The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
RedAmon v3.2.0 adds Uncover multi-engine recon, centralized IP filtering, Censys API v3, and CriminalIP agent tool.
└──▷ GET THIS VERSION
$ git clone --branch v3.2.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v3.2.0
Adds Uncover as Group 2b in the recon pipeline to query up to 13 search engines for exposed hosts, IPs, and endpoints
Adds CENSYS_API_TOKEN and CENSYS_ORG_ID environment variables for Censys Platform API v3 Bearer tokenBearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. authentication
Adds ip_filter.py module to centrally filter private, loopback, and CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. IPs across all OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. enrichment modules
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Censys authentication no longer accepts Basic Auth (API_ID/API_SECRET); must use Bearer token auth with CENSYS_API_TOKEN and CENSYS_ORG_ID
2 more releases in this issue
· 2026-03-14 → 2026-03-31
$ git clone --branch v3.0.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v3.0.0
GET/POST/DELETE /api/nuclei-templates endpoints enable upload and management of custom .yaml/.yml nuclei templates via the UI
ParamSpiderSection.tsx adds passive parameter discovery from Wayback Machine CDX API with PARAMSPIDER_* settings (enabled, placeholder, timeout) and stealth mode integration
ArjunSection.tsx adds hidden HTTP parameter discovery testing ~25,000 common names with 12 ARJUN_* configuration settings (methods, max endpoints, threads, rate limit, etc.)
FfufSection.tsx and /api/projects/[id]/wordlists enable brute-force directory/endpoint discovery via FFuf with custom wordlist upload support
RedAmon Terminal provides interactive PTY shell access to kali-sandbox via WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. endpoint /ws/kali-terminal using terminal_server.py
+5 moreshow less
ToolConfirmationGate pauses agent execution for dangerous tools (execute_nmap, execute_naabu, etc.) with manual Allow/Deny via ToolExecutionCard and REQUIRE_TOOL_CONFIRMATION setting
Parallelized Recon Pipeline uses concurrent.futures.ThreadPoolExecutor to run WHOIS, Subdomain Discovery (Subfinder, Amass, Knockpy), URLScan, Shodan, and Port Scan modules concurrently
ExternalDomain Neo4j node type tracks out-of-scope domains with HAS_EXTERNAL_DOMAIN relationships populated by update_graph_from_external_domains()
New subdomain sources: run_subfinder(), run_amass(), and run_puredns_resolve() integrated into domain recon pipeline with dedicated subfinderEnabled, amassEnabled, and purednsEnabled settings
sslVerify boolean toggle (default: true) in Global Settings allows skipping SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificate verification for OpenAI-compatible LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers
10 details in Everything
└──▷ BREAKING ON UPGRADE
!NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. and Vulners API keys moved from Project model to Global Settings, no longer part of project-level fallback chain
$ git clone --branch v2.3.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v2.3.0
Adds /settings page (gear icon) to manage LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers (OpenAI, Anthropic, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code., AWS Bedrock, OpenAI-Compatible) and Tool API keys exclusively via UI without .env files
Adds pentest report generation with 11-section HTML output including Security Posture Radar chart and CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. Callout via /reports page
Adds Wave Runner parallel execution using new plan_tools LLM action and execute_plan LangGraph node to run independent tools concurrently via asyncio.gather()
Adds Shodan OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. integration (recon/shodan_enrich.py, shodan agent tool for host lookup, DNS, and CVE data) and Google Dork Tool using SerpAPI via the new google_dork agent action
Adds Kali Shell Library Installation Control toggle Allow Library Installation with whitelist/blacklist textareas for package management in kali_shell
+3 moreshow less
Adds DEEP_THINK_ENABLED toggle in Agent Behaviour to enable strategic reasoning at phase transitions or failure loops, streamed via deep_thinkWebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. event
Adds /insights real-time analytics dashboard with charts covering attack chains, vulnerabilities, and agent activity pulled from Neo4j graph
Adds POST /emergency-stop-all endpoint on the agent service to freeze all running pipelines and AI conversations instantly
v3.10.8 adds per-command timeouts and a watchdog to prevent infinite scan hangs in xalgorix
└──▷ GET THIS VERSION
$ git clone --branch v3.10.8 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v3.10.8
Adds implicit per-command timeouts: 10 minutes for lightweight commands (curl, wget), 30 minutes for heavy tools (nmap, nuclei, ffuf, gobuster, sqlmap, masscan), and a hard 2-hour ceiling for any command.
