://github.com/RfidResearchGroup/proxmark3.git
# already have the repo? check out this version:$ git checkout v4.21611
└──▷ TRY IT
Relay an LF or HF card read between two Proxmark3 devices over the internet for remote card emulation or sniffing.
$ pm3 -- lf relay
Live-recover a reader's iClass key by simulating a tag and attacking both standard and elite dictionaries in real time.
$ pm3 -- hf iclass lookup --live
Simulate an iClass card instantly from a known facility code and card number for access-control testing.
$ pm3 -- hf iclass tagsim
Adds lf relay command to relay between two Proxmark3 devices over the internet.
Adds hf mfp acl command for Mifare Plus ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. inspection.
Adds hf mfp dump command to dump Mifare Plus card contents.
Adds hf mfdes brutedamslot command for DESFire DAMDAMDatabase Activity Monitoring — a category of tooling that intercepts and logs database queries and transactions in real time, letting cyber tools detect unauthorized access or anomalous behavior without modifying the database itself. slot brute-forcing.
Adds hf mfdes createdelegateapp command for creating DESFire delegate applications.
Adds hf mfdes bruteisofid and hf mfdes selectisofid commands for ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. FID brute-forcing and selection on DESFire.
Adds dict, ascii, and mad presets to hf mfdes bruteaid along with tag loss detection and recovery.
Adds hf secc info command to retrieve the Card Recognition Template from iClass SE config cards.
Adds hf secc sim with wildcard payload support for simulating iClass SE config card functions.
Adds hf iclass tagsim command to simulate an iClass card from a facility code and card number.
Adds hf iclass blacktears command for automated tearoff of block 1 to set non-secure page mode.
Adds --live option to hf iclass lookup for live reader-key recovery by simulating a tag and running lookups against standard and elite dictionaries.
Adds -f parameter to hf iclass sam to parse a card dump using the SAM.
Significantly optimizes hf iclass legbrute throughput via iterative cipher loops, 256-entry LUT, in-place state updates, and byte-wise MAC brute-forcing, plus improved multithreaded key-range partitioning with ETA display and keyboard abort.
Adds hf gst read and hf gst info commands for GST tag interaction.
Adds hf vas info command for Value Added Services tag information.
Adds hf aliro read and hf aliro info commands for Aliro access credential reading.
Adds hf felica discnodes command for FeliCa node discovery.
Adds hf felica seacinfo command for FeliCa SEAC information retrieval.
Adds -t / --timeout option to hf 15 sim for ISO 15693 simulation timeout control.
Adds --aid parameter to hf seos commands for explicit AID targeting.
Adds Mifare Classic support to hf gallagher command.
Extends wiegand encode / wiegand decode with 96-bit ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses..1 encoded format support, --bin encoding, verbose PACS output, and explicit rejection of raw/binary decodes above 96 bits.
Adds hf mf acl recognition of more generic ACL configurations.
Updates data_hex_crc.lua script with a -s parameter and alternating row color output.
Adds DESFire AID values related to LEAF for use in DESFire enumeration commands.
Adds hardening (ASLR/stack-protector/etc.) for all host binaries, with level dependent on OS.
Adds Qt6 support for the Proxmark3 client GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands..
New LF relay over internet, Mifare DESFire delegate app commands, SECC info command, and Qt6 client support
Adds lf relay subcommand to relay between two pm3 devices over the internet
Adds hf mfp acl subcommand for ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. configuration on Multi-Frequency Proxmark cards
Adds --live option to hf iclass lookup command to perform a live recovery of the reader's key
Adds hf mfdes createdelegateapp, hf mfdes getdelegateappinfo, and hf mfdes brutedamslot subcommands for DESFire delegate app manipulation
Adds --aid parameter to all hf seos commands to specify Application Identifier
+2 moreshow less
Adds -f parameter to hf iclass sam command to use SAM to parse a card dump
Adds hf iclass tagsim subcommand to quickly simulate an iClass card based on facility code and card number
The open-source wireless research platform for ESP32.
GhostESP v1.9.8 adds Wi-Fi multi-select attacks, GTKGTKA cross-platform widget toolkit maintained by the GNOME project for building graphical user interfaces in C, with bindings for many languages, giving cyber tools a native desktop UI without writing platform-specific rendering code. abuse flow, Ghostchi app and Karma BSSID match
└──▷ GET THIS VERSION
$ git clone --branch v1.9.8 https://github.com/GhostESP-Revival/GhostESP.git
# already have the repo? check out this version:$ git checkout v1.9.8
Adds Ghostchi App for use with the tool.
Adds Wi-Fi multi-select flows for APs and stations in the Scan & Select menu, allowing multiple targets to be selected before running attacks/actions.
Adds GTK abuse testing flow for checking client isolation bypass behavior after joining a target Wi-Fi network.
Adds beacon_spam_broadcast_karma function that uses real AP MAC so BSSID matches probe responses.
Adds missing encoder controls to the detail view.
+3 moreshow less
Adds option to change background shade of options in the UI.
Adds option to enable rounded menu items and set as default on.
Adds a random ascii art boot banner to the serial log.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
ESP32 Marauder v1.12.0 adds channel hopping to Signal Monitor, new Flock-based elicitation capabilities, and M5Stack Cardputer ADV support.
└──▷ GET THIS VERSION
$ git clone --branch v1.12.0 https://github.com/justcallmekoko/ESP32Marauder.git
# already have the repo? check out this version:$ git checkout v1.12.0
Enables channel hopping for the Signal Monitor feature
Adds OUI filtering for Flock Detection
Adds wardrove channel weighting
Adds Marauder AP information view
Adds Host AP info display showing connection events
Enables packet rate saving to PCAPsPCAPsA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic.
BloodHound v9.0.2 expands TLS cipher support and fixes Azure post-processing for PostgreSQL
Expanded the set of supported TLS cipher suites when BloodHound serves HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. directly to resolve SharpHound connectivity issues
Added an OpenHound download link to the Download Collectors page
BloodHound v9.0.0 adds API key expiration, JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. opt-out, auditor role expansion, Azure contributor ingestion, and graph UI improvements.
└──▷ GET THIS VERSION
$ git clone --branch v9.0.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v9.0.0
Adds API key expiration support, including expiration parameters and table columns showing expiry status for all keys.
Adds a JIT (Just-in-Time) support account opt-out option so organizations can disable automatic support account provisioning.
Adds a configurable redirect URL for JIT provisioning flows.
Expands the Auditor role with additional access permissions.
Adds ingestion support for AZContributor relationships on Management Groups, Resource Groups, and Subscriptions.
+14 moreshow less
Adds a Delete HasSession edges action to the Database Management interface.
New timeout limit checkbox in the Explore UI to remove query result limits for large graph queries.
Adds drag-and-drop column reordering in the Explore table.
Increases edge and arrow visibility in the graph explorer.
Updates node labels display in the graph.
Generates timestamped filenames for graph exports.
Adds SharpHound collection metrics reporting.
Adds OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. Extension Finding Schemas API endpoint (marked experimental).
Adds OpenGraph Collector Platform (OpenHound) as a recognized client type in the UI and Collector Downloads page.
Ceases creation of Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. stub users during Azure ingest post-processing, reducing graph noise.
Adds posture rounding clarity improvements to the Posture page.
Adds support account display filtering in the Users management UI.
Updates the sub-navigation menu in the main navigation.
ZeroPath is an AI-native SAST platform that finds 2x more real vulnerabilities with 75% fewer false positives.
ZeroPath 2026-04 adds Agent Playbooks, new SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself./Secrets detections, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server metadata, and expanded AI Assistant API.
Agent Playbooks with new event trigger types (e.g., PR Merged with Issues) enable automated, parameterized security workflows without manual configuration.
SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. now generates CVSS 3.1 scores alongside CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.0 and displays Security impact labels in issue headers.
SCA alerts can be routed to per-org webhook endpoints for direct integration with Microsoft Teams and Slack.
AI Assistant API provides full management of conversations, jobs, schedules, triggers, and memory via new REST endpoints and SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. streaming.
Issue export dialog adds format selection including CASA CSV and SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface., with live preview count and filter overrides.
+1 moreshow less
Secrets detection engines now support AI-powered validation states: Confirmed, Disconfirmed, and Unknown.
DeepSource adds configurable OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. vulnerability alert preferences via UI
Adds UI path Policies -> OSS Vulnerabilities -> New Vulnerability Alerts to control OSS dependency alert notifications
Adds option to set notification severity threshold (critical, high, medium, low) for new open-source vulnerabilities
Adds toggle to include all organization admins in vulnerability alert notifications
DeepSource MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. release enables AI agents to access code review, vulnerability, and compliance data via Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
└──▷ TRY IT
Install the DeepSource MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server for an AI agent using the NPM utility
$ npx add-mcp https://mcp.deepsource.com/mcp
Adds add-mcp utility from NPM for installing the DeepSource MCP Server integration with AI coding agents.
Exposes 30 tools across 8 categories for accessing pull request findings, PR report card grades, dependency vulnerability reachability, code coverage metrics, compliance reports (OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10, SANS Top 25), and issue suppression rules.
Enables authentication via OAuth without manual token configuration.
DeepSource v5.0.0 adds BYOKBYOKBring Your Own Key — a cloud deployment model where the customer supplies and controls the encryption keys rather than the provider, so sensitive data stays under the customer's cryptographic authority. AI Review, allowing Enterprise Server users to direct inference to their own model providers.
Adds Bring Your Own Key (BYOK) capability to DeepSource Enterprise Server for AI Review, enabling inference calls to go directly to user-chosen providers.
Supports Anthropic Claude via Amazon Bedrock or direct API as a BYOK provider.
Supports OpenAI GPT Codex via Azure OpenAI or direct API as a BYOK provider.
Supports Google Gemini via GCP Vertex AI or direct API as a BYOK provider.
Snyk Container begins a gradual GA rollout of JVMJVMThe Java Virtual Machine, a runtime maintained by Oracle (and implemented by others) that executes Java bytecode on any OS, giving cyber tools a portable, garbage-collected environment with a large ecosystem of libraries. detection beyond OpenJDK 8 through file fingerprinting in CLI and Container Registry integrations.
Adds container vulnerability scanning for Eclipse Temurin and Adoptium OpenJDK distributions that follow the /opt/java/openjdk/release layout.
Automatic detection of Java versions in containers using the /opt/java/openjdk/release layout, requiring no manual configuration
2 details in Everything
13 more releases in this issue
· 2026-04-01 → 2026-04-30
New CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. filter available in UI issue filters for compliance prioritization
Adds a new CISA KEV filter to the UI issue filters on any page where they are available
Enables isolation of vulnerabilities within the CISA KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. catalog with a single click
Snyk introduces Repo Monitor Configuration in Early Access for centralized Group Inventory monitoring, bulk repository imports, and on-demand retesting.
Adds Repo Monitor Configuration to the Group-level Inventory page for centralized management of repository coverage and monitoring settings
Enables view of monitoring status for all products and identification of health status and required actions in a single view
Provides bulk import of repositories from the Group Inventory page into specific Snyk Organizations
Adds on-demand retesting trigger for specific repositories directly from the Group Inventory page
Introduces actionable error resolution guidance for testing failures due to integration issues or entitlements
Snyk introduces Repo Content Sync in Early Access for Enterprise customers through Snyk Preview, automating project creation and deactivation as SCMSCMSource Code Management: version-control systems (Git, SVN, etc.) that track changes to code over time, giving cyber tools reproducible builds, audit trails, and collaborative development workflows. files change.
Enables native, automated synchronization between Source Code Management (SCM) tools and Snyk to eliminate manual re-imports
Automatically detects new files and creates corresponding Snyk projects for manifest, Docker, or configuration files added in the SCM
Automatically deactivates Snyk projects when associated manifest files are deleted from the connected SCM
Snyk adds native GraphQL scanning to API & Web with introspection schema fetching and dedicated auth settings
Adds GraphQL as a supported DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. API target type in Snyk API & Web
Enables schema ingestion directly from an introspection endpoint alongside existing URL or file upload options
Snyk introduces native uv support in Early Access for CLI test, monitor, and sbom workflows, enabled through Snyk Preview.
Extends uv scanning support to the Snyk IDE extensions, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, and GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure.
New Test configuration option in UI to validate target settings before DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. scans.
Snyk CLI v1.1304.0 adds snyk aibom test command for AI-BOMAI-BOMAn inventory of every AI model, dataset, and dependency used in a system, analogous to a software bill of materials, giving cyber tools a structured way to audit AI supply-chain risk. validation
snyk aibom test command for generating and validating AI-BOMs against tenant policies
Agent Red Teaming scanned output now includes a vulnerability summary with exhaustive and eager modes
Extended support for Java runtime binary scanning in container scans
snyk_package_health_check MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool is generally available by default for npm, PyPI, Maven, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., and Golang.
snyk_package_health_check is now included in the Snyk Studio Full (default) profile for MCP workflows, enabling AI agents to evaluate open-source packages before they are added to a project.
Provides package health guidance across Security, Maintenance, Community, and Popularity, with outcomes Healthy, Review recommended, Not recommended, or Unknown/insufficient data.
PR check report GA adds date-filtered adoption metrics, optimized UI tables, and Export API access for PR scanning data.
PR check report moves to general availability
Adds Snyk Code errors to the error PR checks
Updates display of source code manager (SCMSCMSource Code Management: version-control systems (Git, SVN, etc.) that track changes to code over time, giving cyber tools reproducible builds, audit trails, and collaborative development workflows.) icons in the PR scanning adoption by organization table
Snyk Learn adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Applications lessons and expanded Ruby/Rust coverage.
Adds Agentic 01 - Agent goal hijack, Agentic 02 - Agent tool misuse, Agentic 03 - Identity and privilege abuse, and Agentic 04 - Agentic supply chain vulnerabilities lessons for the new OWASP Top 10 for Agentic Applications.
Adds Cross-origin resource sharing lesson to the security lessons catalog.
Adds Snyk Billing and Credit Usage lesson explaining credit tracking in the Billing module.
The skill-scanner is a security scanner for AI agent skills
skill-scanner 2.0.10 expands ATR rules 9× to 314, adds --render-markdown flag, and supports OpenAI-compatible endpoints.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.10 https://github.com/cisco-ai-defense/skill-scanner.git
# already have the repo? check out this version:$ git checkout 2.0.10
└──▷ TRY IT
Force markdown rendering on in a terminal that doesn't auto-detect it, useful in CI pipelines where output is piped to a log viewer.
$ skill-scanner scan <target> --render-markdown
Expands the ATR detection pack from 34 to 314 rules, restructured by category.
Adds --render-markdown CLI flag to override markdown rendering behavior.
Supports OpenAI-compatible LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. endpoints for flexible backend configuration.
3 details in Everything
3 more releases in this issue
· 2026-04-02 → 2026-04-30
skill-scanner 2.0.9 adds a PromptGuard rule pack covering PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., secrets, and LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. exfiltration detection.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.9 https://github.com/cisco-ai-defense/skill-scanner.git
# already have the repo? check out this version:$ git checkout 2.0.9
skill-scanner 2.0.8 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./multi-agent attack detection, a --rule-packs flag, and Anthropic/OpenAI key prefix detection.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.8 https://github.com/cisco-ai-defense/skill-scanner.git
# already have the repo? check out this version:$ git checkout 2.0.8
└──▷ TRY IT
Load the new ATR community rule pack alongside your existing packs to catch MCP tool-poisoning and multi-agent attack patterns in one pass.
Adds ATR community rule pack with 34 rules covering MCP tool poisoning, multi-agent attacks, and advanced prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools..
New --rule-packs CLI flag enables loading multiple signature rule packs in a single scan invocation.
Detects documented Anthropic and OpenAI project API key prefixes to flag exposed credentials.
Skylos v4.5.0 adds GHCRGHCRGitHub Container Registry, GitHub's hosted service for storing and distributing OCI-compatible container images, giving cyber tools a versioned, access-controlled image store tied directly to a GitHub repository. image support and a new taskflow system with challenge pass for uncertain findings.
└──▷ GET THIS VERSION
$ git clone --branch v4.5.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.5.0
Skylos v4.4.0 adds skylos suite CLI command, repo-aware vibe reference detection, and AI defense beta for direct LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integrations
└──▷ GET THIS VERSION
$ git clone --branch v4.4.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.4.0
Adds the suite subcommand to run the full local bundle in one step.
Implements repo-aware vibe reference detection in the Python engine (py).
Introduces AI defense beta capability for securing direct LLM integrations.
Adds advisory-range validation for lowest known non-vulnerable target selection in cve-lite-cli v1.5.0
└──▷ GET THIS VERSION
$ git clone --branch v1.5.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.5.0
Adds version-scan metrics for validated remediation targeting (scanned versions and still-vulnerable exclusions) to track which versions were scanned and excluded from vulnerability coverage
Improves direct remediation output with structured table rendering including package/current/target/scanned/vulnerable columns and total row for verbose summary
Adds a reusable GitHub Action for CVE Lite CLI and new configuration options (verbose, fail-on)
└──▷ GET THIS VERSION
$ git clone --branch v1.2.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.2.0
└──▷ USE IT
Run CVE Lite in CI and fail the build if high severity vulnerabilities are found.
yaml
- uses: sonukapoor/cve-lite-cli@v1.2.0
with:
verbose: "true"
fail-on: high
Introduces a reusable first-party GitHub Action for running CVE Lite CLI in GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure.
Adds verbose and fail-on inputs to the GitHub Action workflow
Supports opt-in postinstall usage, git hooks, CI, and scheduled advisory DB refreshes via workflow integration
StackHawk adds Organization IP Allow List to restrict platform access to approved IPv4 CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. ranges
HawkScan 5.4.0 adds --json-output, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server scanning, blind SQLiSQLiAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. detection, and strict YAML validation
└──▷ TRY IT
Pipe HawkScan results directly into an AI agent for automated triage
Automate initial configuration by piping the app creation output directly into the config file
$ hawk create app --yaml > stackhawk.yml
Configure MCP server discovery to automatically test JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. methods for vulnerabilities
hawk scan --json-output flag outputs structured JSON to stdout with console suppression for programmatic parsing
hawk create app --yaml flag outputs a stackhawk.yml configuration stub to stdout after app creation
MCP (Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) server scanning via app.jsonRpcConf.mcp configuration key for injection, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly., and path traversal testing
New blind SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. scan rule 400021 running after boolean-based check 400030 with distinct payloads
Mend SCA v26.3.2 adds Zero-Day response workflows with dedicated catalog, configurable enforcement, and Excel Due Diligence reports.
Adds the Zero-Day catalog for immediate risk visibility and audit-level transparency of critical vulnerabilities
Introduces configurable zero-dayzero-dayA vulnerability for which defenders have had no prior opportunity to apply a fix, often because it was previously unknown. A zero-day exploit takes advantage of that gap. response workflows in the Mend AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. Platform to enable user-controlled enforcement and permanent violation tracking
Enables generation of the Due Diligence report in Excel format
Adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. Client Credentials support for API auth on the API Credentials page.
6 more releases in this issue
· 2026-04-13 → 2026-04-30
Adds native Windows ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation. builds for Terraform.
New deprecated attribute on variable and output blocks emits warnings when deprecated variables are passed or deprecated outputs are referenced.
S3 backend now supports authentication via aws login (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. Identity Center flows).
The validate command now checks the backend block — verifying the backend type exists, required attributes are present, and backend-level validation passes.
New convert function enables precise inline type conversions in configuration expressions.
+9 moreshow less
Supports variables and locals in module source and version attributes, and most commands now accept variable values to satisfy them.
Output blocks now support explicit type constraints.
SSH-based provisioners (file and remote-exec) re-enable PowerShell support.
terraform init now skips installing dependencies declared in development overrides, allowing mixed-override workflows.
Terraform Test mock blocks now allow function calls.
Provider-set deprecation messages on resources, blocks, and attributes are now included in deprecation warnings.
Sensitive attribute paths are now included in list_start JSON log entries.
Input variable validation is now supported for Stacks.
terraform fmt now formats .tfquery.hcl files.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!backend/s3: AWS_USE_FIPS_ENDPOINT and AWS_USE_DUALSTACK_ENDPOINT environment variables now only accept true or false; any other non-empty value (previously treated as true) is no longer honoured.
GitLab 18.11 adds agentic SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. resolution, GLQL project/pipeline data sources, and per-user credit caps.
Adds agentic vulnerability resolution for SAST findings via the Duo Agent Platform (Ultimate)
Extends GitLab Query Language (GLQL) to query projects, pipelines, and jobs data sources
Adds automatic dependency graph generation for Maven and Python SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. scanning when lock files are missing
Enables incremental scanning for Advanced SAST to analyze only changed code parts
Sets subscription-level and per-user usage caps for GitLab Credits
Allows configuring tool options and parameters directly in custom flow definitions
Supports Mistral AI as a self-hosted LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. platform in the Duo Agent Platform
Adds terraform_module to package protection rules
Automatically includes packages in release evidence when package version matches release tag
Configures MR approval policies using Known Exploited Vulnerability (KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use.) and EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. data
Displays CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.0 scores in the UI, vulnerability reports, and API queries
Exports security dashboards as PDFs
Integrates SAST into security configuration profiles with Static Application Security Testing (SAST) - Default
Filters group security dashboards by security attributes like Business impact and Internet exposure
Betas the Security Manager role for focused vulnerability management and compliance access
OpenTaint v0.2.0 adds zero-friction scan defaults, cached project models, and reworked prune commands via new flags.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.0 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout v0.2.0
opentaint scan now defaults to the current directory without requiring a path argument, and -o/--output is optional with SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output going to a default location when omitted.
Adds --project-model <path> to scan a pre-compiled project model and skip compilation, and --recompile flag to force a fresh build even when a cached model exists.
Adds --log-file <path> to explicitly redirect logs.
Compiled project models are now cached under ~/.opentaint/, and active compilations during prune are surfaced as Skipped instead of being silently modified.
opentaint prune adds selective category flags: --artifacts, --rules, --jdk, --models, --logs, --install; opentaint prune --all performs a full sweep including install-tier and logs.
+1 moreshow less
-d/--debug replaces the old --verbosity string flag for single boolean debug output.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The -v/--verbosity flag is removed; use -d/--debug instead.
!Auto-prune during self-update is removed; users must run opentaint prune explicitly.
Adds Users & Groups report generation via UI/API, CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently.-based SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. import fallback, Application Admin source file remapping, and UI revamps for Findings and Reports.
Adds the Users & Groups report to allow admins to generate comprehensive reports of users, roles, and group memberships via the UI or API, supporting multiple formats.
Adds support for recognizing CPE identifiers during SBOM imports in SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. and CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. formats when PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. is missing, using CPEs to identify components for broader compatibility.
Enables Application Admins to remap source files within their assigned applications via updated UI and API with restricted application-level scope.
Revamps the organizational Findings table UI with streamlined columns, improved filtering/sorting, enhanced search, clearer terminology, and modern UX patterns.
Enhances the Report Page UI with refreshed scan engine icons, optimized column layouts, ellipsis overflow for text cells, unified status chip designs, and hidden Generated By cell by default.
Mend SAST is a static application security testing service that scans source code for vulnerabilities and helps teams prioritize remediation.
Mend SAST 26.4.1 adds Gen 2 Go engine, Rust auto-remediation, incremental secrets scanning, and deep links to CSV exports.
Introduces the Gen 2 Go detection engine for improved CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. and framework coverage
Adds automated remediation suggestions for Code findings in Rust
Enables incremental scanning for secrets detection to analyze only changed files
Adds a Deep Link column to CSV exports with direct URLs to findings in the Mend AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. Platform UI
Akto discovers APIs, MCP servers and AI agents, tests and red-teams them, and enforces runtime guardrails and posture management.
Akto April 2026 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. registry controls, Anthropic/SentinelOne connectors, Code/Neovim hooks, and custom Okta roles
Adds MCP Registry Control to allowlist approved MCP servers by importing registries via CSV URL.
Adds MCP Registry Sync to add discovered MCP servers to registries directly from Audit Data.
Adds SentinelOne Connector to discover and monitor SentinelOne managed endpoints for real-time guardrails.
Adds Anthropic Connector to capture traffic and surface insights from Anthropic models in the Atlas dashboard.
Adds Host Exclusion Controls in Settings to exclude specific hosts from Traffic Analysis.
+17 moreshow less
Adds Skills Inventory and Blocking to discover agent skills and block risky ones in bulk or per-endpoint.
Adds Endpoint-Level Insights to map agentic assets to users/devices and track risk scores.
Adds discovery support for locally hosted models on SGLang, vLLM, Docker Model Runner, and Ollama.
Adds Response Guardrails to validate and enforce security policies on response payloads across direct and proxied requests.
Adds File and URL Guardrails to validate uploaded files and external URLs (audio, video, images, documents).
Adds PII Count-Based Guardrails to flag when PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. counts exceed policy limits.
Adds Alert-Only Guardrails to configure policies that warn without blocking for phased rollouts.
Adds Apply Guardrails to All Servers option to apply policies across all agentic assets in a single action.
Adds Codex CLI Hooks to enforce guardrails on prompts, tool calls, and responses in Codex-powered workflows.
Adds Neovim Hooks to enforce real-time guardrails directly in Neovim for prompt and response validation.
Adds HTTP/HTTPS Proxy Support in Settings to deploy Akto in restricted network environments.
Adds Custom Roles with Okta SSO support (Admin, Developer, Threat Engineer, Threat Viewer).
Adds ability to run Ask Akto using GitHub Copilot as the underlying AI model.
Adds Tool Invocation Visibility in AI Red Teaming to view tools agents invoked during probe execution.
Adds Category-wise scan scoring to view scan coverage by agentic risk category and pass/fail rates.
Adds Extended Compliance Mapping for EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., OWASP Agentic Top 10OWASP Agentic Top 10A ranked list of the most critical risks specific to AI agent systems, maintained by OWASP, giving cyber tool builders a shared framework for prioritizing threats in autonomous, multi-step AI workflows., NIST AI RMFNIST AI RMFA voluntary framework published by NIST that gives organizations a structured process for identifying, assessing, and managing risks introduced by AI systems, giving cyber tools a common vocabulary and governance scaffold., and Mitre ATLAS.
Adds Claude Agent SDK integration to enforce guardrails via native callback system.
Levo April 2026 introduces AI agent discovery, AI Policies/guardrail alerting, AI-driven DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. auth, and new reporting/deployment options
Adds AI agent, model, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool discovery from cloud providers to identify unauthorized assets
Introduces first AI Policies and guardrail alerting for automated control enforcement
Enables AI-driven authentication in web application scanning (DAST) for complex login flows
Expands reporting capabilities with new output formats or dashboards
Hardens sensors to improve detection reliability and reduce false positives
+1 moreshow less
Ships new deployment options for enhanced infrastructure flexibility
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. now includes unmodifiable system lists for rules at corp and site levels
Adds system lists to the Next-Gen WAF, providing Fastly-managed data sets referenceable in request rules.
1 detail in Everything
5 more releases in this issue
· 2026-04-07 → 2026-04-21
Adds a new Simulate a WAF request API endpoint for Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. testing.
GET /ngwaf/simulate endpoint added to simulate HTTP requests through a workspace's WAF configuration without sending traffic.
New Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. endpoints to list and retrieve details of deployed agents via the API.
Adds GET /ngwaf/v1/workspaces/{workspace_id}/agents endpoint to list all agents in a workspace
Adds GET /ngwaf/v1/workspaces/{workspace_id}/agents/{agent_id} endpoint to retrieve agent details including status, version, performance metrics, and host information
Wallarm adds AWS VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Traffic Mirroring support for zero-latency API visibility and attack detection
Adds Geneve-encapsulated traffic support to the TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. traffic analysis engine for AWS VPC Traffic Mirroring
Adds VXLANVXLANA network encapsulation protocol that wraps Layer 2 Ethernet frames inside UDP packets, extending virtual LANs across Layer 3 networks. Cyber tools use it to simulate or inspect traffic across large-scale virtualized and cloud environments. encapsulation support to mirror traffic from AWS Elastic Network Interfaces (ENIs)
Enables mirroring of out-of-band traffic to Wallarm Nodes for API Discovery, Session analysis, and Attack detection without adding latency
TruffleHog finds, verifies, and analyzes leaked credentials across Git, chat, wikis, cloud storage, and more
TruffleHog v3.95.0 adds Bitbucket, Jira, and Confluence Data Center PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. detectors plus HashiCorp Vault custom endpoint support and man page generation.
└──▷ GET THIS VERSION
$ git clone --branch v3.95.0 https://github.com/trufflesecurity/trufflehog.git
# already have the repo? check out this version:$ git checkout v3.95.0
Adds Bitbucket Data Center (on-premises) PAT detector for self-hosted Bitbucket environments.
Adds Jira Data Center PAT detector to identify exposed Jira on-prem personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
Adds Confluence Data Center PAT detector for self-hosted Confluence instances.
Supports custom endpoint configuration in the HashiCorp Vault Auth detector.
Adds man page generation for TruffleHog, enabling offline reference via standard Unix tooling.
+1 moreshow less
Introduces AnalysisError type with wrapped error paths across all analyzer code for more structured error reporting.
6 details in Everything
2 more releases in this issue
· 2026-04-01 → 2026-04-21
Treats AADSTS50173 as an explicit revocation signal for Azure refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API., improving credential-status accuracy.
Infisical v0.159.25 adds custom CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. distribution points for PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. and Vercel team sync support
└──▷ GET THIS VERSION
$ git clone --branch v0.159.25 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.25
Adds custom CRL distribution points in PKI CA configuration to control certificate revocation list sources
Supports syncing secrets to Vercel teams with all custom environments
2 details in Everything
18 more releases in this issue
· 2026-04-01 → 2026-04-30
Infisical v0.159.23 adds Venafi TPP integration, Supabase secret rotation, gateway pools for HA failover, and SMTP_HELO_HOST config.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.23 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.23
SMTP_HELO_HOST environment variable sets the EHLO/HELO hostname used in outbound SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. connections.
User-controlled SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. rejection option is now available for dynamic secret generation.
Infisical v0.159.20 adds bulk KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. private key export, PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. access reasons, secret value reuse prevention, Travis CI sync, and DigiCert CertCentral CA support
└──▷ GET THIS VERSION
$ git clone --branch v0.159.20 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.20
feat(kms): Enables bulk exporting of private keys from the Key Management System.
feat(pam): Adds a reason field to PAM account access workflows for auditing.
PAM AWS credentials are now displayed directly in the CLI output for instant access.
feat(sync-secret): Adds App Connection and Secret Sync support for Travis CI integrations.
feat(ca): Supports DigiCert CertCentral as an External Certificate Authority provider.
Adds AWS ACM Public CA integration for Pki; shows systemd CLI in gateway re-enroll modal
└──▷ GET THIS VERSION
$ git clone --branch v0.159.19 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.19
└──▷ HOW TO FIND IT
Re-enroll a gateway using the provided systemd command directly from the UI modal.
📍In the Infisical dashboard, navigate to the gateway settings and click re-enroll to view and copy the systemd CLI command.
Adds AWS ACM Public CA support to the PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. engine, enabling issuance via that provider.
Shows the systemd CLI command directly in the re-enroll gateway modal (frontend).
Removes secret rotation v1, deprecating the legacy rotation mechanism.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Secret rotation v1 is removed; existing setups using the v1 rotation flow must migrate to v2.
Infisical v0.159.16 adds Kubernetes gateway auth for PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. and webhook event selection
└──▷ GET THIS VERSION
$ git clone --branch v0.159.16 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.16
Adds feat(pam): gateway auth for kubernetes to enable Privileged Access ManagementPrivileged Access ManagementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. (PAM) authentication via the Infisical gateway for Kubernetes workloads.
Adds webhook edit capability and granular event selection in feature(webhook) so users can filter which events trigger webhooks.
Introduces project permission caching (feature(cache)) to improve performance for project-level permission checks.
Adds insights page for secrets management and bulk tag modal to overview; dynamic challenges support in SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.14 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.14
feat adds an insights page to the secrets management product type.
Adds account policies for PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. accounts
└──▷ GET THIS VERSION
$ git clone --branch v0.159.13 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.13
Adds Post-QuantumPost-QuantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. Crypto algorithms to PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets., MS Teams support for workflows, and access approval revocation
└──▷ GET THIS VERSION
$ git clone --branch v0.159.12 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.12
Add Post-Quantum Crypto algorithms to PKI certificate profile creation
Add support for Microsoft Teams in workflow integrations
Infisical v0.159.10 adds AI session insights, SQL runner, JSON API for SSH CA keys, and real-time PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. logs
└──▷ GET THIS VERSION
$ git clone --branch v0.159.10 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.10
└──▷ HOW TO FIND IT
Query privileged access manager data directly using the built-in SQL runner in the Data Explorer UI.
📍In the sidebar, go to Data Explorer › SQL Runner and enter your query (e.g., SELECT * FROM sessions)
feat(pam): ai session insights — enables AI-powered analysis of privileged access manager sessions
feat(pam): add SQL runner in data explorer — provides an interactive SQL query interface within the Data Explorer UI
improvement(dynamic-secrets): add JSON API for SSH CA public key — exposes the SSH CA public key via a new JSON endpoint
feat(pam): real-time session log sync via incremental batch uploads — introduces real-time synchronization of PAM session logs using incremental batches
Infisical v0.159.9 adds NetScaler PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. sync and resourceType permission conditions for PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. resources
└──▷ GET THIS VERSION
$ git clone --branch v0.159.9 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.9
PAM permissions now support resourceType as a condition when filtering resources and accounts
Adds SSH PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. exec/sftp support and PAM session termination to Infisical v0.159.5
└──▷ GET THIS VERSION
$ git clone --branch v0.159.5 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.5
Adds feat: ssh pam exec and sftp capability allowing SSH users to execute commands or use SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. with secrets injected via PAM.
Adds feat(pam): support terminating active sessions for managing PAM-backed sessions.
Secret sharing now supports magic number validation; PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. posthog events and secret access insights updates.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.4 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.4
Adds magic number validation support to secret sharing
Adds posthog events for PAM endpoints
Re-vamps secret access insights sheet with expanded capabilities
Enhanced Microsoft Teams notifications for all incident events, public monitoring, and honeytokens; new API health checks and archived source filters
Microsoft Teams config supports granular subscription to specific event types (resolution, assignment, status changes, comments, access control, sharing) per channel
Microsoft Teams notifications now include Public Monitoring incidents alongside internal monitoring alerts
Microsoft Teams notifications now support Honeytoken Alerting events, previously only available via custom webhooks and email
GET /rest/sources returns provider_metadata.archived field for GitHub sources and accepts provider_metadata_archived=true filter
GET /rest/incidents accepts only_on_provider_archived_sources=true filter to focus on incidents from archived sources
5 details in Everything
6 more releases in this issue
· 2026-04-10 → 2026-04-29
Attachment scanning adds support for Jira and Confluence Cloud and Data Center sources.
└──▷ HOW TO FIND IT
Reinstall Jira or Confluence integrations to grant new read:attachment:jira or readonly:content.attachment:confluence scopes required for attachment scanning.
📍Go to Settings › Integrations › Sources and click Reinstall for each affected Jira/Confluence source.
Removes deprecated Honeytoken Labels API endpoints, requiring migration to the Custom Tags API.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!The Honeytoken Labels API endpoint is removed; use the Custom Tags API instead.
GitGuardian Slack app now on Marketplace with channel selection, attachment scanning, and Jira dynamic variables.
└──▷ HOW TO FIND IT
Install GitGuardian in the US region via the app directory.
📍Open https://slack.com/apps? Referring to the GitGuardian (US) listing in the Slack Marketplace.
Use dynamic variables to create a Jira ticket that includes the secret type and source name.
📍When configuring the Jira Integration in Settings › Integrations, use {secretType} and {sourceName} in Labels or Summary fields.
Monitor specific public channels instead of all of them during Slack setup.
📍During the Slack app installation flow, use Channel selection at setup time to choose which public channels to monitor.
Slack app is officially listed on the Slack Marketplace in both US and EU regions.
Channel selection at setup time allows users to choose which public channels to monitor during installation instead of the app automatically joining every public channel.
File attachment scanning detects secrets hiding in file attachments dropped in channels and messages alongside text-based messages.
Interactive messages (Beta) posts a threaded response directly in the original conversation with details about the finding and quick actions, including the ability to ignore low-risk incidents without leaving Slack.
Enhanced privacy controls redact private channel names for users who don't have access to those channels in Slack and display a privacy information banner during setup.
+1 moreshow less
Jira Integration now supports dynamic variables (e.g., {secretType}, {sourceName}, {sourceType}) across all Jira fields — including Labels, Summary, Priority, and custom fields — not just the description.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!If you previously covered your Slack Perimeter with GitGuardian, you will need to reinstall your Slack App using the same procedure.
GitGuardian adds native Gerrit VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. integration with read replica support
Adds native Gerrit VCS source integration for secrets detection in enterprise code review workflows.
Enables read replica configuration to point GitGuardian to a secondary server for cloning operations, reducing load on the primary Gerrit instance.
Introduces support for the webhook plugin to enable real-time secret detection as commits are pushed to Gerrit repositories.
New NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. admin/overprivilege detection, policy, badge, severity bump, and privacy mode scope
Identity level: Admin badge marks NHIsNHIsA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. with admin permissions (AWS AdministratorAccess, Entra Global Administrator, Okta Super Admin) in inventory and detail views
New Overprivileged Identity policy flags NHIs granted broader permissions than used
Admin NHI policy breaches automatically bumped one severity level higher (capped at critical)
Workspace-level Privacy Mode restricts plaintext secret visibility to managers or owners only
Public API now exposes the list of captured audit log event types
Team perimeter access control now extends to all non-VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. integrations and BYOS sources.
team perimeter configuration now scopes internal incident access for container registries, messaging (Slack, Microsoft Teams), documentation/file storage (Confluence, SharePoint Online, OneDrive), ticketing (Jira, ServiceNow), package registries, and Bring Your Own Sources
Managers can add specific sources to a team's perimeter via Settings > User management > Teams using the Add sources option in the perimeter section
ggshield 1.49.0 adds real-time secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. hooks for Cursor, Claude Code, and GitHub Copilot
New ggshield install -t <tool> -m global command to configure real-time AI coding assistant hooks
Added GET /v1/severity-rules endpoint to list severity rules programmatically
Public API now supports privacy mode to control secret content visibility in retrieved secrets
Detection Engine 2.162 adds 16 new detectors (Cloudflare V2, Snyk V2, Baidu, etc.) and analyzer support for Azure AI Search.
Adds detection support for Cloudflare API Token V2 format
Adds detection for Aikido CI Scanning Token, Baidu AI Cloud API Key, Baidu Cloud API Keys, HashiCorp Consul ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. Token, ElevenLabs API Key, Datadog Application Key, Volcengine API Key, QQ Robot API Keys, Canva Integration OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms., Bitrise Personal Access Token, Bitrise Workspace API Token, MaxMind License Key, CockroachDB API Key, Coder Session Token
Adds analyzer support for Azure AI Search and Azure OpenAI API keys
Updates Google Cloud detector to use less memory on secret-dense files
Disables the grafbase_access_token checker ahead of its removal
5 details in Everything
1 more release in this issue
· 2026-04-14 → 2026-04-27
OpenBao v2.5.3 hardens auth and core defaults while adding plugin download size limits.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.3 https://github.com/openbao/openbao.git
# already have the repo? check out this version:$ git checkout v2.5.3
Adds disable_unauthed_generate_root_endpoints=false to re-enable unauthenticated root generation endpoints (disabled by default for security).
Adds unsafe_relative_paths config option to permit path segments containing .. when path traversal blocking is required.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The sys/generate-root/* endpoints are now disallowed by default; existing setups relying on unauthenticated root generation must set disable_unauthed_generate_root_endpoints=false.
!Request path traversal using . and .. segments is forbidden by default; workflows requiring these in paths must explicitly enable unsafe_relative_paths.
Email verification MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., ggshield real-time AI coding tool scanning, and in-cluster support bundle generation
└──▷ HOW TO FIND IT
Generate a support bundle directly from the browser without kubectl access
📍Go to Admin area › Support Bundle page in the Self-Hosted console
Configure Helm to prevent Replicated from patching Secrets for strict admission policies
yaml
replicated.readOnlyMode: true
Adds email-based MFA requiring verification codes at login and before sensitive workspace actions for email/password users
Adds ggshield real-time scanning of prompts, tool calls, and agent actions for Cursor, Claude Code, and GitHub Copilot
Adds Team perimeter scoping for non-VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. sources (container registries, messaging, docs, tickets, package registries) via Incident visibility settings
Adds in-cluster support bundle generation from Admin area > Support Bundle page, eliminating kubectl or Krew plugin requirements
Adds 16 new detectors/checkers including Polar Organization Access Token, Microsoft Azure Storage Account Key, and DeepL keys to detection engine v2.159
+9 moreshow less
Adds 5 new checkers for Kubernetes Docker Secrets and Private Keys with GitLab/GitHub registration checks in detection engine v2.160
Brings location.url field support and v2 format tokens for Personal/Service Accounts to Bring Your Own Sources
Sets Critical saved view as default and adds severity rule ID/detector category fields to incidents
Adds /v1/severity-rules endpoint and historical scan trigger/cancel endpoints to public API
Adds workspace-level privacy mode enforcement and exposes audit log event types via public API
Adds namespace-scoped NetworkPolicyNetworkPolicyA Kubernetes API object that defines which pods may send or receive traffic, enforced by the cluster's CNI plugin to give cyber tools namespace-level network segmentation without host firewall rules. support configurable via networkPolicy.* Helm values with dryrun → enforce rollout
Makes manual encryption secret creation required for new Helm installations
Bundles JSON schemas into the deployment package for air-gapped environments
Adds replicated.readOnlyMode to prevent Replicated subchart from creating/patching Secrets
14 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes built-in support for externalSecrets in Helm installations; users must switch to existingSecrets and manage ExternalSecret resources manually
Invicti adds interactive DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. login, reusable form credentials, Windows WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host. install, and VB6 static analysis support.
└──▷ HOW TO FIND IT
Scan a site requiring MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. by allowing manual interaction at scan start.
📍Configure DAST scan › Enable Interactive login in authentication settings
Use stored secrets for form authentication instead of plain text.
📍Navigate to Scans › Secrets, store credentials, then reference them in form auth fields
Install Invicti Platform on-premises on Windows using WSL.
📍Run the Invicti Platform installer in a WSL environment
Adds interactive login configuration for DAST scans to allow manual CAPTCHA/MFA completion
Adds Scans > Secrets storage for form authentication credentials, replacing plain-text entry
Adds Windows installation via WSL for the on-premises Invicti Platform
Adds VB6 source code support in Invicti Source Scan static analysis
Adds scalable internal agent Helm chart support for OpenShift and ROSA clusters
+3 moreshow less
Adds incremental scan type indicator in scan details view
Adds partial URL filtering for the DAST scans list
Adds machine resource information to the internal agent details panel
8 details in Everything
5 more releases in this issue
· 2026-04-02 → 2026-04-30
Adds interactive DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. login, reusable scan secrets, Windows/WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host. install, and VB6 support
Adds interactive login for DAST scans to handle CAPTCHAs or MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. manually at start
Adds reusable credentials storage in Scans > Secrets for form authentication
Enables on-premises installation of Invicti Platform on Windows via WSL
Adds VB6 source code support in Invicti Source Scan
Invicti adds source code and eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. API discovery, IP session restrictions, and configurable banners.