Introduces a scan-level timeout that force-stops an entire scan after 2 hours of total execution time.
2 details in Everything
4 more releases in this issue
· 2026-03-13 → 2026-03-31
New CLI flags (--output, --workspace), new providers (Vertex AI, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code., DeepSeek), and pipeline controls
└──▷ GET THIS VERSION
$ git clone --branch v1.0.0 https://github.com/KeygraphHQ/shannon.git
# already have the repo? check out this version:$ git checkout v1.0.0
└──▷ TRY IT
Save scan results directly to a specific directory instead of the default location
$ shannon scan target --output ./results/v1
Adds --output flag to specify a configurable output directory for scan results and deliverables
Adds --workspace flag to resume workflows from a named workspace or list available workspaces
Adds Google Vertex AI provider support with automatic service account authentication
Adds OpenRouter provider support for claude-code-router multi-model testing
Adds DeepSeek provider support for claude-code-router multi-model testing
+5 moreshow less
Adds custom base URL support for Anthropic-compatible endpoints via environment variable or config
Adds configurable pipeline retry and concurrency settings to control worker execution
Adds named workspaces and workspace listing capability
Adds preflight validation phase that runs before scanning with structured error reporting
Expands injection analysis scope to include LFI, RFI, SSTISSTIServer-Side Template Injection, a vulnerability class where attacker-controlled input is evaluated by a server-side template engine, enabling remote code execution or data exfiltration., Path Traversal, and DeserializationDeserializationTurning stored or transmitted data back into objects a program can use. Unsafe handling of untrusted data can allow unexpected behavior or code execution.
Strix v0.8.3 adds NestJS skills, interactive agent loop mode, and OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing support.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.3 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v0.8.3
feat(skills): adds a NestJS security testing module for skill-based scanning
feat: adds interactive mode for the agent loop to allow manual stepping through prompts
SecLists 2026.1 adds AI safety testing wordlists, updated subdomain lists, and new cloud/DevOps/camera discovery lists.
└──▷ GET THIS VERSION
$ git clone --branch 2026.1 https://github.com/danielmiessler/SecLists.git
# already have the repo? check out this version:$ git checkout 2026.1
Adds 2025 most-used passwords wordlist for up-to-date credential attacks.
Adds AI ethical and safety boundary testing wordlists for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code./AI security assessments.
Updates top-1-million subdomains lists with fresh Cloudflare data.
Adds new technology-specific wordlists for Kubernetes, Docker, Elasticsearch, Grafana, GitLab, and Prometheus discovery.
Adds OpenWRT discovery wordlist for router/embedded device enumeration.
+7 moreshow less
Adds RTSP camera discovery wordlist for IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure./camera reconnaissance.
Adds SOfensive LFI wordlist with OS-classified LFI lists.
Adds wordlist for Bludit CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. directory and file discovery.
Adds locale-codes and language-codes wordlists.
Adds Brazilian Portuguese common.txt and Brazilian names list for localized brute-forcing.
Adds Polish password wordlist for language-specific credential attacks.
Expands API fuzzing endpoints, GraphQL payloads, login bypass payloads, Swagger.txt, SAP NetWeaver, and Spring endpoints.
12 details in Everything
└──▷ BREAKING ON UPGRADE
!Country codes wordlists are now prefixed with regional_, which will break tooling or scripts referencing the old filenames.
!The Windows LFI wordlist has been renamed from adeadfed, which will break tooling or scripts referencing that filename.
!The GracefulSecurity LFI wordlist has been removed.
!The wordlist der-postillon.txt has been removed.