└──▷ HOW TO FIND IT
Configure a header banner message displayed to all users across the platform.
📍Navigate to Platform Settings › Customization › Header Banner and enter your message
Restrict user sessions to specific IP addresses for compliance.
📍Navigate to User Management › Security Settings and add allowed IP ranges to the session restriction field
Adds Invicti Source Scan to discover APIs directly from source code, expanding inventory without live traffic dependency
Adds eBPF-based API discovery from encrypted network traffic with no infrastructure changes required
Adds IP address restrictions for user sessions to limit access by source IP
Adds a customizable header banner across all platform pages for organizational communications
Adds a configurable login warning banner with acknowledgment and decline options for strict access control
+3 moreshow less
Improves asset visibility in collections so mapped application assets appear automatically without manual mapping
Expands tag support to accept any character, including spaces and multiple : separators, across all services
Adds the ability to delete scheduled scans directly from the platform UI
New API discovery via Source Scan and eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic., IP-restricted sessions, configurable banners.
└──▷ HOW TO FIND IT
Discover APIs from your codebase to populate inventory before scanning live traffic.
📍Use Invicti Source Scan within the platform to link your repository and run the source-based discovery workflow
Restrict specific user accounts to only connect from trusted corporate IPs.
📍Configure IP address restrictions for user sessions in the platform's security settings
Display a critical security notice to all users immediately upon accessing any platform page.
📍Set up a customizable banner in the platform's header configuration settings
Adds API Discovery from source code using Invicti Source Scan to expand your API inventory without relying solely on live traffic
Adds API Discovery from encrypted traffic using eBPF with no infrastructure changes required
Adds IP address restrictions for user sessions to improve security and compliance
Adds a customizable platform header banner displayable across all platform pages
Adds a configurable login warning banner at login with acknowledgment and decline options for strict access control requirements
Invicti Release 20260402 adds scan-cli export, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. OAuth tokens, and report/catalog enhancements
Adds --export capability to scan-cli for exporting scan results directly from the CLI.
Implements long-lived OAuth tokens for SCIM integration with Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments..
Invicti Release 20260402 adds scan-cli export, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. OAuth, and report details
Adds scan-cli export capability for sharing or processing findings in CI/CD pipelines
SCIM integration with Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. now uses long-lived OAuth tokens instead of short-lived bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else.
Comprehensive Report now includes the full HTTP request and response for each finding
Site structure now shows the content type (e.g. application/json) for each path
API catalog endpoints now display their parameters
+1 moreshow less
Scan profiles now show the highest severity level reported by each check and support filtering checks by severity
Caido v0.56.0 adds Match & Replace in Replay, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. remote instance connections, and collection/session reordering.
└──▷ GET THIS VERSION
$ git clone --branch v0.56.0 https://github.com/caido/caido.git
# already have the repo? check out this version:$ git checkout v0.56.0
Adds Match & Replace rules support directly within the Replay module.
Supports connecting to remote Caido instances via HTTPS.
Enables reordering of collections and sessions in Replay.
Nuclei v3.8.0 adds XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. context analysis, PDF export, honeypot detection, and service-name port support in network templates.
└──▷ GET THIS VERSION
$ git clone --branch v3.8.0 https://github.com/projectdiscovery/nuclei.git
# already have the repo? check out this version:$ git checkout v3.8.0
Adds XSS reflection context analyzer to the fuzzing engine for more precise cross-site scriptingcross-site scriptingCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. detection.
Adds PDF export option for scan results via the reporting module.
Adds honeypot detection to reduce scan noise against honeypot hosts.
Supports service names (e.g., http, ssh) in the port field of network templates, removing the need to hard-code port numbers.
Supports inline targets and secrets inside template profiles.
LavaMoat webpack plugin gains sourcemap-preserving evasive transforms for easier debugging of hardened bundles.
└──▷ GET THIS VERSION
$ git clone --branch webpack-v2.2.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout webpack-v2.2.0
lavamoat-node gains opt-in modernized module resolution for classic mode
└──▷ GET THIS VERSION
$ git clone --branch lavamoat-v11.1.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout lavamoat-v11.1.0
Laverna v2.1.0 adds Yarn support for automated LavaMoat policy publishing.
└──▷ GET THIS VERSION
$ git clone --branch laverna-v2.1.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout laverna-v2.1.0
Supports Yarn as a package manager alongside the existing npm support.
allow-scripts v5 pins install scripts to exact versions by default, tightening supply-chain control.
└──▷ GET THIS VERSION
$ git clone --branch allow-scripts-v5.0.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout allow-scripts-v5.0.0
Install scripts are now pinned to specific package versions, preventing allowlisted scripts from running under unintended versions.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!allow-scripts no longer matches a lower version against an allowed entry — version pinning is now exact, so existing allowlist entries that relied on lower-version matching will stop working.
!allow-scripts defaults to pinning versions; upgrading requires a migration action to update existing allowlist configuration.
LavaMoat webpack plugin now auto-overrides unsafe devtool settings that break LavaMoat's security guarantees.
└──▷ GET THIS VERSION
$ git clone --branch webpack-v2.1.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout webpack-v2.1.0
Automatically overrides the webpack devtool setting when it is likely to break LavaMoat, preventing silent security misconfigurations.
Socket adds Gradle Version Catalog (libs.versions.toml) support for SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation fallback.
Adds parsing of libs.versions.toml files during SBOM generation to improve dependency detection for Gradle projects without lockfiles.
Adds NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. and Composer versioning schemes, Sonatype Guide token support for OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. Index analyzer, and new operational policy criteria.
└──▷ GET THIS VERSION
$ git clone --branch 4.14.1 https://github.com/DependencyTrack/dependency-track.git
# already have the repo? check out this version:$ git checkout 4.14.1
Backport: Add support for NuGet versioning scheme
Backport: Add support for Composer versioning scheme
Backport: Support Sonatype Guide tokens for OSS Index analyzer
Backport: Add age and version distance to operational policy criteria
cosign v3.0.6 adds OpenBao-managed key signing, GitLab group key creation, and GCEGCEGoogle Compute Engine, Google's infrastructure-as-a-service platform for running virtual machines in the cloud; cyber tools use it for scalable, on-demand compute without managing physical hardware. metadata server support.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.6 https://github.com/sigstore/cosign.git
# already have the repo? check out this version:$ git checkout v3.0.6
Adds support for signing with OpenBao-managed keys.
Supports key creation scoped to a GitLab group.
Adds support for the GCE metadata server environment variable.
Disallows using --key and cert identity together during verification, enforcing cleaner verification flows.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Using --new-bundle-format and --rfc3161-timestamp together is now disallowed and will cause an error.
!Using --key and cert identity flags together during verification is now disallowed.
New Dart/Conda/Helm repo support, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. protection API, and migration updates in Nexus Repository Cloud
Adds Dart (pub) package format support.
Adds Conda hosted and group repository support.
Adds Helm group repository support for aggregating multiple Helm repositories (disabled by default; configurable via system property).
The Instance Migrator now supports migrating Terraform and Conda hosted repositories between Nexus Repository instances.
Adds an admin REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. (GET/PUT /v1/security/ssrf-protection) for managing SSRF protection settings dynamically.
syft v1.43.0 adds Deno binary classifiers, OpenLDAPOpenLDAPAn open-source implementation of the Lightweight Directory Access Protocol, maintained by the OpenLDAP Project, used to store and query structured identity data like users and groups over a network. detection, and expanded Haskell/Erlang version support.
└──▷ GET THIS VERSION
$ git clone --branch v1.43.0 https://github.com/anchore/syft.git
# already have the repo? check out this version:$ git checkout v1.43.0
Adds Deno binary classifiers for detecting Deno runtime packages.
Aguara v0.14.5 adds --no-redact CLI flag, WithRedaction library option, and auto-suppresses update checks in CI environments.
└──▷ GET THIS VERSION
$ git clone --branch v0.14.5 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.14.5
Adds --no-redact CLI flag to preserve raw credential matches in findings output
Adds aguara.WithRedaction(enabled bool) library option to control redaction behavior programmatically
Auto-disables update checks when CI=true or recognized CI environment variables are set
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Credential-leak findings now have their matched_text and matching context replaced with [REDACTED] by default; code parsing these fields will see redacted values instead of raw secrets.
Adds direct-to-S3 scan uploads via new API endpoints and EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching.-weighted risk scoring with UI toggles and export fields
Adds POST /public/v0/scans/upload endpoint returning presigned S3 URLs for multipart or single-part upload, removing the 210 MB body limit on POST /public/v0/scans
Adds EPSS-Weighted Risk Scoring enabled via Settings > Org Config toggle, exposing weighted severity and score columns in CVE findings tables, matching filters, CSV export fields, and EPSS percentile lines in the exploit popover
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The latestOnly query parameter is now required on GET /public/v0/findings to replicate the previous behavior of returning findings only for the latest version; without it, the endpoint returns findings across every accessible project version.
Finite State introduces new CLI installation modal, background processing for unreachable findings, and corrected SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. root package supplier population.
Adds a new platform modal dialog to install the Finite State CLI directly, displaying a copyable install command and documentation links
Moves auto-resolution of unreachable findings to background processing to eliminate timeouts for large project versions
Populates the root project package supplier field in SPDX exports with the organization's configured name
Finite State adds EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching.-weighted risk/severity columns to findings table and folder-scoped project search
Adds EPSS-weighted risk and EPSS-weighted severity columns to the findings table, available as sortable and filterable fields that combine CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. base scores with exploit probability.
Adds a dedicated in-table search input for folder-scoped project search, separating it from the sidebar folder navigation which now filters only the folder tree.
ILSpy v10.0 adds C# 14 extension members, API diff, batch PDBPDBA debug symbol file format used by Microsoft's toolchain that maps compiled binaries back to source code, function names, and variable types, letting cyber tools resolve symbols during reverse engineering or memory analysis. generation, and .NET 10 support.
└──▷ GET THIS VERSION
$ git clone --branch v10.0 https://github.com/icsharpcode/ILSpy.git
# already have the repo? check out this version:$ git checkout v10.0
Supports C# 14 extension members decompilation with dedicated UI and Decompiler APIs.
Supports batch PDB generation via GeneratePdbForAssemblies.
+16 moreshow less
Supports disassembling single-file bundles in the GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands..
Adds disassembler support for ildasm /caverbal format.
Adds support for the ckfinite IL opcode in the decompiler.
Enables navigating visible decompiler history in the UI.
Adds dynamic ILSpy settings options to ILSpyCmd.
Allows extracting multiple package entries at once.
HyperDbg v0.18.1 adds Hypertrace VMMVMMA Virtual Machine Monitor is software that creates and manages virtual machines, abstracting physical hardware so multiple OS instances run in isolation; cyber tools use it to sandbox execution or emulate target environments safely. support and begins LBR implementation
└──▷ GET THIS VERSION
$ git clone --branch v0.18.1 https://github.com/HyperDbg/HyperDbg.git
# already have the repo? check out this version:$ git checkout v0.18.1
Radare2 6.1.4 adds hardware breakpoints for winkd, new debug session checkpoints, pdub/pdur disasm commands, and JNIJNIJava Native Interface, a standard Java SE feature that lets Java code call and be called by native C or C++ libraries, giving cyber tools a bridge between JVM-hosted logic and low-level system code. autoloading.
└──▷ GET THIS VERSION
$ git clone --branch 6.1.4 https://github.com/radareorg/radare2.git
# already have the repo? check out this version:$ git checkout 6.1.4
└──▷ TRY IT
Disassemble a function body stopping at the first return instruction — useful for quick function boundary inspection without knowing the size.
$ r2 <binary> -c 'af; pdur'
Attach to a running process temporarily using the new PID alias to inspect registers without a full debug session.
$ r2 -d <binary> -c 'dr @p:1234'
Adds hardware breakpoints support for winkd debug backend.
Adds single stepping and wait reasons for winkd.
Adds branchable debug session checkpoints for snapshot-based reversing.
Adds @p:PID, @dr:, and @dp: aliases for temporal process/thread attach.
Adds pdub (disassemble until end-of-block) and pdur (disassemble until return) commands.
+19 moreshow less
Autoloads JNI types when loading Android binaries and lists JNI_* symbols via ies.
Adds Analysis.Plugins submenu and filesystem manager (fs and js shells) to the Panels UI.
Adds R2_PLUGINS_ORDER environment variable to control plugin load locations.
Extends aCe/aCf commands to support plaintext, JSON, and r2 output modes.
Adds a:autoname analysis plugin and improves function autoname scoring strategy.
Adds RAnalPlugin.thumb to scan code for ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Thumb mode-switch hints.
Adds r_anal_xrefs_setf API for a ~3% analysis speedup by avoiding redundant function lookups.
Exposes typed function context with params, stack slots, and base types.
Imports C rewrite of the gopcintab plugin.
Adds support for NDS32 ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. relocations.
Supports more v850 relocations.
Extends Swift demangler with additional abbreviation tables and conformance entries.
Adds buffer-baked functions in r_magic and restores magic file baked APIs with performance improvements.
Implements r_print_code_indent for C-like code indentation via ~:}.
Adds initial generic support for camel syntax in the assembler.
Automatic scrolling and panning out of screen in menubars panel.
Formats uf2:// IO plugin and adds new device family entries.
Adds GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. CI and FilC compilation artifacts.
Installs to lib64 on Fedora/RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence./SUSE.
24 details in Everything
└──▷ BREAKING ON UPGRADE
!RCore.cmdCall is renamed to RCore.call; any plugin or script referencing RCore.cmdCall will break.
!R_CORE_LOADLIBS_ALL is renamed to R_LIB_LOAD_ALL; code using the old constant will fail to compile.
!r_anal_archinfo is removed in favor of r_arch_info; callers of r_anal_archinfo must be updated.
Binary Ninja 5.3 adds full function-level lifting APIs, NDS32/AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. ILP32 support, Ghidra export, and hardware breakpoints.
└──▷ USE IT
Generate a BNTL type library from a Windows DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. for use in projects.
Set up automatic IDB loading for faster analysis by configuring the auto-load path.
steps
In 'Open with Options', set `analysis.idb.autoLoadFile` to your .idb path instead of using "Import Debug Info..."
Create a hardware write breakpoint on address 0x1000 with a watch size of 4 bytes.
steps
Press F3 or go to Debugger > Add Hardware Breakpoint... and set Type to 'Write' and Size to '4 bytes'.
Adds bntl_cli command-line utility with create, dump, diff, and validate subcommands for generating and managing BNTL type libraries from binaries or directories
Adds new architecture APIs supporting standalone function-level lifting for architectures requiring single-threaded analysis (e.g., VMs like Java, Python bytecode, .NET)
Adds NDS32 architecture support in Ultimate edition, bringing the total to 18 officially supported architectures with full decompilation capabilities
Adds support for AArch64 ILP32 ABI, including a platform definition and updated function recognizer for ILP32 PLT entries
Adds Ghidra Export capability to generate .gzf files from Binary Ninja for importing into Ghidra with types, symbols, bookmarks, comments, and function starts preserved
+10 moreshow less
Updates IDB Import to allow setting analysis.idb.autoLoadFile in Open with Options or using the Load IDB action post-load, replacing the deprecated "Import Debug Info From External File..."
Adds a streamlined Mach-O Architecture Picker UI dialog for fat binaries that shows slice sizes and allows setting defaults without navigating settings menus
Expands Container Browser supported formats to include AR, Bzip2, CPIO, DMG (compression only), FIT, IMG4/KernelCache, LZ4Frame, LZMA, Tar, TRX, UImage, Universal Mach-O, XZ, and Zstd
Adds bntl_cli --help and subcommand usage documentation for headless type library automation
Deprecates SigKit (re-enableable via analysis.signatureMatcher.autorun) in favor of WARP, bundling signatures for libc6, libgcc, and libstdc++ for x86, x86_64, aarch64, and armv7
Adds Hardware Breakpoints (F3 or Debugger menu) with watchpoint size options (1, 2, 4, 8 bytes) and types (HE/HR/HW/HA) to the Breakpoint Widget
Adds Conditional Breakpoints via right-click "Edit Condition..." supporting register names, arithmetic, comparisons, and memory dereferences in expressions like rax == 0x1234
Adds Windows Native Debug Adapter as the default debugger on Windows, offering performance improvements over the DbgEng-based adapter
Adds GDB MI Adapter for connecting to GDB-compatible targets via Machine Interface protocol, including support for TTD via Mozilla's rr (currently Linux-only)
Adds opt-in automatic crash reporting prompt upon first launch of 5.3
15 details in Everything
└──▷ BREAKING ON UPGRADE
!SigKit is deprecated and scheduled for removal in the next release; re-enable with analysis.signatureMatcher.autorun if needed immediately.
!The "Import Debug Info From External File..." action is replaced by setting analysis.idb.autoLoadFile or using the Load IDB action.
The detect-it-easy analyzer identifies executable and file formats on Windows, Linux, and macOS.
detect-it-easy 3.20 adds Microsoft Store port, PEiDPEiDA free Windows utility that detects packers, cryptors, and compilers used on PE executables, helping analysts identify obfuscation before reversing a binary. scanning method, configurable BufferSize, and tray monitoring.
└──▷ GET THIS VERSION
$ git clone --branch 3.20 https://github.com/horsicq/Detect-It-Easy.git
# already have the repo? check out this version:$ git checkout 3.20
Adds Microsoft Store distribution channel for easy installation
Adds BufferSize configuration option to control scan buffer size
Introduces PEiD scanning method with improved heuristic module for PE files
x64dbg gains initial accessibility support, breakpoint expression validation, PDF graph export, Linux/ElfBug preview, and a slate of workflow improvements.
└──▷ GET THIS VERSION
$ git clone --branch 2026.04.20 https://github.com/x64dbg/x64dbg.git
# already have the repo? check out this version:$ git checkout 2026.04.20
Adds initial accessibility support across Registers, Disassembly, Hex Dump, Trace Browser, and most table-based views, enabling screen readers and UI automation tools.
Adds expression validation with red/green border feedback directly in the breakpoint dialog.
Supports editing raw bytes of a register directly in the UI.
Saves graph images as PDF via the graph view.
Adds call stack highlighting by module or symbol.
+12 moreshow less
Adds TraceSetStepFilter command for module-level trace filtering.
Adds two new plugin callbacks for trace events: StartTrace and StopTrace.
Supports user-defined blocks in trace and extends root JSON structure.
Adds option to detach instead of terminate when attaching to a new process.
Enables bulk toggling of software breakpoints across all selected instructions in the disassembly view.
Adds cycling hotkeys for dump view modes.
Adds copy shortcuts (Ctrl+C, Shift+Insert) in SearchListView and a copy address shortcut in the References tab.
Adds ActionCopyDisassembly shortcut for copying disassembly text.
Introduces faster filtering in search lists.
Adds initial Linux debugger support via the ElfBug ptrace engine with an AppImage build for cross/debugger, including pre-alpha architecture detection.
Introduces a new test framework and significantly expanded memory breakpoint regression coverage.
Renames Run to user code to the rtu command.
17 details in Everything
└──▷ BREAKING ON UPGRADE
!The Run to user codeGUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands./script command is now the rtu command.
Refinery 0.10.11 adds cmdarg, swf, bigint units and rewrites deobfuscation with new parsers
└──▷ GET THIS VERSION
$ git clone --branch 0.10.11 https://github.com/binref/refinery.git
# already have the repo? check out this version:$ git checkout 0.10.11
└──▷ USE IT
Extract unescaped command-line arguments from malicious scripts targeting common Windows utilities
shell
refinery analyze --units cmdarg <input_file>
Auto-detect and deobfuscate PowerShell, VBA, or JavaScript content in a sample
shell
refinery analyze --units defu <input_file>
Extract resources from a legacy Flash SWF file
shell
refinery analyze --units swf <input_file>
Adds cmdarg unit to extract and unescape arguments passed to wmic, cmd, start, or powershell commands
Adds swf unit for extracting resources from Flash SWF files
Adds bigint unit for big-integer encoding, split from base
Rewrites deobfuscation system with full parsers and emulators: new ps1, vba, js, and universal defu units replace old deob-ps1-*, deob-vba-*, deob-js-*
Adds script decompiler outputting human-readable NSIS source to the xtnsis unit
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The old deobfuscation units (deob-ps1-*, deob-vba-*, deob-js-*) have been replaced by new units (ps1, vba, js, defu)
!Big-integer encoding is now in the bigint unit instead of base
Adds Swift support on Linux via pkg-config, including bindings for WebRequestHandler, PortalService endpoints, DeviceChange async streams, and broader Variant unmarshalling
EMBA v2.0.1-interactor adds the s130 module for generating interactive firmware dependency maps
└──▷ GET THIS VERSION
$ git clone --branch v2.0.1-interactor https://github.com/e-m-b-a/emba.git
# already have the repo? check out this version:$ git checkout v2.0.1-interactor
Adds the s130 module to generate an interactive dependency map of firmware components
Updates installer and docker workflows for improved robustness and internal check stability
capa v9.4.0 adds PyGhidra support, 26 new rules including cloud credential and anti-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. detections, and O(n²) performance fix.
└──▷ GET THIS VERSION
$ git clone --branch v9.4.0 https://github.com/mandiant/capa.git
# already have the repo? check out this version:$ git checkout v9.4.0
Adds PyGhidra integration, enabling capa analysis directly within Ghidra via the PyGhidra framework.
Adds VMRay extraction of number features from whitelisted void_ptr parameters (hKey, hKeyRoot).
Adds 8 new cloud credential-access rules detecting access to AWS, Cloudflare, Docker, GCP, Kubernetes credentials and AWS service enumeration (CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call., CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions., Direct Connect, EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware., IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., S3, Support).
Adds new anti-analysis rule detecting LLM session termination via Anthropic magic strings.
Adds HC-256 encryption detection rule.
+7 moreshow less
Adds new Linux privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. rule detecting commit_creds abuse and netfilter hook registration.
Adds .NET-specific rules for process creation, file read, and file write.
Cortex Analyzers 3.8.2 adds OpenCTI v6 support to its analyzer library.
└──▷ GET THIS VERSION
$ git clone --branch 3.8.2 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.2
2 more releases in this issue
· 2026-04-06 → 2026-04-14
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. gains new responder flavors in Cortex-Analyzers 3.8.1
└──▷ GET THIS VERSION
$ git clone --branch 3.8.1 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.1
$ git clone --branch 3.8.0 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.0
Elcomsoft System Recovery 8.37 adds support for Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. and enhanced Microsoft Accounts
GCP Compute module gains ListSnapshots, zone-arg support for CreateDiskFromSnapshot, and analysis VM package passthrough.
└──▷ GET THIS VERSION
$ git clone --branch 20260415 https://github.com/google/cloud-forensics-utils.git
# already have the repo? check out this version:$ git checkout 20260415
└──▷ USE IT
Create a disk in a specific zone and project from an existing snapshot.
UAC v3.3.0 adds user-defined variables, per-file command execution, size-based mount exclusions, and a wave of new artifacts.
└──▷ GET THIS VERSION
$ git clone --branch v3.3.0 https://github.com/tclahr/uac.git
# already have the repo? check out this version:$ git checkout v3.3.0
└──▷ TRY IT
Inject an incident-specific case ID and custom output path into artifact collection without modifying any YAML files.
$ uac -p full /evidence/output --define CASE_ID=IR-2024-042 --define COLLECT_PATH=/var/log/app
Quickly fingerprint a live host's hardware and OS details before deciding which artifact profile to run.
$ uac --system-info
New --define / -D flag lets you pass user-defined variables on the command line, expanded inside artifacts as %var% or %var=default_value%.
New --system-info flag prints CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware., memory, hostname, and other system details without running a full collection.
The find collector can now run a specified command once for each matched file.
New exclude_mount_point_size option in uac.conf skips mount points whose used size exceeds a defined threshold.
Artifact fields max_file_size and min_file_size now accept human-readable units: bytes, KB, MB, GB, and TB.
+14 moreshow less
New statf built-in tool produces bodyfile-format file status output on FreeBSD systems that lack stat and perl.
New system/bodyfile2filelists.yaml artifact extracts SUID, SGID, hidden, world-writable, group-writable, and unknown-owner file/directory lists from a previously collected bodyfile.
New per-shell artifact files added for ash, bash, dash, elvish, fish, ion, ksh, mksh, nscli (NetScaler), osh, PowerShell, tcsh, xonsh, and zsh history and config collection.
New files/ssh/public_keys.yaml collects SSH public keys across all platforms.
New ssh/private_keys_with_null_passphrases.yaml collects SSH public keys whose associated private keys have empty passphrases.
New Linux artifacts for boot/initramfs/GRUB configs, D-Bus configs, dracut configs, polkit configs, and binfmt_misc handlers — all flagged as possible persistence mechanisms.
New macOS artifact files/system/bluetooth.yaml collects cached records of observed Bluetooth devices.
New macOS artifact files/system/macos_keychain_devicelist.yaml collects trusted device records from iCloud Keychain's devicelist.db.
New macOS artifact files/system/xprotect.yaml collects XProtectXProtectApple's built-in malware detection system for macOS, maintained by Apple and updated silently via XProtect Remediator; cyber tools integrate with or reference it to leverage Apple's own signature-based threat blocking. and MRT versioning metadata.
New application artifacts for calc, mail (.mailrc/.mail_aliases), nano, Python, screen, sqlite history/config, and Jenkins config.xml/build.xml files.
Browser affiliation database files now collected for Brave, Chrome, Chromium, Edge, Opera, Safari, and Vivaldi on Linux and macOS.
Azure Storage upload now automatically appends output and log file names to the SAS URL, eliminating the need for a separate log-file URL.
live_response/network/ss.yaml updated to capture PACKET sockets, classic BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. filters, and process name/PID per socket on Linux.
memory_dump/avml.yaml updated to also collect vmlinux* and System.map* files to aid Volatility profile building, and exposes an avml_max_memory variable to override the 256 GB memory cap.
19 details in Everything
└──▷ BREAKING ON UPGRADE
!The --azure-storage-sas-url-log-file option has been removed; the log file name is now appended automatically to the URL given in --azure-storage-sas-url.
!files/applications/imessage.yaml is renamed to files/applications/messages.yaml; any profile or script referencing the old name will no longer match.
!files/shell/config.yaml, files/shell/history.yaml, and files/shell/sessions.yaml are replaced by per-shell YAML files (e.g., files/shell/bash.yaml, files/shell/zsh.yaml); custom profiles referencing the old artifact paths will no longer match.
DFIR ORC v10.3.0 introduces OrcCapsule loader, WolfLauncher /MultipleInstance, and several new CLI options
└──▷ GET THIS VERSION
$ git clone --branch v10.3.0 https://github.com/DFIR-ORC/dfir-orc.git
# already have the repo? check out this version:$ git checkout v10.3.0
└──▷ USE IT
Run WolfLauncher allowing multiple instances to process concurrent evidence collections
shell
WolfLauncher /MultipleInstance
Use ToolEmbed with the new /force flag to overwrite an existing output binary without prompt
shell
ToolEmbed /embed <target> /force
Customize sample naming scheme in GetThis using the new SampleNameFormat option
shell
GetThis /SampleNameFormat <custom_format>
Adds OrcCapsule binary loader that selects the most capable embedded DFIR-ORC binary for the host environment (x64, x86, x64-xp, x86-xp, arm64)
Adds /MultipleInstance execution option to WolfLauncher
Allows default multiple running instances of OrcOffline in WolfLauncher
Adds SampleNameFormat option to GetThis for custom naming schemes
Adds timezoneinfo to Outcome output
+2 moreshow less
Makes ToolEmbed/embed option more flexible and adds /force overwrite capability
Updates WolfLauncher CLI with CommandTimeout and ArchiveTimeout options
7 details in Everything
└──▷ BREAKING ON UPGRADE
!DFIR-ORC output files and directories ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. no longer inherit permissions; they are now restricted to the current user and administrators
!ToolEmbed options input, run32, and run64 are deprecated
iLEAPP v2.3.1 adds 11 new artifact modules including Threema, Discord, Zangi, Apple Maps Trips, and Spotlight Index Cache.
└──▷ GET THIS VERSION
$ git clone --branch v2.3.1 https://github.com/abrignoni/iLEAPP.git
# already have the repo? check out this version:$ git checkout v2.3.1
New Spotlight Index Cache module for extracting indexed file metadata.
New Threema messenger parser for chat artifact extraction.
New Discord2026 module for parsing updated Discord artifacts.
New Zangi Messenger parser for call and message artifacts.
New meteoSwiss app module for weather app artifact analysis.
+8 moreshow less
New Apple Maps Trips/Significant Locations parser for movement history.
New batteryBDC module for battery health and charging artifact extraction.
New Box for iOS artifact parser for cloud storage activity.
New Device artifacts module from Find My Friends.
GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. window is now resizable for improved usability on varied screen sizes.
Supports iTunes encrypted backups via Evanole VM.
LAVA output now includes module metadata in .lava files.
Modules updated to emit LAVA-compatible output, including Potato Chat and Kleinanzeigen with conversation thread view.
MVT v2026.4.28 overhauls alerting with multi-level alert system, adds AndroidQF bugreport analysis, and expands IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. and battery detection.
└──▷ GET THIS VERSION
$ git clone --branch v2026.4.28 https://github.com/mvt-project/mvt.git
# already have the repo? check out this version:$ git checkout v2026.4.28
Replaces binary detected/not-detected alerting with a multi-level alert system, enabling heuristic detections and richer JSON output for downstream tooling.
Adds support for bugreport modules to analyse AndroidQF dumpsys.txt files.
Extends IoC matching to check broadcast receiver names.
Detects app uninstalls and downgrades via battery daily history analysis.
Aborts analysis and warns the user when an iOS backup is encrypted, preventing silent incomplete results.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!This release is described as a major v3 refactor; the README explicitly warns about v3 breaking changes — existing integrations that parse MVT JSON output or rely on the binary detected/not-detected alert structure will need to be updated for the new multi-level alert format.
Hayabusa v3.9.0 adds support for MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. v19 threat taxonomy.
└──▷ GET THIS VERSION
$ git clone --branch v3.9.0 https://github.com/Yamato-Security/hayabusa.git
# already have the repo? check out this version:$ git checkout v3.9.0
Supports MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. v19, keeping tactic and technique mappings current with the latest framework revision.
Volatility 3 v2.28.0 adds Linux sockscan and process-spoofing plugins, Windows banner support, and improved Windows 11 detection.
└──▷ GET THIS VERSION
$ git clone --branch v2.28.0 https://github.com/volatilityfoundation/volatility3.git
# already have the repo? check out this version:$ git checkout v2.28.0
Adds linux.sockscan plugin for scanning Linux memory for network socket artifacts.
Adds linux.process_spoofing plugin to detect process parent-PID spoofing on Linux.
Adds Windows support to the banners plugin for identifying Windows memory images.
Enhances Linux VMA enumeration smearing protection for more robust analysis of volatile memory.
Handles new bin_attribute format for Linux kernel module sections.
+2 moreshow less
Improves Windows Intel detection with better Windows 11 support.
Supports Cryptodome namespace as a fallback when the Crypto package is unavailable.
Abnormal AI adds filter, visual indicator, CSV export, and API access for blocklisted threats in the Threat Log.
└──▷ HOW TO FIND IT
Filter the Threat Log to view only blocked threats.
📍In the Threat Log, apply the blocklisted filter.
Export blocklisted threat data for offline reporting.
📍In the Portal, go to Threat Log › Export and select CSV to include blocklisted status.
Adds blocklisted filter to the Threat Log to display blocklisted messages from the past two months
Adds a visual indicator on individual threat entries in the Portal for those blocklisted in the past two months
Exports blocklisted status via CSV export for offline analysis and reporting
Exposes blocklisted status through SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. integrations and the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.
4 details in Everything
14 more releases in this issue
· 2026-04-01 → 2026-04-30
Adds REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services. for retrieving portal users, roles, security settings, and API tokens to support SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications./GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. posture monitoring.
Enables integration with SSPM or GRC tooling to continuously monitor Abnormal tenant configuration via new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints.
Abnormal adds self-service REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. token management in the Portal with granular controls.
Adds the ability to create, rotate, and revoke REST API tokens directly in the Abnormal Portal, eliminating support-ticket delays.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Existing REST API tokens will automatically expire in April 2027, requiring customers to create new tokens to maintain uninterrupted API access.
Adds Webhook as a new SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. integration type to stream Threats, Cases, Audit Logs, and more via HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. endpoints.
└──▷ HOW TO FIND IT
Stream Threats and Vendor Cases to a SIEM endpoint using Bearer TokenBearer TokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. auth.
📍1. In the Abnormal Portal, go to Integrations › SIEM.
2. Select Webhook as the integration type.
3. Enter your HTTPS endpoint URL.
4. Choose Bearer Token for authentication and provide the token.
5. Select Threats and Vendor Cases as event types.
6. Validate endpoint and test delivery.
Supports sending Threats, Vendor Cases, AI Security Mailbox, Audit Logs, Account Takeover, Security Posture Management, and URL Rewriting Clicked events via webhook
Configures HTTPS endpoint with API Key, Basic Authentication, Bearer Token, or Custom Header authentication methods
Supports IP allowlisting and delivery with guaranteed retries
ThreatBase adds VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection./proxy/TOR tunnel context to IP lookups, showing provider and anonymity status.
└──▷ HOW TO FIND IT
Assess if a suspicious IP is routing through an anonymizing service during investigation
📍In ThreatBase, search for an IP address and review the tunnel details section in the results.
Abnormal AI V2 Multi-Language Video Training adds 16 new native languages
Adds Dutch, Polish, Italian, Indonesian, Malay, Swedish, Norwegian, Finnish, Danish, Czech, Hungarian, Thai, Vietnamese, Serbian, Turkish, and Bengali to video training language support
New Indicators filter added to Anomaly Log for Account Takeover anomaly categorization
└──▷ HOW TO FIND IT
Filter anomalies by specific behavior signals like high-risk sign-ins to speed up triage in the UI.
📍In the Anomaly Log, select Indicators from the filter dropdown and choose High-Risk Sign-In or other indicator types.
Adds an Indicators filter to the Anomaly Log UI, allowing categorization of anomalies by indicator type (e.g., Admin Console Activity, High-Risk Sign-In, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. usage)
Integrates the new Indicators filter alongside existing filters (Date Range, Event Types, Platform) to enable faster triage based on observed behavior types
Rspamd 4.0.1 adds layered settings merge and a dynamic block API for fuzzy storage with custom response codes.
└──▷ GET THIS VERSION
$ git clone --branch 4.0.1 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:$ git checkout 4.0.1
Adds layered collect-then-merge flow for settings, with weak dependencies, disabled status in symcache, and force-enable override for settings conflicts.
Introduces a dynamic block API for the fuzzy storage worker, supporting custom response codes (403 for ratelimits, 503 for bans) and exposing ratelimit_whitelist checks to Lua.
Cortex Analytics adds detection logic for macOS process communication, AWS export events, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. errors, and Okta admin actions.
Adds 15 new detector variations across High, Medium, Low, and Informational severities, including 'Uncommon macOS process communication to a rare external host' (High) and 'An unsigned process created scheduled task and performed an injection' (Medium)
Adds detection for Invalid SAML errors with the [Informational] Invalid SAML Detected detector
Adds 'Possible an unsigned installer created scheduled task and performed an injection' (Low) variation under the existing scheduling/detection category
Adds 'Discovery of accounts with pre-authentication disabled via LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory.' (Low) detector for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. enumeration monitoring
Cortex Cloud Runtime Security adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. AWS/Azure v6/v5, HITRUSTHITRUSTA US-based certification framework for healthcare data security, maintained by the HITRUST Alliance, that maps controls from HIPAA, NIST, and ISO into a single assessable standard tools can target to prove compliance. 11.7, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Agentic, DPDP 2023 standards and updates SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./endpoint/network scanning rules.
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 1 to the Standards Catalog for AWS security hygiene.
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 2 for advanced defense-in-depth configurations in AWS environments.
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 1 for specialized Azure configurations handling highly sensitive data.
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 2 to harmonize global security and privacy standards into a unified assessment model.
Adds HITRUST CSF 11.7.0 as a baseline security roadmap for Azure tenants focusing on identity and access controls.
+18 moreshow less
Adds OWASP Top 10 for Agentic Applications 2026 to manage risks associated with autonomous AI agents and goal manipulation.
Adds The Digital Personal Data Protection Act 2023 to establish a legal framework for digital privacy and user consent rights.
Appends new rules to CIS GitLab Benchmark 1.0.1 to detect insecure repository settings and access controls.
Appends new rules to CIS GitHub Benchmark 1.0.0 to provide automated oversight of GitHub security settings and supply chain protection.
Introduces network scanning rules for CIS Microsoft Windows Server 2022 Benchmark v3.0.0 to audit OS-level configuration drifts.
Introduces network scanning rules for CIS Microsoft Windows 11 Enterprise Benchmark v.4.0.0 to audit endpoint security baselines.
Introduces workload security rules mapped to Cloud Security Assurance Program (CSAP) - IaaS for South Korean public sector services.
Introduces attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management controls for cloud-native applications in CSA Cloud Controls Matrix (CCM) 4.0.12.
Introduces application-layer security rules to the HITRUST framework in version 11.2.0.
Appends new AI governance and management rules to ISO/IEC 42001:2023.
Introduces workload security rules mapped to Korea – Information Security Management System (ISMS) for private sector compliance.
Appends data security and privacy control rules to NIST SP 800-53 Rev. 5.
Appends rules to NIST AI 600-1 for managing generative AI risks and safety.
Introduces attack surface management and CI/CD-specific rules in OWASP TOP 10 CI/CD Security Risks 2025.
Appends rules to OWASP Top 10 for LLM Applications 2025 to defend against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and training data poisoning.
Introduces application-layer security rules to the Secure Controls Framework (SCF) 2024.2.
Introduces SaaS-specific security configuration rules for SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. benchmarks.
23 details in Everything
└──▷ BREAKING ON UPGRADE
!Rule CUSTOMIZE: Non-corporate accounts have access to Google Cloud Platform (GCP) resources. is removed from all applicable compliance standards.
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Applications and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. AWS/Azure benchmarks to Compliance Catalog
Adds OWASP Top 10 for Agentic Applications 2026 standard to the Standards Catalog
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 1 to the Standards Catalog
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 2 to the Standards Catalog
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 1 to the Standards Catalog
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 2 to the Standards Catalog
Cortex XSIAM adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Applications, DPDP Act standards and expanded CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. rules.
Adds OWASP Top 10 for Agentic Applications 2026 standard to the Compliance Catalog
Adds The Digital Personal Data Protection Act 2023 to the Standards Catalog
Adds 'CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 1' and Level 2 support
Adds 'CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 1' and Level 2 support
Adds HITRUST CSF 11.7.0 standard to the Compliance Catalog
+16 moreshow less
Updates CIS Critical Security Controls v8 with SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.-specific security configuration rules
Appends new rules for GitLab repository management in CIS GitLab Benchmark 1.0.1
Appends new rules for GitHub developer workflows in CIS GitHub Benchmark 1.0.0
Introduces network scanning rules for CIS Microsoft Windows Server 2022 Benchmark v3.0.0
Introduces network scanning rules for CIS Microsoft Windows 11 Enterprise Benchmark v.4.0.0
Introduces workload security rules mapped to CSAP-IaaS standard
Adds attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management controls for CSA Cloud Controls Matrix (CCM) 4.0.12
Appends new application-layer security rules to HITRUSTHITRUSTA US-based certification framework for healthcare data security, maintained by the HITRUST Alliance, that maps controls from HIPAA, NIST, and ISO into a single assessable standard tools can target to prove compliance.CSFCSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 11.2.0
Appends new AI governance rules to ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001:2023
Introduces workload security rules for Korea – Information Security Management System (ISMS)
Appends data security and privacy controls to NIST SP 800-53 Rev. 5
Appends generative AI risk management rules to NIST AI 600-1
Adds attack surface management and CI/CD rules for OWASP TOP 10 CI/CD Security Risks 2025
Appends LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. vulnerability defenses to OWASP Top 10 for LLM Applications 2025
Introduces application-layer security rules for Secure Controls Framework (SCF) 2024.2
Adds SaaS-specific configuration rules for SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. benchmarks
21 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes 'CUSTOMIZE: Non-corporate accounts have access to Google Cloud Platform (GCP) resources' rule from all applicable compliance standards.
Cortex Cloud adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Apps, DPDP Act 2023 standards and new detection rules for GitLab, GitHub, Windows 11 and more.
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 1 to the Standards Catalog for foundational AWS security hygiene.
Adds CIS Amazon Web Services Foundations Benchmark v6.0.0 - Level 2 to cover advanced defense-in-depth configurations for sensitive workloads.
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 1 to provide specialized, high-security configurations for Azure environments handling sensitive data.
Adds CIS Microsoft Azure Foundations Benchmark - v5.0.0 Level 2 to harmonize global security and privacy standards into a unified assessment model.
Adds HITRUST CSF 11.7.0 as a baseline security roadmap for Azure tenants focusing on identity and access controls.
+18 moreshow less
Adds OWASP Top 10 for Agentic Applications 2026 as a dedicated security framework for managing risks of autonomous AI agents.
Adds The Digital Personal Data Protection Act 2023 to establish a legal framework for digital privacy and user consent rights.
Updates CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Critical Security Controls v8 with first SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.-specific security configuration rules to identify SaaS misconfigurations.
Appends new rules to CIS GitLab Benchmark 1.0.1 to detect insecure repository settings and protect CI/CD workflows.
Appends new rules to CIS GitHub Benchmark 1.0.0 to provide automated oversight of GitHub security settings and supply chain protection.
Introduces network scanning rules for CIS Microsoft Windows Server 2022 Benchmark v3.0.0 to audit OS-level configuration drifts.
Introduces network scanning rules for CIS Microsoft Windows 11 Enterprise Benchmark v.4.0.0 to audit security baselines for endpoints.
Adds workload security rules mapped to Cloud Security Assurance Program (CSAP) - IaaS for South Korean public sector mandates.
Introduces attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management controls for cloud-native applications in CSA Cloud Controls Matrix (CCM) 4.0.12.
Adds application-layer security rules in HITRUST CSF 11.2.0 to strengthen data protection within the HITRUSTHITRUSTA US-based certification framework for healthcare data security, maintained by the HITRUST Alliance, that maps controls from HIPAA, NIST, and ISO into a single assessable standard tools can target to prove compliance. framework.
Appends AI governance and risk management rules to ISO/IEC 42001:2023 for international safety alignment.
Adds workload security rules mapped to Korea – Information Security Management System (ISMS) for private sector compliance.
Appends data security and privacy controls to NIST SP 800-53 Rev. 5 for robust audit trails.
Appends generative AI risk management rules to NIST AI 600-1 to mitigate transparency and bias risks.
Adds attack surface management and pipeline security rules in OWASP TOP 10 CI/CD Security Risks 2025.
Appends LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. vulnerability defenses to OWASP Top 10 for LLM Applications 2025 covering prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and data poisoning.
Adds application-layer security rules in Secure Controls Framework (SCF) 2024.2 to reduce software-based regulatory failures.
Introduces SaaS-specific security configuration rules in SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. for real-time compliance visibility.
Prisma Cloud adds AWS SDK for Java 2.x support, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. compartment OCID for agentless scanning, nginx_unit detection, and FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. env var config
Adds FIPS_ENABLED environment variable to twistlock.cfg to toggle FIPS mode without UI interaction.
Adds OCI compartment support in Agentless Scanning via the OCID field (in addition to compartment name) for programmatic configuration.
Adds vulnerability detection for nginx_unit application server binaries.
Adds Package URLPackage URLA standardized string format for uniquely identifying software packages across ecosystems (npm, PyPI, Maven, etc.), letting cyber tools reference and correlate dependency data without ecosystem-specific logic. (PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously.) augmentation for binary packages to improve software composition analysissoftware composition analysisSoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. accuracy.
Adds configurable cap on the number of clusters stored per image in MongoDB to prevent excessive document growth.
+3 moreshow less
Adds block login capability via feature flag for access key logins in the CWP UI.
Supports CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. AWS Foundations Benchmark v6.0.0 (Levels 1 and 2).
Supports CIS Microsoft Azure Foundations Benchmark v5.0.0 (Levels 1 and 2).
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The retention period for audit events stored in the Prisma Cloud database changed from 120 days to 30 days, impacting features relying on historical audit data such as Audit Trail & Investigation and Alert Details older than 30 days.
!AutoFocus Anomaly policies are removed due to AutoFocus End of Life, affecting traffic-based anomaly detection and any custom policies using AutoFocus attributes.
Vectra AI v9.10 adds native detections for Sliver/CobaltStrike/Meterpreter/Mythic/DNScat, DeepSeek generative AI, LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. recon, SSH on reserved ports, and NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent./DHCP metadata ex
Native detection coverage for Sliver Command & Control activity leveraging LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code./AI modeling for beaconing patterns
New Hidden Tunnel detection for stealthy, non-beaconing C2 over previously uncovered protocols
Native detections for Cobalt Strike, Meterpreter, Mythic C2, and DNScat activity replacing Suricata engine reliance
New rule to detect SSH on other reserved ports
Detection of DeepSeek generative AI application usage within network traffic
+3 moreshow less
Expanded LDAP reconnaissance detection covering Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. enumeration, delegation, and trust relationships
NTLM authentication metadata expansion surfacing server challenge and protocol version in Stream and Recall
Expanded DHCP telemetry including vendor/user class identifiers, client architecture, router info, TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery./WPAD/MUD URLs
Vectra AI v9.10 adds Multi-SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. support and SSH personal key management
└──▷ HOW TO FIND IT
Switch the platform interface to dark mode via user profile settings
📍In the UI, go to My Profile › Theme and select Dark Mode
Adds multi-SAML identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. support via the UI and API
Introduces My Profile > Theme toggle for Dark Mode public preview
Vectra AI v9.10 makes CrowdStrike EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. process correlation GA for all customers to streamline investigations.
Sophos Firewall 22.0 MR1 adds NDRNDRNetwork detection and response, analyzing network activity to find threats and support investigation. It focuses on communication patterns and suspicious traffic across systems. Active Threat Intelligence, XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. Linux sensor integration, Config Studio V2, and macOS SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination.VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. via Sophos Connect 2.0.
└──▷ HOW TO FIND IT
When you need to compare a pre-change and post-change firewall configuration to identify exactly what was added, removed, or modified during a maintenance window.
📍Open Sophos Firewall Config Studio V2 in your browser, upload two configuration exports, and select Compare configurations to see added, removed, modified, and unchanged items side by side.
Integrates Taegis NDR (iSensor) with high-signal detection patterns curated by Sophos Labs to identify potentially malicious traffic and active adversaries, logging events to the Data Lake for XDR, MDRMDRManaged detection and response, an outsourced service that monitors security signals, investigates threats and helps respond to incidents. It combines specialist analysts with detection tools., and SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysis.
Expands NDR Essentials support to all Sophos Firewall platforms: XGS Series, virtual firewalls, software firewalls, and cloud deployments.
Integrates with the Sophos XDR Linux sensor for real-time security monitoring, detecting unauthorized configuration changes, rule exports, malicious program execution attempts, and file tampering across all Sophos Firewall devices including XGS desktop and virtual appliances.
Blocks TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. and UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. connections resulting from interactive and reverse shell access, enabling early detection of command-and-control activity and covert shell access.
Logs the Sophos Central user identity in audit logs for configuration changes made through Sophos Central, supporting NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against. and similar compliance requirements — visible in the Sophos Firewall log viewer and Sophos Central logs and reports.
+3 moreshow less
Enables remote access SSL VPN connections on macOS devices using Sophos Connect 2.0.
Supports updating the MTU and MSS values of Wi-Fi interfaces using existing CLI commands.
Introduces Sophos Firewall Config Studio V2, a browser-based tool for viewing, comparing, and editing firewall configurations — with a unified configuration report, side-by-side comparison showing added/removed/modified/unchanged items, and a configuration editor that exports in API or curl formats.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The legacy remote access IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications. VPN has been retired; firewalls containing this legacy configuration cannot be upgraded to SFOS 22.0 MR1 and later.
!SFOS 22.0 GA and later versions do not support XG and SG Series hardware appliances.
Aviatrix CoPilot 4.32.0 adds Transparent Inspection for AWS TGW, Power Cycle types, Manual Gateway power controls, vCPU metrics API, vCPU alerting, Proxy ID support, explicit
Adds Transparent Inspection configuration for inter-VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. traffic in AWS Transit GatewayTransit GatewayAn AWS-managed network hub that connects VPCs and on-premises networks through a single gateway, replacing complex peering meshes and giving cyber tools a central point to route or inspect cross-network traffic. (TGW) networks
Adds Power cycle type to Auto Cycles, allowing scheduled power up/down with per-cycle start and end times
Adds Power Up and Power Down actions on the Gateways page for manual gateway lifecycle management
Exposes per-gateway vCPU utilization metrics through the Metrics API for external monitoring integration
Enables alerting configuration based on per-gateway vCPU utilization thresholds
+4 moreshow less
Adds Proxy ID configuration support for routed external connections to enable third-party VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. interoperability
Enhances DCF UI with improved management controls for URL-based WebGroups, Encryption Certificates, TLS Profiles, and Custom CA imports
Adds explicit Azure route table selection for Single IP SNAT on spoke gateways, replacing implicit detection with direct assignment via Edit VPC/VNet Route Tables control
Supports selective egress NAT for Bump-in-the-Wire (BITW) deployments in AWS, automatically determining internet-bound traffic for NAT while preserving east-west flows
New etype 0x8905 decoding, DIS radio stream analysis, and ENIP LLDP support
Adds etype 0x8905 as Cisco TTAG by default in KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. decryption logic
Adds radio stream analysis support for the DIS protocol dissector
Adds LLDP management support to the ENIP dissector
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes the 3DES-only libnettle implementation from Kerberos support
2 more releases in this issue
· 2026-04-05 → 2026-04-26
Adds Lua Debugger with editing and stepping capabilities; supports SM2/SM3/SM4 in RTPS security.
└──▷ USE IT
Automate capture file operations using sharkd with required comment syntax.
shell
curl -X POST http://localhost:9997 -d 'action=setcomment;comment=My new note'
Lua Debugger: Adds Step Over, Step In, Step Out, editable script editor, and unsaved indicator to the Qt GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. under Tools menu
RTPS dissector: adds recognition of SM2, SM3, and SM4 algorithms in security attributes
sharkd protocol: requires mandatory comment parameter for setcomment action; implements skeleton for cf_close
3 details in Everything
└──▷ BREAKING ON UPGRADE
!sharkd setcomment action now mandates a comment parameter, which will fail calls providing an empty or missing argument.
Netcap v0.9.0 adds a protobuf wire-format stream decoder, YARA and Magika support, device enrichment, and additional protocol coverage.
└──▷ GET THIS VERSION
$ git clone --branch v0.9.0 https://github.com/dreadl0ck/netcap.git
# already have the repo? check out this version:$ git checkout v0.9.0
Adds generic protobuf wire format stream decoder for dissecting protobuf-encoded traffic.
Adds YARA and Magika support for file-type identification and malware detection in captured traffic.
Adds device enrichment with discovery fields and refined credential harvesters.
Supports additional protocols for broader network traffic classification.
Adds software report generation.
+1 moreshow less
Provides pre-built binaries with Deep Packet Inspection (nDPInDPIAn open-source deep packet inspection library maintained by ntop that classifies network traffic by protocol and application, giving cyber tools visibility into what flows are actually carrying beyond port numbers./libprotoident) for macOS ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation. and Linux AMD64 (glibc and musl), plus DPI-free builds including Windows AMD64.
Malcolm v26.04.1 adds Strelka scanner controls, nested archive scanning, and new env-var config keys in pipeline.env and zeek.env.
└──▷ GET THIS VERSION
$ git clone --branch v26.04.1 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.04.1
└──▷ USE IT
Enable only specific Strelka scanners (e.g., YARA and PE analysis) to reduce noise or resource use from unwanted file-scan modules.
ini
# In ./config/pipeline.env
STRELKA_SCANNERS=ScanYara,ScanPe
Allow Strelka to scan files nested inside ZIP archives captured in network traffic (opt in by setting the flag to false).
ini
# In ./config/zeek.env
ZEEK_DISABLE_SPICY_ZIP=false
Revert Arkime PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. processing to libpcap mode if the faster scheme-based processing causes compatibility issues with your capture files.
ini
# In ./config/arkime.env
ARKIME_PCAP_LIBPCAP=true
Adds STRELKA_SCANNERS to pipeline.env to enable or disable individual Strelka file scanners without rebuilding.
Adds ZEEK_DISABLE_SPICY_ZIP to zeek.env (default true) to control nested file scanning from ZIP archives via Strelka.
Adds ARKIME_PCAP_LIBPCAP to arkime.env (default false) to revert Arkime PCAP file processing to older libpcap mode instead of the faster scheme processing.
Indexes selected Strelka result fields into Malcolm's data store for querying file-scan outcomes alongside network traffic.
Supports nested file scanning (e.g., files inside ZIP archives) handled by Strelka.
+1 moreshow less
Updates Zeek to v8.1.1 and Arkime to v6.1.1.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!FILEBEAT_SCANNER_FINGERPRINT_LENGTH default in filescan.env changed from 1024 to 512; installations relying on the old default fingerprint length will behave differently after upgrade.
!redis.env has been renamed to valkey.env and its variables have been renamed accordingly; any custom configuration or scripts referencing redis.env variable names will break until updated. Run ./scripts/status before running ./scripts/configure or ./scripts/start to migrate settings automatically via ./config/env-var-actions.yml.
1 more release in this issue
· 2026-04-07 → 2026-04-13
Malcolm v26.04.0 adds Strelka scanner toggle, nested archive file scanning, and new env-var controls in pipeline and zeek configs.
└──▷ GET THIS VERSION
$ git clone --branch v26.04.0 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.04.0
└──▷ USE IT
Disable a specific Strelka scanner (e.g., the YARA scanner) without touching pipeline code, by setting STRELKA_SCANNERS in pipeline.env.
ini
STRELKA_SCANNERS=ScanPe,ScanHash,ScanEntropy
Enable nested ZIP archive scanning by Strelka — set ZEEK_DISABLE_SPICY_ZIP to false so Zeek's Spicy ZIP parser hands off archive contents for deep file inspection.
ini
ZEEK_DISABLE_SPICY_ZIP=false
Revert Arkime to legacy libpcap PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. processing mode when the faster scheme processing causes compatibility issues in your environment.
ini
ARKIME_PCAP_LIBPCAP=true
Adds STRELKA_SCANNERS to pipeline.env to enable or disable individual Strelka scanners without editing pipeline code.
Adds ZEEK_DISABLE_SPICY_ZIP to zeek.env (default true) to control nested file scanning from ZIP archives via Strelka.
Adds ARKIME_PCAP_LIBPCAP to arkime.env (default false) to revert Arkime PCAP processing to legacy libpcap mode instead of the faster scheme processing.
Indexes selected Strelka result fields into the Malcolm data store for querying file-scan metadata alongside network traffic.
Changes default of FILEBEAT_SCANNER_FINGERPRINT_LENGTH in filescan.env from 1024 to 512.
Updates Zeek to v8.1.1, bringing Zeek 8.1 capabilities into Malcolm's traffic analysis pipeline.
Updates ICSNPP Hart IP parser for improved ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments./OT protocol analysis.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!redis.env is renamed to valkey.env and its variables are renamed accordingly — any references to the old filename or variable names in scripts or external config will break.
!The default of FILEBEAT_SCANNER_FINGERPRINT_LENGTH in filescan.env changes from 1024 to 512, which may alter file fingerprinting behavior for existing file-scanning pipelines.
Snort3 3.12.2.0 adds Lua API for device-info events, two-way SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. cache, connection ID tracking, and SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates.-boundary HTTP publishing.
└──▷ GET THIS VERSION
$ git clone --branch 3.12.2.0 https://github.com/snort3/snort3.git
# already have the repo? check out this version:$ git checkout 3.12.2.0
New AppID Lua API for publishing device-info events to the DataBus.
Adds two-way SSL cache data support in AppID for richer TLS session tracking.
Adds a connection ID field to flow objects, settable by external modules.
Extractor now prints connection ID as UID whenever one is available.
HTTP Inspect publishes events on Server-Sent Events (SSE) boundaries.
+4 moreshow less
File API generates advance log entries for files with unknown verdicts.
File API caches file_adv_pub_id for more efficient DataBus publishes.
Packet Tracer displays ICMP type and zero destination port in trace output.
Adds initial decompression fuzzers and build support in the decompress module.
OpenSandbox Egress adds file-based log rotation with configurable size and retention defaults
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.10 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.10
14 more releases in this issue
· 2026-04-02 → 2026-04-29
Adds lumberjack-backed log rotation for file outputs with configurable size, retention, and backup limits
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.14 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.14
└──▷ TRY IT
Ensure Chrome and Node.js trust intercepted TLS certificates in transparent egress mode.
Adds lumberjack-backed log rotation to file outputs (auto-enabled; 100MB max size, 30-day retention, 10 backups, no compression)
Forwards SIGTERM to the entrypoint process for graceful shutdown
Imports mitmproxy CA into NSS DB and sets NODE_EXTRA_CA_CERTS for TLS trust behind interception
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The default execd listener is now tcp4 only, dropping dual-stack IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. binding.
OpenSandbox v0.1.12 adds Windows Sandbox support, GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. limits for Docker/K8s, and propagates opensandbox.extensions. annotations to Pods.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.12 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.12
allowed_host_paths now defaults to deny-all, requiring explicit configuration like allowed_host_paths = ["/"] for legacy host mount access
Adds Windows Sandbox support via dockur/windows image and Kubernetes BatchSandbox workload compatibility
Propagates Pod annotations prefixed with opensandbox.extensions. to Kubernetes Pods with prefix opensandbox.io/extensions.
Honors GPU resource limits in Docker (DeviceRequest) and translates them to nvidia.com/gpu extended resources for Kubernetes scheduling
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The default value of [storage].allowed_host_paths has changed from allowing all host path mounts to denying all, which may break existing sandbox setups that rely on implicit host mount access.
!The server now requires explicit startup confirmation when the api_key configuration is unset.
OpenSandbox execd v1.0.13 adds OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. metrics and Windows distribution artifacts
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.13
Adds basic runtime OTEL metrics to execd
Pre-builds execd.exe and install.bat in the release image for Windows distribution
OpenSandbox v0.1.11 enables auto-creation of PVC and Docker volumes during sandbox creation
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.11 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.11
Adds automatic creation of PersistentVolumeClaim (PVC) and Docker volumes when a new sandbox is created
Changes log level configuration key from [server].log_level to [log].level
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The configuration key [server].log_level is renamed to [log].level; existing configs using the old key will fail to set the log level.
OpenSandbox v1.0.8 adds beta mitmproxy support and auto-reloading of deny.always/allow.always
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.8
Adds [beta] built-in mitmproxy support
Automatically reloads deny.always and allow.always rules every minute using mtime/size checks
OpenSandbox execd v1.0.12 adds OPENSANDBOX_EGRESS_MITMPROXY_TRANSPARENT env var to trust MITM proxies.
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.12 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.12
OpenSandbox releases the first Go SDK with oapi-codegen for Lifecycle, Execd, and Egress APIs
└──▷ GET THIS VERSION
$ git clone --branch sdks/sandbox/go/v1.0.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout sdks/sandbox/go/v1.0.0
Adds Go SDK to provide generated clients for Lifecycle, Execd, and Egress APIs via oapi-codegen
Adds configurable probe names for upstream health checks and graceful shutdown with network namespace rollback.
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.7 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.7
Adds probe.name config key to define the name used in active upstream health probes
Enables graceful shutdown that rolls back all network namespaces when the egress connection closes
OpenSandbox v0.1.10 adds file logging for server/access logs, uvicorn keep-alive timeout config, and optional platform constraints in sandbox lifecycle spec.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.10 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.10
Adds file_logger configuration to write both server logs and access logs to files
Exposes timeout_keep_alive setting from uvicorn in configuration
Introduces optional platform object in the sandbox lifecycle spec for scheduling/runtime constraints
OpenSandbox egress adds OPENSANDBOX_EGRESS_DNS_UPSTREAM env var to override DNS resolvers
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.6
└──▷ USE IT
Force the egress proxy to use specific external DNS servers like Google's or Cloudflare's.
shell
docker run -e OPENSANDBOX_EGRESS_DNS_UPSTREAM=8.8.8.8,1.1.1.1 opensandbox/egress:v1.0.6
Add OPENSANDBOX_EGRESS_DNS_UPSTREAM environment variable to specify custom DNS resolver addresses instead of relying solely on /etc/resolv.conf
OpenSandbox v1.0.6 adds the runInSession method to its SDK, enhancing sandbox pool functions.
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.6
Adds the runInSession method to execute code within an existing session context.
OpenSandbox Ingress adds Kubernetes system tests for the ingress-gateway component.
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.6
OpenSandbox v1.0.10 adds websocket PTY support and EXECD_CLONE3_COMPAT fallback
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.10 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.10
Adds EXECD_CLONE3_COMPAT environment variable to enable seccomp-based clone3 fallback
OpenSandbox v1.0.5 adds fixed allow/deny list files and OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. metrics
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.5
Tetragon is an eBPF-based security observability and runtime enforcement tool for Kubernetes and cloud-native environments.
Tetragon v1.7.0 adds CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine.-in-BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. evaluation, fentry sensor, env-var retrieval, host selectors, and broad uprobe enhancements.
└──▷ GET THIS VERSION
$ git clone --branch v1.7.0 https://github.com/cilium/tetragon.git
# already have the repo? check out this version:$ git checkout v1.7.0
└──▷ TRY IT
Use tetra explain to generate standalone CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. documentation for TracingPolicy fields without a running cluster.
$ tetra explain tracingpolicy
Adds support for retrieving environment variables in kprobe/uprobe events.
New matchParentBinaries selector for filtering events based on ancestor process binaries.
Evaluates CEL expressions directly in BPF (celbpf), reducing userspace overhead for policy enforcement.
New fentry sensor for attaching to kernel function entry points via fentry BPF programs.
Adds spec.hostSelector support in TracingPolicies to target specific nodes.
+23 moreshow less
Adds uretprobe support for uprobes, enabling return, returnArg, and args.returnCopy in uprobe policies.
Supports argument matching selectors (matchArgs, etc.) in uprobe policies.
Adds resolve: support for uprobes, enabling pointer dereference in userspace probe arguments.
Supports register-based data retrieval for kprobe and uprobe on supported architectures.
Adds current_task resolve support for uprobes.
Supports preloading user strings in uprobe/usdt probes.
Enables sleep-able USDTUSDTUserspace Statically Defined Tracing probes, a mechanism originating in Solaris and adopted by Linux, that lets a program embed named hook points so debuggers and tracers can attach at runtime with near-zero overhead when idle. argument reading.
Adds uprobe register override support on arm64.
Adds tetra explain command for standalone CRD documentation.
Adds node_name label to Tetragon metrics.
New tetragon_debug_events_total metric for non-critical BPF event tracking.
New consolidated tetragon_generic_kprobe_merge_total metric with status, curr_type, prev_type, curr_fn, and prev_fn labels.
Adds regex support for namespace filtering in export allow/deny lists.
Adds substring operators for selector matching.
Adds monitor-only mode for uprobes and stats.
Adds a separate configuration option for enabling ancestors in ProcessLoader events.
Adds process cache and execve map dumps to tetra bugtool generated tarballs.
Supports (u)int8int8Eight-bit integers used to represent quantized model values. They save memory compared with floating-point formats and can speed up inference on supported hardware./16 types in selectors.
Adds tetragon_process_cache_early_deletions_total metric for process cache GC observability.
Uses tracefs instead of debugfs for BPF program attachment.
New retprobes events cache size configuration option.
Adds USDT argument reading support on arm64.
Adds gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. info reporting for agent diagnostics.
28 details in Everything
└──▷ BREAKING ON UPGRADE
!The default server-address of the agent changes from localhost:54321 to /var/run/tetragon/tetragon.sock; update all third-party programs that connect to the agent.
!The legacy stacktrace-tree API has been removed: the GetStackTraceTree gRPC method, tetra stacktrace-tree CLI command, and related types (GetStackTraceTreeRequest, GetStackTraceTreeResponse, stack.proto) no longer exist; use TracingPolicy with kernelStackTrace and userStackTrace in the Post action instead.
!The already-deprecated EnableTracingPolicy and DisableTracingPolicy gRPC methods now return an error when used; set enable-deprecated-tracingpolicy-grpc to restore old behavior until the next release removes them entirely.
!Metrics tetragon_generic_kprobe_merge_errors_total and tetragon_generic_kprobe_merge_ok_total have been removed and replaced by tetragon_generic_kprobe_merge_total with a status label; update any dashboards or alerts referencing the old metric names.
CubeSandbox v0.1.1 adds a base container image, QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. dev environment, CubeProxy HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. port forwarding, and a cubebox destroy CLI tool.
└──▷ GET THIS VERSION
$ git clone --branch v0.1.1 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.1.1
Adds CubeSandbox base image and entrypoint script for containerized sandbox deployments.
Adds QEMU-based development environment for OpenCloudOS 9, enabling local sandbox development without cloud infrastructure.
Adds CubeProxy HTTP/HTTPS port forwarding with a dev-sidecar example for proxying traffic into sandboxes.
Adds cubebox destroy CLI tool to the cubemaster for tearing down sandbox instances.
Adds China mainland CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. mirror support for faster binary downloads in mainland China regions.
+2 moreshow less
Adds dev-environment scripts for syncing binaries, collecting logs, and managing autostart.
Adds OpenAI Agents SDK integration examples demonstrating CubeSandbox as a code execution backend.
Inspektor Gadget v0.51.0 adds CUDACUDANVIDIA's platform and programming interface for running general computation on its GPUs. Nearly every AI training and inference stack is built on it first. profiling/memory gadgets, CFS throttle detection, and a new logs operator.
└──▷ GET THIS VERSION
$ git clone --branch v0.51.0 https://github.com/inspektor-gadget/inspektor-gadget.git
# already have the repo? check out this version:$ git checkout v0.51.0
New profile_cuda gadget for profiling CUDA GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. workloads with eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic..
New top_cpu_throttle gadget to detect and surface CFS bandwidth throttling per container/process.
New CUDA memory metrics gadget for tracking GPU memory usage.
Introduces a logs operator enabling log-stream integration within the gadget pipeline.
Helm chart now supports configuring hostPIDhostPIDA Kubernetes pod setting that lets containers in the pod share the host node's process ID namespace, giving them visibility into — and potential control over — all processes running on the node. and hostNetwork for the DaemonSetDaemonSetA Kubernetes object that ensures one instance of a specified pod runs on every node in a cluster, making it the standard way cyber tools deploy agents that must observe all cluster traffic or host activity..
+1 moreshow less
Network policy generator operator (op/generate_networkpolicy) now uses podSelector for Services, improving generated policy accuracy.
Grype v0.111.0 adds db diff for v6, CSAFCSAFAn OASIS open standard for distributing machine-readable vulnerability advisories, letting cyber tools automate ingestion and correlation of vendor-issued security disclosures at scale.VEXVEXA machine-readable statement from a vendor saying whether a CVE in a component actually affects their product. It is how a scanner is told to stop flagging a vulnerability that is not reachable. support, Hummingbird matching, and in-memory SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. processing.
└──▷ GET THIS VERSION
$ git clone --branch v0.111.0 https://github.com/anchore/grype.git
# already have the repo? check out this version:$ git checkout v0.111.0
Adds db diff command support for v6 vulnerability databases.
Adds CSAF VEX transformer for applying CSAF-format VEX documents to scan results.
Adds vulnerability matching on Hummingbird packages.
Adds ProvideFromReader for in-memory SBOM processing without requiring a file on disk.
Adds curated mapping of known CPEs to Grype package specifiers for improved match accuracy.
+1 moreshow less
HTML report template now includes Grype version and vulnerability DB version.
April 23 20263 releases · 2026-04-12 → 2026-04-23Stable
Minimus adds an AI migration prompt for generating custom plans to replace Dockerfile base/runtime images.
└──▷ HOW TO FIND IT
Generate a migration plan for your current Dockerfile using the new AI prompt in your local agent.
📍Provide the April 23 2026 release notes section titled "Migration Prompt New Feature Generate a custom migration plan with AI" to your local AI agent along with your existing Dockerfile content.
Adds a new complex prompt designed for use with local AI agents (e.g., Cursor, Cline, Claude Desktop) to generate a custom migration plan tailored to your existing Dockerfile.
1 detail in Everything
2 more releases in this issue
· 2026-04-12 → 2026-04-23
Minimus adds image digest-triggered actions, Cassandra-H Helm charts, and SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. license links
Adds image-digest-changed action to trigger workflows on any new container image digest.
Adds cassandra-hardened image compliant with the CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Apache Cassandra Benchmark via new Helm chart support.
Minimus Creator adds certificate details view and EOL action triggers
└──▷ HOW TO FIND IT
Audit certificate metadata and validity status directly within the Creator UI before deployment.
📍In Creator, navigate to a certificate entry in the File Management space to view CN, SHA-256, and validity labels.
Proactively manage deprecated images by triggering notifications or external workflows upon EOL status.
📍Configure Minimus Actions to use the new near EOL and EOL triggers to send Slack/email alerts or webhook events.
View certificate details (CN, org, validity, SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.) in Creator and File Management space
Trigger Minimus Actions when image lines reach near or full EOL via new EOL action triggers
Trivy is a comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM in containers, Kubernetes, code repositories, and clouds
Trivy 0.70.0 adds pylock.toml parsing, ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. K8s misconf support, and server version in JSON output
└──▷ GET THIS VERSION
$ git clone --branch 0.70.0 https://github.com/aquasecurity/trivy.git
# already have the repo? check out this version:$ git checkout 0.70.0
Add pylock.toml (PEP 751PEP 751A draft Python packaging standard that defines a lock file format for recording exact dependency versions, giving cyber tools a reproducible, machine-readable way to pin their dependency trees.) parser for Python dependency resolution
Detect Go version from ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. symbol table for binaries built with -trimpath
Include server version info in JSON output for client/server mode
Support azurerm_network_interface_security_group_association in misconf scanning
Adapt misconf rules for ARM-based Kubernetes clusters
Adds VFIOVFIOA Linux kernel framework that lets userspace programs take direct ownership of a PCI device, bypassing kernel drivers, giving cyber tools low-latency, isolated hardware access without running in kernel space. cold-plug support for CLH, sector size config for block devices, and QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. ppc64le support in runtime-rs.
└──▷ GET THIS VERSION
$ git clone --branch 3.29.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.29.0
clh: Add VFIO device cold-plug support to the Cloud Hypervisor runtime
runtime: allow specifying logical/physical sector size for block devices via configuration
runtime-rs: add QEMU support for ppc64le architecture
runtime-rs: Enhance TDXTDXIntel Trust Domain Extensions, a CPU feature that creates hardware-isolated virtual machines whose memory is encrypted and inaccessible even to the hypervisor, letting tools run workloads in a confidential computing environment. in qemu with new capabilities
agent: add mkfs_opts parameter to cdh_secure_mount function
5 details in Everything
└──▷ BREAKING ON UPGRADE
!dbg_monitor_socket config key is renamed (change in name affects existing configs)
!runtime-rs now denies configuration of unknown fields, rejecting previously silent invalid keys
Prowler 5.25 adds a GitHub Action, zizmor-powered CI/CD workflow scanning, IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup.SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output, Gmail checks, and more.
└──▷ GET THIS VERSION
$ git clone --branch 5.25.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.25.0
└──▷ USE IT
Drop Prowler into a GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflow to scan IaC, upload findings as SARIF annotations to Code Scanning, and push results to Prowler Cloud.
Produce a SARIF report from an IaC scan for direct import into GitHub Code Scanning or any SARIF-compatible tool.
$ prowler iac --output-formats sarif
New official GitHub Action prowler-cloud/prowler@5.25 runs Prowler scans in CI, with optional SARIF upload to GitHub Code Scanning and push to Prowler Cloud.
New GitHub Actions service uses zizmor v1.24.1 to statically scan .github/workflows/*.yml for OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 CI/CD risks including script injection, overly permissive GITHUB_TOKEN, untrusted checkouts, and dangerous triggers.
IaC provider now emits SARIF via --output-formats sarif, enabling IaC misconfigurations to appear as annotations in GitHub Security → Code Scanning on PRs.
New --repo-list-file CLI flag for the GitHub provider loads repositories from a file instead of enumerating them inline.
New Google Workspace Gmail service with 9 CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-aligned checks covering mail delegation, link scanning, POP/IMAP access, auto-forwarding, and more.
+9 moreshow less
New AWS check secretsmanager_has_restrictive_resource_policy evaluates resource-based policies on Secrets Manager secrets.
New GitHub check repository_default_branch_dismisses_stale_reviews flags repos whose default branch protection does not dismiss stale PR approvals on new commits (CIS 1.1.4).
CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. PDF reports are now downloadable via GET /scans/{id}/cis/{name}/ for the latest CIS variant per provider.
Tenant owners can now expel users from their organizations via the UI or DELETE /tenants/{tenant_pk}/memberships/{id}, immediately blacklisting outstanding refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API..
Redesigned compliance page with client-side framework search, compact scan selector, and enhanced compliance cards.
Resources page gains batch-applied filters, syntax-highlighted metadata JSON, and a View Resource button from finding detail drawers.
Mutelist table adds name and reason search plus visual count badges on finding targets.
Imported OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. scans in Prowler Cloud now generate the same downloadable report artifacts as CLI scans.
Overview endpoints (/overviews/resource-groups, /overviews/categories, /overviews/attack-surfaces) now reflect newly muted findings immediately without waiting for the next scan.
14 details in Everything
4 more releases in this issue
· 2026-04-13 → 2026-04-28
Prowler 5.24.4 adds Sentry performance tracing for the API and makes the Neo4j connection acquisition timeout configurable.
└──▷ GET THIS VERSION
$ git clone --branch 5.24.4 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.24.4
└──▷ TRY IT
Enable Sentry performance tracing for the API at a higher sample rate to capture more transaction traces in production.
$ DJANGO_SENTRY_TRACES_SAMPLE_RATE=0.1 <your API start command>
Raise the Neo4j connection acquisition timeout if your Attack Paths graph queries are timing out after the new 15 s default.
$ NEO4J_CONN_ACQUISITION_TIMEOUT=60 <your API start command>
New DJANGO_SENTRY_TRACES_SAMPLE_RATE env var enables Sentry performance tracing for the Prowler API (default 0.02).
Neo4j connection_acquisition_timeout for Attack Paths is now configurable via the NEO4J_CONN_ACQUISITION_TIMEOUT env var.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The Neo4j connection_acquisition_timeout default is lowered from 120 s to 15 s; environments relying on slow Neo4j connections may see acquisition timeouts that previously succeeded.
New bedrock_full_access_policy_attached check flags IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. principals with AmazonBedrockFullAccess or wildcard Bedrock permissions.
New iam_role_access_not_stale_to_bedrock and iam_user_access_not_stale_to_bedrock checks detect dormant GenAI access that hasn't been used recently.
New bedrock_vpc_endpoints_configured check verifies Bedrock traffic stays on private VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. endpoints instead of the public internet.
New iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks catch wildcard aws-marketplace:Subscribe grants that could turn an IAM misconfiguration into a billing incident.
New entra_conditional_access_policy_all_apps_all_users check ensures at least one Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. policy targets every app and every user.
+10 moreshow less
New entra_conditional_access_policy_mfa_enforced_for_guest_users check verifies MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. is enforced for guest and external users.
New entra_conditional_access_policy_block_unknown_device_platforms check flags CA policies that allow access from unknown device platforms.
New entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced check ensures sign-in frequency is enforced for non-corporate devices.
New entra_conditional_access_policy_directory_sync_account_excluded check validates that the directory sync account is excluded from restrictive CA policies.
New intune_device_compliance_policy_unassigned_devices_not_compliant_by_default check flags tenants where unassigned devices are marked compliant by default.
New exchange_organization_delicensing_resiliency_enabled check verifies mailbox data remains accessible for 30 days after license removal.
Adds --excluded-region CLI flag, PROWLER_AWS_DISALLOWED_REGIONS environment variable, and aws.disallowed_regions config key to exclude specific AWS regions from scans.
Redesigned resource detail side drawer consolidates metadata, findings, and event timeline in a single panel for in-context investigation.
Syntax highlighting for remediation code blocks in the finding groups drawer with provider-aware auto-detection of Shell, HCL, YAML, and Bicep.
Attack Paths View Finding now opens the finding drawer inline over the graph, preserving graph zoom, selection, and filter state.
Prowler 5.23.0 adds Vercel provider (26 checks), grouped findings view, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. resource events timeline, 25+ new checks across AWS/GCP/M365/Google Workspace, and new CLI resource-group flags.
└──▷ GET THIS VERSION
$ git clone --branch 5.23.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.23.0
└──▷ TRY IT
Filter an OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. scan to specific regions (including regions outside the tenancy home region) using the new multi-region support.
New Vercel provider: connect via API token to audit deployments, domains, projects, and team settings with 26 built-in security checks.
Findings Grouped View in the UI collapses repeated misconfigurations into one row per check with an X-of-Y impacted resources counter, inline resource expansion, bulk-mute, and an Other Findings For This Resource tab in the detail drawer.
MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. gains a resource events tool that returns a who/what/when CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. timeline (actor, event name, source IP, user agent, request/response payloads) for any AWS resource, queryable from any MCP client.
New --resource-group and --list-resource-groups CLI flags to filter checks by resource group across all providers.
Attack Paths custom query editor now includes syntax highlighting and line numbering for openCypher queries.
+15 moreshow less
New Google Workspace compliance frameworks: CISA SCuBA Baselines and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Foundations Benchmark v1.3.0.
OCI multi-region filtering via --region now covers filestorage, blockstorage, kms, compute, and identity services including regions outside the tenancy home region.
OCI Mutelist support now passes tenancy_id to is_finding_muted.
New AWS check glue_etl_jobs_no_secrets_in_arguments detects plaintext secrets in Glue ETL job arguments.
New AWS checks awslambda_function_no_dead_letter_queue, awslambda_function_using_cross_account_layers, and awslambda_function_env_vars_not_encrypted_with_cmk.
New AWS check stepfunctions_statemachine_no_secrets_in_definition detects secrets in Step Functions state machine definitions.
New AWS check ec2_securitygroup_allow_ingress_from_internet_to_any_port_from_ip using ipaddress.is_global for accurate public IP detection.
Updated AWS check cloudfront_distributions_logging_enabled now detects Standard Logging v2 via CloudWatch Log Delivery.
Two new GCP checks for Gemini API coverage: apikeys_api_restricted_with_gemini_api and gemini_api_disabled.
15 new Google Workspace checks spanning directory, calendar, drive, and docs services.
Four new Microsoft 365 Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. Policy checks for Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. aligned with Microsoft security baselines.
--list-checks and --list-checks-json now include the threat-detection category.
Sensitive CLI flag values (tokens, keys, passwords) are now redacted in HTML output Parameters used field.
Harden-Runner enabled across GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflows to monitor and restrict outbound network traffic during CI runs.
New VALKEY_SCHEME, VALKEY_USERNAME, and VALKEY_PASSWORD environment variables to configure Celery broker TLS/auth for Valkey/ElastiCache.
20 details in Everything
└──▷ BREAKING ON UPGRADE
!Minimum Python version is now 3.10; installations running Python 3.9 will no longer work.
Policy Sentry 0.16.0 adds Deny effect support and tightens dependent-action resource scoping in generated IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. policies.
└──▷ GET THIS VERSION
$ git clone --branch 0.16.0 https://github.com/salesforce/policy_sentry.git
# already have the repo? check out this version:$ git checkout 0.16.0
Supports Deny effect in generated IAM policies, enabling least-privilege deny statements alongside allow rules.
Scopes dependent actions to matching resource types instead of wildcard, producing tighter least-privilege policies automatically.
Updates the IAM actions database with the latest AWS service definitions.
cloud-nuke v0.49.0 adds RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed. ResourceShares, Amazon MQ, and RDS cluster snapshots plus sweeping tag-filtering across 20+ resource types.
└──▷ GET THIS VERSION
$ git clone --branch v0.49.0 https://github.com/gruntwork-io/cloud-nuke.git
# already have the repo? check out this version:$ git checkout v0.49.0
Adds support for nuking AWS RAMAWS RAMAWS Resource Access Manager is an Amazon service that lets an AWS account share resources such as subnets or Transit Gateways with other accounts or AWS Organizations, removing the need to duplicate infrastructure across account boundaries. ResourceShares (resource-shares resource type).
Adds support for nuking Amazon MQ broker resources.
Adds support for nuking RDS cluster snapshots (rds-cluster-snapshot resource type).
Adds SetConfigProvider for programmatic AWS config injection when using cloud-nuke as a library.
Adds tag filtering support for Backup Vault resources.
+7 moreshow less
Adds tag filtering support for RDS and ElastiCache resources.
Adds tag filtering support for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware., ELB, and VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Lattice resources.
Adds tag filtering support for CloudWatch, EventBridgeEventBridgeAWS's managed event bus service that routes events between cloud services, SaaS apps, and custom code using rules and targets, letting tools react to state changes without polling or managing message infrastructure., and DynamoDB resources.
Adds tag filtering support for Lambda, Kinesis, SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure., SQS, and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. resources.
Adds tag filtering support for ACM, CloudFront, SageMaker, and miscellaneous resources.
Adds tag filtering support for CodeDeploy applications.
New PLERION-AWS-1013 check detects privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. techniques in IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. policies with detailed context and highlighting.
Adds PLERION-AWS-1013 check to identify IAM roles, users, groups, and managed policies allowing privilege escalation actions.
Provides contextual view breaking down escalation technique, escalated permissions, and required vs. helpful actions for the attack.
Displays a new policy tab that highlights offending lines within each policy.
IsMalicious is a threat intelligence platform that checks IPs, domains, URLs, emails, phones and crypto wallets against indexed threat indicators.
isMalicious expands CVE database to 50K+ entries with daily ingestion from NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. and CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal.
CVE database expanded to 50K+ entries
1 detail in Everything
5 more releases in this issue
· 2026-04-01 → 2026-04-20
Launched programmatic CVE intelligence pages at /cve/<CVE-ID> with CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it., EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching., KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use., SSVCSSVCA decision-support framework for vulnerability prioritization, maintained by CISA and Carnegie Mellon's CERT/CC, that uses stakeholder-specific decision trees to guide patch and remediation timing instead of relying on numeric scores alone., and IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself.
Launch of the isMalicious ransomware victim tracker service.
New service offering real-time tracking of ransomware group activity, including victims, timelines, and infrastructure IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself..
Explore the threat intelligence glossary via the web interface to clarify terminology for vulnerability management and API security.
📍Navigate to https://ismalicious.com/glossary in your browser
Adds a searchable glossary of 50+ security terms at /glossary for threat intelligence, malware, network security, vulnerability management, and API security concepts.
Publishes a methodology breakdown page at /methodology detailing the 6-factor confidence scoring engine, 17 source reliability weights, data freshness guarantees, and false positive handling.
Cloudmersive Cloud DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. AI API v1-11-0 adds audio and voice redaction capabilities.
OpenCTI 7.260430.0 adds STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.0 SMO support in the converter and XTM One integration for AI Insights
└──▷ GET THIS VERSION
$ git clone --branch 7.260430.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260430.0
STIX 2.0 converter now supports Security Missing Object (SMO) types
Integrates XTM One agent selection and summary generation into AI Insights
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The pysigma library has replaced the deprecated sigmatools library for SIGMA rule validation
6 more releases in this issue
· 2026-04-01 → 2026-04-30
OpenCTI adds STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.0 SRO conversion support and improves security coverage result display
└──▷ GET THIS VERSION
$ git clone --branch 7.260428.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260428.0
Adds SRO handling in the STIX 2.0 converter for serialized reference objects
Removes feature flag to permanently enable enhanced security coverage results on the result page
OpenCTI 7.260422.0 adds STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.0 conversion for indicators/infrastructures and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth with JWKSJWKSA JSON Web Key Set, a published collection of cryptographic keys. Applications use it to find the public key needed to verify a token's signature.
└──▷ GET THIS VERSION
$ git clone --branch 7.260422.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260422.0
STIX 2.0 converter now handles Infrastructures and Indicators entities, enabling bidirectional conversion workflows for these data types.
Platform now supports JWT authentication using trusted issuers and a JWKS endpoint for verifying external identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
Fintel feature coverage is expanded to other entity types beyond the original scope.
Playbook list now displays creator and date columns; adds option to hide listen knowledge playbooks from manual enrollment
└──▷ GET THIS VERSION
$ git clone --branch 7.260417.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260417.0
Playbook list table now shows creator, creation date, and modification date columns for better tracking of playbook provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..
OpenCTI 7.260416.0 adds part-of Intrusion Set relationships, communicates_with IPv4 relationships, Locations in STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.0 converter, and improved public data sharing.
└──▷ GET THIS VERSION
$ git clone --branch 7.260416.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260416.0
OpenCTI 7.260409.0 adds @ff GraphQL directive, belongs to relationship type, and TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services. polling frequency setting
└──▷ GET THIS VERSION
$ git clone --branch 7.260409.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260409.0
└──▷ TRY IT
Restrict a GraphQL query result to users who have a specific feature flag enabled in their profile.
$ query {
incidents @ff(featureFlag: "NEW_INTEL_VIEW") {
id
name
}
}
Create a relationship linking an Infrastructure entity to its owning Organization.