!rstp.txt has been moved from the fuzzing directory to Discovery/Web-Content/Service-Specific, which will break paths referencing its previous location.
brutespray v2.6.0 adds 12 new service modules, SSH key auth, CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. extraction, SNMPv3, proxy rotation, and multi-auth support.
└──▷ GET THIS VERSION
$ git clone --branch v2.6.0 https://github.com/x90skysn3k/brutespray.git
# already have the repo? check out this version:$ git checkout v2.6.0
└──▷ TRY IT
Test SSH private-key authentication against discovered SSH hosts instead of passwords.
Rotate through multiple SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxies round-robin to distribute spray traffic across exit nodes.
Adds 12 new service modules: SVNSVNApache Subversion, an open-source centralized version control system maintained by the Apache Software Foundation, used by tools to track, branch, and merge source code changes across a shared repository., SOCKS5-auth, HTTP-form, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.-form, SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure.-VRFY, rexec, rlogin, rsh, wrapper, FTPSFTPSFTP with TLS/SSL encryption layered on top, standardized in RFC 4217, used by tools that need to transfer files over authenticated, encrypted channels while staying compatible with legacy FTP infrastructure., LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext. — bringing the total to 35+.
Supports SSH private-key authentication via -m key:true -p /path/to/id_rsa.
Enables automatic CSRF token extraction for HTTP-form attacks via -m csrf:FIELD_NAME.
Adds SNMPv3 user-based authentication with MD5/SHA and AES/DES privacy.
Supports multi-auth auto-detection: HTTP Digest/NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent., SMTP PLAIN/LOGIN/NTLM, IMAP CRAM-MD5, POP3 APOP (from banner), and SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. pass-the-hash.
+6 moreshow less
Introduces --proxy-list for round-robin rotation across multiple SOCKS5 proxies.
Adds SOCKS5 CONNECT handshake verification before handing off to modules.
Modules now capture and return server banners in BruteResult.
Supports database and domain parameters: MySQL/PostgreSQL -m dbname:NAME, MSSQL/RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely./SMB -m domain:NAME, Redis -m db:N.
Replaces default help output with a grouped, color-coded help menu organized by category.
Telnet module now recognizes login/password prompts in 10 languages including Chinese, Japanese, Korean, and Russian.
11 details in Everything
2 more releases in this issue
· 2026-03-06 → 2026-03-17
brutespray v2.5.5 promotes RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. to stable, adds session replay on resume, and hardens credential handling for special characters and CRLF injection.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.5 https://github.com/x90skysn3k/brutespray.git
# already have the repo? check out this version:$ git checkout v2.5.5
└──▷ TRY IT
Resume a previously interrupted scan — Ctrl+C now prints the exact command; pass either the .json or .jsonl.jsonlA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. session file and brutespray resolves it automatically.
$ brutespray --resume session.jsonl
RDP support promoted from beta to stable.
Session replay on --resume: the full previous session is replayed into the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. so the scan appears uninterrupted.
Ctrl+C now prints the exact --resume command needed to continue a session later.
Connection string escaping for credentials containing @, :, ;, etc. across MongoDB, MySQL, PostgreSQL, MSSQL, and Oracle.
CRLF injection prevention: credentials are sanitized before embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. in Asterisk AMI, TeamSpeak, VMAuthd, and NNTP protocol streams.
+1 moreshow less
New docs/ folder with seven dedicated documentation pages covering installation, usage, services, examples, TUI, advanced options, and output.
brutespray v2.5.4 adds an interactive TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., embedded wordlists, LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./WinRMWinRMA Windows-native remote management protocol from Microsoft, implementing the WS-Management standard, that lets tools execute commands and access data on remote Windows hosts over HTTP or HTTPS. modules, credential spray mode, and resume support.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.4 https://github.com/x90skysn3k/brutespray.git
# already have the repo? check out this version:$ git checkout v2.5.4
└──▷ TRY IT
Run a spray attack against a target list with a delay between attempts to avoid lockouts, saving a checkpoint you can resume if interrupted.
New default interactive TUI (Bubble Tea) with tabbed views: All, By Host, By Service, Completed, Successes, Errors, Settings; use --no-tui to revert to legacy output.