OpenCTI 7.260401.0 adds STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.0 technique conversion and draft filtering
└──▷ GET THIS VERSION
$ git clone --branch 7.260401.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260401.0
Adds STIX 2.0 converter: Techniques to convert MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. techniques into the STIX 2.0 format
Adds filters on drafts accessible via the frontend/backend API
Feedly Threat Intelligence adds Ask AI to Cyberattack Agent and a new TI landing page.
Enables CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. analysts to run Ask AI queries directly within the Cyberattack Agent workflow to assess threat actors and map activity.
Launches a redesigned Feedly Threat Intelligence landing page at feedly.com/threat-intelligence for overviewing platform capabilities.
2 details in Everything
3 more releases in this issue
· 2026-04-02 → 2026-04-29
Add Go To navigation, custom Slack/Teams alert summaries, newsletter translation, and new IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself./CVE search features
Adds Go To (Cmd+K) for instant navigation to resources by actor, malware, vulnerability, or IoC
Enables custom summaries in Feedly’s integrations for Slack and Microsoft Teams to control focus, format, and detail level of article notifications
Adds Translate articles to English button in Newsletter Design for one-click automatic translation
Enables searching by victim state in the Cyber Attack agent
Adds EUVDEUVDThe European Vulnerability Database, operated by ENISA, is the EU's official registry of disclosed software vulnerabilities, giving cyber tools a regional authoritative source for CVE-equivalent advisories. sections to CVE Insights Card
Feedly Threat Intelligence adds US state filtering to Cyber Attack Agent API, combined V&A queries, and expands coverage with 7 new actors.
Adds US state filtering capability to the Cyber Attack Agent API for geographically specific threat intelligence queries
Extends EUVDEUVDThe European Vulnerability Database, operated by ENISA, is the EU's official registry of disclosed software vulnerabilities, giving cyber tools a regional authoritative source for CVE-equivalent advisories. classification support to CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. search operations within the Threat Intelligence service
Introduces 7 new threat actor profiles to the Feedly Threat Intelligence database
Enables Ask AI to process combined Vulnerability and Cyber Attack Agent queries in a single interaction
Improves 55 existing TTPTTPTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. detections, including enhanced coverage for T1204.004 (ClickFix) tactics
MISP v2.5.37 ships a ground-up Event Templating system, a new suricata attribute type, STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. defaults, new workflow triggers, and expanded galaxy/taxonomy coverage.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.37 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.37
└──▷ TRY IT
Migrate all legacy templates to the new event-template format in bulk after upgrading.
$ app/Console/cake Admin migrateOldTemplates
Enable the Overmind UI development preview to access the new migrated views including Event Templates and Correlation Graph.
📍In the MISP web UI, go to Administration › Server Settings & Maintenance › Simple Settings, find the theme selector, and set it to Overmind.
Introduces a completely redesigned Event Templating system with JSON-schema-backed templates (event-template-v1), a drag-to-reorder builder UI, inline validation via /event_templates/validate_definition, and REST import/export with full object-template dependency tracking.
New misp-event-templates submodule provides a managed library catalogue with ten starter templates (e.g. ransomware-incident, credential-exposure, supply-chain-compromise) and first-touch auto-update.
Migration helper app/Console/cake Admin migrateOldTemplates converts legacy templates to the new event-template format, including handling for complex File / CnC objects.
Adds a dedicated suricata attribute type alongside snort, enabling first-class modeling and validation of Suricata IDSIDSAn intrusion detection system, monitoring traffic or host activity for suspicious behavior and producing alerts. Detection alone does not necessarily block the activity. rules, with corresponding support in PyMISP.
STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2 export now defaults to version 2.1 and adds a new library entry point for exporting MISP Object collections to STIX 2.x, switching from MISP's custom cti-python-stix2 fork to the upstream library bundled with misp-stix.
+9 moreshow less
Ad-hoc workflows now support passing in environment variables and capturing module-returned data under _env.misp_module_results for use by downstream nodes.
New analyst-data:after-save workflow trigger added.
New search performance diagnostics tool to profile attribute search behaviour on large datasets; performance shell updated to use approximations for usability on very large instances.
Overmind UI gains full coverage for Tags, Tag Collections, Taxonomies, Templates, Object Templates, Object Relationships, REST Client, Automation & Export Views, Correlation Graph (rewritten in vanilla JS), and Event Templates.
New cloud-sovereignty and ai-computer-assisted taxonomies added to misp-taxonomies.
New misp-galaxy galaxies added: SPARTA, MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. Fraud Framework, VERIS framework, RMM tools, operating systems, IT-equipment types, software vendors, and taxonomy of fraud.
New misp-warninglists script to fetch Windows binary hashes and generate a warninglist from them.
LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. plugin gains support for memberOf queries.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!The custom cti-python-stix2 submodule has been removed; MISP now uses the upstream stix2 library bundled with misp-stix, and STIX 2 export defaults to version 2.1 instead of 2.0.
!All menu entry points to the legacy /templates/* controller have been removed from the global menu, navbar helper, and side menus on both default and Overmind themes; the controller and view stack will be fully removed in 2.5.38.
1 more release in this issue
· 2026-04-03 → 2026-04-29
Launch the interactive terminal REPL to browse and manage MISP data without a browser.
$ app/Console/cake CLI 1
Adds interactive geolocation map rendering for objects with geographic coordinates directly in the event view, enabled via Plugin.Geolocation_enabled.
Adds accuracy-radius visualisation for geolocation objects, displayed as a toggleable circle on the map.
Adds native GeoJSON rendering, enabling complex geographic shapes and features to be displayed on maps.
Adds GPX track support so UAV and other GPS Exchange Format tracking data can be plotted as tracks on the map.
Adds configurable tile server support via Plugin.Geolocation_url (defaults to https://geo.circl.lu).
+6 moreshow less
Adds a new interactive CLI REPL shell (app/Console/cake CLI <user_id>) for browsing and managing events, attributes, objects, tags, users, organisations, and roles from the terminal.
Adds Warninglists, Noticelists, Collections, Correlation Exclusions, Allowedlists, and Regexp modules to the Overmind Bootstrap 5 UI.
Adds full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. support with modal-based add/edit/delete for Collections and Collection Elements in the Overmind UI.
Adds global action buttons for the attribute index in the Overmind UI.
Adds sticky table headers across all Overmind index views.
Adds support for environment variable overrides for configuration values in the MISP installer.
openSquat 2.3.0 adds Premium API and Feed modes with new CLI flags
--premium flag enables Premium Feed mode downloading paid NRDNRDNewly Registered Domain — a domain name created within a recent window (often 30–90 days); cyber tools flag these because attackers frequently register fresh domains to evade reputation-based blocklists. feed from api.opensquat.com/v1/feeds/nrd-lite
--api flag enables Premium API mode querying the openSquat lookalike REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. per keyword instead of local Levenshtein
New CLI flags --api-key, --api-fuzziness, --api-history-days, and --api-max-results control API behavior
--api-rate-limit N flag caps outbound request rate across all workers in Premium API mode
4 details in Everything
└──▷ BREAKING ON UPGRADE
!JSON consumers of v2.2.3 / v2.2.4 see each entry in a keyword's domains array change from a bare string to an object {"domain": "..."}
New OpenObserve data provider enables querying OpenObserve instances directly via mp.QueryProvider('OpenObserve'), with support for time-range parameters, result limits, timezone config, and custom timeouts.
Microsoft Sentinel connections now support certificate-based authentication as an alternative to client secrets, improving security for automated pipelines and service accounts.
Cybereason driver gains automatic HTTP 429 rate-limit retry with backoff, additional query parameters (page_size, timeout, retry_on_error), improved timeout handling, and better error reporting via MsticpyDataQueryError.
Cybereason driver's data flattening (_flatten_simple_values, _flatten_element_values) reworked for more reliable output, with extra fields now mapped to the result DataFrame.
The ThreatIntelIndicators BYOTI provider now supports both old and new table schemas, enabling seamless operation across Sentinel workspaces with either schema version.
+3 moreshow less
Configurable TI confidence threshold — now a class constant that can be overridden rather than a hardcoded value.
New KQLKQLKusto Query Language, Microsoft's read-only query language for Azure Data Explorer and Microsoft Sentinel, used by cyber tools to filter, aggregate, and correlate large volumes of log and telemetry data quickly. timespan conversion utilities for converting KQL timespan strings to Python timedelta objects using azure-kusto-data's parse_timedelta.
Python 3.13 is now fully supported.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!Python 3.8 and 3.9 are no longer supported; supported versions are 3.10, 3.11, 3.12, and 3.13.
!The msrestazure package is removed; code catching msrestazure.azure_exceptions.CloudError must be updated to catch azure.core.exceptions.HttpResponseError instead.
!The kql install extra (pip install msticpy[kql]) is removed; KqlmagicCustom is no longer a supported dependency.
!The aiagents install extra (pip install msticpy[aiagents]) is removed; the autogen-agentchat integration is no longer included.
!The sql2kql extra now requires mo-sql-parsing>=11,<12 (previously >=8,<9); environments using sql_to_kql must be updated.
ThreatStream adds search_filter to Threat Model Search API and five new OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. feeds.
Adds the search_filter attribute to the Threat Model Search API endpoint to allow applying saved search filters when querying threat model entities
Enables activation of Anomali Curated RSS, PhishDestroy, PhishHunt.io - Active Phishing Blocklist, ShadowWhisperer Malware Blocklist, and TweetFeed open-source feeds in the APP Store
ThreatStream adds new indicator types, EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. vulnerability scoring, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login page, and Takedown service enhancements.
Adds mal_port, compromised_port, and compromised_password indicator types to ThreatStream
Introduces SSO-integrated beta login page for direct sign-in without navigating to IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. first
Adds EPSS Score, EPSS Percentile fields and EPSS-based filtering options to Vulnerability basic search filters
ThreatStream OnPrem 6.0 adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. API support, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. JSON export, Anomali Copilot, new indicator types, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. audit log integration.
Adds OAuth 2.0 API Credentials for ThreatStream OnPrem authentication
Adds JSON format export option for Security coverage of MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. profiles
Adds support for benign_domain, phish_file_name, fraud_file_name, mal_wildcard_domain, mal_wildcard_url, sus_wildcard_domain, and sus_wildcard_url indicator types in ThreatStream OnPrem
Enables integration of ThreatStream OnPrem audit logs with SIEM systems
Adds Anomali Copilot chat interface leveraging agentic search techniques to the ThreatStream OnPrem UI
Adds Resource Tags for Dashboards to create and manage an organization-wide tag catalog for locating and organizing dashboards by applying multiple tags with appropriate user permissions
Adds the shannon_entropy information theory function to the calc operator to calculate an entropy score for any string field and identify unusual patterns in event data
Adds addtotals=true option to the timechart operator to view a summary across all groups and time periods based on event counts
Echosec Optimize now available in Locate view for automated location-based keyword suggestions via UI.
└──▷ HOW TO FIND IT
Use this to quickly build a context-rich search for an unfamiliar area by letting AI suggest key local landmarks.
📍In the Locate view location search bar, click Optimize › click the location pin icon › select landmarks › click Apply › click Optimize now › select suggested locations › click Search.
Capture ground-level conversations by layering specific business names and streets into a real-time query.
📍In the Locate view location search bar, click Optimize › click the location pin icon › select businesses › click Apply › click Optimize now › manually add or check suggested locations in the bottom bar › click Search.
Adds AI-powered Optimize feature to the Locate view's location search bar that automatically suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches
Enables specification of suggestion types (e.g., schools, landmarks) via a new location pin icon dropdown in the Optimize workflow
Adds Optimize now button to generate and select location suggestions within the current geographic area before searching
Databricks Supervisor Agent now allows custom MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers and custom agents as subagents.
34 more releases in this issue
· 2026-04-01 → 2026-04-30
MLflow trace storage in Unity Catalog enters Public Preview with OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. format support
Databricks ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. GA adds session-identity-based row filters and column masks on Unity Catalog securables
ABAC is now generally available, allowing governed tags to dynamically enforce row filter and column mask policies on tables, materialized views, and streaming tables
Row filters and column masks applied via ABAC are now evaluated using the session user's identity rather than the view or function owner's identity
2 details in Everything
└──▷ BREAKING ON UPGRADE
!ABAC policies attached to securables now use the session user's identity for evaluation instead of the view or function owner's identity.
Spark Declarative Pipelines update history retention extended from 30 to 60 days in UI and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.
Mosaic AI Model Serving now supports Anthropic Claude Opus 4.7 as a Databricks-hosted model with API access
Adds Anthropic Claude Opus 4.7 to Mosaic AI Model Serving as a new Databricks-hosted foundation model
Enables pay-per-token access via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves. for the new model
Supports reasoning and vision query capabilities through the Foundation Model APIs
Lakeflow Connect Public Preview adds query-based connectors for Oracle, Teradata, SQL Server, MySQL, MariaDB, PostgreSQL and Lakehouse FederationLakehouse FederationA data architecture pattern that lets a single query engine read from multiple external data sources—databases, data lakes, warehouses—without moving or copying the data, reducing pipeline complexity for tools that need broad data access. sources.
Adds query-based connectors in Lakeflow Connect (Public Preview) to ingest data by querying source directly via a cursor column without CDC or ingestion gateway
Supports Oracle, Teradata, SQL Server, MySQL, MariaDB, PostgreSQL, and all Lakehouse Federation data sources using foreign catalog ingestion
AI Gateway (Beta) now governs MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers with access control, usage monitoring, and audit capabilities.
Expands AI Gateway's scope to include MCP servers alongside LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. endpoints and coding agents
Beta: Unity Catalog REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. now supports create and write access for external Delta clients.
The Unity REST API now accepts create and write requests from external Delta clients such as Apache Spark.
Full read, write, and create operations are supported for Unity Catalog external Delta tables.
Beta support for creating and writing to Unity Catalog managed Delta tables requires enabling catalog-managed commits.
New integration enabling Lovable-hosted apps to query Databricks lakehouse data via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and OAuth.
Adds support for connecting Lovable-hosted apps to Databricks workspaces using the REST API and OAuth machine-to-machine authentication.
Column-level SAP governance tags from BDC sync into Unity Catalog for ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status..
Supports syncing fieldSemantics, isPotentiallyPersonal, and isPotentiallySensitive tags from SAP Business Data Cloud to Unity Catalog columns.
Enables using synced SAP governance tags in Unity Catalog attribute-based access controlattribute-based access controlAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. (ABAC) policies.
Adds cascade field to the Unity Catalog Pipelines DELETE API to control dependent object removal
Pipelines DELETE API now accepts a cascade query parameter; default is true, setting it to false retains associated materialized views, streaming tables, and views as inactive after pipeline deletion.
Databricks GA release for scoped personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. allows locking down token permissions to specific API operations.
Automatic sync of SAP BDC semantic metadata (comments, keys, tags) into Unity Catalog for ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. policies
Databricks Marketplace provider console adds a step-by-step wizard for creating listings.
The Marketplace provider console now features a step-by-step listing creation wizard that guides you through setting up general information, data assets, attributes, and details on separate pages.
Customer-managed keys (CMK) for Unity Catalog are generally available.
Adds support for using cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. keys to encrypt data in Unity Catalog catalogs backed by default storage.
Exabeam April 2026 adds MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. integration, device entity search, and new detection rules.
Adds Exabeam Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) Server to connect external AI tools for discovering and acting on Exabeam data
Adds Device Entity option in Basic search mode and Entities tab in Search results to view device details without leaving the application
Adds Trigger on first match and Group by Field options for Sequence correlation rules
Adds Require supporting reason toggle in Threat Center settings to make case closed reasons mandatory
Adds new pre-built analytics rules including Fact-EL-UnauthorizedWindowsRDP, Prof-AI-TI-UTN-FN, and NumCP-VPNlnF-EC-O-U-1Day
+2 moreshow less
Adds PingOne Identity Cloud Collector for early access to ingest user activity logs
Adds Workday Cloud Collector for early access to ingest user activity logs from the Workday API
April 19, 20263 releases · 2026-04-07 → 2026-04-19Stable
Google SecOps adds support for ingesting and normalizing logs from over 30 new sources.
Adds log collection support for Collect Group-IB Threat Intelligence logs
Adds log collection support for Collect Microsoft System Center Endpoint Protection (SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention.) logs
Adds log collection support for Collect Nagios XI logs
Adds log collection support for Collect Neo4j Aura logs
Adds log collection support for Collect Nucleus Security - Nucleus Unified Vulnerability Management logs
+28 moreshow less
Adds log collection support for Collect Nyansa Voyance / VMware Edge Network Intelligence logs
Adds log collection support for Collect Okera Dynamic Access Platform (ODAP) audit logs
Adds log collection support for Collect Okta Advanced Server Access logs
Adds log collection support for Collect Onapsis Platform logs
Adds log collection support for Collect One Identity TPAM logs
Adds log collection support for Collect Oracle Cloud Infrastructure - Oracle Cloud Guard logs
Adds log collection support for Collect Cisco Identity Intelligence logs
Adds log collection support for Collect Microsoft SharePoint (Office 365) logs
Adds log collection support for Collect NetApp Console (formerly BlueXP) audit logs
Adds log collection support for Collect Netwrix Auditor logs
Adds log collection support for Collect Nokia VitalQIP DDI logs
Adds log collection support for Collect OpenAI Audit logs
Adds log collection support for Collect OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. Netflow Receiver logs
Adds log collection support for Collect Oracle Fusion Cloud Applications logs
Adds log collection support for Collect Oracle NetSuite - NetSuite Applications Suite logs
Adds log collection support for Collect Oracle NetSuite logs
Adds log collection support for Collect Vectra Alerts logs
Adds log collection support for Collect Vectra XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. logs
Adds log collection support for Collect Windows Event logs (XML format)
Adds log collection support for Collect WinSCP logs
Adds log collection support for Collect Workday User Activity logs
Adds log collection support for Collect WP Engine logs
Adds log collection support for Collect XAMS by Xiting logs
Adds log collection support for Collect Yubico OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. logs
Adds log collection support for Collect Zero Networks logs
Adds log collection support for Collect Zix Email Encryption logs
Adds log collection support for Collect Zscaler NSS Feeds for Alerts logs
Adds log collection support for Collect ZyXEL ZyWALL logs
33 details in Everything
2 more releases in this issue
· 2026-04-07 → 2026-04-19
Emerging Threats Center GA adds campaign filtering, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. matrix visualization, and enhanced Entity context panel.
Adds expanded campaign filtering in the Emerging Threats feed to filter by associated malware, tools, and threat actors.
Adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. matrix visualization in the Associated Rules panel to evaluate detection rule coverage for specific tactics, techniques, and procedures (TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind.).
Adds enhanced Entity context panel to investigate indicators of compromiseindicators of compromiseAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. (IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself.) by viewing point-in-time state and related cases.
Adds GTI-associated IoC category filtering to filter by Files, URLs, Domains, and IPs.
Google SecOps adds Health Hub for data source monitoring and query editor auto-suggestions
└──▷ HOW TO FIND IT
Use context-aware suggestions to build queries faster.
📍In the Search query editor, start typing a field name to see auto-suggestions
Adds Health Hub as the central location to monitor status and health of configured data sources, including ingestion volumes, parsing volumes, and failed sources.
Sekoia Endpoint Agent 1.9.1 adds native ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation. support and process hash computation for richer telemetry.
Linux ARM64 Support runs the agent natively on ARM64 architectures, expanding deployment coverage to ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware.-based servers and cloud instances.
Process Hash Computation computes hashes for running processes, enriching endpoint telemetry for detection and investigation workflows.
Sekoia.io Feeds Redesigned: New scoping, formatting, and dissemination controls for threat intelligence
Adds guided, step-by-step feed creation flow with inline explanations at every stage
Adds source-level filtering to scope feeds to Sekoia sources, external sources, or any combination
Adds ability to exclude expired and revoked IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. from feeds
Adds configurable sorting (newest-to-oldest or oldest-to-newest) across all formats
Adds in-product documentation embedded in the Disseminate modal explaining Feed ID, API URL, and TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services. URL
+1 moreshow less
Adds one-click feed duplication with independent dissemination links per copy
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Sector and geography filters have been removed from feed creation
RunReveal adds Kubernetes Helm deployment, auto-triage investigations, 8 new data sources, and per-source TTLs
Adds Kubernetes single-tenant deployments via Helm for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. and GovCloud in self-hosted environments
Introduces IOC lookup tool to allow the investigation agent to pull external context during triage
Supports new data sources including Kandji, Wiz Sensor Detections, Google Workspace Alerts, Netskope, Airlock, Tenable, Prisma Access, and Salesforce EventLogFile
Adds per-source TTLs to set custom retention periods on a per-source basis for storage management
Enables auto-open investigations from detections to automatically create and open an investigation without manual triage
+11 moreshow less
Incorporates detection notes into agent context so analyst-written notes inform automated analysis
Adds Investigation classification to mark investigations as true positive, false positive, or inconclusive
Tracks MTTD / MTTR metrics on the investigations overview page
Allows exporting investigation chat history as markdown for evidence and documentation
Provides a SQL query toggle in chat to view and audit agent queries with syntax highlighting
Introduces an Agent task killswitch for admins to clear agent task queues during noisy detections
Adds configurable key prefixes for S3, R2, and GCS destinations, including per-pipeline-step overrides
Adds GeoIPGeoIPA database that maps IP addresses to geographic locations; tools use it to attribute traffic or alerts to countries, cities, or ASNs without querying external services. enrichment on audit events automatically
Adds Bootstrap API key for pre-login provisioning of on-prem deployments via API key
Makes Email and object storage optional dependencies for self-hosted deployment
Allows Microsoft OAuth URL override for configurable login URLs in sovereign cloud deployments
Add JSONAllPaths skip index type with bloom_filter, tokenbf_v1, ngrambf_v1, and text (inverted) index types for MergeTree JSON columns
Implement new commit_order projection index to reorganize data in insertion order
Introduce QUERIES_PER_NORMALIZED_HASH quota resource type with NORMALIZED_QUERY_HASH key type to protect public services from abuse
Allow NATURAL JOIN syntax to automatically match on columns sharing the same name and deduplicate those columns
+2 moreshow less
Add watch command to clickhouse-keeper-client for get, exists, and ls commands
Add lsr (getChildrenRecursive) request to ClickHouse Keeper and lsr command to clickhouse-keeper-client
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The IN operator now uses exact value semantics for Bool type: only 0 and 1 values in the set match Bool values; previously, numeric values greater than 255 were incorrectly clamped to true
!Disallows using SELECT as a bareword identifier in a WITH expression list element
!Reduced default http_max_fields from 1,000,000 to 1,000 and http_max_field_name_size from 128 KB to 4 KB; added http_max_request_header_size and http_headers_read_timeout settings
!The H3 library has been updated to v4, which improves the precision of length, area, and other metric calculations
Trend Vision One adds file integrity monitoring for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. containers
Enables File integrity monitoring for Amazon ECS under Cloud Security → Container Security → Configuration → Object Management to monitor critical files and directories within containerized environments.
1 detail in Everything
26 more releases in this issue
· 2026-04-01 → 2026-04-30
Adds File Integrity Monitoring for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. in Container Protection v2.2.0
Enables file integrity monitoring capabilities for workloads running on Amazon ECS.
Admission control for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. clusters now available in Trend Vision One Container Security.
Trend Vision One integrates with ManageEngine ServiceDesk Plus Cloud via new connector for bi-directional case sync and automated ticketing.
Adds TrendAI Vision One integration with ManageEngine ServiceDesk Plus Cloud for bi-directional synchronization of case status, priority, and other case data.
Enables Automated ticket creation in ServiceDesk Plus Cloud when a case is opened in TrendAI Vision One, automatically populating relevant fields.
Introduces Configurable field mappings to map TrendAI Vision One case statuses and priorities to their ServiceDesk Plus Cloud equivalents.
Cloud Email Gateway Protection adds Message delivery history chart on Dashboards page for monitoring queue and failures
Enables business continuity alerts in TrendAI Vision One™ Notifications app that trigger when message count reaches a specified threshold for consecutive data points
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. On-prem Gateway 1.0.82 adds warning action to AI Secure Access rules and detailed detection logs.
Added warning action support in AI Secure Access rules for access control
Enhanced the detection log with the matched item in the allow/deny list
Trend Vision One SG FW 3.0.28 adds ThingsBoard IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. client support and upgrades base OS to Rocky Linux 9.7
Adds ThingsBoard IoT client support for ZA site connectivity
Upgrades the base OS to Rocky Linux 9.7 with updated Microk8s
Trend Vision One adds Kubernetes audit log collection for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves., GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure., AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations., and self-managed clusters.
Adds support for collecting Kubernetes API server audit logs in Container Security
Enables RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and activity monitoring using collected Kubernetes audit logs
Agentless Vulnerability & Threat Detection adds support for AWS China regions cn-north-1 and cn-northwest-1
Cloud Detections for VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Flow Logs now cover cn-north-1 and cn-northwest-1.
Helm Chart 3.3.6 adds scout.hostNetwork config and fixes signature verification in FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. images
Admission control webhook updated to remove unneeded DELETE operations, improving performance.
This update expands automated tagging capabilities in Trend Vision One by allowing rules to target specific operating system versions, not just the OS family. The existing Operating system condition has been renamed to Operating system and version to reflect this expanded scope, enabling more granular endpoint management through partial or full version string matching.
└──▷ BREAKING ON UPGRADE
!The previously existing Operating system condition in automated tagging rules is renamed to Operating system and version.
New AWS Security Reference Architecture frameworks and updated CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. v7.0 support for Cloud Risk Management
└──▷ HOW TO FIND IT
Navigate to the compliance section in the Vision One console to view new and updated frameworks.
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. Gateway v1.0.81 adds configurable log masking for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./AI inspection data
Added support for configurable settings to unmask/mask the matched DLP/AI content inspection data in log
Zero Trust Secure Access Internet Access now supports the Azure Austria East region, allowing users in that location to configure service FQDNs accordingly.
Limit Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. sync to specific groups via Workflow > Third-Party Integrations settings
Adds Group List configuration option under Workflow and Automation → Third-Party Integrations to filter which Microsoft Entra ID users are synchronized to Trend Vision One.
TrendAI Vision One Endpoint Security Deepfake detector now supports macOS agents
Enables Deepfake detector on macOS endpoints (macOS 13+ on ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation.) via agent version 202604 or later
Adds configuration option for Deepfake detector in XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. for Endpoints (EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device.) Endpoint Security Policies
New Unwanted Access Rules API to manage ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. rules by country or VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. via CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. endpoints.
Exposes an Unwanted Access Rules API with endpoints to list, create, update, and delete unwanted access rules
Allows scoping rules to account, organization, or specific identity levels
Supports expected/unauthorized determinations for identity access attempts
Enables optional scheduled rule activation using starts_at and expires_at fields
4 details in Everything
9 more releases in this issue
· 2026-04-06 → 2026-04-29
Huntress introduces EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device./ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. Correlations, linking endpoint detections to cloud identities in Incident Reports for instant remediation.
EDR/ITDR Correlations now appear directly inside the EDR Incident Report alongside endpoint findings
Huntress releases an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server to connect platform data to AI assistants
Huntress now provides an MCP server for read-only access to account information including agents, organizations, signals, incident reports, escalations, remediations, invoices, reports, and external recon.
Enables seamless integration of Huntress Platform data into AI assistants like Claude and ChatGPT via the new MCP server.
New GET /v1/identities API endpoint for listing Managed ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. and ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. identities
Huntress Managed EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. now detects when Windows blocks a known vulnerable driver (BYOVD tradecraft)
Huntress SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. now ingests Google Workspace logs for Managed ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. at no extra cost
Redesigned macOS Configuration Wizard with MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies.-focused view and consolidated setup flow
Redesigned Huntress Configuration Wizard on macOS for a clearer, faster setup flow.
Shows all required setup steps (system extension approval, Full Disk Access, network filter) on a single scrollable page.
Adds a dedicated MDM-managed endpoint view in the Configuration Wizard showing a summary of pending steps.
Huntress adds ability to exclude Google Workspace student OUs from ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. billing and detections via account manager.
Adds Student OU Exclusions for Google Workspace environments, allowing partners to exclude student organizational units from ITDR billing and detection
Implements automatic signal filtering so excluded identities do not generate security signals or appear in billing calculations
April 27, 20262 releases · 2026-04-07 → 2026-04-27Stable
Sophos Central adds Global Settings redesign, self-healing alerts, M365 quarantine integration, and NRDNRDNewly Registered Domain — a domain name created within a recent window (often 30–90 days); cyber tools flag these because attackers frequently register fresh domains to evade reputation-based blocklists. email protection.
Global Settings replaces General Settings with use-case-driven categories and search
View and manage emails quarantined by M365 directly from Sophos Central
Newly Registered Domain (NRD) Protection detects and acts on emails from recently registered domains
3 details in Everything
1 more release in this issue
· 2026-04-07 → 2026-04-27
Rustinel v1.0.0 adds Linux eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. support, systemd service integration, and hot reload for detection rules alongside Windows ETWETWEvent Tracing for Windows, a Microsoft kernel-level logging framework that lets applications and drivers emit structured events; cyber tools use it to observe process, network, and file activity without installing additional sensors. capabilities.
└──▷ GET THIS VERSION
$ git clone --branch v1.0.0 https://github.com/karib0u/rustinel.git
# already have the repo? check out this version:$ git checkout v1.0.0
Adds Linux support via an eBPF sensor collecting process, network, file, and DNS telemetry
Adds rustinel.service configuration for Linux deployments using systemd
Adds hot reload capability for Sigma, YARA, and IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. detection files
Tenzir v5.31.0 adds the context::lookup operator for unified live/retrospective context matching and pipeline names in diagnostics.
Adds the context::lookup operator to enable unified matching of events against contexts by combining live and retrospective filtering in a single operation, with arguments live=true for incoming events and retro=true for historical data.
Adds a pipeline_name field to the output of the metrics and diagnostics operators, allowing results to be filtered or grouped by human-readable pipeline names instead of just IDs.
RSigma v0.8.0 adds rsigma-convert crate, PostgreSQL/TimescaleDB backend, and new CLI commands for Sigma rule conversion.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.8.0
└──▷ TRY IT
Convert Sigma rules to TimescaleDB continuous aggregates using the new OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. pipeline.
List available output formats for the PostgreSQL backend.
$ rsigma list-formats postgres
Configure a multi-arch container environment by pulling the new GHCRGHCRGitHub Container Registry, GitHub's hosted service for storing and distributing OCI-compatible container images, giving cyber tools a versioned, access-controlled image store tied directly to a GitHub repository. image.
$ docker run --rm ghcr.io/timescale/rsigma:latest --help
Adds rsigma-convert crate with Backend trait and convert_collection() for converting parsed Sigma rules into backend-native query strings
Adds rsigma-convertPostgreSQL/TimescaleDB production backend supporting five output formats: default, view, timescaledb, continuous_aggregate, and sliding_window
Adds CLI subcommands rsigma convert, rsigma list-targets, and rsigma list-formats
Adds -O key=value CLI option support for PostgreSQL backend configuration (e.g., table, schema, timestamp_field) via the convert command
Adds one-to-many field name mapping in processing pipelines, expanding a single source field into multiple alternatives with an OR-conjunction
+1 moreshow less
Publishes multi-arch Docker images (linux/amd64, linux/arm64) to GHCR for all releases
6 details in Everything
└──▷ BREAKING ON UPGRADE
!FieldNameMapping mapping type changed from HashMap<String, String> to HashMap<String, Vec<String>>
!CorrelationCondition::Threshold field type changed from Option<String> to Option<Vec<String>> and added percentile: Option<u64>
!FilterRule.rules type changed from Vec<String> to FilterRuleTarget enum
!Filter conditions are no longer auto-negated; use not selection explicitly in filter conditions
RSigma v0.7.0 adds generic Event trait, rsigma-runtime crate, multi-format input with auto-detection, and zero-dependency logfmt/CEFCEFCommon Event Format, an ArcSight (Micro Focus) log standard that defines a fixed header plus extensible key-value pairs so cyber tools can emit and ingest alerts in a predictable, parseable structure. parsers
└──▷ GET THIS VERSION
$ git clone --branch v0.7.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.7.0
└──▷ TRY IT
Run the daemon on syslog logs, explicitly specifying format and timezone since auto-detection might be ambiguous or inefficient for pure syslog streams.
RSigma v0.6.0 adds pluggable streaming I/O (NATS, HTTP, file), parallel batch evaluation, and named condition IDs
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.6.0
Adds --input and --output flags with URL schemes (http://, nats://, file://, etc.) to plug the daemon into various transport layers
Introduces feature-gated parallel evaluation via the parallel feature flag on rsigma-eval, enabling multi-core rule matching
Adds new public APIs in rsigma-eval: Engine::evaluate_batch, CorrelationEngine::evaluate, CorrelationEngine::process_with_detections, and CorrelationEngine::process_batch
Supports named condition IDs in rule_cond_expression for correlation rules, replacing numeric indices
Adds configurable back-pressure via --buffer-size, micro-batching via --batch-size, and graceful shutdown drain via --drain-timeout
Adds allow_template_vars parameter to ProcessingPipeline, ProcessingItem, QueryPostprocessingItem, and templating transformations to explicitly opt in to template-vars execution, preventing accidental code execution from untrusted pipelines.
Adds PYSIGMA_ALLOW_VARS_EXECUTION environment variable as an alternative opt-in for the template-vars execution feature.
Adds vars_allowed_paths parameter to ProcessingPipeline, ProcessingItem, and QueryPostprocessingItem to restrict which filesystem directories vars files may be loaded from.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The template-vars feature is now disabled by default; existing pipelines that relied on template vars will silently stop executing them unless allow_template_vars=True is set on ProcessingPipeline, ProcessingItem, QueryPostprocessingItem, or a templating transformation, or the PYSIGMA_ALLOW_VARS_EXECUTION environment variable is set.
Splunk Security Content v5.26.0 adds 11 new macOS detections across 3 new analytic stories plus Axios supply chain and Microsoft Intune coverage.
└──▷ GET THIS VERSION
$ git clone --branch v5.26.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.26.0
New analytic story: MacOS Persistence Techniques — covers LoginHook persistence, kextload abuse, and hidden files/directories.
New analytic story: MacOS Post-Exploitation — covers log removal, data chunking, network share discovery, and firewall rule enumeration.
New analytic story: MacOS Privilege Escalation — covers Gatekeeper bypass and keychain dumping.
New analytic story: Axios Supply Chain Post Compromise — tags existing analytics to detect post-installation script execution, credential access, exfiltration, and persistence in JavaScript/Node.js supply chain attacks.
New detection: MacOS Account Created — visibility into account creation activity on Apple endpoints.
+10 moreshow less
New detection: MacOS Data Chunking — identifies attacker data-staging behavior on macOS.
New detection: MacOS Gatekeeper Bypass — detects attempts to circumvent macOS code-signing controls.
New detection: MacOS Hidden Files and Directories — surfaces use of hidden filesystem artifacts.
New detection: MacOS Kextload Usage — monitors abuse of kernel extension loading.
New detection: MacOS Keychains Dumped — detects credential harvesting from macOS keychain.
New detection: MacOS List Firewall Rules — identifies enumeration of macOS firewall configuration.
New detection: MacOS Log Removal — detects clearing of logs to cover attacker tracks.
New detection: MacOS LoginHook Persistence — monitors use of LoginHook mechanism for persistence.
New detection: MacOS Network Share Discovery — surfaces network share enumeration on macOS.
New detection: Microsoft Intune Bulk Wipe — detects mass device wipe actions in Microsoft Intune cloud environments.
15 details in Everything
└──▷ BREAKING ON UPGRADE
!Several detections previously deprecated in ESCU v5.24.0 have now been removed in v5.26.0; users must transition to recommended replacements (see the List of Removed Detections in Splunk documentation).
!A new set of detections has been deprecated in v5.26.0 and are scheduled for removal in ESCU v6.1.0.
1 more release in this issue
· 2026-04-15 → 2026-04-22
ESCU v5.25.1 patches ESCU 5.25.0 release notes including two new analytic stories and detections
└──▷ GET THIS VERSION
$ git clone --branch v5.25.1 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.25.1
Adds the Gh0st RAT analytic story to group multiple existing analytics related to service creation, registry persistence, command-line execution, and system discovery behaviors alongside new detections.
Adds the Void Manticore analytic story to group analytics aligned to data destruction, shadow copy deletion, backup recovery tampering, and suspicious script execution behaviors.
Adds detection for Windows Routing and Remote Access Service Registry Key Change to identify persistence via registry modifications.
Beelzebub v3.6.10 adds interactive command matching and LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. integration to TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. honeypot strategy.
└──▷ GET THIS VERSION
$ git clone --branch v3.6.10 https://github.com/mariocandela/beelzebub.git
# already have the repo? check out this version:$ git checkout v3.6.10
Enhances TCP honeypot strategy with interactive command matching, enabling dynamic response to attacker input over raw TCP connections.
Integrates LLM backend into TCP strategy, allowing AI-generated responses to attacker commands on TCP honeypots.
Sigma r2026-04-01 adds 57 new detection rules covering Axios/Shai-Hulud supply chain attacks, DMSA abuse, CVE exploits, and Kubernetes enumeration.
└──▷ GET THIS VERSION
$ git clone --branch r2026-04-01 https://github.com/SigmaHQ/sigma.git
# already have the repo? check out this version:$ git checkout r2026-04-01
Adds cross-platform detection for the Axios NPM compromise: file creation indicators on Linux, macOS, and Windows; process execution indicators; malicious C2 DNS queries; and Azure sign-ins using the Axios user agent.
Adds detections for the Shai-Hulud 2.0 malicious NPM package installation and Bun execution on Linux and Windows, plus malware indicators for both platforms.
Adds detections for the LiteLLM / TeamPCP supply chain attack indicators and TeamPCP persistence indicators.
Adds rules for DMSA (Delegated Managed Service Account) abuse: new DMSA object creation, DMSA created in specific OUs (PowerShell and non-PowerShell), and modification of msDS-DelegatedManagedServiceAccount link attributes.
Adds detections for RedSun malware: Conhost.exe spawned by TieringEngineService.exe, named pipe creation, EICAR test file detection, and staging in RS-prefixed temp directories.
+22 moreshow less
Adds detection for NetExec (HackTool) file indicators and execution.
Adds detection for potential CVE-2026-33829 exploitation via Windows Snipping Tool remote file path URI.
Adds detection for potential exploitation of CVE-2025-5054 or CVE-2025-4598.
Adds Google Workspace rules for government attack warnings, out-of-domain email forwarding, and suspicious login activity classified by Google.
Adds Microsoft 365 / Exchange rules for suspicious delivered emails, inbox rule creation/update via ExchangePowerShell cmdlet, inbox rule activity in O365, and mail forwarding/redirecting via ExchangePowerShell cmdlet.
Adds Okta session impersonation granted from untrusted domain detection.
Adds indirect command execution via SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. ProxyCommand detection.
Adds Python Base64 encoded inline command execution detections for Linux and Windows.
Adds detection for sensitive file dump via Print.EXE.
Adds detection for service startup type changes via Wmic.EXE.
Adds detection for memory dump mounting via MemProcFS (PUA).
Adds detection for potential Vcruntime140 DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. sideloading.
Adds detections for suspicious and uncommon file creation by Notepad++ Updater (GUP.exe) and suspicious child processes spawned by it.
Adds detection for OpenEDR spawning a command shell and potentially suspicious file creation by OpenEDR's ITSMService.
Adds detection for system language discovery via Reg.exe.
Adds detection for system restore registry modification via command line.
Adds detection for Windows EventLog Autologger session registry modification via command line.
Adds detection for Cisco Dot1x being disabled.
Adds detection for script interpreters spawning credential scanners on Linux and Windows.
Adds detection for suspicious child process of SolarWinds WebHelpDesk.
Removes the Suspicious PowerShell Mailbox SMTP Forward Rule rule (replaced by new inbox/forwarding rules).
Helm chart gains values to enable Shuffle debug mode per component.
└──▷ GET THIS VERSION
$ git clone --branch v2.2.1-nightly-1775748107 https://github.com/Shuffle/Shuffle.git
# already have the repo? check out this version:$ git checkout v2.2.1-nightly-1775748107
Torq adds group-based access control for Workspaces, restricteda cases, dashboards, and Interact with static or IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.-synced members
Adds group-based access control to the Workspace scope for restricted cases and dashboards
Enables groups to be provisioned statically by manually adding members or dynamically with automatic syncing from an IdP
Cribl Stream 4.17.1 adds IP allowlisting for API credentials, M365 GCC HighGCC HighA Microsoft 365 cloud environment restricted to US government contractors handling controlled unclassified information, meeting compliance requirements like ITAR and DFARS that standard commercial tenants cannot satisfy./DoD/China support, gzip compression for Cortex XSIAM Destinations, and Databricks custom workspace
Adds IP Allowlist option in Cribl.Cloud UI to restrict API access for API Credentials to specific IPv4 CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. ranges
Expands Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. Source to support Microsoft 365 GCC High, DoD, and China cloud deployments via a new endpoint selector dropdown
Adds gzip compression setting to the Cortex XSIAM Destination tile to reduce egress costs
Adds configurable workspace host in Databricks Destination for government and secure cloud environments
NodeZero April 2026 adds resume ops, co-branded group reports, 30-day client deletion, inventory exports and new attack content modules.
Adds the ability to resume interrupted pentests directly from the pentest detail page in the Portal UI.
Enables downloading co-branded sample reports in groups via the Portal UI.
Adds optional enforcement of parent account branding across child accounts in the Portal UI.
Allows parents to schedule deletion of a client to return scanned asset allocation in 30 days via the Portal’s Client Management page.
Adds support for selected items, IP ranges, and scopes in inventory CSV export capabilities.
+4 moreshow less
Adds last external domain and last host tab fields to inventory data records.
Adds a new Oracle Cloud Infrastructure (OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant.) user permission enumeration module.
Adds support for DNS hostname enumeration on domain-joined Linux machines during internal operations.
Adds CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. badges on weaknesses in redesigned sankey diagrams within pentest summaries.
Stratus Red Team v2.31.0 adds 9 new attack techniques across Azure, Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., and GCP plus expanded programmatic runner options.
└──▷ GET THIS VERSION
$ git clone --branch v2.31.0 https://github.com/datadog/stratus-red-team.git
# already have the repo? check out this version:$ git checkout v2.31.0
└──▷ TRY IT
Simulate a GCP attacker disabling audit logs to blind your SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. — useful for testing detection coverage of log-tampering TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind..
Adds Entra ID persistence technique: Backdoor Entra ID application with Federated Identity Credential (FIC).
Adds GCP defense-evasion technique: Attempt to Remove a GCP Project from its Organization.
Adds GCP defense-evasion technique: Delete a Cloud DNS Logging Policy.
Adds GCP defense-evasion technique: Disable Data Access Audit Logs for a GCP Service.
+8 moreshow less
Adds GCP defense-evasion technique: Disable VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Flow Logs on a Subnet.
Adds GCP defense-evasion technique: Disable a GCP Log Sink.
Adds GCP discovery technique: Read GCEGCEGoogle Compute Engine, Google's infrastructure-as-a-service platform for running virtual machines in the cloud; cyber tools use it for scalable, on-demand compute without managing physical hardware. Instance Metadata via the Compute API.
Adds GCP defense-evasion technique: Reduce Log Retention Period on a Cloud Logging Sink Bucket.
Programmatic usage now supports an S3 bucket for internal and Terraform state storage.
Programmatic usage now supports custom StateManager, TerraformManager, ProviderFactory, Config, and CorrelationID when launching the runner.
Programmatic usage now supports supplying an existing Terraform binary instead of downloading its own.
Programmatic usage now supports configurable cloud credentials rather than relying on environment variables.
Rapid7 April 2026 adds dynamic seed queries, Bulk Export API scan policy data, persistent search tabs, multi-tenant API key, and more
Automate external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. discovery with dynamic seed queries using supported connectors (e.g., Markmonitor, NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment.).
Export scan policy data alongside existing Rapid7 Agent policy data via the Bulk Export API.
Maintain investigation context with persistent search tabs in Log Search that preserve open tabs and queries across sessions.
Access all tenants programmatically using a single multi-tenant API key.
View group membership details for Okta and Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. users directly in the User Details page.
+9 moreshow less
Map SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. (InsightIDR) users to ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. identity profiles in Incident Command for unified identity context.
Increase in custom detection rule limits for greater flexibility.
Include new optional field r7_hostid in the JSON payload for supported endpoint-related event sources.
Export user access data for audit and compliance in CSV format from Command Platform > Users > Export User List.
Gain more coverage with the Web & App Framework Vulnerability Detection Module for Drupal and WordPress Core in InsightAppSec.
Support for NetAppFilesAccount and ContainerAppJob resource types in Cloud Security (InsightCloudSec).
Add support for filtering out devices by last sync date in Microsoft Intune connector.
New connector support for Check Point Harmony Endpoint, Cisco Catalyst Center, Datadog, Iru, PingOne Advanced Identity Cloud, privacyIDEA MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., and PDQ Deploy and Inventory.
Endpoint Security Notifications provide real-time on-device alerts for blocked malicious activity on Windows assets.
Code Security Assessments now include automatic SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation for dependency visibility.
DefectDojo 2.57.3 adds WatchGuard Security Advisory parser, async path notifications, and improved SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. breach display.
└──▷ GET THIS VERSION
$ git clone --branch 2.57.3 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.57.3
Adds WatchGuard Security Advisory parser for importing WatchGuard vulnerability advisories.
Dispatches create-path notifications asynchronously, reducing POST request latency.
Improves SLA breach notification format and display in the UI.
3 details in Everything
3 more releases in this issue
· 2026-04-06 → 2026-04-27
DefectDojo 2.57.2 adds govulncheck fix metadata, Mozilla security advisories, RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for risk acceptance, and a centralized banner system.
└──▷ GET THIS VERSION
$ git clone --branch 2.57.2 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.57.2
Adds fix_available and fix_version fields to govulncheck parser output, surfacing remediation metadata directly in findings.
Adds Mozilla Foundation security advice lookup to vulnerability ID enrichment.
Adds a centralized banner system with OS messaging support, configurable via settings.dist.py / local_settings.py and visible in the UI.
Enforces RBAC on accept_risks API endpoints, restricting risk acceptance to authorized roles.
Validates consistency between ID-based and name-based identifiers during import/reimport via the API.
+1 moreshow less
Adds permission checks when moving engagements between products.
New System Status page showing Celery queue monitoring with the ability to purge queues (UI + API).
New IriusRisk threat model CSV parser for importing threat model data.
New Orca Security CSV and JSON parser for importing Orca findings.
New JFrog Xray API Summary Artifact Scan configuration support.
Adds exact_title filter to the findings API for precise title matching.
+17 moreshow less
Allows sorting endpoints by active findings count via API and UI.
Adds a notes endpoint to the RiskAcceptanceViewSet API.
Loads JIRA custom fields as JSON via the API.
New Quick verify menu item and keyboard shortcuts to verify/close findings in the UI.
New Remove from Finding bulk action on the View Finding page.
Adds additional_banners support to the base UI template for custom alerting.
Dependency Track parser now supports CVSS4, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. vectors, references, and publish date.
Gosec parser now parses cwe_id and swaps references where possible.
Twistlock parser now records packagePath to identify where a CVE is found.
AWS Security Hub parser now extracts CVSS v3/v4 scores from Inspector findings.
Tenable One OT Exposure 4.6.34 adds bulk subnet management, Nessus credential mode, and new GraphQL mutations/fields.
Monitored Networks page added with bulkAddMonitoredNetwork mutation for bulk subnet configuration
Mutation.editNessusUserScan and Mutation.newNessusUserScan gain credentials and credentialsMode arguments (type NessusUserScanCredentialsMode) to control credential usage in active scans
GraphQL API adds Config.otAgentAutoUpdate field, OtAgentAction.RollbackUpdate enum value, and OtAgentSelectField.autoInstallUpdates, scoutAvailableVersion, scoutBackupAvailable, scoutBackupVersion, scoutCheckedForUpdatesTs, scoutUpdatedTs for remote agent update management
GraphQL API adds Query.monitoredNetworks and Query.monitoredNetworksRaw fields plus Mutation.addMonitoredNetwork, deleteMonitoredNetworks, disableMonitoredNetwork, enableMonitoredNetwork, and editMonitoredNetwork for subnet lifecycle control
4 details in Everything
└──▷ BREAKING ON UPGRADE
!PolicyFindingFilterField replaced DetailedPolicyFindingField as the type for input fields PolicyFindingsExpressionsParams.field, PolicyFindingsSortParams.field, PolicyFindingsSortParamsComplexFields.field, RawPolicyFindingsComplexFieldParams.field, RawPolicyFindingsComplexFieldParamsComplexFields.field, RawPolicyFindingsComplexGroupingParams.field, and RawPolicyFindingsComplexGroupingParamsComplexFields.field.
Tenable Exposure Management 2026 adds automated AWS S3 ingestion via Open Connector Phase 2 and a PrismaCloud CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. connector.
Adds automated pull from AWS S3 buckets to the Tenable One Open Connector (Phase 2) for continuous, scheduled data pipelines of asset and vulnerability data
Adds availability of the PrismaCloud CSPM Third-Party Connector to ingest cloud resources and security findings directly into Tenable Exposure Management
New --scan-zones flag for nessuscli link, drag-and-drop UI for scans/files, ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation. Windows support
Adds --scan-zones parameter to the nessuscli link command and SCAN_ZONES environment variable to the Docker run command for linking managed Tenable Nessus scanners to Tenable Security Center.
Enables drag-and-drop functionality to move existing scans into folders or directories within the Tenable Nessus user interface.
Enables drag-and-drop import of scan files (e.g., .nessus) from a local computer directly into Tenable Nessus.
Adds support for Windows environments running on ARM64.
Adds support for Sensor Proxy to connect to Tenable Security Center versions 6.9.0 and later.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Unauthenticated requests to download files from Tenable Nessus now fail; you must authenticate those requests with a session token.
!API access to plugin rules is removed for users with Basic permissions.
Tenable Nessus 10.12.0 adds drag-and-drop scan management, FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-140.3 support, and SCAN_ZONES config for Security Center integration
Adds drag-and-drop functionality to move existing scans into folders or directories within the Tenable Nessus user interface.
Enables importing .nessus scan files by dragging them from a local computer directly into the Tenable Nessus UI.
Added --scan-zones parameter to the nessuscli link command for specifying zones when linking scanners to Tenable Security Center.
Added SCAN_ZONES environment variable support in the Docker run command for specifying zones during managed scanner linkage.
Added support for OpenSSL 3.5, enabling updated cryptographic capabilities within Nessus scans.
+1 moreshow less
Added FIPS-140.3 compliance support, allowing Nessus to operate under stricter federal cryptographic standards.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Unauthenticated API requests to download files must now be authenticated with a session token; previously working unauthenticated downloads will fail.
!API access to plugin rules is removed for users with Basic permissions.
runZero adds MTConnect protocol support and allows enabling SCTPSCTPA transport-layer protocol (RFC 4960) maintained by the IETF that delivers messages with optional ordering and built-in multi-homing, giving cyber tools reliable framing without TCP's head-of-line blocking. via scan config probes.
The scanner now uses the mtconnect protocol to collect default device information when available
runZero 4.0.260420.1 adds TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. diagnostics to task data.
Version 4.0.260401.0 introduces overlapping subnet configuration and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. OT enumeration capabilities, while improving UI selection and fixing scan stability.
Configures overlapping site subnets via the site management UI
Adds Sub-asset enumeration support for IPv6 OT services
Enables Select All on the Software By Asset view in the console
Intruder launches AI pentesting agents to actively investigate scanner findings for injection, disclosure, and client-side issues.
AI agents now automatically investigate scanner-identified vulnerabilities including injection, information disclosure, and client-side attacks using active probing techniques.
New monthly credit-based pricing for AI pentesting investigations: 5 credits on Cloud, 10 on Pro, and 50 on Enterprise plans.
2 details in Everything
4 more releases in this issue
· 2026-04-16 → 2026-04-30
Fleet 4.84.0 adds Entra conditional access for Windows, ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction./hardware attestation, new vulnerability sources, and a host query-reports API.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.84.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.84.0
└──▷ TRY IT
Fetch all query reports associated with a specific host to review scheduled query results without navigating the UI.
Pin a Fleet-maintained app to a specific major version in a GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. manifest to control update cadence.
Adds Entra conditional access support for Windows devices.
Implements ACME for MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. protocol communication and hardware device attestation.
New GET /api/v1/fleet/hosts/{id}/reports endpoint (also at /hosts/{id}/queries) lists query reports for a specific host.
Adds vulnerability detection for Microsoft 365 Apps and Office products on Windows.
Adds OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. data source for Ubuntu vulnerability scanning.
+26 moreshow less
Adds automatic rotation of Mac recovery lock passwords 1 hour after the password is viewed via the API.
Adds ability to pin Fleet-maintained apps to a specific major version in GitOps.
Adds support for labels_include_all conditional scoping for software installers and apps.
Adds ability to specify a custom patch policy query in a Fleet-Maintained App (FMA) manifest.
Adds support for running Python scripts on macOS and Linux.
Adds a new disk_space fleetd table for macOS reporting available disk space including purgeable storage.
Adds configuration profile deletion via SyncML <Delete> commands when a Windows profile is removed or a host changes teams, bringing Windows to parity with macOS.
Adds support for outputting VPP policy automations in fleetctl generate-gitops.
Adds a Reports tab to the Host details page.
Adds activity logging when a certificate is installed or fails on an Android host.
Enables the host activity card on the Android host details page.
Adds ability to re-send Android certificates to a specific host.
Adds FLEET_MDM_CERTIFICATE_PROFILES_LIMIT server config option to throttle CA certificate profile installations per reconciler cycle.
Adds automatic retry (up to 3 times) for Android agent certificate install failures; increases Apple configuration profile retry limit from 1 to 3.
Enables Windows MDM in fleetctl preview by auto-generating WSTEP certificates on startup.
Allows specifying a Fleet-Maintained App (FMA) as a policy software automation in GitOps.
Allows clearing Windows OS update deadline and grace period fields to remove enforcement.
Increases the default SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. session validity period from 5 to 15 minutes.
Allows OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. service name to be overridden with the standard OTEL_SERVICE_NAME environment variable.
Updates GitOps label functionality so omitting the hosts: key under a manual label preserves existing host membership instead of removing all hosts.
Adds Flatcar Container Linux and CoreOS to recognized Linux platforms.
Switches Fleet-maintained apps serving location to https://maintained-apps.fleetdm.com/manifests.
Upped the default limit for the software batch endpoint from 1 MiB to 25 MiB.
Renames Custom settings to Configuration profiles in the Fleet UI.
Adds indication in the UI when a profile command was deferred via NotNow status.
Adds support for JetBrains software with 2-part version numbers (e.g., WebStorm 2025.1) in CVE ingestion logic.
31 details in Everything
└──▷ BREAKING ON UPGRADE
!Fleet-maintained apps are now served from https://maintained-apps.fleetdm.com/manifests instead of GitHub — if you restrict outbound Fleet server traffic, you must allow access to this new URL.
!The incorrect report key has been removed from get/create/modify API responses.
1 more release in this issue
· 2026-04-01 → 2026-04-25
Fleet 4.83.0 adds Android web app deployment, Mac recovery lock rotation, NDES CA support, and sweeping GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. improvements.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.83.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.83.0
└──▷ TRY IT
Bootstrap a new GitOps repository structure without manually creating the folder layout.
$ fleetctl new
Reference a PowerShell script directly as a software package installer in a GitOps file, avoiding the need to embed the script inline.
Adds ability to deploy an Android web app via setup experience or self-service.
Adds ability to set and manually rotate Mac recovery lock passwords.
Adds ability to lock pre-filled user information for macOS hosts that log in via End User Authentication during Setup Experience.
Adds automatic retries for failed software installs (excluding VPP apps).
Adds retry functionality when adding software installers to Fleet via GitOps.
+17 moreshow less
Adds fleetctl new command to initialize a GitOps folder.
Adds support for paths: key under reports:, labels:, and policies: in GitOps files.
Adds glob support for configuration_profiles in GitOps files.
Adds support for referencing .sh or .ps1 script files directly in the GitOps path field for software packages.
Implements webhooks_and_tickets_enabled flag for policies in GitOps.
Adds server config for allowing all Apple MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. declaration types.
Adds ability to use FLEET_JIT_USER_ROLE_FLEET_ as a prefix on SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. attributes for just-in-time role assignment.
Adds fleet_name and fleet_id columns to hosts CSV export.
Adds resend button in the OS settings modal for iOS and iPadOS hosts.
Adds patch policies for Fleet-maintained apps that automatically update when the app is updated.
Adds support for NDES CA for Windows hosts.
Adds vulnerability scanning support for Windows Server 2025 hosts.
Adds OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. instrumentation to Fleet's internal HTTP client.
Adds ability to omit secrets: in GitOps files to retain existing enroll secrets on the server.
Adds APNsAPNsApple Push Notification service, Apple's cloud messaging infrastructure that delivers push notifications to iOS, macOS, and watchOS devices; cyber tools use it to alert users or exfiltrate data over a trusted Apple channel. expiry banner in the UI for Fleet free users.
Intune adds userless ADE for visionOS/tvOS, Android LOB app management, EPM support approvals, and new remote actions.
Adds support for approved elevation requests in Endpoint Privilege Management (EPM) for all device users
Configures credential manager permissions for Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. devices via the managed devices configuration path
Enables location service control through the new Location setting (Device default, Location enabled, Location disabled)
Supports userless Apple Automated Device Enrollment (ADE) for visionOS and tvOS devices
Adds support for Ubuntu 26.04 LTS device enrollment
+5 moreshow less
Introduces a preview toggle to enable the new full-page device view in the admin center
Adds remote actions to suspend and restore Managed Home Screen on Android devices
Renames Block location setting to Location with three distinct configuration options
Increases Intune Management Extension minimum version requirement to 1.58.103.0 for Windows
Adds Autopatch update risk visibility report classifying devices as Current, Exposed, or Critical
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Windows devices must run Intune Management Extension version 1.58.103.0 or later to receive configurations and updates
1 more release in this issue
· 2026-04-06 → 2026-04-27
Microsoft Intune adds Android XR device management and a new TeamViewer connector for remote assistance
Adds support for managing Android XR devices via Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. dedicated and fully managed enrollment modes
Introduces a new TeamViewer connector experience that replaces the existing integration
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The previous TeamViewer connector must be migrated to the new connector within 12 months to maintain functionality.
$ git clone --branch v7.1.0 https://github.com/munki/munki.git
# already have the repo? check out this version:$ git checkout v7.1.0
managedsoftwareupdate now automatically retries downloads of manifests, catalogs, and installer items to handle transient network failures.
Users can be allowed to skip updates requiring a logout or restart to install remaining non-blocked updates from Managed Software Center.
LocalOnlyManifest payloads can now include default_installs and featured_installs sections.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The behavior of managedsoftwareupdate --installwithnologout and managedsoftwareupdate --installonly has changed to support new assisted quit features; consult the Munki 7.1 wiki for migration details.
Acronis True Image is backup, disk imaging, and anti-malware protection for home and small-office Windows and macOS computers.
Acronis True Image 42980 adds an update progress bar, improves multi-machine license management, and drops legacy OS support.
Adds a progress bar for background installation of application security patches to keep users informed of update status.
Improves management of multiple activated machines under a single license.
Removes the Bonjour service from the installer in response to user feedback about system resource usage.
Acronis Sync is being phased out — synced-file downloads will be fully discontinued in 2027.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Acronis True Image can no longer be installed on Windows XP, Vista, 7, 8, 8.1, 32-bit Windows 10, or Windows 10 versions released before 2018 (1507, 1511, 1607, 1703, 1709, 1803).
!Acronis True Image no longer supports installation on any 32-bit Windows system.
1 more release in this issue
· 2026-04-01 → 2026-04-28
Commvault Cloud is a backup, recovery, and cyber-resilience platform for hybrid, multi-cloud, and SaaS workloads.
Commvault Cloud April 2026 adds AWS Protection Groups, GCP discovery, Cisco XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. integration, Okta granular recovery, and AD/Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. enhancements.
Adds AWS Protection Groups for rule-based onboarding across multiple accounts
Adds Bring Your Own Storage with FETB+ Metering via Marketplaces
Adds Cloud Rewind support for Azure App Services and Function Apps with Private Endpoint Restore
Adds Cloud Rewind support for AWS configuration-only assemblies into existing VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. with selective resource restoration by tag
Adds Cloud Rewind capability to rebuild Application Gateways for Function Apps
+24 moreshow less
Adds Fair Usage and Service protection API throttling for management API connections
Adds Google Cloud Platform: Cloud Resource Discovery and Protection for GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure., VMs, object storage, and SQL databases
Adds Commvault Cloud availability on Google Cloud Marketplace
Adds unified protection management across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., cloud, and on-premises in the Commvault Console
Adds automated ransomware recovery integration with Cisco XDR
Adds HashiCorp Vault as a credential vault provider in Command Center
Adds Credential Details page in Command Center for entity-to-credential mapping
Adds Informix improved log backup performance with Secure Data Transfer (SDT) pipeline
Adds support for Sybase ASE 16.1 protection and recovery
Adds Nutanix AHVAHVAcropolis Hypervisor, Nutanix's built-in bare-metal hypervisor for running VMs on their hyper-converged infrastructure, giving cyber tools a tightly integrated compute and storage layer without a separate hypervisor license. Live Recovery for near-instant VM reactivation from snapshots
Adds Amazon EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. auto-provisioning and auto-scaling resource management
Adds Amazon FSx for NetApp ONTAP access node auto-provisioning and auto-scaling support
Adds SaaS onboarding for MongoDB, Cassandra, Hadoop, Couchbase, CockroachDB, YugabyteDB, and Splunk
Adds Avamar protected NDMP data import into Commvault
Adds Red Hat OpenShift VM agentless file-level restore from full backups
Adds Red Hat OpenShift VM network-optimized backup and restore
Adds Bare Metal Backup for Laptops in the (MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs.) Endpoint
Adds Amazon S3 incremental scans using metadata tables to reduce API usage
Adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Auditing (Early Adopter) for real-time change tracking
Adds Active Directory Vulnerability Assessments against best practices and attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately.
Adds attribute-level recovery for Entra ID integrated with Comparison Reports
Adds protection for Azure role assignments, PIMPIMProtocol Independent Multicast, an IETF routing protocol that distributes IP multicast traffic across networks without depending on a specific unicast routing protocol, letting tools monitor or manipulate multicast group traffic.-enabled groups, and custom security attributes in Entra ID
Adds Okta Granular Protection (Early Adopter) for automated backup and point-in-time recovery of identity objects
Adds Salesforce Restore Preview to verify data before restoration
April 24, 202615 releases · 2026-04-04 → 2026-04-24Stable
Druva is a SaaS data protection platform that backs up enterprise workloads, endpoints, and SaaS applications and restores them after ransomware.
Druva adds sortable attached reports and a redesigned granular service categorization sidebar.
Adds active sort-column indicator displayed at the top of attached report files, so emailed reports reflect the same ordering seen in the UI.
Introduces granular service classification on the All Services page and Sidebar, grouping services into logical, task-oriented categories to reduce navigation overhead.
2 details in Everything
14 more releases in this issue
· 2026-04-04 → 2026-04-24
Druva Enterprise Workloads adds DR plan tagging, Oracle PDBPDBA debug symbol file format used by Microsoft's toolchain that maps compiled binaries back to source code, function names, and variable types, letting cyber tools resolve symbols during reverse engineering or memory analysis. restore, Azure SQL isolated copy and Quantum Bridge placement controls.
Adds custom tag support at the Disaster Recovery plan level, with automatic application to resources created during Restores, Failovers, and CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. deployments.
Enables granular Pluggable Database (PDB) restore from a Container Database (CDB) backup, allowing selective recovery to original or alternate servers.
Supports Multi-Mount Database File Restore in Oracle DTC by distributing data across up to five NFS mount locations during restoration.
Introduces Isolated Copy Protection for Azure SQL Databases, providing an agentless, zero-production-impact backup method that works across all service tiers including Basic and Standard (S0–S2).
Adds automated pre-checks for Azure SQL Data Protection readiness, verifying credentials, connectivity, and database availability before backup operations start.
+1 moreshow less
Enables tag-based placement of the Quantum Bridge in Azure SQL, allowing administrators to define specific Resource Groups and Subnets for ephemeral deployment via additive tags.
MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. Name and MSP Global ID columns added to Global Usage, Tenant Quota, and Tenant Consumption reports for sub-MSP hierarchy visibility.
Adds MSP Name column to the Global Usage Report, Tenant Quota Report, and Tenant Consumption Report to identify the sub-MSP associated with consumption data
Adds MSP Global ID column to the Global Usage Report, Tenant Quota Report, and Tenant Consumption Report for unique identification of sub-MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. across internal systems
inSync Client v8.0.0 adds Linux support (Ubuntu/RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence.) and self-healing capabilities
inSync Client v8.0.0 is now available for Ubuntu and RHEL operating systems
Druva for Salesforce introduces a new workflow allowing end users to perform self-service restores of archived data within delegated project boundaries.
Managed Services Center adds billable user and shared mailbox telemetry to daily and monthly consumption reports
Adds Billable Preserved Users, Billable Shared Mailboxes, Total Allocated Shared Mailbox, and Total Shared Mailbox metrics to the Customer Consumption Telemetry – Daily Report
Adds Billable Preserved Users, Billable Shared Mailboxes, Total Allocated Shared Mailbox, and Total Shared Mailbox metrics to the Customer Consumption Telemetry – Monthly Report
Druva Azure Workloads adds backup support for Azure Blob Storage and Azure Files accounts with Private Endpoints or VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. Service Endpoints via the Quantum Bridge.
Supports protecting Azure Blob Storage accounts that have Public Network Access disabled (using Azure Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. or VNet Service Endpoints).
Supports protecting Azure Files storage accounts that have Public Network Access disabled (using Azure Private Link or VNet Service Endpoints).
Introduces the Quantum Bridge temporary VM pattern to automate resource management for private endpoint backups.
Release updates agents for File Servers, NAS, MS SQL, VMware, Oracle DTC/PBS, and TurboTier with minor fixes. Adds private endpoint backup capabilities for Azure Blob Storage and Azure Files using an ephemeral Quantum Bridge VM.
Druva adds backup and restore capabilities for Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. Privileged Identity Management (PIMPIMProtocol Independent Multicast, an IETF routing protocol that distributes IP multicast traffic across networks without depending on a specific unicast routing protocol, letting tools monitor or manipulate multicast group traffic.) settings.
Druva Endpoints adds automated backup for Claude Desktop app data and device mapping creation timestamps.
Adds automated backup support for the Claude Desktop application to protect conversation history, project data, and user settings across Windows and macOS endpoints
Adds a new Created On column in the Endpoints Management Console Device Mappings section to display the exact date and time a device was mapped to a user
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Backup services for Outlook Express, Lotus Notes (Windows), Outlook 2011, and Postbox (macOS) are discontinued effective April 4, 2026
!The console option Outlook 2016/13/10/07 - Optimized for Performance is renamed to just Outlook
!The console option Outlook 2016/2011 is renamed to just Outlook
Druva adds air-gapped immutable backup and recovery for Okta identity data.
Adds automated, relationship-aware recovery of Okta tenant data including users, groups, policies, and application configurations to an isolated security cloud.
Enables granular or full-organization rollbacks to reverse human error or malicious activity.
Allows side-by-side comparison of two backup snapshots to identify changes for incident investigation.
Veeam Kasten is a Kubernetes-native platform for backing up, restoring, and migrating containerized applications and their persistent data.
Kasten K10 8.5.8 adds k10tools repository inventory/cleanup commands and per-namespace FileRecoverySession limits via ActionPodSpec.
└──▷ TRY IT
Inspect the contents of a Kasten-managed storage repository before running cleanup, especially to avoid misidentifying block-mode export snapshots as orphaned.
$ k10tools repository inventory
Remove orphaned snapshots from a Kasten-managed storage repository after confirming the inventory contains no block-mode export data.
$ k10tools repository cleanup
Tune Prometheus retention to use 70% of PVC size instead of the default 80%, or pin a fixed retention size, to control storage consumption in large deployments.
yaml
prometheus:
server:
retentionSizeRatio: 0.70
# or use a fixed size instead:
# retentionSize: "50GB"
Adds repository inventory and repository cleanup subcommands to k10tools for identifying and safely removing orphaned snapshots in Kasten-managed storage repositories.
Adds support for configuring FileRecoverySession session limits on a per-namespace basis using ActionPodSpec.
Adds the k10_build_info Prometheus gauge metric that exposes the running Veeam Kasten version as a label, enabling version tracking via external monitoring integrations.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Metrics exported through Red Hat ACM Observability now tag the source cluster with cluster_uid instead of cluster_id. After upgrading, update any Grafana dashboards or alert rules that filter ACM-sourced Kasten metrics by cluster_id to use cluster_uid.
1 more release in this issue
· 2026-04-17 → 2026-04-30
Kasten K10 8.5.7 adds filesystem-mode backup exclusions so admins can selectively skip files and directories from backups.
Adds filesystem-mode backup exclusions, letting administrators selectively exclude files and directories from backups and exports.
Adds a curated set of Prometheus metrics related to TSDB storage health to support logs bundle.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Authentication cookies now require HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. by default; deployments accessing the Kasten dashboard over HTTP must set the auth.secureCookies Helm value to false after upgrading.
!The Helm value grafana.external.url is deprecated in favour of grafana.link; deployments using grafana.external.url must migrate to grafana.link before upgrading to Kasten v9.0.0.
April 30, 20264 releases · 2026-04-01 → 2026-04-30Stable
JumpCloud adds AI Gateway (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. routing), India data center, and renames User/Provisioning modules.
Launches the JumpCloud AI Gateway in public preview to provide a secure authentication and routing layer for AI-driven environments, validating and logging MCP interactions in real time
Introduces a dedicated India data center to support localized data residency, enhanced security protocols, and compliance with local regulatory requirements
Renames User Management to Identity Management across the admin portal
3 details in Everything
3 more releases in this issue
· 2026-04-01 → 2026-04-30
JumpCloud adds ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction., Private 5G, AirPlay controls and redesigned Windows tray app for macOS/iOS/Windows devices
└──▷ HOW TO FIND IT
Deploy ACME certificates for enterprise Wi-Fi on macOS devices to replace legacy SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. enrollment.
📍In the console, go to Devices › macOS Policies and create a new ACME Certificate policy.
Configure private 5G connectivity for iOS devices in restricted environments.
📍In the console, go to Devices › iOS Policies and create a new Cellular Private Network policy.
Restrict AirPlay usage on sensitive sessions by whitelisting specific targets.
📍In the console, go to Devices › iOS Policies and create a new AirPlay Control policy.
Adds ACME certificate policy for modern enrollment replacing SCEP on macOS and automatic issuance on iOS/iPadOS
Adds Cellular Private Network policy for private 5G/LTE configuration on iOS/iPadOS
Adds AirPlay control policy to restrict sender/receiver behavior and whitelisting on macOS and iOS/iPadOS
Adds Bluetooth File Transfer settings to block object push and file sharing on macOS
Enhances Firewall with Stealth Mode and granular inbound controls on macOS
+1 moreshow less
Enhances Windows Tray App with redesigned interface for password management and User Portal access
Nudge Security adds connected apps for Metabase, Apollo, YouTrack, Twingate, Pipedrive, Expensify, and Rollbar
Adds native connection support for Metabase, Apollo, YouTrack, Twingate, Pipedrive, Expensify, and Rollbar to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.
Allows users to connect these new applications via the platform's integrations page.
Adds visibility into AI agents by connecting to Claude managed agents and LangSmith Fleet.
Adds discovery of AI agents built on Claude and LangSmith Fleet, allowing connection via Settings > Connected Apps to see builder, connections, and authorizations.
Ory Kratos v26.2.6 adds verify_new_address hook and upstream AAL2 mapping via OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. claims.
Adds aal2_acr_values configuration field to OIDC providers for AAL2 elevation
Adds aal2_amr_values configuration field to OIDC providers for AAL2 elevation
Adds verify_new_address settings hook to defer address updates until verification
3 details in Everything
└──▷ BREAKING ON UPGRADE
!WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. error IDs and text have changed; scripts relying on exact wording may break.
5 more releases in this issue
· 2026-04-01 → 2026-04-29
Ory Kratos v26.2.7 adds security.disallow_ref_in_identity_schemas config flag and native app OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. trait updates
Support for required traits during OIDC registration on native applications.
Hide Ory branding via new hide_ory_branding project setting in Account Experience configuration
Adds the hide_ory_branding config key to the Ory Network project settings for Growth and Enterprise plans.
Updates elements-react DefaultCard component to respect the hide_ory_branding flag returned by configuration endpoints.
Removes IP address leakage in SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. protection error messages across Hydra, Kratos, Keto, and Oathkeeper.
New CLI command to normalize phone numbers, enum trait UI support, and expand endpoint limits in Ory Kratos/Keto.
└──▷ USE IT
Normalize legacy phone numbers in the database to E.164 format after upgrading Kratos.
shell
kratos migrate normalize-phone-numbers
Adds kratos migrate normalize-phone-numbers CLI subcommand to convert existing identity phone data to E.164 format
Adds options array to InputAttributes for Identity schema enum traits, enabling dropdown UI rendering in Account Experience and Ory Elements
Native OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. registration redirects now include the flow ID alongside the existing code parameter when required traits are missing.
Adds limit.max_expand_size configuration key to limit tree size in Ory Keto's expand endpoint (default 4,000 nodes)
Break-glass recovery for Org identities, password migration webhooks, transientPayload prop in Elements, and OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. claim preservation.
Add break_glass_for_organization field to identity recovery_addresses for SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. bypass recovery.
Configure Password migration webhook flows in the Ory Console under Developers → Actions.
Include transientPayload prop in Elements React flow components (Login, Registration, etc.).
Add oauth2.preserve_ext_claims config option to retain custom claims in the ext object.
Expose lifecycle callback props (onSuccess, onValidationError, onError) in Ory Elements self-service components.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The Helm repository moves from k8s.ory.sh to k8s.ory.com; update configuration while the old URL temporarily redirects.
Ory Kratos v26.2.2 adds standalone phone verification and automatic OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. identity updates on login
Adds update_identity_on_login provider configuration key to trigger automatic identity trait and metadata synchronization from upstream OIDC claims during every login event.
Enables standalone phone number verification via SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels. for the verification flow, accepting phone numbers in addition to emails when an SMS courier channel is configured.
Acsense adds Assurance Hub with compliance scan engine, weighted scoring, CSV export for SOC2SOC2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria./NIST/HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against./etc
Introduces the Assurance Hub centralized framework for evaluating and reporting on identity posture and compliance.
Adds a compliance scan engine that evaluates controls against backed-up Okta data.
Enables weighted scoring for tenant posture based on Pass, Fail, Warning, Informational, Skipped, Exceptions, and Errors statuses.
Supports evaluation against SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2, NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals., GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001, HIPAA, DORA, and APRA frameworks.
Adds conditional controls to automatically skip evaluations when not applicable.
+4 moreshow less
Adds exception handling (risk acceptance) to reflect accepted deviations in results.
Enables tenant-level compliance overviews for high-level posture views.
Adds framework-based filtering for targeted analysis of scan results.
Adds CSV export capability for audit workflows and external reporting.
1Password SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Manager 2026.04 adds onboarding wizard, Linear migration, and scoped Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. syncs.
Adds an onboarding wizard to streamline initial IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. connection, lifecycle settings, and app connection for new users
Supports grouping and filtering in the Access Issues report to focus on active-only users
Workflow actions now expose field information for improved automation flexibility
Allows admins to disable direct access requests from the App catalog
Adds migration support for Linear as a target platform
+3 moreshow less
Enables admins to scope user syncs in Entra ID to a specific group
Provides updated start dates for re-hired employees in BambooHR and user profile details in Salesforce Access Level views
Includes overview and help documentation link for the Humaans integration
8 details in Everything
6 more releases in this issue8 more releases in this issue · 2026-04-07 → 2026-04-30
1Password CLI 2.34.0 adds shell plugin support for Claude Code, Scaleway, AWS SAM, EKSctl, Codex, and awslogs.
Adds Claude Code CLI to the list of tools authenticatable via Touch ID using 1Password Shell Plugins
Adds Scaleway CLI to the list of tools authenticatable via Touch ID using 1Password Shell Plugins
Extends the AWS shell plugin to support the awslogs CLI
Extends the AWS shell plugin to support eksctl, the Amazon EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. CLI
Extends the AWS shell plugin to support the AWS SAM CLI
+1 moreshow less
Extends the OpenAI shell plugin to support the Codex CLI
1Password in the browser 8.12.10 adds admin controls for autofill item categories and new inline menu configuration options.
Adds a Autofill access policy under Policies > Sharing and permissions on 1Password.com to allow administrators to control which item categories team members can autofill.
1Password CLI 2.35 beta adds authentication support for Claude Code, Scaleway, AWS SAM, Terraform state subcommands, and ngrok optimization.
Adds Claude Code CLI authentication via Touch ID and other unlock options with 1Password Shell Plugins
Adds Scaleway CLI authentication via Touch ID and other unlock options with 1Password Shell Plugins
The AWS shell plugin now supports the awslogs CLI
The AWS shell plugin now supports eksctl, the Amazon EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. CLI
The AWS shell plugin now supports the AWS SAM CLI
+2 moreshow less
The OpenAI shell plugin now supports the Codex CLI
The Terraform shell plugin now triggers authentication for all terraform state subcommands, not just terraform state list
Add --skip-migrations flag to lifecycle/migrate, WS-Fed to app wizard, and login_hint support for agent connectors
└──▷ GET THIS VERSION
$ git clone --branch version/2026.2.2 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2026.2.2
Adds --skip-migrations flag to the lifecycle/migrate command to bypass database migrations during startup
Adds WS-Federation (WS-Fed) support to the application creation wizard in the web UI
Adds login_hint support for interactive authentication in the enterprise agent connector endpoint
Passbolt 5.11.0 adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. GA, PingOne SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., SMTP OAuthSMTP OAuthAn authentication method for SMTP email submission that replaces passwords with OAuth 2.0 tokens, letting cyber tools send mail on a user's behalf without storing credentials., and Safari extension support.
└──▷ USE IT
Enable the new Safari extension using the configuration file.
SCIM provisioning is production-ready for user lifecycle management via identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. like Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. and Okta
Adds PingOne as a new supported SSO provider alongside Azure AD and Google
Supports OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. for SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. authentication with Microsoft Exchange Online, replacing deprecated basic auth
Enables Safari browser extension beta via the PASSBOLT_PLUGINS_SAFARI_ENABLED environment variable or passbolt.php config
Ping Identity is an identity and access management platform providing authentication, single sign-on, multi-factor authentication, and identity governance services.
Adds authnRequestHelper binding to next-gen SP adapter scripts for AuthnRequest manipulation
2 more releases in this issue
· 2026-04-09 → 2026-04-17
New Snowflake connector for Identity Cloud, Access Modeling role mining, UI-driven session/config options, and report import/export
Bundled Snowflake connector allows managing users, roles, and data sync between Advanced Identity Cloud and Snowflake.
Added Access Modeling (role mining) feature in Identity Governance to discover potential access roles using machine learning.
Added UI options Override authenticated session timeout, Maximum Session Time, and Maximum Idle Time in the admin console journey editor (previously REST-only).
Added promotion rollbacks capability in the Advanced Identity Cloud admin console.
Added ability to import custom reports via the admin console.
+2 moreshow less
Added ability to export custom reports via the admin console.
Expanded monitoring search feature to include /payload/message and /payload fields.
GLAuth v2.5.0 adds RISC-V support, embedded plugins, and configurable OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. tracing
└──▷ GET THIS VERSION
$ git clone --branch GLAuth-v2.5.0 https://github.com/glauth/glauth.git
# already have the repo? check out this version:$ git checkout GLAuth-v2.5.0
Adds RISC-V platform support for container images and binaries.
Introduces a new embedded_plugins config key to load plugin logic directly from the main config file without external binaries.
Enables OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing configuration via the main config file using the otlp_tracer and otelsql sections, including endpoint, service_name, and sampling_rate fields.
Adds proxying compatibility for LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. paged results via the new proxy_ldap_paging_enabled boolean config option.
Varonis Atlas adds browser-based pentesting, AWS Assumed Role gateway auth, multi-modalmulti-modalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. guardrails, and selective logging
Adds browser-based pentesting capability to Varonis Atlas for assessing AI applications accessed through a browser
Enables AWS Assumed Role authentication in the Gateway for secure downstream access to Bedrock and other AWS integrations
Introduces multi-modal guardrails to evaluate and enforce policy across content types beyond text-only interactions
Adds Pentest Strategies to organize and execute attack approaches during AI red team assessments
Supports anomaly detectors in AI Investigation to identify unusual behavior patterns in runtime activity
+3 moreshow less
Adds discovery for AWS Bedrock AgentCore resources as part of AI asset inventory workflows
Enables Runtime Policy Automations to trigger automated responses tied to runtime policy outcomes
Introduces Gateway Selective Logging to independently configure Prompt Logging and Operational Metrics Logging options
8 details in Everything
5 more releases in this issue
· 2026-04-01 → 2026-04-24
Varonis adds Bitbucket, JFrog, Jira, Confluence integrations for DevSecOps coverage
Adds support for scanning secrets and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. in Bitbucket repositories via new integration
Adds support for scanning secrets and PII in JFrog artifacts via new integration
Extends detection to Jira boards for secrets and PII leakage
Extends detection to Confluence pages for secrets and PII leakage
Varonis enhances its analytics platform with new filters for account security, a centralized workspace for governance requests, and automated labeling capabilities.
Token issuer and Password policies filters in Account analytics detect malicious domains and validate passwords.
New Requests page in Varonis Analytics centralizes Data Access Governance (DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops.) request management.
Adds --ciphertext-commits-address flag to the gateway listener for opt-in ciphertext drift detection via local digest comparison against on-chain consensus
Adds revert_coprocessor_db_state.sql script packaged in the db-migration Docker image to revert a coprocessor database to a previous block number
Adds HCULimit contract with configurable per-block, per-transaction, and per-transaction-depth Homomorphic Compute Unit limits and a whitelist mechanism for privileged callers
3 details in Everything
└──▷ BREAKING ON UPGRADE
!MultichainACL.sol, MultichainACLChecks.sol, and IMultichainACL.sol are removed entirely from gateway-contracts
!isUserDecryptionReady signature changed — the address userAddress parameter was removed; old signature preserved via backward-compat overload but is deprecated
!FHEVMExecutor prepends COMPUTATION_DOMAIN_SEPARATOR (FHE_comp) and appends blockhash(block.number-1) + block.timestamp to handle hashing
!New HCULimit contract required — FHEVMExecutor REINITIALIZER_VERSION bumped to 3. Initialization requires hcuCapPerBlock, maxHCUDepthPerTx, and maxHCUPerTx parameters.
!ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.REINITIALIZER_VERSION bumped to 4 — ExpirationDateBeforeOneHour error replaced by ExpirationDateInThePast
!ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace..sol renamed to FhevmECDSA.sol — import path changed from cryptography/ECDSA.sol to cryptography/FhevmECDSA.sol, library renamed from ECDSA to FhevmECDSA
!Tenants table removed from DB
!Legacy tfhe-worker gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. endpoint removed
$ git clone --branch 3.17.1 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.17.1
Adds Disabled, TLS, and Mutual TLSMutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. options for instance TLS configuration via configured file path.
Adds STATEMENT_DISALLOW_TRUNCATE rule for Oracle, PostgreSQL, MySQL, and MSSQL SQL Review.
Extends STATEMENT_WHERE_DISALLOW_FUNCTIONS_AND_CALCULATIONS to Oracle and PostgreSQL; narrows it to flag functions/calculations only on indexed columns.
3 details in Everything
1 more release in this issue
· 2026-04-09 → 2026-04-23
Bytebase 3.17.0 adds HA support, Page Agent AI assistant, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.query_database tool, and CosmosDB local emulator.
└──▷ GET THIS VERSION
$ git clone --branch 3.17.0 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.17.0
Supports licensed multi-replica deployments with shared external PostgreSQL metadata for High Availability
Adds in-app Page Agent with threaded resumable conversations, DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime.-aware autocomplete, and tool-callingtool-callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions.
Adds MCP query_database tool for executing SQL queries against managed databases
Adds support for CosmosDB local emulator connection and dynamic data masking
Adds new Issue Approved webhook event type with redesigned Slack message format
+4 moreshow less
Supports executing stored procedures (CALL / EXEC) in SQL Editor by classifying them as DML
Supports issue type filter in advanced search (Database Change, Role Grant, Database Export, Access Grant)
Replaces data classification file upload with an inline JSON editor
Exposes --enable-json-logging flag in the Helm chart for structured log output
9 details in Everything
└──▷ BREAKING ON UPGRADE
!branding_logo moved from workspace profile setting to workspace message (logo field on workspace message)
!GRANT_REQUEST issue type renamed to ROLE_GRANT in API requests and responses
!UpdateSubscription API deprecated; use UploadLicense (PATCH /v1/subscription/license) instead
!Classification level description field removed and level type changed from string to number (int)
!Worksheet API scoped to project: /v1/projects/{id}/worksheets replaces global /v1/worksheets
!ListDatabases now requires explicit workspace ID (/v1/workspaces/{id}/databases) instead of workspaces/-
!CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine. filter substring-search syntax changed from matches() to contains() across plan, database, instance, project, group, user, service account, workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials., query history, access grant, and database metadata table filters
!Each instance now allows at most one read-only data source; extra configured sources are removed after migration
Netskope Cloud Exchange 6.1 adds Azure Key Vault support, CTE Destination Profiles, risk stats, and EDM IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. filtering.
Adds Azure Key Vault as a supported secrets manager alongside HashiCorp Key Vault for connector credential storage
Adds Destination Profile support to the Netskope Cloud Threat Exchange (CTE) plugin for managing configurable network targets
Adds Normalization options in the Risk Exchange Schema Editor to control field value transformation during ingestion
Adds risk score/context statistics display in the Risk Exchange Dashboard
Adds bi-directional ticket creation and update workflows in the Netskope CTO plugin with incident resolution back to the Netskope tenant
+6 moreshow less
Adds relative format filtering (days, hours, minutes) for expired IoCs in the CTE Module
Adds support for custom delimiters (comma, pipe, semi-colon) in the EDM Module
Adds a retry mechanism for 429 errors in EDM hash upload with up to 5 retries and 5-second delays
Adds UI functionality to regenerate expired SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificates
Adds ability to generate and download diagnostic logs from the Cloud Exchange UI
Adds Type field to diagnostic file Cloud Exchange Platform logs
11 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed support for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 8.x operating systems, making RHEL 9.5 the minimum supported version for Cloud Exchange deployments.
4 more releases in this issue
· 2026-04-17 → 2026-04-28
Netskope adds AI Gateway Analytics dashboard and AI Gateway Events data collection for governing LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. traffic.
Adds the AI Gateway Dashboard under Advanced Analytics to provide visibility into traffic to AI agents and LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. through deployed AI Gateways.
Makes AI Gateway Events data collection available for building and customizing dashboards via Advanced Analytics > Netskope Library.
Netskope v136.1.0 introduces AI Security Ops Agent, Next Gen API DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Owner support for Jira/GitHub, and NewEdge Express Connect.
Adds Netskope AI Security Ops Agent to automate case creation, investigation, and response workflows for DLP incidents
Enables Owner attribute policy definition for Atlassian Jira and GitHub in Next Generation API Data Protection
Releases NewEdge Express Connect as a licensed capability to steer up to 10 Gbps over dedicated physical circuits
Netskope Private Access 136.0 adds threat protection, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., geo-fencing, multi-CA prelogon, and real-time policy updates
Adds support for applying Intrusion Prevention System (IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection.) and Threat Protection Service (TSS) profiles to NPA policies for web traffic on ports 80 and 443
Enables Data Loss Prevention (DLP) profile application directly to NPA policies for web applications accessed via the Netskope Client
Introduces source country as a policy criteria for NPA, allowing access restriction based on user geolocation resolved from Egress IP
Supports uploading multiple Certificate Authorities within a single client configuration for NPA Prelogon tunnels
Netskope Advanced Analytics adds AI Guardrails dashboard and new alert schema fields for generative AI monitoring
Adds the AI Guardrails out-of-the-box dashboard to the Advanced Analytics library for monitoring generative AI activity, policy enforcement, and threat detection.
Adds new data attributes to the AI Guardrails alert schema in Advanced Analytics: Profile Name, Matched Category Name, Matched Category Level, Matched Prompt/Response, Matched Prompt/Response Level, Matched Keyword, OWASP Top 10 LLM, MITRE ATLASMITRE ATLASA MITRE-maintained knowledge base of adversarial tactics and techniques targeting AI and machine learning systems, modelled on ATT&CK, giving cyber tools a structured taxonomy for AI-specific threat modelling., and Matched Content.
UVM adds an Overview dashboard with MTTR metrics and granular ticket workflow controls including rule enable/disable and default status.
Adds the Overview Dashboard for consolidated viewing of findings from ingestion to remediation, featuring risk-adjusted severity breakdowns and Mean Time to Remediate (MTTR) metrics
Enables saving individual Ticket Workflow rules in an active or inactive state without deleting configuration
Allows defining a default status for all new tickets that do not match specific workflow rule criteria
Introduces an automatic ticket closure rule with the ability to exclude specific statuses from auto-closure logic
4 details in Everything
31 more releases in this issue
· 2026-04-01 → 2026-04-30
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. introduces DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. engine selection for classification, bulk CSV unmanaged DB registration, Azure AI/Cosmos policies, and Experience Center migration
Adds ability to select specific DLP engines in Data Classification Settings page to control which engines are used for alerting purposes
Adds CSV-based bulk registration capability for unmanaged database servers via CSV templates in Resource Inventory
Enables test connectivity checks for registered services (unmanaged databases, Snowflake, Databricks) before initiating a scan
Adds 18 new data posture policies for Azure AI Foundry and Azure Cosmos DB within Data Posture Policies section
Migrates DSPM management interface to Zscaler Experience Center in Zscaler Admin Console
+2 moreshow less
Restricts cloud account onboarding network configuration to custom VNets/VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules., removing default Zscaler-managed resources
Enforces use of only on-premises scanners for on-premises database scans
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds Azure AI/CosmosDB policies, Experience Center migration, CSV bulk DB registration, RDBMS sampling, and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. engine selection
Adds new data posture policies for Azure AI Foundry, Azure OpenAI, and Azure Cosmos NoSQL (17 policy titles) to detect sensitive data exposure and misconfigurations
DSPM is now available in Experience Center, accessible via the Zscaler Admin Console for Experience Center
Adds CSV templates for bulk registration of unmanaged database servers in Resource Inventory
Enables selecting specific DLP engines in Data Classification Settings for sensitive data identification and alerting
Introduces predefined RDBMS random-row sampling scans to reduce scan times and impact on large databases
+3 moreshow less
Provides 70 predefined data classification engines for common sensitive data types (e.g., credit cards, SSNs) to reduce false positives
Adds On-Premises filter to the Clouds filter on the Data Duplication page
Adds Test Connectivity feature for registered services (unmanaged databases, Snowflake, Databricks) in Resource Inventory
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The default network configuration using Zscaler-managed resources is removed for cloud account onboarding; custom network configuration (VNets/VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules.) is now required.
!DSPM no longer provides support for using cloud scanners to scan on-premises databases; only on-premises scanners are supported.
!The Data Sensitivity Settings page is renamed to Data Classification Settings.
Zscaler DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds on-premises scanner enforcement, Experience Center access, bulk unmanaged DB registration, and RDBMS sampling.
Adds ability to bulk register unmanaged database servers via CSV templates in the Resource Inventory
Enforces use of only on-premises scanners for scanning on-premises databases, removing cloud scanner support
Makes DSPM accessible within the centralized Zscaler Experience Center platform
Adds configurable DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. engine selection for data classification and alerting in Data Classification Settings
Supports random-row sampling for RDBMS data scans to improve accuracy and reduce scan times
+3 moreshow less
Adds On-Premises filter to Clouds in the Data Duplications page
Enables clicking file paths and copy counts in Data Duplications for quick detail navigation
Adds Test Connectivity feature for registered services like unmanaged databases, Snowflake, and Databricks
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The default network configuration using Zscaler-managed resources for cloud account onboarding is removed; only custom network configuration (creating VNets or VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules.) is supported.
!Support for using cloud scanners to scan on-premises databases is removed; only on-premises scanners are now allowed.
!The Data Sensitivity Settings page is renamed to Data Classification Settings.
Authentication Service now supports integrating two Private Access tenants for multi-tenant SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and access management
Adds support for integrating two Private Access (ZPA) tenants simultaneously through the Zscaler Admin Console
Enables IdP-initiatedIdP-initiatedA SAML or OIDC login flow where the identity provider starts the session and pushes an assertion to the service provider without the user first requesting access, removing the SP-side redirect step. and service provider-initiated single-sign-on (SSO) to access all configured private tenants from Authentication Service
Supports Zscaler Client Connector enrollment and browser-based access for multiple Private Access tenants
ZIA adds predefined DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dictionaries for Argentina and Mexico PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations.; Microsoft Teams DLP supports collaboration scope filtering
Adds Argentina Uniform Bank Code (CBU) to the set of predefined DLP dictionaries
Adds Cambodian National ID (KIdC) to the set of predefined DLP dictionaries
Adds Mexico Business Tax ID (BRFC) to the set of predefined DLP dictionaries
Adds Mexico Individual Tax ID (IRFC) to the set of predefined DLP dictionaries
Adds Mexico Social Security Number (NSS) to the set of predefined DLP dictionaries
+1 moreshow less
Enables defining Microsoft Teams DLP rules with a new collaboration scope option: External, Internal, or Any
Mapping Copilot introduces AI-guided mapping assistant for data sources in the SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. Platform.
ZIA adds Slack DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. incident forwarding, Adaptive Access and Alerting APIs, Azure integration endpoints, NSSE feeds, NTP CLI, Sandbox rules, and O365 policy options.
Adds GET /adaptiveAccessProfiles and GET /adaptiveAccessProfiles/profiles/rules API endpoints to retrieve Adaptive Access profiles and their rules on zia, zscalerone, zscalertwo, zscalerthree, and zscloud platforms.
Adds POST /alertRuleConfiguration/webhooks/test endpoint to test webhook configurations alongside existing CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. endpoints for alert definitions (/alertDefinitions), Security alert rules (/alertRuleConfiguration/rules), UEBA alert rules (/alertRuleConfiguration/uebaRules), and webhooks (/alertRuleConfiguration/webhooks).
Adds GET /azure/refreshConnectionStatus, POST azure/refreshConnectionStatus, GET /azure/tunnelConfiguration, POST /azure/tunnelConfiguration, DELETE /azure/unConfigureTunnel/{hubId}, GET /azure/unConfigureTunnelStatus, GET /azure/virtualHubs, and POST azure/virtualHubSync API endpoints for Azure VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. and tunnel management.
Adds urlCategoriesExclude, urlClassesExclude, and urlSuperCategoriesExclude fields to the ZmanageNssFeed model in the /nssFeeds APIs to exclude specific URL classes, categories, and super categories from NSS logs.
Adds %s{ac_doc_subtypes} field to the Feed Output Format for NSS or Cloud NSS feeds configured for Email DLP logs to capture document subtypes like invoices and expense reports.
+10 moreshow less
Extends DLP rule name reporting by adding DLP Rule Name as a Data Type in Interactive Reports widgets and Web Insights, allowing users to schedule incident reports filtered by rule name.
Enables forwarding of Slack chat-based DLP policy incidents to Zscaler Incident Response, Workflow Automation, Web Insights, Logs, and the DLP policy auditor, in addition to existing file-based violations.
Adds Evaluate Other Policies and Bypass Other Policies options under the Do Not Inspect action for the O365 One Click predefined rule in SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS Inspection Policy.
Adds Sandbox_Docs_Trusted, Sandbox_Docs_Archives, and Sandbox_Exes_Web default rules for Advanced Sandbox, which are disabled by default but can be enabled; these cover Microsoft Office/PDF, Archives, and Executables/Web Content with specific first-time and subsequent download actions.
Adds support for identifying Kafka (Application Service) and Zalo (Instant Messaging) as new Network Applications in Firewall Control.
Allows configuring a separate Cloud NSS feed specifically for alerts to monitor data lag, loss, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. connection health.
Adds Instance Discovery Report support for Microsoft Azure with discovery levels at Domain, Tenant, and Resource.
Extends cloud application instances creation to Google Gemini and Microsoft Copilot.
Adds ability to add or remove custom NTP servers via CLI on zscalertwo.net and zscalerthree.net Virtual Service Edge appliances.
Adds Authentication Service Authentication and Authentication Service SCIM as new log types for NSS for Web, and Authentication Service Admin Audit Log as a new application filter for Admin Audit Logs.
Incident details page now supports in-place actions and status refresh; quarantined email release status tracking improved; statement predicate limit raised to 100.
Incident Details page allows performing actions directly without navigating away
Quarantined Email Status field added for released emails with a View Status link
ZIA Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. on macOS (26.2.0.1416) adds network type enforcement, CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network./regex for shares, EDM, share-externally, cancel action, and Base64 inspection.
Network Type selector (Trusted, Off-Trusted, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection.) in Endpoint DLP policy rules for Network Share, Printing, and Device Control channels
CIDR ranges and regular expressions for advanced matching when creating/editing network shares in DLP resources
Exact Data Matching (EDM) page at Analytics > Endpoint Data Scan > Sensitive Information for structured sensitive data protection
Share Files Externally capability with secure HTML encryption, accessed via Analytics > Endpoint Data Scan > Sensitive Information
End-user ability to cancel triggering activity for Removable Storage, Network Share, or Personal Cloud Storage policy rules on macOS
+1 moreshow less
Inspection of Base64-encoded content for sensitive data in DLP policy rules
ZIA adds Microsoft Teams collaboration scope filtering, new regional DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dictionaries, and Smartsheet integration in Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications..
Adds External, Internal, or Any collaboration scope options when creating DLP rules for Microsoft Teams to scan messages and attachments based on channel membership.
ZIA adds Gen AI prompt configuration for QuillBot and Google AI via API
Adds enableQuillbotAIPrompt and enableGoogleAIPrompt Boolean fields to the AdvancedUrlFilteringCloudAppOptions model in the /advancedUrlFilterAndCloudAppSettings APIs.
Zero Trust Branch 8.0.8P4 adds DDNS forwarding, DNS Proxy toggle, and App Connector auto-recovery status.
Enables DNS Proxy to forward Windows DDNS update packets to private DNS servers, including TSIGTSIGA DNS authentication mechanism defined in RFC 2845 that uses shared secret keys and HMAC to sign DNS messages, letting resolvers and servers verify that updates or zone transfers come from a trusted peer. updates over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port 53
Adds a UI control to enable or disable the DNS Proxy Service for a specific site
Displays a new status for invalid hardware IDs on the App Connector page and shows Re-provisioning App Connector during auto-recovery
Client Connector Portal 4.5.3 adds macOS device posture visibility, Export option to Failed Posture Devices, and dashboard support for Authentication Service tenants.
Enhances the Device Posture dashboard to display macOS devices in addition to Windows devices
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Removes the options to soft remove a device or view device fingerprint details from the Failed Posture Devices page
AI Guard 2.13.1 adds default LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider auto-provisioning and ElevenLabs TTS support.
New auto-provisioning behavior for default LLM providers during AI Guard tenant creation
New integration with ElevenLabs (text-to-speech mode) as a supported provider
ZIA adds sandbox default rules, NTP CLI, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. logs, and workload group deletion API
Adds three new disabled-by-default Advanced Sandbox rules (Sandbox_Docs_Trusted, Sandbox_Docs_Archives, Sandbox_Exes_Web) for Microsoft Office, PDF, Archives, Executables, and Web Content.
Enables adding or removing custom NTP servers from configuration files via CLI commands on Virtual Service Edge.
Adds DLP Rule Name as a schedulable data type in Interactive Reports widgets and Web Insights for ZIA.
Extends Email DLP Insights Logs with a Subdocument Type column and filter, capturing around 200 new document types across 10 categories.
Adds the %s{ac_doc_subtypes} field to NSS Feed Output Formats for Email DLP logs.
+8 moreshow less
Allows configuring Evaluate or Bypass other policies actions in the Predefined O365 One Click rule within SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS Inspection Policy.
Adds URL classes, categories, and super categories include/exclude filters to NSS and Cloud NSS feeds for web logs.
Adds urlCategoriesExclude, urlClassesExclude, and urlSuperCategoriesExclude fields to the ZmanageNssFeed model in the /nssFeeds APIs.
Extends network application identification support to Kafka (Application Service) and Zalo (Instant Messaging) in Firewall Control.
Enables configuration of a separate Cloud NSS feed specifically for alerts to monitor data lag, loss, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. connectivity.
Adds apiSessionTimeout field to the AdvancedSettings model in the /advancedSettings APIs on zscalertwo.net and zscalerthree.net.
Adds subdocument type support and a Subcategory column to the Data Discovery Report with an interactive bubble chart.
Enables bulk deletion of workload groups via the DELETE /workloadGroups endpoint.
ZPA Microsegmentation adds Anti-Tamper, AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations./GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. support, and SLES 15 agent compatibility
Anti-tamper protection for the Microsegmentation Agent ensures that reporting, enforcement, and upgrade processes cannot be maliciously disabled or altered, even by actors with admin privileges.
Microsegmentation extends support to Azure Kubernetes Service (AKS) and Google Kubernetes Engine (GKE), enabling visibility into Kubernetes inventory and flow logs via the agent.
Microsegmentation agent can now be installed on Suse Linux Enterprise Server 15.
ZIA adds five new predefined DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dictionaries for PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. detection in Argentina, Cambodia, and Mexico.
Adds predefined DLP dictionary Argentina Uniform Bank Code to detect leakage of CBU
Adds predefined DLP dictionary Cambodian National ID to detect leakage of Khmer Identification Code (KIdC)
Adds predefined DLP dictionary Mexico Business Tax ID to detect leakage of BRFC
Adds predefined DLP dictionary Mexico Individual Tax ID to detect leakage of IRFC
Adds predefined DLP dictionary Mexico Social Security Number to detect leakage of NSS
ZIA adds API session timeout config, bulk workload group deletion API, NTP CLI management, and new DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./reporting fields
Adds apiSessionTimeout field to the AdvancedSettings model in the /advancedSettings API to control API session inactivity timeout (5-20 minutes).
Adds DELETE /workloadGroups endpoint to delete multiple workload groups for an organization.
Adds CLI commands to add or remove custom NTP servers from configuration files on Virtual Service Edge.
Enables selection of Evaluate Other Policies or Bypass Other Policies actions in the O365 One Click predefined rule within SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS Inspection Policy.
Adds Subcategory column and new Subdocument Type filter/column to Email DLP Insights Logs for document classification visibility.
+5 moreshow less
Adds %s{ac_doc_subtypes} field to NSS Feed Output Format for Email DLP logs.
Adds urlCategoriesExclude, urlClassesExclude, and urlSuperCategoriesExclude fields to the ZmanageNssFeed model in the /nssFeeds API for URL exclusion in web logs.
Adds support for Cloud NSS feeds specifically for alerts monitoring.
Adds default disabled rules Sandbox_Docs_Trusted, Sandbox_Docs_Archives, and Sandbox_Exes_Web for Advanced Sandbox subscriptions.
Adds identification and management support for Kafka and Zalo as new network applications in Firewall Control.
ZPA adds Secondary DNS support in Network Segments and new VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. diagnostics/logs
Adds secondary_dns_server configuration option to Network Segments for FQDN-based application access backup
Enables new VPN traffic flow logs for troubleshooting legacy app connectivity issues
Enables new VPN user logs for analyzing access and authentication diagnostics
New Browser Extension for Zero Trust Browser adds BDR and browser-native DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. capabilities across ZIA clouds.
Browser Extension for Zero Trust Browser enables browser detection and response (BDR) and browser-native data loss prevention (DLP) capabilities.
Posture-based application access is now available through the new browser extension.
The Browser Extension for Zero Trust Browser provides seamless enterprise access from any existing browser.
OpenSSH 10.3 adds agent query extension, multi-file key directives, connection info commands, and ed25519/PKCS8 support.
└──▷ TRY IT
Query the local SSH agent to see which protocol extensions it supports before scripting agent interactions.
$ ssh-add -Q
Inspect open channels on an existing multiplexed session to troubleshoot connection state without opening a new shell.
$ ssh -O channels user@host
Add ssh-add -Q to query the SSH agent's protocol extensions via the draft-ietf-sshm-ssh-agent query extension
Add -J/ProxyJump user and host name validation on the command line for ssh(1)
Support multiple files in the sshd_config RevokedKeys directive
Add ~I escape option to show current SSH connection information
Add ssh -O conninfo user@host multiplexing subcommand to display connection info
+5 moreshow less
Add ssh -O channels user@host multiplexing subcommand to list open channels
Add invaliduser penalty option to PerSourcePenalties in sshd_config
Add GSSAPIDelegateCredentials server option in sshd_config
Support VA DSCP codepoint in the IPQoS directive for ssh(1) and sshd(8)
Convert PerSourcePenalties to floating point time for sub-second granularity
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed bug compatibility for SSH implementations that do not support rekeying; connections with such peers will fail during transport rekeying.
!Changed handling of certificates with an empty principals section via authorized_keys principals="" option: previously matched any principal (wildcard), now matches never, preventing accidental wildcard authentication.
!Wildcard characters in certificate principals are now consistently implemented for host certificates and unsupported for user certificates.
Pomerium adds Revoke and block option to prevent SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. re-auth loops in Enterprise Console
└──▷ HOW TO FIND IT
Immediately block a compromised user from re-authenticating via SSO during an incident.
📍In the Enterprise Console session management dialog, check Revoke and block future authentication before confirming revocation
Adds a Revoke and block future authentication checkbox to the session revocation dialog in the Enterprise Console
Sophos Connect 2.0 for macOS introduces native SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination.VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. client support.
Establish remote access SSL VPN connections on macOS devices via the Sophos Connect client
vopono 0.10.16 adds AmneziaWG protocol support, daemon GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands./Wayland forwarding, and a connectivity check with WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer. keepalive defaults.
└──▷ GET THIS VERSION
$ git clone --branch 0.10.16 https://github.com/jamesmcm/vopono.git
# already have the repo? check out this version:$ git checkout 0.10.16
Adds initial AmneziaWG protocol support, including automatic protocol detection from config files.
Forwards GUI/X11/Wayland environment variables to daemon-launched applications and uses the connecting user's XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. config directory in daemon mode.
Adds a connectivity check for the selected network interface at startup.
Sets a default WireGuard PersistentKeepalive when missing to improve recovery after network drops.
Removes Mullvad OpenVPN support, reflecting Mullvad's discontinuation of the service.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Mullvad OpenVPN support has been removed; any vopono setup using Mullvad over OpenVPN will no longer function after upgrading.
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Authorization Server flows gain optional single-use refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. and configurable absolute token lifetime.
Adds Enable Refresh Token Support to OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. ID Token and Aembit Access Token Credential Providers exclusively for MCP Authorization Server flows.
Adds Absolute Token Lifetime setting to control how long refresh tokens remain valid for exchanging for new access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. after initial issuance
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Identity Gateway 1.30 adds pre-proxy auth, tool annotations, and a metrics endpoint.
Authenticates requests before proxying them to upstream MCP servers (new default behavior)
Includes tool annotations in MCP responses
Returns HTTP 405 for GET requests to the MCP endpoint
Adds additional metadata to Unauthorized (401) responses
Honors the AEMBIT_TRUSTED_ISSUER_DOMAINS environment variable for trusted issuer configuration
+1 moreshow less
Provides a new metrics endpoint for Gateway operational metrics on a configurable port
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The Gateway now authenticates requests before proxying them to upstream MCP servers as its new default behavior.
!GET requests to the MCP endpoint now return HTTP 405.
Warden v0.11.0 adds providers for Atlassian, Cloudflare, Grafana, Honeycomb, OVH, Prometheus, Scaleway, Sentry and IBM Cloud with new JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store./cert role introspection.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.0 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.11.0
Adds Atlassian provider with dual-mode auth for Cloud and Data Center
Adds Cloudflare provider with dual-mode gateway and R2 S3 support
Adds Grafana provider with httpproxy gateway and source driver
Adds Honeycomb provider with httpproxy gateway and source driver
Adds OVH provider with dual-mode gateway and dualgateway shared framework
+5 moreshow less
Adds OVH source driver with OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. credential minting
Adds Prometheus provider with httpproxy gateway
Adds Scaleway provider with dual-mode gateway and SigV4SigV4AWS's request-signing protocol that authenticates HTTP calls by hashing the request body, headers, and credentials into a signature; cyber tools use it to talk to AWS APIs without embedding long-lived secrets. shared pack
Adds Sentry provider with httpproxy gateway for REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. access
Adds skip_initial_connection option to the teleportmwi provider to allow lazy initialization of the provider.
Adds ui_config resource support to the Terraform provider.
Added current and previous resources discovered summary per service to Discovery Config Status.
Added lock resource support to the Kubernetes operator.
+13 moreshow less
Added scoped role assignment support to the Terraform provider.
Added scoped roles support to the Terraform provider.
Added scoped role assignments to the k8s operator.
Added scoped role to the k8s operator.
Added teleport_app_active_sessions Prometheus gauge with app label for app access agent autoscaling.
Added support for Azure join tokens based on Azure tenant ID.
Added user.metadata.name variable to RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. role templates and expressions.
Add x11 forwarding, SSH File Copying, Agent Forwarding, SSH Port Forwarding, Create Host User, Max Sessions, and host sudoers to scoped ssh role options.
Standard Teleport agents can now join using the bound_keypair join method.
Add support for * and $ globbing to the GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. token rules.
Extended access monitoring predicate language with contains(set, item) expression.
Added visible teleport.dev/ labels for Azure and GCP auto-discovered VMs.
Add SAML IdPSAML IdPA SAML Identity Provider is a service that authenticates users and issues signed XML assertions to relying applications, letting a single login session span many services without re-entering credentials. Service Provider support to Terraform provider.
18 details in Everything
└──▷ BREAKING ON UPGRADE
!Auth connector names are now limited to 768 characters.
Conveyor Labs adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server for AI tools, Enterprise custom roles, and questionnaire return to ticketing systems.
Adds Conveyor MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. (Labs) allowing AI clients like Claude or Cursor to connect directly to Conveyor
Adds Settings > Members & Access > Roles path for creating custom Superadmin-controlled user permissions
Adds Send to Salesforce (or Jira, Slack, Zendesk) action button on completed questionnaires originating from ticketing systems
Conveyor Labs releases an MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. (Labs) to connect AI tools like Claude and Cursor directly to Conveyor for access management and Trust Center queries.
Introduces the Conveyor MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server in Labs, allowing MCP-compatible clients to connect directly to Conveyor.
Enables AI assistants to approve pending access requests, view customer activity in the Trust Center, audit Knowledge Base content, track questionnaire completion rates, and identify popular document downloads.
Risk Ledger April 2026 adds control/domain reviewer assignments, IAF certificate discovery, and a redesigned assessment UI
└──▷ HOW TO FIND IT
Assign an IT lead to technical controls and see their pending tasks in the Action Centre.
📍In the assessment view, assign a user to specific controls and domains via the new UI panel; review tasks appear in the Action Centre.
Reviewers can now be assigned to specific controls and domains, with tasks surfaced in the Action Centre.
Certificate Discovery integrates with the International Accreditation Forum (IAF) to surface supplier ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. certification data.
Assessment view redesign places controls in a right-hand panel, domains in a left sidebar, and filters at the top.
Improved organisation search adds flexible matching, infinite scroll, and a unified discovery modal.
New AI Vendor Detection with dashboard widgets, new IRQ questionnaire template for risk assessment, and expanded Activity Center audit logs
└──▷ HOW TO FIND IT
Monitor AI adoption across your third-party supply chain by viewing the new dashboard widgets and running the predefined questionnaire.
📍Navigate to the Dashboard › AI Vendors widget to view populations, then open the AI Questionnaire in the supplier assessment workflow.
Configure inherent and material risk calculations using the new template structure.
📍In the IRQ settings, select the IRQ questionnaire template and configure which question templates to include or exclude for specific third parties.
Adds AI Vendors identification with dedicated dashboard widgets and a predefined AI questionnaire to track suppliers using AI technologies
Introduces the IRQ questionnaire template for calculating Business Impact and allows customizing risk assessments by selecting which templates and questions to include or exclude
Expands Activity Center audit logs to capture time-stamped events for asset management, dispute workflows, remediation tasks, user lifecycle events, and company user invitations
Mondoo April 2026 adds seven new platforms, shadow AI detection, expanded IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. scanning, and MQLMQLA query language created by Microsoft for hunting across telemetry in Microsoft 365 Defender, letting cyber tools express complex behavioral detections in a structured, readable syntax. expansion
Adds detection for seven brand-new platforms to expand coverage beyond existing assets
Introduces shadow AI detection capabilities to identify unauthorized AI tools in the environment
Expands infrastructure as code (IaC) scanning scope with new checks and improved coverage
Deepens cloud and network coverage with updated CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmarks for better compliance validation
Significantly expands MQL (Mondoo Query Language) capabilities with the largest expansion to date
Drata adds ISO/IEC 27701:2025ISO/IEC 27701:2025An international standard extending ISO/IEC 27001 to cover privacy information management, giving organizations a certifiable framework for demonstrating GDPR and broader privacy-law compliance. framework support with pre-mapped controls and policy templates
Adds ISO/IEC 27701:2025 framework support for Privacy Information Management Systems (PIMS)
Introduces pre-mapped controls that align to existing security programs
Enables cross-framework mapping between ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 27701, ISO 27001, GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., and CCPA
Adds privacy-focused policy templates including PIMS Policy, Data Protection, Breach Notification, and Privacy Use & Disclosure
Drata adds direct SafeBase tenant management and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. for North American MSSPs in the Enhanced Dashboard
Enables single-interface SSO into all managed SafeBase tenants from the Drata dashboard for centralized administration.
Vanta adds IRL GA, Standard Commitments AI, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 22301 framework, OSCAL export, and Vanta Agent search.4
Adds ability to upload auditor's Information Request List (IRL) for unified audit workflows.
Adds automatic identification of non-standard commitments in customer contracts via AI analysis of standard papers.
Adds one-click persistent quick views on the People page to filter personnel by actionable states.
Adds custom structured metadata fields to Issues for enterprise tracking needs.
Adds ISO 22301 as a new out-of-the-box compliance framework.
+6 moreshow less
Adds Vanta Agent access via top navigation search bar with rotating prompt suggestions.
Adds team ownership for controls with configurable Slack channel alerts.
Updates TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. Assessment Evidence Status to distinguish fulfilled requests from total required.
Implements partial materialization refresh on the Tests page to update assignments faster.
Adds OSCAL export capability for FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. R5, NIST 800-53NIST 800-53A catalog of security and privacy controls for U.S. federal information systems, published by NIST. Cyber tools cite it to map their findings or features to a recognized compliance framework., and CMMC frameworks.
Introduces Vanta Control Framework (Private Preview) as a unified view of overlapping compliance commitments.
11 details in Everything
3 more releases in this issue
· 2026-04-05 → 2026-05-02
New Vanta capabilities: Outbound Webhooks, DPIADPIAA Data Protection Impact Assessment — a structured process, required under GDPR, for identifying and mitigating privacy risks before deploying a system that processes personal data at scale. AI drafts, custom doc renewal dates, and processor-side ROPA tracking.
Adds GA Outbound Webhooks for real-time notifications on vendor creation, Trust Center access requests, and questionnaire status changes
Introduces DPIA Generation with Vanta AI to draft Data Protection Impact Assessments from processing activities and risk scenarios
Enables Custom Document Renewal Dates for individual or bulk document updates independent of upload dates
Delivers SOC 2 Guide in Slack notifications and policy reminders via the Vanta Agent
Improves QAuto: Section Context Awareness by surfacing section headings to AI for more accurate questionnaire answers
+8 moreshow less
Makes TPRM: Next Review Date available during vendor import to trigger automated evidence collection workflows
Adds Asana & ClickUp Ticket Linking + Evidence Sync to sync task status and attachments from those platforms to Vanta Documents
Introduces Enforce Policy Review setting requiring employees to open and review policies before acceptance
Implements Auto Account Assignment & Creation to match or create accounts for uploaded contracts via AI
Launches Agent-led Risk Onboarding in the SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. Guide to generate personalized risk scenario recommendations
Opens Early Access for Redesigned Portal Automation in QAuto using full-page AI scan and agentic navigation
Adds Processor-Side of the Data Inventory (Processor ROPA) by splitting data inventory into Data you control and Data you process for others
Introduces QAuto: Object-Level Permissions for Questionnaires for granular access control based on ownership or approver roles
Vanta adds public REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for contract management, remote MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server beta, and agent image/PDF attachments.
Adds upload, read, and delete capabilities to the public REST API for programmatic contract management
Releases Vanta remote MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. as a public beta feature for all customers
Enables attaching images and PDFs to Vanta Agent via the paperclip icon
Makes the Controls Page available in IRL audits for viewing in-scope controls and progress tracking
Vanta adds Personnel, QAuto, Privacy, and spreadsheet questionnaire support to Vanta Agent
Adds Personnel (V2) context to the Vanta Agent for personnel compliance posture queries
Adds expanded Spreadsheet Questionnaire support for TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. as a first-class in-app experience
Adds QAuto context to the Vanta Agent allowing pasting security questionnaire questions for answers from knowledge base and questionnaires
Adds Privacy context to the Vanta Agent for privacy product data queries including processors and impact assessments
Scrut adds sync error status and detailed logs for select integrations.
└──▷ HOW TO FIND IT
Jump from a failing test directly to the problematic integration
📍Click the sync error indicator on an affected test to go directly to the integration causing the issue
Adds visible Sync Error status for MS Intune, Jamf Pro, JumpCloud, Fleet MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies., NinjaOne, SharePoint and Jira integrations.
Provides detailed source error codes and messages in audit logs for these supported integrations.
Displays sync error indicators on automated tests affected by these integrations.
3 details in Everything
16 more releases in this issue
· 2026-04-12 → 2026-04-21
Seven new HRISHRISHuman Resources Information System — software that centralises employee records, payroll, and org data. Cyber tools integrate with it to tie identities and access rights to authoritative HR records. and BGV integrations added to the Integrations Library.
Adds Darwinbox integration for HR data sync via the Integrations Library.
Adds Alexis integration for HR data sync via the Integrations Library.
Adds BreatheHR integration for HR data sync via the Integrations Library.
Adds HRworks integration for HR data sync via the Integrations Library.
Adds Sage Intacct integration for background verification workflows via the Integrations Library.
+2 moreshow less
Adds Postman integration for background verification workflows via the Integrations Library.
Adds ZincWork integration for background verification workflows via the Integrations Library.
Adds Settings -> Audit Log and Questionnaire > Audit Log tabs in the Vendor Portal for vendor action traceability.
Adds a new Settings -> Audit Log tab in the Vendor Portal to track user management actions such as adding/removing users and editing details.
Adds a new Audit Log tab on individual questionnaires in the Vendor Portal to record assessment activity including received/submitted status, and attachment changes.
ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 22301:2019 framework expanded to 73 requirements with new customizable policy templates and refined control mappings
Expands the ISO 22301:2019 framework in the Frameworks module from 56 to 73 distinct requirements
Adds new, customizable policy templates for Business Continuity and Disaster Recovery
Introduces refined control mappings and updated evidence suggestions focused on high-value documentation
Adds NEN 7510NEN 7510A Dutch national standard for information security in healthcare, maintained by NEN, specifying controls organizations must implement to protect patient data — tools use it as a compliance framework for Dutch health-sector deployments. framework for Dutch healthcare compliance management
Supports the NEN 7510 framework, the premier Dutch standard for information security within the healthcare sector
Allows mapping of specialized controls for patient data protection, access logging, and confidentiality to policies and evidence
CISO Assistant v3.16 adds incident action plans, risk scenario cancellation, applied control merging, and data wizard attributes.
└──▷ GET THIS VERSION
$ git clone --branch v3.16.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.0
└──▷ HOW TO FIND IT
Allow tracking remediation efforts for security incidents.
📍In the Incident detail view, initiate a new Action Plan.
Export assets including business function context in Data Wizard.
📍In Data Wizard exports, select the Asset.is_business_function attribute.
Deploy CISO Assistant with custom volume mounts and node affinity via Helm.
📍Configure extraVolumes and affinity in the Helm values file.
Adds Action plan for incidents feature to track remediation steps
Adds cancelled status for risk scenario to track abandoned risks
Adds merge applied controls capability in the UI
Adds Asset.is_business_function attribute in Data Wizard exports
Adds detected_at and due_date support during vulnerability import via wizard
+12 moreshow less
Adds exception in the past entry capability for compliance exceptions
Adds button to reset filters on table and clear out cache in UI
Adds custom dashboard on the analytics' extra tab for admins
Adds Context menu for vulnerabilities to quickly toggle severity and status
Adds description column to findings table
Adds journeys presets can support implementation groups and generic pages capability
Adds Règles OIV - Secteur Transport Aérien (2016) framework library entry
Adds Cadre de Conformité Cyber France (3CF) v3.1 framework library entry
Adds loi marocaine n° 09-08 relative à la protection des données personnelles (CNDP) framework library entry
Adds enriched NIST CSF 2.0 with recommendations in the library
Adds Claude skill to prepare mappings integration
Adds extra volumes and affinity config options in Helm chart
17 details in Everything
6 more releases in this issue
· 2026-04-03 → 2026-04-25
CISO Assistant v3.15.9 adds a --name flag for CLI assessments, Cyfun audit export, and links in task emails
└──▷ GET THIS VERSION
$ git clone --branch v3.15.9 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.9
Adds --name flag to the CLI assessment commands to name assessments during creation
Adds support for exporting audits in Cyfun format via the existing export UI/API
Adds links and detailed task list variables to task email templates sent to users
Adds a link attribute to the exception model to associate related references with exceptions
CISO Assistant v3.15.8 adds TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. exports, DORA subcontracting chain handling in ROI, and a new average of averages scoring logic.
└──▷ GET THIS VERSION
$ git clone --branch v3.15.8 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.8
Adds TPRM (Third-Party Risk ManagementThird-Party Risk ManagementAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data.) export capability
Enables handling of subcontracting chains in ROI exports for DORA compliance
Implements an average of averages scoring approach to match Cyfun 2025 logic
CISO Assistant v3.15.6 adds batch label actions for applied-controls and findings, a new DGSSI framework, EUDIRF HLRs support, EBiOS-RM light mode, and timeline visualization
└──▷ GET THIS VERSION
$ git clone --branch v3.15.6 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.6
└──▷ HOW TO FIND IT
Batch update labels on multiple applied-controls or findings in the UI.
📍In the CISO Assistant web interface, select multiple items and apply label actions via the batch menu.
Enable dark/light theme toggle for Ebios-RM analysis views.
📍Access the Ebios-RM module in the UI and switch to light mode via the view settings or toggle.
View compliance timelines for your frameworks with improved performance.
📍Navigate to the timeline visualization section in the CISO Assistant UI to view and interact with new enhanced rendering of your compliance progress.
Supports batch actions on labels for applied-controls and findings
Adds DGSSI Exigences de Qualification de Services Cloud framework (Morocco, arrêté 3-17-25)
Adds support for French National Authority for Health certification for quality of care
Adds EUDI Wallet ARF HLRs in the library
Adds new timeline visualization with better performance and UX
CISO Assistant v3.15.3 adds security key authentication (FIDO2FIDO2The open standard behind passkeys and hardware security keys, where a website checks a signature from the user's device instead of a password. Because the key is bound to the site, phishing pages cannot use it.), orphan control identification, and NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0 support
└──▷ GET THIS VERSION
$ git clone --branch v3.15.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.3
Add ANSHospiConnect HOPEN2 Program Library to available framework libraries
Enable security keys (FIDO2, fingerprint) as a second authentication factor
CISO Assistant v3.15.2 adds DORA incidents reporting and vulnerability data to the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.
└──▷ GET THIS VERSION
$ git clone --branch v3.15.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.2
Adds dora incidents reporting capability for regulatory compliance workflows
Adds vulnerabilities capabilities to the mcp server for external tool integration
Adds degraded status for applied controls and a dedicated kanban view.
└──▷ GET THIS VERSION
$ git clone --branch v3.15.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.1
└──▷ HOW TO FIND IT
View and manage applied controls in a board layout.
📍In the console, go to Applied Controls and switch to the Kanban view
Mark an applied control as having partial or reduced effectiveness.
Sonar Alerts surface four new decision queues (sharing to personal email, dangerous apps, missing owner, late partner review) plus Inbox/Slash email summaries.
Sonar alerts section introduces Dangerous apps queue for elevated OAuth rights with one-click revocation
Sonar alerts section adds Missing owner queue for partners with no clear owner
Sonar alerts surface Late partner review alert when an owner fails to assess a partner twice in a row
Sonar alerts introduce Sharing to a personal email alert queue
Inbox and Slash now show specific, non-generic summaries explaining why an email was categorized as Malicious, Spam, or Safe
Runlayer is an MCP gateway that enforces identity-mapped permissions and detects threats across the agents and MCP servers employees use.
Runlayer 1.28.17 adds GPT-5.5 support, OneDrive/SharePoint MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connectors, and expanded agent permissions.
Adds GPT-5.5 as an available agent model when OpenAI is configured as the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider.
Adds OneDrive and SharePoint MCP connectors for Microsoft 365 integration.
Expands Runlayer MCP server management to allow creating, updating, and deleting connectors via admin-only commands.
Adds a Connectors section to the Shadow page UI showing shadow servers, users, migration targets, and MCP client usage.
Allows all workspace members (not just admins) to view agent accounts, create delegations, and create session grants.
+4 moreshow less
Enables agent say tool on webhook and scheduled runs when the Slack MCP connector is attached.
Makes Agent memory an opt-in feature available via advanced settings.
Includes tool calls and results from prior turns in agent conversation context for better multi-step continuity.
Adds Skyvern to the connector catalog.
9 details in Everything
14 more releases in this issue
· 2026-04-01 → 2026-04-29
Runlayer 1.28.16 adds scoped PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. detection, new connectors (Kubernetes, Tines), shadow analytics, and Outlook MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. guide
Adds PII scan direction configuration to scope PII detection to tool inputs, outputs, or both, configurable globally in Settings → Security Scanners or per connector.
New Shadow vs Managed breakdown chart and Shadow Server Discoveries timeline available on the Shadow page for better visibility into unauthorized connectors.
Adds new connectors for Fellow, Tines, Kubernetes, and Superhuman Mail to the catalog.
Adds a dedicated Outlook setup guide for the Outlook MCP connector.
New workspace setting in Settings → Workspace allows admins to show full admin-facing client setup instructions to all users.
Runlayer 1.28.15 adds identity forwarding via headers/JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store., timezone-aware agent schedules, and new catalog connectors.
HTTP-based MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connectors (Streaming HTTP or SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates.) now receive the authenticated caller's identity via X-Runlayer-* headers or a signed JWT when enabled in connector configuration
Agent schedules support a Local wall clock mode that evaluates cron expressions in the selected timezone and automatically adjusts for DST transitions
New catalog connectors Pinpoint ATS, Clay, and pganalyze are now available
Runlayer 1.28.14 adds configurable risk policies, Intune Remediation support, and new catalog connectors.
Adds per-tier actions (Block, Warn, Allow) for high-risk and medium-risk skills in Settings → Security Scanners
Adds Remediation deployment method to the Intune deployment guide
Adds Smartsheet and DataGrail Vera to the connector catalog
Hides Draft status connectors from MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. endpoint and proxy visibility
Runlayer Assistant GA, Onelayer plugin default visibility, Slack run context in Activity view, new Amazon Redshift connector.
Adds runlayer_assistant generally available for all workspaces with agents enabled.
The onelayer plugin is now visible in the plugin list for all users without a feature flag gate.
Agent runs triggered from Slack now display conversation, channel, and trigger details in the Activity view, with a direct link to the originating Slack message.
Adds Amazon Redshift as a new catalog connector (read-only SQL — discover, explore, and query Redshift clusters and serverless workgroups).
Runlayer 1.28.12 adds Claude Opus 4.7 agent support, custom deployment icons, PPPC profiles for macOS Detect, and ZoomInfo connector.
Adds Claude Opus 4.7 as an available agent model when Anthropic is configured as the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider
Enables setting a custom icon during agent creation in the UI
Allows setting or updating custom icons for deployments via the deployment settings dialog
Adds a Resume action in the Activity view to continue past agent runs in the Playground with prior context
Updates Slack messages to display the LLM model used per response and removes inline tool outputs
+3 moreshow less
Auto-grants developer access to the deploying user when deploying a connector via the CLI
Adds the ZoomInfo connector to the new catalog connector list
Promotes the Ashby connector from beta to generally available
Runlayer 1.28.11 adds agent tool call analytics, auto-sync plugins via Onelayer, connector alias resolution in CLI, and new Render/Hugeicons connectors
Adds top agents by tool calls ranking widget in the Agents tab alongside the existing top-by-runs metric.
Adds a built-in persistent SQLite database for agent memory; documented with no extra storage setup required.
Adds an Auto Sync toggle to the Onelayer org install dialog, pushing plugins via runlayer setup sync.
Expands runlayer setup sync to install both connectors AND plugins marked for auto-sync.
Allows runlayer run to accept a connector alias in addition to a UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. for target resolution.
+2 moreshow less
Adds the new recipes page with copy-paste examples for M2M tokens, OBO flows, session grants, and external user mapping.
Adds Render and Hugeicons connectors to the catalog.
Adds Agents tab to the Analytics dashboard featuring an inventory card and runs-over-time chart
Enables workspace members to duplicate agents from the detail page or agent card menu, cloning configuration, connectors, and tools
Adds OpenAI support to the Add to Organization flow for the Onelayer plugin with MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connector registration and skills upload in ChatGPT
Disables manual role and group editing in the UI when SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. directory sync is enabled, displaying an explanatory banner instead
Adds global command palette (Cmd/Ctrl+K) and query parameter on the servers API for connector search by name or description
+1 moreshow less
Displays a badge on agent cards indicating the count of active schedules for that agent
Runlayer 1.28.8 adds Goose MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client support, S3 SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. export, agent UI filters, and CLI skills/plugins commands.
Goose is now a supported MCP client with hosted and local setup guides
Audit logs can now be continuously exported to an S3 bucket for SIEM ingestion via the SIEM export (S3) feature
CLI 0.23.0 adds new skills find and plugins find commands for browsing and installing skills or plugins from the terminal
The Agents page supports sorting by newest, oldest, alphabetical, and last-used, plus a status filter (active / disabled)
The Playground now automatically injects Runlayer tools (search, run, manage) so agents can reason about the workspace without manual connector setup
+2 moreshow less
Connectors requiring authorization now show a guided access setup dialog directly during agent creation, with per-connector status indicators
The tool picker in policies now includes an annotation-based category dropdown next to Select All for faster bulk selection
Runlayer 1.28.7 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. subagent management, Ravenna connector, Slack link, and scheduled run retries
Add, update, and delete subagents on an agent directly through Runlayer MCP tools (confirm-required).
New catalog connector for Ravenna (AI knowledge management — search knowledge bases, manage channels, and automate support workflows).
Agent Slack settings now include a direct link to manage the agent’s Slack app on api.slack.com.
Scheduled agent runs now retry transient authentication errors automatically instead of failing immediately.
Runlayer 1.28.5 adds sensitive audit log redaction for connectors, scheduled run failure DMs, and a new Connectors analytics tab.
Adds the ability to mark connectors as sensitive, triggering automatic redaction of tool call arguments, results, and security scan details from audit log entries
Enables Agent owners to receive a Slack DM notification when a scheduled agent run fails
Introduces a dedicated Connectors tab in Analytics containing top-by-tool-call, connector health, and usage-by-client widgets
AI Watch adds Codex/OpenCode plugin scanning; Enforce supports Claude Code MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. interception; new Zoom connector and Agent Policies UI.
Adds detection of installed plugin artifacts in Codex and OpenCode for AI Watch via CLI 0.22.0
Enables shadow MCP tool call interception for Claude Code on macOS in Enforce
Adds a dedicated Policies section in the Agent detail page for managing per-agent access rules
Displays skill usage timelines and top skills rankings in the Analytics Skills tab
Introduces Zoom connector to the catalog with meeting search, recording access, and Docs creation tools
Runlayer 1.28.4 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. policy CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information., configurable ToolGuard sensitivity levels, and security warning classification.
Tool Guard now supports Strict, Balanced, and Moderate sensitivity levels configurable per connector
Adds Create, Update, Delete (CRUD) operations for policies via Runlayer MCP governance tools
Classifies hidden-character masking and sensitive-token masking findings as security warnings instead of violations
Adds anthropicInspectStreamForOverloadedError configuration key to inspect the first chunk of an Anthropic streaming response and return HTTP 529 on overloaded_error, enabling proper retry/fallback logic
1 detail in Everything
13 more releases in this issue
· 2026-04-01 → 2026-04-30
Portkey Gateway v2.7 adds Vertex AI Rerank, Bedrock Mantle provider, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. secret support, and Sigstore image signing
Adds bedrock-mantle provider for AWS OpenAI-compatible Bedrock inference with apiKey, assumedRole, and serviceRole auth modes via /v1/chat/completions, /v1/responses, and /v1/messages
Supports Vertex AI Rerank on the unified /v1/rerank endpoint using semantic-ranker-default, semantic-ranker-fast, or semantic-ranker-512 models
Adds matchType parameter to Required Metadata Key-Value Pairs guardrail supporting exact, contains, containsAll, and regex comparison behaviors
Enables MCP integrations to reference centrally-managed secrets via secret_mappings in the integration config, resolved at connection time
Adds value_format: json support for Secret Mappings to parse stringified JSON into target fields for structured credentials
+3 moreshow less
Allows integration-level cost multipliers via pricing_adjustments.multiplier config key for per-integration markup or discount pricing
Outputs signed Docker images using Sigstore Cosign, verifiable against Portkey’s public key before deployment
Extends SEMANTIC_CACHE_EMBEDDING_PROVIDER to accept google and vertex-ai values alongside openai for semantic cache population
Guardrail List page now supports pagination to handle large numbers of guardrails.
Secret Reference Integration support for Azure OpenAI and Azure Foundry setup inside LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Integrations.
Portkey Gateway 2.6.2 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. header renaming, Azure Entra federated auth, and Gemini EmbeddingEmbeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. 2 support
forward_headers entries now accept { from, to } objects to rename client headers before they reach the upstream.
Adds entraFederated auth mode for Azure OpenAI/AI Foundry to exchange AWS web identity tokens for Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments.access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
gemini-embedding-2-preview is now available on the unified /v1/embeddings route for Vertex AI.
Portkey Frontend 1.7.4 adds Logs Path variable in UI, Metadata to Vertex Labels mapping, custom model host provisioning, and Entra-Auth federated support for Azure.
Logs Path variable is now available in the UI
Maps Portkey Metadata to Vertex Labels for better observability
Enables federated auth support for Entra-Auth for Azure Integrations
Adds Anthropic Batch API support, sensitive header masking, Bedrock reasoning effort, and Agent Gateway preview
Adds /v1/batches endpoint for running asynchronous Claude jobs via the Anthropic Batch API
Adds x-portkey-sensitive-headers request header to mask matching values in logs and traces
Adds support for reasoning_effort parameter (minimal/low/medium/high/none) for Bedrock Claude reasoning models, mapped to thinking.budget_tokens on earlier models
Adds experimental /v1/agent/:agentServerId/* proxy route for Agent Gateway preview with A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools.-registry support
Portkey Backend 1.14.0 introduces API key rotation, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connection APIs, Lasso classifier, and HADB MySQL support
API Key Rotation is generally available; use *.rotate scope for organization-service, workspace-service, and workspace-user API key types to enable rotation
Added organization security settings managersWriteWsIntegrations, managersWriteWsMcpIntegrations, and managersWriteMcpServers with default enabled and workspace-level overrides to control manager write access
New GET /v1/mcp-servers/:mcpServerId/connections API for paginated list of user connections to an MCP server
New DELETE /v1/mcp-servers/:mcpServerId/connections API to revoke a specific user's connection to an MCP server
Added configurable MySQL reader with HADR mode using new env vars DB_READER_HOST, DB_READER_USER, DB_READER_PASS, DB_READER_PORT and MYSQL_WRITER_HADR_MODE=ON for writer failover
+1 moreshow less
Added new lasso.classify check to Guardrails Lasso integration with optional apiEndpoint field for self-hosted deployments
Portkey Enterprise Gateway v2.6.0 adds Vertex AI label mapping, custom model host routing, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. timeout/env vars, and data URL support.
Adds automatic mapping of Portkey metadata to Vertex AI resource labels across chat/completions, embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG., batches, and fine-tuning with configurable METADATA_MAP_KEY_PREFIX environment variable
Enables custom_host routing in model config for custom models, allowing different upstreams per model under the same integration while respecting header-level priority
Adds support for base64 data URLs (format: data:<media_type>;base64,<data>) in file.file_data via /chat/completions to forward as Anthropic document content
Enables passthrough of top-level cache_control parameter to Anthropic in /chat/completions and adds automatic additionalProperties: false for strict structured outputsstructured outputsForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed.
Adds configurable outbound timeout for MCP calls via MCP_REQUEST_TIMEOUT_MS environment variable and updates MCP_POOL_* env var precedence with new log attributes gateway_version and mcp.auth.upstream_token_refreshed
Output guardrails now apply to streaming responses for /chat/completions, /completions, and /messages endpoints.
Adds output_guardrails and after_request_hooks support for streaming responses via SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. chunks at stream end
Frontend 1.7.0 adds Gateway Registration, API Key Rotation UIs, Anthropic Cache TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. support, Akto AI plugin, and enhanced Trace View filtering.
Gateway Registration UI added for configuring gateway connections
API Key Rotation UI added for managing key lifecycle
New Last Reset Date field displayed in Integrations, Providers, API Keys, and Workspace Budgets views
Trace View now supports displaying spans without active filters via a new toggle UI element
Added configuration option for Anthropic Cache TTL from Playground/Prompts settings
+2 moreshow less
Organisation-level maximum session time setting now supported for user management
Akto AI added as a supported plugin within the system
Portkey Backend v1.13.0 adds API key rotation, organization session management, Required Metadata guardrails, and Agent Gateway CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. APIs.
Adds automatic and manual API key rotation with rotation_policy config (rotation_period, next_rotation_at, key_transition_period_ms) and new POST /api-keys/:apiKeyId/rotate endpoint
Adds session_settings organization-level auth configuration with max_session_ttl to reject expired user sessions
Adds Required Metadata Key-Value Pairs guardrail (default.requiredMetadataKeyPairs) with metadataPairs and operator parameters in beforeRequestHook
Adds rpw (requests per week) rate limit unit and endpoint_type condition key for granular rate limiting
Adds Agent Gateway with full CRUD APIs, agent skills management, workspace-level access control, and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. support
Gateway-Local JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth via JWT_ENABLED, HEADERS_TO_METADATA injection, weekly rate limits, metadata guardrail, Lasso v3 API, HEIC/HEIF images
Adds JWT_ENABLED=ON environment variable to enable gateway-local JWT validation and support resolving Organisation ID from portkey_oid or organisation_id claims.
Adds HEADERS_TO_METADATA environment variable to inject request headers into metadata for observability enrichment without client-side x-portkey-metadata changes.
Adds weekly window rate limiting via rpw and endpoint type targeting via endpoint_type condition key in rate limit policies.
Adds native metadataPairs guardrail check with all, any, and none operators to validate metadata before request processing.
Upgrades Lasso Security integration to v3 API Classify, enabling structured findings-based detection, session/user tracking via sessionId/userId, and configurable apiEndpoint.
+1 moreshow less
Adds support for image/heic and image/heif MIME types in multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. requests and the Inline Image URLs guardrail.
microsandbox v0.4.3 adds --script flag and installs msb alias
└──▷ GET THIS VERSION
$ git clone --branch v0.4.3 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.4.3
domain-rule enforcement is now applied at the DNS, SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address., and policy layers
Installs the msb alias alongside the main microsandbox CLI binary
Adds the --script flag to the CLI; the previous file-based option is now --script-path
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The domain-rule enforcement mechanism changes: rules are now enforced at DNS, SNI, and policy layers instead of the previous implementation.
!The CLI flag for providing a script file is renamed from the generic file form to --script-path; existing scripts using the old syntax may fail.
4 more releases in this issue
· 2026-04-01 → 2026-04-30
microsandbox v0.4.0 adds DNS interception, guest TLS trust, per-sandbox libkrunfw_path, and disk-image volumes.
└──▷ GET THIS VERSION
$ git clone --branch v0.4.0 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.4.0
execStreamWithConfig for the TypeScript SDK
AgentdConfig reads environment variables once at startup in agentd
sandbox-wide guest rlimits are now configurable
keyring feature flag added
custom TLS certs and insecure registries support for OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. images
+5 moreshow less
Secret Injection options similar to the Rust SDK for node-ts SDK
opt-in trust of host CAs inside sandbox guests via network
intercept tcp/53 and dot/853 DNS queries in dns
per-sandbox libkrunfw_path override exposed in sdk
host.microsandbox.internal alias added for network access
microsandbox v0.3.13 adds file-level volume mounts, Python SDK, new CLI flags for network policy, and TLS CA config renaming.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.13 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.3.13
Adds --allow-private-ips flag to the CLI to control NetworkPolicy::allow_all behavior for private IP ranges.
Adds support for file-level volume mounts in sandbox configuration, enabling granular host-to-sandbox file sharing.
Adds Python SDK with pyo3 bindings, allowing developers to create and manage sandboxes from Python scripts.
Adds readStream method to the TypeScript SDK for direct filesystem access within the sandbox environment.
Renames TLS CA configuration keys in global config.json to reflect upstream CA trust support, requiring users to update their configuration paths.
+1 moreshow less
Adds an interactive multi-select prompt to the msb self uninstall CLI command, preventing accidental removal without confirmation.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The TLS CA configuration keys in global config.json have been renamed to support upstream CA trust, potentially breaking existing sandbox configurations that rely on the old key names.
OpenShell v0.0.35 adds gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication.-multiplexed SSH relay, request-level tracing, and a dedicated unauthenticated health-check port.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.35 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.35
Adds supervisor-initiated SSH connect and exec tunneled over a gRPC-multiplexed relay between server and sandbox.
Adds request-level logging via TraceLayer on the server for per-request observability.
Serves health endpoints on a separate, unauthenticated port so load balancers and orchestrators can probe liveness/readiness without credentials.
OpenShell v0.0.25 adds OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. structured logging for sandbox events.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.25 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.25
OpenShell v0.0.20 switches GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. injection to CDI and extends L7 credential injection to query params, Basic auth, and URL paths.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.20 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.20
Switches GPU injection to CDI (Container Device Interface) where supported, in both bootstrap/CLI and sandbox device plugin modes.
Security scanner, red-team toolkit, and behavioural simulator for AI agents and MCP servers.
HackMyAgent v0.22.1 adds --explain to scan-soul for human-readable 9-domain governance model output.
└──▷ GET THIS VERSION
$ git clone --branch v0.22.1 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.22.1
└──▷ TRY IT
Get a detailed explanation of how each of the 9 governance domains scored during a soul scan — useful when reviewing agent posture with a team unfamiliar with the raw check IDs.
$ hackmyagent scan-soul --explain
17 more releases in this issue
· 2026-04-01 → 2026-04-30
HackMyAgent v0.22.0 activates binary integrity verification, adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. LLM01 jailbreak detections, and reworks finding sort and severity defaults.
└──▷ GET THIS VERSION
$ git clone --branch v0.22.0 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.22.0
└──▷ TRY IT
Verify the integrity of your installed binary before running any scans — now enforced on every invocation.
Activates the binary integrity verifier end-to-end: tampered installs now exit with code 3 and INTEGRITY CHECK FAILED: on stderr when running --version, --help, no-args, secure, or check.
Adds detection for OWASP LLM01 imperative-override directives (IGNORE PRIOR INSTRUCTIONS in skill frontmatter or body), emitting AST-PROMPT-001 Jailbreak Attack Surface and CRITICAL Prompt Injection Surface from AST-INJECT-001 with verbatim evidence.
Adds attackClass field to every static-check finding: 116 emission paths that previously shipped with attackClass: null now fully populate threat-matrix counters, OASB attack-class indexing, and NanoMind training labels.
Labels check skill: / check mcp: / check <local-path> output as Quick scan and adds a follow-up pointer to secure for the full 209-static-check audit.
Sorts secure findings by attack-class tier first (active malice → capability sprawl → missing defense-in-depth → hygiene → chrome), then severity.
+3 moreshow less
Adds a concept-explainer registry under findings: primitives like harden-soul, opena2a protect, opena2a mcp audit, hash-pinning, and A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools. signing show a curated educational block on first occurrence per scan, collapsing to a one-line back-reference on subsequent same-concept findings.
Reworks severity defaults for skill governance hygiene findings (SKILL-020, SUPPLY-001, SUPPLY-004, AST-PROMPT-003, AST-PROMPT-004) to default to MEDIUM, upgrading to HIGH only on malice-signal co-occurrence.
Confidence-capped CRITICAL findings (capped to HIGH) no longer render in the NanoMind analyst block.
HackMyAgent v0.20.0 adds secure --publish narrative emission to POST /api/v1/trust/narrative for skill and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. scan targets.
└──▷ GET THIS VERSION
$ git clone --branch v0.20.0 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.20.0
└──▷ TRY IT
Publish a skill scan with a rich narrative payload sent to the OpenA2A registry, checking publish.narrative in JSON output to confirm emission status.
Publish an MCP scan target with verbose logging to see narrative emission status in the terminal.
$ hackmyagent secure --publish--verbose
Adds a new src/narrative/ module containing skill+MCP builders, NanoMind v3 graceful-degrade gate, registry HTTP client, and a single-call wire helper.
Ships static threat-model questions inline with each narrative payload.
HackMyAgent v0.18.3 adds registry fields to --json output in the check command.
└──▷ GET THIS VERSION
$ git clone --branch v0.18.3 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.18.3
└──▷ TRY IT
Capture full registry metadata from a check run for downstream pipeline processing or SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. ingestion.
HackMyAgent v0.17.11 adds hackmyagent detect for Shadow AI auditing and --nanomind for AI-powered threat narratives.
└──▷ GET THIS VERSION
$ git clone --branch v0.17.11 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.17.11
└──▷ TRY IT
Run a Shadow AI audit against the current repo to surface undeclared AI tools, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, and governance gaps for CISO review.
$ hackmyagent detect
Scan an agent codebase and include AI-generated threat narratives for each finding when you want richer context beyond static analysis.
$ hackmyagent scan-soul --nanomind
Adds hackmyagent detect subcommand: a Shadow AI audit command that inventories running AI tools, MCP servers, AI configs, and governance gaps — aimed at CISOs and security engineers.
Adds --nanomind opt-in flag for AI-powered threat narratives; static analyzers always run regardless, keeping the flag's default off.
Unifies output formatting across secure, scan-soul, harden-soul, and explain commands into a single visual language.
HackMyAgent v0.17.5 adds AnaLM AI-powered threat analysis via --analm on secure and check, plus analm setup/analm status commands.
└──▷ GET THIS VERSION
$ git clone --branch v0.17.5 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.17.5
└──▷ TRY IT
Run AI-powered threat analysis on a package during a security check, without a separate scan step.
$ hackmyagent check --analm <target>
Bootstrap the local AnaLM model before first use, then confirm it is ready.
$ hackmyagent analm setup && hackmyagent analm status
Adds --analm flag to secure and check commands for AI-powered threat analysis via the new AnaLM integration.
Adds analm setup and analm status subcommands for managing the local AI model.
Introduces a backend abstraction layer for AnaLM, currently backed by MLXMLXApple's machine-learning framework for Apple silicon, which uses the unified memory shared by CPU and GPU to run and fine-tune models on a Mac., with llama.cpp/GGUFGGUFThe single-file model format used by llama.cpp and Ollama, holding the weights, usually quantized, together with the tokenizer and settings needed to run the model locally. support planned for cross-platform use.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The --rescan flag on the check command is replaced by --analm; existing scripts using --rescan will break.
Adds --rescan flag to the check command to force a fresh local scan regardless of cache age, bypassing the default >3-day stale threshold; threaded through npm, PyPI, and GitHub repo scan paths.
Adds HMA_CHECK_COMMAND and HMA_FULL_SCAN_HINT environment variables so a parent CLI can override the command strings used in footer hints, preventing duplicated-verb output like opena2a check check <pkg>.
Adds a dim 3-line next-steps footer to every check invocation showing a rescan command, a full-project scan hint, and accepted target formats; suppressed under --ci, unchanged under --json.
Scan results now POST to /api/v1/trust/publish as the primary unified endpoint, with /api/v1/registry/community/scan-result retained as a 404 fallback.
Moves signature and publicKey from request headers into the request body for scan-result submissions.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The signature and publicKey values are now expected in the request body rather than in headers when submitting to the scan-result endpoint — clients sending them as headers will no longer work correctly.
HackMyAgent v0.15.0 adds hackmyagent check <package> to scan npm packages, local paths, and skill identifiers with registry-backed trust data.
└──▷ GET THIS VERSION
$ git clone --branch v0.15.0 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.15.0
└──▷ TRY IT
Scan a third-party MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server package in CI and fail on machine-parseable findings without hitting the network.
Audit a local agent directory interactively and see every finding, not just the default top 15.
$ hackmyagent check ./my-agent/ --verbose
Quickly check an npm package against cached registry trust data and emit JSON for downstream tooling.
$ hackmyagent check express --json
Adds hackmyagent check <package> subcommand to scan npm packages against the OpenA2A Registry for trust data, falling back to full HMA+NanoMind analysis when results are stale (> 3 days) or missing.
Supports --json flag on hackmyagent check for machine-readable CI output.
Supports --offline flag on hackmyagent check to skip the registry and scan locally only.
Supports --verbose flag on hackmyagent check to show all findings (default cap is top 15).
Accepts local paths (e.g. hackmyagent check ./my-agent/) and skill identifiers (e.g. hackmyagent check @publisher/skill) in addition to npm package names.
HackMyAgent v0.13.1 adds 30 new attack payloads across 3 new categories: Parser Differential, Persistent Agent Security, and Fake Tool Detection.
└──▷ GET THIS VERSION
$ git clone --branch v0.13.1 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.13.1
Adds PARSE-001 to PARSE-010: Parser Differential payloads covering JSON comment injection, YAML anchor abuse, markdown fence escape, Unicode normalization bypass, duplicate key override, type coercion, content-type mismatch, nested encoding chains, polyglot payloads, and zero-width character injection.
Adds PERSIST-001 to PERSIST-010: Persistent Agent Security payloads covering memory poisoning, session state enumeration, cached context injection, preference backdoors, cross-session credential harvesting, state accumulation, scheduled task injection, knowledge base poisoning, session fixation, and embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. vector poisoning.
Adds FAKETOOL-001 to FAKETOOL-010: Fake Tool Detection payloads covering MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool name squatting, description impersonation, shadow injection via config, schema poisoning, priority escalation, capability expansion, response manipulation, batch flooding, identity spoofing, and persistence via auto-install hooks.
Grows the total attack payload library to 145 payloads across 14 categories.
HackMyAgent v0.12.8 adds NanoMind intelligent fix generation with TME classification and ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. context across 13 attack classes.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.8 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.8
Pre-downloads the ONNXONNXAn open file format for trained models, so a model built in one framework can run in another runtime or on other hardware. ONNX Runtime is the common engine that executes it. neural model before scanning starts to ensure a reliable experience on fresh npm installs.
HackMyAgent v0.12.5 ships NanoMind semantic analysis across all scan commands with 7 new ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. analyzers and a local TME v4 model.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.5 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.5
└──▷ TRY IT
Run a deep local scan on an agent without incurring LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. API costs — NanoMind runs first and the paid LLM is only called if needed.
$ hackmyagent scan-soul --deep <target>
Runs NanoMind semantic analysis on every scan command: secure, check, scan-soul, secure-openclaw, and secure-nemoclaw.
Adds --deep flag to scan-soul that runs NanoMind locally (free) before falling back to a paid LLM.
Adds 7 new AST analyzers covering jailbreak susceptibility, capability creep, command injectioncommand injectionAn attack that makes an application execute operating-system commands supplied through untrusted input. It often happens when input is passed unsafely to a shell., unsafe deserializationdeserializationTurning stored or transmitted data back into objects a program can use. Unsafe handling of untrusted data can allow unexpected behavior or code execution., path traversal, injection resistance, and authority confusion.
Adds detection of a new credential_abuse attack class across all 9 supported attack classes in the TME v4 model.
Auto-downloads the opena2a/nanomind-security-classifier v0.4.0 model (~5.5 MB, SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. verified) from HuggingFace on first use.
Docker Sandboxes v0.28.1 adds --kit for custom agent kits and in-process sandbox run/exec with launch/settings dialogs in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
└──▷ GET THIS VERSION
$ git clone --branch v0.28.1 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.28.1
Adds --kit flag to invoke custom agent kits from the CLI, now surfaced in --help.
Enables in-process sandbox run/exec with a launch mode dialog and settings dialog in the TUI.
Docker Sandboxes v0.27.0 adds Linux TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. support, governance visibility in sbx policy ls, and renames the Factory-ai agent to droid.
└──▷ GET THIS VERSION
$ git clone --branch v0.27.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.27.0
└──▷ TRY IT
Check which organization's policy is active and whether it's in sync with the remote before running sandbox workloads.
$ sbx policy ls
Supports Linux terminal spawning in the TUI across kitty, wezterm, alacritty, ghostty, gnome-terminal, konsole, xfce4-terminal, and xterm.
Surfaces active organization name and remote sync status in sbx policy ls output and the TUI governance tab.
Renames the Factory-ai agent to droid.
Adds support for removing template images by image ID in addition to tags.
Docker Sandboxes v0.24.2 adds a sandbox info dialog, improved TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. notifications, and better daemon error visibility.
└──▷ GET THIS VERSION
$ git clone --branch v0.24.2 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.24.2
Adds sandbox info dialog for viewing details of a running sandbox directly in the TUI.
Displays explanatory action messaging when creating a new sandbox.
Improves TUI notification system with updated styling and behavior.
Shows an error in the TUI when the daemon becomes unreachable.
Bypasses login check and network policy setup when running the reset operation.
ToolHive v0.26.1 adds --tls-skip-verify to LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. commands and DCR discovery for auth servers
└──▷ GET THIS VERSION
$ git clone --branch v0.26.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.26.1
└──▷ USE IT
Skip TLS verification for local development environments where self-signed certs are used.
shell
thv llm setup --tls-skip-verify
Enable dynamic client registration discovery for auth server integration.
shell
thv config set authserver.dcr.enabled true
Adds --tls-skip-verify flag to thv llm setup, config set, and proxy start commands.
Adds authserver DCR discovery and config surface.
Make Cedar group entity type name configurable.
Auto-detect Docker Desktop socket on Linux.
4 details in Everything
8 more releases in this issue
· 2026-04-09 → 2026-04-30
Adds interactive TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. dashboard for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers and awsSts auth type for vMCP
└──▷ GET THIS VERSION
$ git clone --branch v0.26.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.26.0
ToolHive v0.25.0 adds thv llm commands for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. gateway config and token management plus thv registry convert.
└──▷ GET THIS VERSION
$ git clone --branch v0.25.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.25.0
└──▷ TRY IT
Manage LLM gateway settings and tokens directly from the CLI.
$ thv llm --help
Convert an existing registry configuration to the new format.
$ thv registry convert <path>
Add thv llm command group with subcommands to manage LLM gateway configuration and tokens
Add thv registry convert command to transform registry configurations
ToolHive v0.24.1 adds --debug to vmcp, new OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. pull fallback, and exposes OAuth exchange fields.
└──▷ GET THIS VERSION
$ git clone --branch v0.24.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.24.1
Adds --debug flag to the vmcp subcommand to enable debug output in virtual MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. sessions
Exchanges Config fields via shared OAuth constants, allowing access to raw exchange response data
Enables thv vmcp CLI commands for local vMCP support
└──▷ GET THIS VERSION
$ git clone --branch v0.24.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.24.0
thv vmcp commands are now enabled by default and documented in the local vMCP architecture guide.
Local skill builds are automatically marked with an OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. descriptor annotation.
ToolHive v0.23.0 adds server-scoped Cedar policy support and CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. API stability via v1beta1.
└──▷ GET THIS VERSION
$ git clone --branch v0.23.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.23.0
CRDsCRDsA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. now serve toolhive.stacklok.dev/v1beta1 as the storage version
Server-scoped Cedar policies like resource in MCP::"<server-name>" now work
thv run gains --webhook-url, --webhook-timeout, and --webhook-failure-policy flags to enable webhook-based tool call authorization
Two new Skills API v0.1 endpoints for browsing and fetching skills from the registry
thv skills install now accepts --clients (comma-separated) or --all-clients to install to multiple clients in a single command with atomic rollback on failure
Cursor is now recognized as a skill-supporting client
MCPRemoteProxy gains telemetryConfigRef for shared telemetry configuration
5 details in Everything
└──▷ BREAKING ON UPGRADE
!remoteURL and externalURL JSON tags are renamed to remoteUrl and externalUrl; existing MCPRemoteProxy and MCPServerEntry resources in etcd will silently lose their values unless manifests are updated and re-applied
!Skills install API client field is replaced by clients; CLI --client flag is removed in favor of --clients or --all-clients
!enforceServers is removed from MCPRegistry; manifests containing this field will fail validation
ToolHive v0.18.0 adds per-user rate limiting and transparent proxy health check env vars; breaks legacy MCPRegistry config fields.
└──▷ GET THIS VERSION
$ git clone --branch v0.18.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.18.0
└──▷ USE IT
Enable per-user rate limiting with CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine. validation on an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. registry config.
Configures spec.configYAML on MCPRegistry resources for sources, registries, database, and auth settings
Sets perUser field on RateLimitConfig to enable per-user token bucket rate limits at server or tool level
Uses environment variables to configure transparent proxy health check interval, timeout, and failure threshold
3 details in Everything
└──▷ BREAKING ON UPGRADE
!MCPRegistry CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it.spec.sources, spec.registries, spec.databaseConfig, spec.authConfig, and spec.telemetryConfig fields are removed; resources must migrate to the required spec.configYAML field.
ToolHive v0.17.0 adds MCPServerEntry CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. for zero-infrastructure catalogs, mutating webhook JSONPatch middleware, and rate limiting.
└──▷ GET THIS VERSION
$ git clone --branch v0.17.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.17.0
Adds MCPServerEntry CRD for declaring remote MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers as lightweight catalog entries without proxy pods
Adds JSONPatch support to mutating webhook middleware for dynamic request/response mutation
Adds rate-limiting middleware that returns HTTP 429 with -32029 error for tools/call requests
Adds authServerRef field on MCPServer and MCPRemoteProxy CRDsCRDsA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. to configure outgoing token exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user. alongside embedded auth
Adds configYAML passthrough field on MCPRegistry CRD to bypass operator typed-field parsing with direct config.yaml control
+3 moreshow less
Adds caBundleRef field on MCPTelemetryOTelConfig to mount custom CA bundles for OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. exporters
Adds supports_skills field to GET /api/v1beta/discovery/clients API response
Introduces type-safe UpdateRegistryConfig and DeleteRegistryConfig structs for registry policy gates
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The .status.phase value for MCPServer, EmbeddingServer, and MCPRegistry is renamed from Running to Ready
!MCPRegistry CRD spec replaces flat registries[] with separate top-level sources[] and registries[] fields; PVC-based registry sources are removed
!MCPRegistryStatus flattens .status.syncStatus and .status.apiStatus to .status.phase, .status.conditions (type Ready), .status.readyReplicas, and .status.url
!The legacy MCPRegistry typed spec fields spec.sources[], spec.registries[], spec.databaseConfig, spec.authConfig, and spec.telemetryConfig are deprecated in favor of spec.configYAML
The nono runtime runs AI agents in isolated environments with policy-controlled filesystem, network, and credential access.
nono v0.45.0 adds native TLS root certificate support for improved PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. integration.
└──▷ GET THIS VERSION
$ git clone --branch v0.45.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.45.0
Supports native TLS root certificates, enabling use of system or enterprise CA stores instead of bundled roots.
1 detail in Everything
18 more releases in this issue
· 2026-04-03 → 2026-04-30
nono v0.43.0 adds outbound TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port allowlisting and optional system keyring for headless/container builds.
└──▷ GET THIS VERSION
$ git clone --branch v0.43.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.43.0
└──▷ TRY IT
Restrict a process to only make outbound TCP connections on specific ports (e.g., 443 and 8080) — useful for locking down egress in a sandboxed environment.
nono v0.39.0 adds OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. client-credentials token exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user. with caching and a no-keychain Claude profile.
└──▷ GET THIS VERSION
$ git clone --branch v0.39.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.39.0
Adds OAuth2 client-credentials token exchange with caching to the proxy, enabling automated service-to-service authentication flows.
Adds a no-keychain profile for Claude and expands existing Claude access controls.
nono v0.33.0 adds Linux/WSL2WSL2A Microsoft-maintained compatibility layer in Windows 10/11 that runs a real Linux kernel inside a lightweight VM, letting cyber tools built for Linux execute natively on Windows without dual-booting or a full VM.GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. access via --allow-gpu, a pre-flight CWD prompt for detached launches, and opt-in parent-of-protected-root relaxation on macOS.
└──▷ GET THIS VERSION
$ git clone --branch v0.33.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.33.0
└──▷ TRY IT
Grant a sandboxed process access to the GPU on Linux or WSL2 without opening up the full host.
$ nono run --allow-gpu <your-gpu-workload>
Adds --allow-gpu flag to enable Linux and WSL2 GPU access from sandboxed processes.
Introduces a pre-flight CWD prompt for detached launches, surfacing working directory context before execution begins.
Makes parent-of-protected-root filesystem relaxation opt-in via profile on macOS, replacing the previous always-on behavior.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The parent-of-protected-root relaxation on macOS is now opt-in via profile; setups that relied on this being enabled by default will no longer receive it without explicitly opting in.
nono v0.32.0 adds mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. client certificate support for upstream connections.
└──▷ GET THIS VERSION
$ git clone --branch v0.32.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.32.0
Supports mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. (mTLS) client certificates for upstream connections, enabling authenticated encryption to backend services.
nono v0.31.0 adds a file:// trust-key backend and --allow-gpu flag for Apple Silicon GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. access.
└──▷ GET THIS VERSION
$ git clone --branch v0.31.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.31.0
└──▷ TRY IT
Grant a sandboxed workload access to the Apple Silicon GPU without disabling the sandbox entirely.
$ nono run --allow-gpu <target>
Adds file:// backend for trust signing keys, enabling local file-based key storage for trust verification.
Adds --allow-gpu flag to grant sandboxed processes GPU access on Apple Silicon Macs.
Supports custom CA certificates for upstream TLS connections via new tls_ca and tls_connector fields in credential/proxy config.
Splits the Homebrew policy group into platform-specific variants for more precise sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..
Skips system temp grants automatically when HOME is nested under TMPDIR, reducing over-permissive policies.
Expands recognized git config paths in policy rules.
varmor v0.10.0 adds NetworkProxy enforcer for L4/L7 traffic interception and new built-in access control rules
└──▷ GET THIS VERSION
$ git clone --branch v0.10.0 https://github.com/bytedance/varmor.git
# already have the repo? check out this version:$ git checkout v0.10.0
Adds NetworkProxy enforcer for sidecar-based L4 egress (IP/CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network./port) and L7 HTTP (host/path/method) access control with TLS SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. matching in EnhanceProtect and DefenseInDepth modes
Adds new built-in rules: disable-access-passwd, disable-access-shadow, disable-access-ssh-dir, and disable-write-skills
Ai-Safe2-Framework provides governance, risk, and compliance controls for securing agentic AI systems and non-human identities.
v3.0 adds Gateway enforcement with multi-provider support, HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. audit logs, HITLHITLHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. circuit breaker, and 33 new governance controls.
└──▷ GET THIS VERSION
$ git clone --branch v3.0 https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout v3.0
Adds Core Gateway adapter architecture supporting Anthropic, OpenAI/Codex, Google Gemini, Ollama, and OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. providers via unified config.
Adds GENESIS_HASH integrity validation derived from SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. of gateway configuration with hard-stop on chain break.
Adds HMAC-SHA256HMAC-SHA256A keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. chained audit logging for every request to satisfy A2.5 Semantic Execution Trace Logging at the infrastructure layer.
Adds 4-tier HITL circuit breaker (LOW, MEDIUM, HIGH, CRITICAL) implemented in the Core Gateway.
Adds runtime-aware risk scoring formula: Action × Sensitivity × Historical Context with modifiers for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. (+5) and A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools. impersonation (+3).
+5 moreshow less
Adds nexus_a2a_enforcement: true config flag to enable full NEXUS-A2A v0.2 passthrough enforcement.
Adds 33 new controls including CP.1-CP.10 Cross-Pillar Governance OS and new Pillar controls (e.g., P1.T1.10, CP.9)
Adds new composite risk formula integrating OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. AIVSS v0.8 Agentic Amplification Factor: Combined Risk Score = CVSS_Base + ((100 - Pillar_Score) / 10) + (AAF / 10)
Updates Controls JSON schema with new fields: builder_problem, act_minimum, version_added, first_in_field, and implementation_details.
Adds Scanner v3.0 rules for indirect injection surface detection, memory governance gap detection, recursion limit absence, tool-misuse baseline absence, and HEAR requirement detection.
10 details in Everything
1 more release in this issue
· 2026-04-14 → 2026-04-21
ai-safe2-framework v3.0 adds production enforcement gateway with multi-provider support, HITLHITLHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. circuit breaker, and immutable audit log.
└──▷ GET THIS VERSION
$ git clone --branch 2026-04-14_Gateway_Enforcement_Update_v3.0 https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-04-14_Gateway_Enforcement_Update_v3.0
Adds HeartbeatMonitor to validate HEARTBEAT.md before every proxied request; use --init-heartbeat for first-run initialization
Adds ImmutableAuditLog with HMAC-SHA256HMAC-SHA256A keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. chained JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. format and /audit/verify-chain endpoint for on-demand integrity checks
Implements 3-vector risk scoring (action type, target sensitivity, historical context) with configurable weights and modifiers for injection/A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools.
Adds 4-tier HITL circuit breaker (AUTO/MEDIUM/HIGH/CRITICAL) using X-HITL-Token and X-HITL-Reason headers with 300s TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit.
Adds multi-provider support via provider_adapters.py for Anthropic, OpenAI/Codex, Gemini, Ollama, and OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code.
+6 moreshow less
Adds NEXUS-A2A v0.2 compatibility via header detection and identity field passthrough; controlled by nexus.enforcement in config.yaml
Adds outbound ResponseScanner to inspect upstream responses for exfiltration patterns and tool_use injection payloads
Adds SafeMode event-based hard stop with operator deactivation via POST /emergency/deactivate-safe-mode endpoint
Adds scanner.py nightly auditor with --json output for CI integration, checking chain integrity, heartbeat validity, and config security
Adds 9-step pre-flight validation in start.sh v3 for Python version, deps, env vars, YAML syntax, and log permissions
Implements per-user rate limiting via dual sliding window (requests/minute + requests/hour) configurable in config.yaml
Backslash detects and prioritizes reachable vulnerabilities in cloud-native application code and dependencies.
Backslash introduces Agent Skills for modular AI workflows and a free Skills Security Scanner
Enables teams to package organizational knowledge and specialized workflows as portable SKILL.md files for use across Claude Code, GitHub Copilot, VS Code, and other agents.
Supports installation of skills via registry command npx skills install <skill-name> or by manually placing skill folders in project (~/.github/skills/), personal (~/.codex/skills), or system-level directories.
Adds h5i claim subcommand, context visualization improvements, summary generation, and new token reduction methods.
└──▷ GET THIS VERSION
$ git clone --branch v0.1.2 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.1.2
Adds the h5i claim subcommand to capture artifact ownership or provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. claims directly from the CLI
Improves context visualization with enhanced UI rendering for deeper analysis traces
Adds a summary feature to generate concise overviews of scanned or analyzed projects
Introduces new token reduction techniques that lower resource usage for large repositories
4 details in Everything
1 more release in this issue
· 2026-04-21 → 2026-04-26
h5i v0.1.0 adds CLI audit/compliance commands, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server with resources/subscribe, context versioning UI, and session hooks
└──▷ GET THIS VERSION
$ git clone --branch v0.1.0 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.1.0
Adds h5i policy and h5i compliance CLI commands for AI footprint auditing and compliance checks
Implements a built-in MCP server exposing tools like h5i_commit and h5i_notes_analyze, plus resources/subscribe for live push notifications
Adds --depth flag to SessionStart for progressive context loading and new SessionStart/Stop hooks
Introduces non-destructive working-tree restore via the rewind feature, allowing return to any past commit
Adds a Context tab to the web dashboard for viewing, restoring, diffing, and finding relevant code versions
v4.1.6 adds detection for exposed AI agent configs (claude_desktop_config.json, mcp.json), manual dataset updates, and merges the update-status API into update-data.
└──▷ GET THIS VERSION
$ git clone --branch v4.1.6 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.1.6
v4.1.4 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. red team scan, data sync APIs, and self-signed TLS support for model endpoints
└──▷ GET THIS VERSION
$ git clone --branch v4.1.4 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.1.4
Add --agent-config-file CLI flag to pass inline YAML agent scan config (requires aig-scanner v1.0.3)
Add InsecureSkipVerify option to bypass TLS verification for HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. connections with self-signed/private CA certificates
Add multi-turn red team attack module supporting TAP and Crescendo strategies in MCP Scan
Add POST /api/v1/system/update-data and GET /api/v1/system/update-status endpoints for auto-syncing the data/ directory
Support inline agent_config in Agent Scan API with optional verify flag on save
Giskard tests and evaluates LLM applications for performance, bias, and security issues.
Adds AllOf/AnyOf/Not composition operators, Toxicity and AnswerRelevance LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. judges, giskard-llm replacement, optional PostHog telemetry, GeoIPGeoIPA database that maps IP addresses to geographic locations; tools use it to attribute traffic or alerts to countries, cities, or ASNs without querying external services. disable option, and agent instructions
└──▷ GET THIS VERSION
$ git clone --branch giskard-core/v1.0.1b3 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-core/v1.0.1b3
Adds AllOf, AnyOf, and Not check composition operators in giskard-checks to combine multiple validation rules
Adds Toxicity LLM judge check for evaluating output toxicity via the checks framework
Adds AnswerRelevance LLM judge check for assessing answer relevance against prompts
Introduces agents instructions feature to define custom behavior for Giskard agents
Adds optional PostHog analytics integration in giskard-core and checks via telemetry config
+3 moreshow less
Enables disabling GeoIP tracking in analytics with a new configuration option
Replaces LiteLLM with the new giskard-llm library as the lean LLM provider backend
Allows scenarios to be executed multiple times without reinitialization
8 details in Everything
0 more releases in this issue1 more release in this issue · 2026-04-10 → 2026-04-29
Adds Junix XML export for SuiteResult in Giskard checks
└──▷ GET THIS VERSION
$ git clone --branch giskard-checks/v1.0.2b1 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-checks/v1.0.2b1
└──▷ USE IT
Export a suite of check results to the new Junix XML format for integration with external systems.
python
result.export(format="junix")
Junix is now supported as an export format for SuiteResult objects
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Templating in conformity rules is no longer supported
CalypsoAI tests AI systems for security, safety, and compliance risks before deployment.
Adds refusal evaluator and severity tags for custom attacks; opens report deletion in UI.
Red Team users can now use a refusal evaluator to check whether a model refuses to respond, detecting explicit refusals (e.g., I can't do that) and implicit ones (e.g., "I don't have access to that information")
Attack campaign intents now support custom severity tags (critical, high, medium, or low) to prioritize risks
Users can now delete a report directly from the UI via the More options (three dots) menu instead of relying solely on the API
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The /backend/v1/endpoints, /backend/v1/endpoint, and /backend/v1/groups API endpoints have been removed
!Global search modal is no longer available; users must use dedicated search fields on individual pages
v2.0.1 adds local hb connect flow with auto-detecting compliance templates for unauthenticated users
└──▷ GET THIS VERSION
$ git clone --branch v2.0.1 https://github.com/humanbound/humanbound.git
# already have the repo? check out this version:$ git checkout v2.0.1
hb connect now runs a local scope extraction using HB_PROVIDER / HB_API_KEY and writes ./scope.yaml when not authenticated
Auto-detected regulatory restricted intents are overlaid on the scope in the local flow, with templates available under humanbound_cli/templates/compliance/
humanbound_cli/engine/compliance.py is added, exporting detect_domain, apply_template, apply_eu_ai_act_only, and load_template
3 details in Everything
2 more releases in this issue
· 2026-04-21 → 2026-04-22
humanbound 2.0.1 adds local hb connect flow with compliance template overlay and new detection engine modules
└──▷ GET THIS VERSION
$ git clone --branch 2.0.1 https://github.com/humanbound/humanbound.git
# already have the repo? check out this version:$ git checkout 2.0.1
hb connect now supports an unauthenticated local flow that extracts scope via the configured LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider (HB_PROVIDER / HB_API_KEY) and writes ./scope.yaml for hb test --scope.
Compliance template overlay auto-detects agent domain (banking, insurance, healthcare, legal, e-commerce) from extracted business scope and applies corresponding regulatory restricted intents; EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe. cross-cutting restrictions apply unconditionally via templates in humanbound_cli/templates/compliance/.
New humanbound_cli/engine/compliance.py module exports detect_domain, apply_template, apply_eu_ai_act_only, and load_template functions for programmatic compliance handling.
Adds public SDK namespace humanbound with stable classes like Bot, Insight and new firewall extra dependency.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.0 https://github.com/humanbound/humanbound.git
# already have the repo? check out this version:$ git checkout 2.0.0
└──▷ TRY IT
Install the tool with the new firewall dependency.
$ pip install humanbound[firewall]
Adds the top-level humanbound package as a public SDK namespace with py.typed markers for PEP 561, exposing classes such as Bot, LocalRunner, Insight, TestingLevel, EngineCallbacks, OrchestratorModule, OwaspAgentic, OwaspSingleTurn, and BehavioralQA
Adds firewall extra that now depends on humanbound-firewall, enabling installation via pip install humanbound[firewall]
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The PyPI package name changed from humanbound-cli to humanbound; the old name is now a transitional stub emitting a DeprecationWarning and will be yanked after 2026-06-20.
pipelock v2.1.2 adds signed action receipts, hash-chained transcripts, and immutable core metadata
└──▷ GET THIS VERSION
$ git clone --branch v2.1.2 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.1.2
Adds verify-receipt CLI subcommand to verify Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe.-signed action receipts.
Introduces hash-chained receipt structures and transcript roots for audit trails.
Replaces core scanner and bundle metadata format with immutable version v2.
SEAL v4.3.0 adds iOS xcframework build script, CMakePresets, and drops NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. publishing.
└──▷ GET THIS VERSION
$ git clone --branch v4.3.0 https://github.com/microsoft/SEAL.git
# already have the repo? check out this version:$ git checkout v4.3.0
Adds cmake/ios_xcframework.cmake to build a single-command iOS/macOS libseal-<ver>.xcframework artifact
Adds CMakePresets.json for Windows, Linux, and macOS development
Drops official NuGet.org publishing; users must now build their own NuGet package from source
3 details in Everything
└──▷ BREAKING ON UPGRADE
!NuGet.org is no longer updated; existing consumers relying on the latest nuget.org version will not receive updates and must switch to building packages from source
goshs v2.0.6 adds Markdown preview in-browser, extended file previews, and collaborator log export for HTTP/DNS/SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure..
└──▷ GET THIS VERSION
$ git clone --branch v2.0.6 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.6
Adds in-browser rendering of .md files with syntax highlighting via the file preview panel.
Extends file preview support to additional data types including code and documents.
Enables export of collaborator panel logs (HTTP, DNS, SMB, LDAP, SMTP) for offline analysis.
Enhances --update to display rendered changelogs for every version between the current install and the latest release.
4 details in Everything
3 more releases in this issue5 more releases in this issue · 2026-04-09 → 2026-04-29
goshs v2.0.5 adds a full LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. collaborator server with NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. hash capture, JNDI/Log4Shell mode, and Windows support for the reverse shell catcher.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.5 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.5
└──▷ TRY IT
Capture NTLM hashes from clients targeting your host and crack them against a custom wordlist in one step.
Stand up a Log4Shell callback server over LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext. with a self-signed cert to test for CVE-2021-44228 exposure.
New --ldap flag launches a lightweight LDAP collaborator server for credential capture, supporting Simple bind (DN + cleartext password), SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. PLAIN, and full NetNTLMv2 challenge-response with inline hash cracking.
New --ldap-jndi flag puts goshs into Log4Shell exploitation mode, responding to any LDAP search with a javaNamingReference entry.
NTLM hash cracking outputs in hashcat format using a built-in default wordlist or a custom wordlist supplied via --ldap-wordlist.
LDAPS support via -s -ss (self-signed) or -s -sc/-sk (custom cert) automatically switches the LDAP port from 389 to 636.
All LDAP events (bind, search, NTLM) stream live to a new WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output.-backed LDAP collaborator UI tab with cracked-password badges.
+2 moreshow less
LDAP bind, search, and NTLM events are forwarded via webhook integration to Discord, Slack, or other targets.
The interactive reverse shell catcher is now fully cross-platform and builds and runs on Windows.
goshs v2.0.0-beta.5 adds a built-in SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. server that captures and cracks NetNTLMv1/v2+ESS hashes and serves files.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.0-beta.5 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.0-beta.5
New built-in SMB server captures NetNTLMv2/v1+ESS challenge-response hashes from connecting clients.
Automatically attempts to crack captured hashes against username/domain permutations and an optional user-supplied wordlist.
SMB server doubles as a file-serving endpoint, delivering files over the SMB protocol alongside existing HTTP capabilities.
goshs v2.0.0-beta.4 adds a ?redirect query handler for purposeful URL redirects.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.0-beta.4 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.0-beta.4
New ?redirect query parameter handler lets you trigger intentional redirects — useful for CTFCTFCapture The Flag — a competitive hacking challenge format where participants exploit intentionally vulnerable systems or puzzles to retrieve hidden strings, used by cyber tools to practice and demonstrate offensive and defensive techniques. environments.
OpenSSL 4.0 adds Encrypted Client Hello, ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code.-MU, post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. SM2/MLKEM, cSHAKE, and FFDHE for TLS 1.2.
└──▷ GET THIS VERSION
$ git clone --branch openssl-4.0.0 https://github.com/openssl/openssl.git
# already have the repo? check out this version:$ git checkout openssl-4.0.0
└──▷ TRY IT
Install the FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. module with self-tests deferred until first use, reducing startup time in environments where immediate validation isn't required.
Re-hash a certificate directory using the replacement for the removed c_rehash script.
$ openssl rehash /etc/ssl/certs
Supports Encrypted Client Hello (ECH, RFC 9849) to hide the SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. from passive observers.
Adds SM2/SM3 signature algorithm (sm2sig_sm3), key exchange group curveSM2, and post-quantum hybrid group curveSM2MLKEM768 per RFC 8998.
Adds cSHAKE function support per NIST SP 800-185.
Adds ML-DSA-MU digest algorithm support.
Adds SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. KDF and SRTP KDF support.
+3 moreshow less
Enables deferred FIPS self-tests via the new -defer_tests option in openssl fipsinstall.
Supports negotiated FFDHE key exchange in TLS 1.2 per RFC 7919.
Supports static or dynamic VC runtime linkage on Windows.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed support for SSLv3; any configuration relying on SSLv3 will fail.
!Removed support for the SSLv2 Client Hello; clients sending SSLv2 hellos will be rejected.
!Removed engine support; code using ENGINE_* APIs or the no-engine build option will break.
!Removed deprecated fixed SSL/TLS version method functions (e.g., TLSv1_method()); call sites must be updated.
!Removed deprecated custom EVP_CIPHER, EVP_MD, EVP_PKEY, and EVP_PKEY_ASN1 methods; implementations using these will fail to compile.
!Removed ERR_get_state(), ERR_remove_state(), and ERR_remove_thread_state(); ERR_STATE is now always opaque.
!ASN1_STRING has been made opaque; code accessing its internals directly will break.
!Numerous API function signatures now include const qualifiers (including X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. processing functions); code that assigned return values to non-const pointers may fail to compile.
!Removed c_rehash script; scripts or tooling invoking c_rehash must be updated to use openssl rehash.
!Removed the msie-hack option from openssl ca; configs or scripts using it will error.
!Support for deprecated elliptic curves in TLS (RFC 8422) and explicit EC curves are now disabled at compile-time by default; re-enable with enable-tls-deprecated-ec or enable-ec_explicit_curves.
!libcrypto no longer cleans up globally allocated data via atexit(); programs relying on this implicit cleanup may leak resources.
!OPENSSL_cleanup() now runs in a global destructor or not at all by default; code calling it explicitly may behave differently.
!Dropped darwin-i386{,-cc} and darwin-ppc{,64}{,-cc} build targets; builds for those platforms will fail.
!Lower bounds checks are now enforced for PKCS5_PBKDF2_HMAC when using the FIPS provider; calls with out-of-bounds parameters will now return errors.
!Removed BIO_f_reliable() without replacement; any code using it will fail to compile.
!BIO_snprintf() now delegates to libc snprintf(); behavior differences from the former internal implementation may surface.
SysReptor 2026.25 adds bulk actions in list views, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it.-based finding highlights, and AI field-label context.
└──▷ GET THIS VERSION
$ git clone --branch 2026.25 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.25
└──▷ HOW TO FIND IT
Quickly reassign or delete multiple findings at once instead of acting on them one by one.
📍In the list view, check the checkboxes next to multiple findings, then select a bulk action (e.g. Delete or Move) from the bulk actions menu that appears in the list view header.
Reorganise many notes at once by moving them to a different section of the notes tree in bulk.
📍In the notes tree, select multiple notes using multi-select, then choose Move from the bulk actions menu and pick the destination node.
Highlights findings by CVSS score when the severity field is empty, giving instant visual risk triage.
Shows database version on the license info page for easier environment auditing.
Supports multi-select and bulk actions in list views for faster mass operations.
Supports bulk moving of items in the notes tree.
Adds a today button to the date picker in the UI.
+3 moreshow less
Adds autocomplete hints to input fields across the UI.
AI agent now includes field labels in its context for more accurate assistance.
Adds a built-in design template for HTB COAE certification reports.
gh skill commands now support GitHub Enterprise Cloud data residency hosts; skill preview gains --allow-hidden-dirs flag
└──▷ GET THIS VERSION
$ git clone --branch v2.92.0 https://github.com/cli/cli.git
# already have the repo? check out this version:$ git checkout v2.92.0
gh skill install, preview, publish, search, and update subcommands now work with GitHub Enterprise Cloud (GHEC) hosts that have data residency constraints.
Adds the --allow-hidden-dirs flag to the gh skill preview command, enabling previews of skills located in hidden directories such as .claude/skills/ or .agents/skills/.
2 details in Everything
2 more releases in this issue
· 2026-04-16 → 2026-04-28
GitHub CLI v2.91 adds pseudonymous telemetry collection and gh skill capabilities for multi-agent support, hidden dir discovery, upstream detection, and a new telemetry command.
└──▷ GET THIS VERSION
$ git clone --branch v2.91.0 https://github.com/cli/cli.git
# already have the repo? check out this version:$ git checkout v2.91.0
└──▷ USE IT
View collected telemetry data without leaving the CLI.
shell
gh telemetry
Install a skill located in a hidden dot-directory that standard discovery might skip.
New gh skill command group for managing AI agent skills, plus unauthenticated extension installs and smart suggestions
└──▷ GET THIS VERSION
$ git clone --branch v2.90.0 https://github.com/cli/cli.git
# already have the repo? check out this version:$ git checkout v2.90.0
└──▷ USE IT
Discover AI skills for Copilot related to security directly from the terminal.
shell
gh skill search copilot security
Publish a new skill after validating it locally without pushing remote state yet.
shell
gh skill publish --dry-run
Adds the new gh skill command group with subcommands: search, preview, install, update, and publish to manage portable agent skills from the CLI.
Adds --pin <version> flag to gh skill install to pin a specific version of an agent skill instead of using the default latest release.
Adds --agent and --scope flags to gh skill commands to target a specific AI coding agent (e.g., Copilot, Claude Code) and scope during discovery or installation.
Enables gh extension install without requiring authentication when installing public extensions that do not need auth to access their release assets.
Adds smart suggestions for official extensions (like gh stack) when running an unknown command, prompting the user to install the matching official extension.
curl 8.20.0 adds async thread pool for DNS resolution and makes NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. default disabled.
Cloudflare is a connectivity cloud platform delivering internet security, performance, and developer infrastructure services.
Cloudflare DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. adds predefined detections for credentials, webhooks, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., and crypto wallets.
Adds new predefined detection entries for specific credential types (GitHub PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it., OpenAI API Key) to Cloudflare Data Loss Prevention.
Adds support for detecting webhook URLs (Slack Webhook, Discord Webhook) in Cloudflare DLP.
Adds PII detection capabilities for addresses (US Physical Address), tax identifiers, and national IDs.
Adds detection for financial data and crypto wallets (Bitcoin Wallet) in Cloudflare DLP.
4 details in Everything
101 more releases in this issue
· 2026-04-01 → 2026-04-30
Go SDK v7.0.0 adds Organization Audit Logs API, Browser Rendering targets management, Queues metrics, and nested AI Search filters.
Adds client.Organizations.Logs.Audit new service for querying organization audit logs with cursor-based pagination
Adds client.BrowserRendering.Devtools.Browser.Targets.Close() to close a specific browser target by ID
Adds client.Queues.GetMetrics() to retrieve queue metrics for a specific queue
Adds FiltersObjectFilterUnion and FiltersWorkersObservabilityFilterLeaf types for nested filter groups in Observability telemetry
Adds WaitForCompletion parameter to NamespaceInstanceItemNewOrUpdateParams and NamespaceInstanceItemSyncParams in AI Search
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed all *SearchForAgents nested types from ai_search package instance metadata structs
!Changed path parameter types for Email Security sub-resources from int64 to string for AllowPolicies, BlockSenders, Domains, ImpersonationRegistry, and TrustedDomains
!Renamed path parameter from postfixID to investigateID in Email Security Investigate methods
!Removed SettingDomainService.BulkDelete method and its associated types
!Changed SettingTrustedDomainService.New return type from *SettingTrustedDomainNewResponseUnion to *SettingTrustedDomainNewResponse
!Changed InvestigateMoveService.New return type from *[]InvestigateMoveNewResponse to *pagination.SinglePage[InvestigateMoveNewResponse]
!Restructured Observability telemetry filter parameter types in workers package to use nested discriminated union types
Cloudflare IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications. adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key agreement via ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. for Cisco and Fortinet third-party devices
Enables hybrid IKEv2IKEv2The second version of the Internet Key Exchange protocol, standardized by the IETF, used to negotiate and authenticate IPsec tunnels. Cyber tools build on it for reliable, fast VPN session setup with built-in NAT traversal and EAP support. key agreement combining DH Group 20 with ML-KEM-768ML-KEM-768NIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. or ML-KEM-1024ML-KEM-1024NIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. using RFC 9370 and draft-ietf-ipsecme-ikev2-mlkem standards.
Validates interoperability between Cloudflare IPsec and Cisco IOS XR Release 26.1.1 on 8000 Series routers for post-quantum key exchangepost-quantum key exchangeA cryptographic handshake algorithm designed to resist attacks from quantum computers, using math problems like lattices that quantum algorithms cannot efficiently solve, letting tools stay secure against future quantum-capable adversaries..
Validates interoperability between Cloudflare IPsec and Fortinet FortiOS 7.6.6+ devices for post-quantum key exchange.
Cloudflare adds Data Classification feature for organizing and labeling sensitive content via labels, templates, and reusable data classes.
Introduces Data Classification capability allowing administrators to organize and label sensitive content using labels, templates, and reusable data classes
Enables definition of custom labels including sensitivity schemas, levels, data tag groups, and tags
Allows building from Cloudflare-managed templates and creating reusable data classes that combine detection entries, other data classes, sensitivity levels, and data tags
Permits use of created classifications in custom DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. profiles to identify content severity and apply logic consistently across profiles
Cloudflare Python SDK v5.0.0 adds 11 new services (e.g. aisearch, r2_data_catalog) and optional aiohttp backend.
└──▷ TRY IT
Install the SDK with optional aiohttp dependencies for async concurrency.
$ pip install cloudflare[aiohttp]
Adds aiohttp backend support via DefaultAioHttpClient() for improved async concurrency
Adds pip install cloudflare[aiohttp] as the new installation method for the aiohttp backend
Introduces 11 new top-level service clients including aisearch, connectivity, email_sending, fraud, google_tag_gateway, organizations, r2_data_catalog, realtime_kit, resource_tagging, token_validation, and vulnerability_scanner
Adds vulnerability_scanner service with support for vulnerability scanning, credential sets, and target environments
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Drops support for Python 3.8; minimum required version is now Python 3.9
!Bumps typing-extensions minimum version from >=4.10 to >=4.14
Hyperdrive now supports connecting to private databases via Workers VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. service
Adds --service-id, --database, --user, and --password flags to the wrangler hyperdrive create CLI subcommand for configuring Hyperdrive connections through a Workers VPC.
Adds Connect to private database > Workers VPC option in the Cloudflare dashboard UI for creating Hyperdrive configurations backed by a private network.
Gateway Authorization Proxy and hosted PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. files are now generally available for all plan types
Adds Gateway Authorization Proxy endpoints that use Cloudflare Access authentication to verify user identity before applying Gateway filtering.
Enables creation and distribution of hosted PAC files directly from Cloudflare One on the global network.
Cloudflare introduces a new Personally Identifiable Information (PII) Record predefined DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. profile requiring three+ detections.
Personally Identifiable Information (PII) Record predefined DLP profile detects multiple PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. types in close proximity to reduce false positives.
Manage DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. detection entries directly outside of profiles via the Detection entries section
Adds direct creation and management of DLP detection entries from the Detection entries section, decoupling them from individual profiles
Cloudflare Resource Tagging public beta adds API and UI for tagging resources with custom key-value metadata.
└──▷ HOW TO FIND IT
Navigate the Cloudflare dashboard to view and manage tagged resources for a specific account.
📍Manage Account › Resource Tagging
Adds Account Owned Tokens authentication support for persistent tag automation across credential rotations
Introduces account and zone-level CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. endpoints for Resource Tagging via the primary API interface
Enables querying tagged resources using AND/OR logic, negation, and key-only matching with up to 20 filters per query
Cache Response Rules now support zone versioning for safe staging and promotion
Adds Cache Response Rules to Version Management, allowing response-phase settings to be scoped to a version until promoted.
Enables independent environment control for response-phase cache behavior (e.g., stripping Set-Cookie headers in staging) via the new versioning workflow.
Network Session Logs expanded to Proxy and Browser Isolation on-ramps in Cloudflare Gateway
Generates zero_trust_network_sessions dataset logs for traffic proxied through Proxy endpoints (PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. files) on-ramps that previously did not generate session logs
Generates zero_trust_network_sessions dataset logs for traffic from Browser Isolation egress on-ramps, closing a previous gap in logging coverage
Terraform provider v5.19 adds 14 new resources for AI Gateway, Pipelines, and Vuln Scanner.
Adds cloudflare_ai_gateway resource to manage AI Gateway instances
Adds cloudflare_certificate_authorities_hostname_associations resource to manage mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. certificate hostname associations
Adds cloudflare_custom_page_asset resource to manage custom page assets
Adds cloudflare_pipeline resource to manage Cloudflare Pipelines
Adds cloudflare_r2_data_catalog resource to manage R2 Data Catalog
+9 moreshow less
Adds cloudflare_user_group resource to manage user groups
Adds cloudflare_user_group_members resource to manage user group memberships
Adds cloudflare_vulnerability_scanner_credential resource to manage vulnerability scanner credentials
Adds cloudflare_vulnerability_scanner_credential_set resource to manage vulnerability scanner credential sets
Adds cloudflare_vulnerability_scanner_target_environment resource to manage vulnerability scanner target environments
Adds cloudflare_workers_observability_destination resource to manage Workers Observability destinations
Adds cloudflare_zero_trust_device_ip_profile resource to manage Zero Trust device IP profiles
Adds cloudflare_zero_trust_device_subnet resource to manage Zero Trust device subnets
Adds cloudflare_zero_trust_dlp_settings resource to manage Zero Trust DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. settings
14 details in Everything
└──▷ BREAKING ON UPGRADE
!cmd/migrate is deprecated in favor of tf-migrate and will be removed in a future release.
Cloudflare Go SDK v6.10.0 adds new services for Vulnerability Scanner, Namespace-scoped AI Search, Browser Devtools, Registrar, Origin Cloud Regions, and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Settings.
client.VulnerabilityScanner.CredentialSets provides full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations (New, Update, List, Delete, Edit, Get) for managing credential sets in the Vulnerability Scanner
client.AISearch.Namespaces.Instances.Items.NewOrUpdate() enables instance-item management within namespace-scoped AI Search
client.BrowserRendering.Devtools.Browser.Protocol() exposes the DevTools protocol endpoint for direct browser control via the BrowserRendering service
client.Registrar.Check() (POST /accounts/{account_id}/registrar/domain-check) and client.Registrar.Search() (GET /accounts/{account_id}/registrar/domain-search) allow domain check and search operations
client.Cache.OriginCloudRegions.BulkEdit() enables bulk editing of origin cloud region configurations
+1 moreshow less
client.ZeroTrust.DLP.Settings.Update() allows updating Data Loss Prevention settings within the Zero Trust suite
6 details in Everything
└──▷ BREAKING ON UPGRADE
!InstanceNewParams.TokenID, Type, CreatedFromAISearchWizard, and WorkerDomain are removed from AI Search instance creation parameters
!InstanceUpdateParams configuration fields (including IndexMethod, MaxNumResults, etc.) are removed, restructure the update model
!InstanceItemService type is removed; use client.AISearch.Namespaces.Instances.Items instead of the non-namespace path
!TokenListParams and related types are removed from the ai_search package
!Investigate.Move.New() now returns a raw slice (*[]InvestigateMoveNewResponse) instead of a paginated wrapper, and NewAutoPaging() is removed
!ConfigEditParams.MTLS and ConfigEditParams.Name are removed from Hyperdrive config parameters
!UserGroupMemberNewParams.Body is renamed to UserGroupMemberNewParams.Members
!UserGroups.Members.New() now returns a paginated response (*pagination.SinglePage[UserGroupMemberNewResponse]) instead of a single object
!Several Pipelines delete methods (e.g., Pipelines.DeleteV1(), Pipelines.Sinks.Delete()) now return typed responses instead of bare error
!Pagination wrappers like SinglePage are removed from Stores and Stream methods; associated AutoPaging() methods are also removed
Access Independent MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. now supports AAGUIDAAGUIDA 128-bit identifier embedded in a FIDO2/WebAuthn authenticator that identifies the make and model of the device, letting relying parties enforce authenticator policy without tracking individual users. restrictions and AMRAMRAutonomous Mobile Robot — a self-navigating wheeled platform that maps its environment and plans its own path; cyber tools might target AMR firmware or fleet-management APIs in OT/ICS assessments. claim matching
Adds organization-level AAGUID restriction control in Access to limit WebAuthnWebAuthnA web standard that lets a browser prove possession of a passkey or hardware key to a website. It is the browser-facing part of FIDO2 sign-in. authenticators to a specific list of hardware keys or FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. devices.
Adds AMR matching logic that skips the independent MFA prompt if the identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.'s amr claim (e.g., hwk, otp, fpt) already satisfies policy requirements.
Pay-as-you-go customers can now monitor billable usage costs via a new dashboard and set spend alerts
New Billable Usage dashboard under Manage Account > Billing provides daily visibility into usage-based costs and sortable breakdowns by product
New Budget alerts feature allows setting dollar-based thresholds for account-level usage spend with email notifications when projected spend reaches the threshold
WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. binary messages now delivered as Blob by default in Cloudflare Workers
Adds blob delivery for WebSocket binary frames via the websocket_standard_binary_type compatibility flag (default for dates >= 2026-03-17)
Allows reverting to ArrayBuffer delivery by setting ws.binaryType = "arraybuffer" before calling accept()
Adds no_websocket_standard_binary_type flag to .wrangler/config to force ArrayBuffer as the default for all WebSockets in a Worker
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Binary frames now arrive as Blob instead of ArrayBuffer, causing event.data instanceof ArrayBuffer checks to fail silently for Workers with compatibility dates >= 2026-03-17
Cloudflare Workflows adds step context properties and ReadableStream support in step.do()
Adds step.name, step.count, and config (with timeout and retries) to the context object passed to step.do() callbacks for enhanced loop and configuration introspection
Enables returning a ReadableStream directly from step.do() handlers to support outputs larger than the previous 1 MiB non-stream limit
R2 SQL adds JSON functions (json_get_str, etc.), EXPLAIN FORMAT JSON, and support for unpartitioned tables
EXPLAIN FORMAT JSON returns query execution plans as structured JSON for programmatic analysis
Unpartitioned Iceberg tables can now be queried directly via SQL
Adds JSON functions json_get_str, json_get_int, json_get_bool, and json_contains to manipulate JSON data stored in Apache IcebergApache IcebergAn open table format for large analytic datasets, maintained by the Apache Software Foundation, that gives cyber tools reliable schema evolution, time-travel queries, and atomic commits on object storage or HDFS. tables
Workers AI adds Moonshot AI Kimi K2.6 model with @cf/moonshotai/kimi-k2.6 support
Adds the new @cf/moonshotai/kimi-k2.6multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. agentic model to Workers AI
Supports configurable thinking depth via the chat_template_kwargs.thinking field in API payloads
Returns reasoning content in the new reasoning response field, replacing the previous reasoning_content
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The API payload key for controlling thinking is now chat_template_kwargs.thinking, not chat_template_kwargs.enable_thinking
!The response field containing reasoning content is now named reasoning, not reasoning_content
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. portal homepage with branding, endpoint display, and Sign out button for session revocation
Adds Homepage to MCP server portals displaying portal name, organization branding, MCP endpoint URL (with copy button), and per-client connection instructions
Adds Sign out button to authenticated MCP portal users that revokes all portal-level OAuth grants, deletes upstream server OAuth states, and redirects through Cloudflare Access logout
Cloudflare introduces AI Crawl Control to redirect verified AI training crawlers to canonical URLs using existing HTML <link rel="canonical"> tags. This feature is available on Pro, Business, and Enterprise plans.
New Redirects for AI Training capability within AI Crawl Control.
AI Search adds hybrid searchhybrid searchCombining keyword search with semantic or vector search. The results use both exact term matches and similarity in meaning. (vector + BM25BM25The classic keyword-ranking formula behind traditional search engines. Hybrid search combines it with embedding similarity so exact terms and meaning both count.) and per-request relevance boosting via new config fields
Adds index_method, fusion_method, keyword_tokenizer, and keyword_match_mode to the create call for enabling hybrid search and tuning ranking
Adds retrieval.boost_by array in ai_search_options to boost search results by metadata fields like timestamp or priority per request
AI Search now includes built-in storage and new namespace Workers Bindings for dynamic instance management
AI Search instances created after April 16, 2026 include built-in vector index and storage, allowing direct file upload via items.uploadAndPoll and immediate search without external R2 buckets.
Adds the ai_search_namespaces binding in wrangler.jsonc, replacing the deprecated env.AI.autorag() API to manage instances at runtime.
Enables cross-instance search by passing an array of instance IDs via ai_search_options.instance_ids in the namespace-level search API.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The env.AI.autorag() API is replaced by the new ai_search_namespaces binding; existing Workers using the old API will require migration to the new binding format.
Cloudflare Access adds independent MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enforcement at org, app, and policy levels with TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip., security key, and biometric support.
Adds Independent MFA capability to Cloudflare Access for organizations to enforce MFA requirements without relying on an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. (IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.).
Enables per-application and per-policy configuration of MFA settings via Organization, Application, and Policy levels.
Supports authenticator types: TOTP applications, Security keys (hardware), and Biometrics (Touch ID, Face ID, Hello) for independent MFA.
Cloudflare Logpush datasets now include TenantID and new Firewall for AI fields.
Gateway DNS, Gateway HTTP, Gateway Network, and Zero Trust Network Sessions datasets now include the TenantID field to identify the tenant ID of requests or sessions.
Firewall Events and HTTP Requests datasets now include FirewallForAIInjectionScore, FirewallForAIPIICategories, FirewallForAITokenCount, and FirewallForAIUnsafeTopicCategories fields for AI traffic analysis.
Browser Run adds Live View, Human-in-the-Loop, and Session Recordings for agent debugging
Adds Live View for real-time visibility of active browser sessions via dashboard, UI, or Chrome DevTools.
Adds Human in the Loop capability allowing humans to intervene in live browser sessions during agent execution.
Adds Session Recordings by passing recording: true to capture DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime. state for post-session replay.
Agent Lee adds Write Operations and Generative UI capabilities in Beta
Enables Agent Lee to perform infrastructure changes including updating DNS records, modifying SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS settings, and configuring Workers routes
Adds Generative UI to render inline charts and structured data visualizations within the chat interface using account telemetry
Introducing Cloudflare Mesh for post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. encrypted peer-to-peer networking with a new dashboard.
Enables post-quantum encrypted networking between enrolled devices and nodes over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it., UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery., and ICMP.
Assigns a private Mesh IP to every enrolled device and node for direct IP-based reachability.
Increases the Mesh node limit from 10 to 50 per account.
Adds a new dashboard experience at Networking > Mesh with an interactive network map, route configuration, and setup wizard.
Adds wrangler browser CLI commands to create, manage, and view Browser Rendering sessions.
└──▷ USE IT
Create a browser session lasting 300 seconds and get the connection URL.
shell
wrangler browser create --keepAlive 300
Adds --keepAlive flag to wrangler browser create to set session duration (60-600 seconds)
Adds --json support to all wrangler browser commands for structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed.
Workers VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. bindings now support direct access to Cloudflare Mesh network nodes via cf1:network
vpc_networks configuration now accepts binding = "MESH" and network_id = "cf1:network" to route traffic through Cloudflare Mesh.
Adds Cloudflare dashboard UI for configuring Logpush jobs to Google BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data.
New DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Payload Log Masking configuration allows Full Mask, Partial Mask, or Clear Text in Zero Trust DLP settings.
Enables incident response validation by preserving character count and visual formatting in Full Mask mode, distinguishing true positives from false positives more effectively than the previous single masking mode
Cloudflare introduces account-level DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. settings for consistent enforcement across all profiles
Adds Account-level DLP settings configuration capability in Cloudflare One, enabling unified management of OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels., AI context analysis, and payload masking.
Zero Trust DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. now includes three predefined entries for detecting Cloudflare User API Keys and Tokens via new prefix patterns.
Adds cfk_ prefixed user-scoped API key detection to the Credentials and Secrets DLP profile
Adds cfut_ prefixed user-scoped API token detection to the Credentials and Secrets DLP profile
Adds cfat_ prefixed account-scoped API token detection to the Credentials and Secrets DLP profile
Adds TLS interception, credential injection, dynamic egress policies to Cloudflare Sandboxes via outboundByHost and setOutboundHandler
Adds MySandbox.outboundByHost property to inject secrets into outbound requests without exposing them to the sandbox workload
Adds automatic TLS interception for outbound HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic in Sandboxes using a unique ephemeral CA per instance
Adds allowedHosts and deniedHosts properties on MySandbox to enforce allow/deny lists with glob pattern support
Adds setOutboundHandler() method to apply or remove named outbound handlers at runtime without restarting the sandbox
Adds params support to dynamic outbound handlers for per-instance customization
Local Explorer adds browser UI and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for managing local Workers resources (KV, R2, D1, etc.)
Adds e terminal shortcut to start Local Explorer during local development sessions
Exposes OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth.-powered REST API at /cdn-cgi/local/explorer/api for programmatic access to local resource data
Supports viewing and editing KV, R2, D1, Durable Objects, and Workflows locally via browser or API
Cloudflare API tokens now include identifiable patterns that enable secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. tools to automatically detect them when leaked in code repositories, configuration files, or other public locations. Cloudflare API tokens are now supported by GitHub Secret Scanning for public repositories.
Browser Rendering adds CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure. and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client support via a new WSS endpoint and chrome-devtools-mcp integration.
Exposes the Chrome DevTools Protocol (CDP) via the wss://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/browser-rendering/devtools/browser endpoint for CDP-compatible clients like Puppeteer and Playwright.
Adds support for MCP clients through the chrome-devtools-mcp package, enabling tools like Claude Desktop and Cursor to use Browser Rendering as a remote browser.
Cloudflare Workers now frees connection slots immediately after response headers arrive, eliminating spurious deadlock cancellations.
simultaneous open connections limit logic relaxed: a connection is freed as soon as response headers arrive rather than waiting for the full response body completion.
Cloudflare One adds CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. posture finding instances via webhooks with flexible auth and test delivery.
Adds Integrations > Webhooks destination configuration for sending CASB posture finding instances to external systems
Adds Flexible authentication options (None, Basic Auth, Bearer Auth, Static Headers, HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it.-Signing) for webhook destinations
Adds Test delivery capability to send test requests before live sending
Adds Send webhook action in the Cloud & SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. findings posture finding details workflow
AI Search supports four new Workers AI models for text generation and embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG.
Adds @cf/zai-org/glm-4.7-flash model to AI Search with a 131,072 token context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it.
Adds @cf/qwen/qwen3-30b-a3b-fp8 model to AI Search as a mixture-of-expertsmixture-of-expertsA model design that splits its layers into many expert sub-networks and routes each token to only a few. The model holds many parameters but spends the compute of a much smaller one per token. text generator
Adds @cf/qwen/qwen3-embedding-0.6bembedding modelembedding modelLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. supporting 4,096 input tokens
Adds @cf/google/embeddinggemma-300m embedding model optimized for low-latency workloads
Adds source_params.web_crawler.parse_options.content_selector array to AI Search instance configuration, enabling CSS selector rules with URL glob patterns (up to 10 entries) for precise content extraction during web crawling.
Cloudflare dashboard now supports managing mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. and BYO CA certificates for AOP and clients without API
Adds AOP certificate management in the Cloudflare dashboard to upload and manage own certificate authorities for Authenticated Origin Pulls directly from the UI
Adds BYO Client mTLS certificate management in the Cloudflare dashboard to upload and manage own CA certificates for client mTLS enforcement without needing API access
Adds CDN hostname to client mTLS certificate mapping in the Cloudflare dashboard to associate client mTLS certificates with specific hostnames directly from the UI
Cloudflare Email security adds Triage Status Tracking for User Submissions with Unreviewed/Reviewed/Escalated states.
Status column added to the User Submissions table in the Cloudflare One dashboard, showing Unreviewed, Reviewed, or Escalated states for user-submitted emails
New UI filtering capability allows SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts to filter the User Submissions table by the new Status column values
Cloudflare Workers now auto-reply WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Close frames; adds allowHalfOpen flag for proxying control.
The Workers runtime now automatically sends a reciprocal Close frame when it receives a Close frame from the peer, matching the WebSocket specification.
Adds allowHalfOpen: true option to WebSocketPair.accept() to enable half-open mode for independent close coordination in proxy scenarios.
Cloudflare Organizations public beta enables centralized multi-account management via new dashboard container and Terraform provider support
Adds a new Organizations top-level container for centrally managing multiple accounts, members, analytics, and shared policies from one location.
Enables self-serve onboarding where enterprise customers can create an Organization in the dashboard and assign accounts where they are Super Administrators.
Introduces Terraform provider support to provision Organizations, assign accounts, and configure settings programmatically via infrastructure as code.
Cloudflare Email Security adds automatic DANE support for MX deployments.
Regional MX hostnames now publish DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit.-backed TLSA records to enable cryptographic certificate validation.
DANE verification is automatically enabled for all Advantage, Enterprise, and Enterprise + PhishGuard customers using regional MX deployments without additional configuration.
Google Gemma 4 26B A4B now available on Workers AI with vision, function callingfunction callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions., and thinking mode.
Adds @cf/google/gemma-4-26b-a4b-it model to Workers AI
Adds in-session server management and reauthentication for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. portals via elicitation URLs.
Enables managing upstream MCP server connections directly within the client session without leaving the AI agent interface.
Allows enabling or disabling specific upstream servers to toggle their tools on or off and reduce context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. usage.
Provides an authorization URL via MCP elicitation for reauthentication or changing data access permissions.
Supports inline server management by asking the AI agent directly (e.g., "enable the wiki server").
Cloudflare Logpush adds native BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. destination support.
Cloudflare Logs UI gets field filtering, custom columns, detail views and a toggle to the classic view.
Adds Filter by field capability to Cloudflare Access authentication logs and Gateway activity logs (DNS, Network, HTTP) allowing selection of any field value to narrow results
Enables Customizable fields in the log table so users choose which fields to display, improving loading performance by querying fewer fields
Adds ability to View details by selecting a timestamp to see full log entry information
Introduces Switch to classic view option to return to the previous log viewer interface
Adds clientTcpRtt, clientQuicRtt, and edgeL4 properties to request.cf in Workers for L4 transport telemetry
Adds clientTcpRtt property on request.cf exposing smoothed TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. round-trip time in milliseconds
Adds clientQuicRtt property on request.cf exposing smoothed QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. round-trip time in milliseconds
Adds edgeL4.deliveryRate property on request.cf exposing Layer 4 data delivery rate estimate in bytes per second
Wrangler workflows commands support local development via --local and --port flags
└──▷ USE IT
List all workflow instances running in your local development environment.
shell
npx wrangler workflows instances list my-workflow --local
Adds --local flag to all wrangler workflows commands to target a Workflow running in a local wrangler dev session instead of the production API.
Adds --port argument to wrangler workflows commands to target a specific wrangler dev session (defaults to 8787).
Enables full Workflow lifecycle management locally, including triggering, listing instances, pausing, resuming, restarting, terminating, and sending events via the new local flags.
List all AI Search instances in the current account.
shell
wrangler ai-search list
wrangler ai-search create creates a new AI Search instance, with an interactive wizard or flags like --type r2.
wrangler ai-search list lists all AI Search instances in your account.
wrangler ai-search get retrieves details for a specific AI Search instance.
wrangler ai-search update updates the configuration of an existing AI Search instance.
wrangler ai-search delete removes an AI Search instance.
+3 moreshow less
wrangler ai-search search runs a query against an AI Search instance directly from the CLI.
wrangler ai-search stats retrieves usage statistics for an AI Search instance.
All wrangler ai-search * commands support the --json flag for structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed..
Cloudflare Radar Routing section split into Overview, RPKI, Anomalies sub-pages with new Top 100 ASes table and RPKI validation views.
Adds Top 100 ASes ranking table to the Routing overview, sortable by customer cone size, IPv4 address space, or IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. address space
Adds RPKI validation view on per-ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. pages showing prefixes grouped by RPKI validation status (Valid, Invalid, Unknown) with visibility scores
Improves IP address space chart to display both IPv4 and IPv6 trends stacked vertically across global, country, and AS views
New cf.timings.client_quic_rtt_msec and cf.edge.l4.delivery_rate fields in Cloudflare rules for transport-aware routing.
└──▷ USE IT
Tag high-latency connections (TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. or QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking.) so origins can serve lightweight variants.
text
cf.timings.client_tcp_rtt_msec > 200 or cf.timings.client_quic_rtt_msec > 200
Identify low-bandwidth client connections using the new delivery rate field.
text
cf.edge.l4.delivery_rate > 0 and cf.edge.l4.delivery_rate < 100000
cf.timings.client_quic_rtt_msec field added to rule expressions for QUIC connection quality monitoring
cf.edge.l4.delivery_rate field added to rule expressions for client bandwidth estimation
Cloudflare Workers Builds now supports Deploy Hooks to trigger builds via HTTP POST.
└──▷ USE IT
Trigger a Workers build via HTTP POST from an external system like a headless CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. or CI pipeline.
shell
curl -X POST "https://api.cloudflare.com/client/v4/workers/builds/deploy_hooks/<DEPLOY_HOOK_ID>"
Navigate the Cloudflare dashboard to create a new Deploy Hook URL.
Adds the Deploy Hooks configuration page under Workers & Pages > Settings > Builds > Deploy Hooks to create unique URLs that trigger a Worker build and deploy on POST.
Exposes the new API endpoint POST /client/v4/workers/builds/deploy_hooks/<DEPLOY_HOOK_ID> for triggering builds from headless CMS, Cron Triggers, or Slack bots.
Adds automatic deduplication of redundant builds triggered by rapid webhook retries or CMS event bursts.
Arcade 2026-04-24 adds ?connect param to MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateways list, Google Drive permissions tools, and CC support in draft replies.
Add a connect search param to the MCP gateways list route
Revamped GoogleDocs.EditDocument with enhanced editing capabilities
Add CC support to draft replies and improve handling of email threads
Adds permission management tools to the GoogleDrive MCP server
4 details in Everything
2 more releases in this issue
· 2026-04-10 → 2026-04-24
Arcade adds configurable MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateway header passthrough and Linear MCP unassign capability
Adds gateway.headers configuration key to .arcade/mcp_servers.yaml to control HTTP header passthrough for MCP gateways.
Adds the unassign_issue tool to the Linear MCP server, allowing tools to remove assignees from issues.
Enhances the Gmail MCP server's structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. to explicitly include thread participant emails in the participants field.
Arcade adds AG2 framework support, a PostHog toolkit with 41 tools, and Claude Code gateway auth
Adds AG2 as a supported agent framework in the docs with a new walkthrough.
Adds Arcade MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers formatting support to GoogleDocs.CreateDocumentFromText to interpret input as Markdown.
Adds Arcade Auth support to Claude Code gateway connect option.
THE CYBER TOOLCHAIN