Live-adjustable threads-per-host and parallel-hosts settings during an active scan via the TUI Settings tab.
Real-time stats in TUI: elapsed time, attempts/sec, success rate, and error counts.
Embedded curated wordlists compiled into the binary via a YAML manifest — no external downloads required.
Automated monthly wordlist refresh pipeline with Brave Search integration.
+10 moreshow less
New LDAP and LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext. bruteforce module.
New WinRM bruteforce module.
Metasploit .rc resource script output via -summary.
NetExec/CrackMapExec shell script output via -summary.
Resume/checkpoint support: automatically saves progress on Ctrl+C; resume with -resume.
YAML config file support (-config) for per-engagement settings.
Per-host rate limiting via -rate.
SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support routed through a centralized ConnectionManager for all modules.
Interface binding (-iface) for VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. and multi-homed network setups.
RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. module upgraded with LoginAuthOnly() for fast NLA-only credential checking and full context/timeout support.
v8.6 adds cdxKeywordsFilter() for -ko and -ra patterns with improved MIME validation
└──▷ GET THIS VERSION
$ git clone --branch v8.6 https://github.com/xnl-h4ck3r/waymore.git
# already have the repo? check out this version:$ git checkout v8.6
Wraps -ko / --regex-after patterns with cdxKeywordsFilter() to auto-apply .* prefix/suffix for Wayback CDX and Common Crawl APIs, enabling flexible substring anchoring.
Updates MIME type validation regex for -ft / --filter-mime-types and -mt / --match-mime-types to accept all RFC-valid token characters (e.g., ., _, !).
Adds immediate regex validation for -ko and -ra arguments with a clear error message and hint to use single quotes.
SharpHound v8.9.0 adds Azure Federated Identity Credential collection; BHE allows separate OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. node/edge payloads.
└──▷ USE IT
Ingest nodes and edges separately in BHE without losing disconnected nodes
api
curl -X POST https://bhe.example.com/api/v1/ingest/nodes -H 'Authorization: Bearer <token>' -d @nodes.json; curl -X POST https://bhe.example.com/api/v1/ingest/edges -H 'Authorization: Bearer <token>' -d @edges.json
AZFederatedIdentityCredential nodes and AZAuthenticatesTo edges for mapped Azure Federated Identity Credentials
Separate OpenGraph node/edge upload endpoints/payloads in BloodHound Enterprise that preserve disconnected nodes
2 details in Everything
└──▷ BREAKING ON UPGRADE
!OpenGraph data payloads format changed for BloodHound Enterprise; existing ingestion scripts may fail unless updated to the new payload structure.
2 more releases in this issue
· 2026-03-04 → 2026-03-23
SharpHound v2.11.0 improves NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. collection logging for better visibility during enumeration.
└──▷ GET THIS VERSION
$ git clone --branch v2.11.0 https://github.com/SpecterOps/SharpHound.git
# already have the repo? check out this version:$ git checkout v2.11.0
Julius v0.2.0 adds 30 new LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. service probes and fixes detection issues in existing probes
└──▷ GET THIS VERSION
$ git clone --branch v0.2.0 https://github.com/praetorian-inc/julius.git
# already have the repo? check out this version:$ git checkout v0.2.0
Adds 30 new LLM service probes for identifying cloud LLM endpoints and configurations
Migrates to Go modules (Go 1.25), enabling standard go install distribution.
Adds GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. CI pipeline with automated cross-platform release builds.
Surface only login pages across a target list — useful for credential-stuffing or password-spray assessments.
$ cat targets.txt | httpx -fpt login -silent
New -fpt/-filter-page-type flag classifies and filters responses by page type (e.g. login, captcha, parked) using a page, form, and form-field classifier.
Adds database output support — scan results can now be stored directly to MongoDB, PostgreSQL, or MySQL.
Adds service plugins for AnyDesk, CoAP, M2PA, and M2UA protocols
Adds --misconfigs flag to enable security misconfiguration detection including docker-unauth-api, x11-unauth-access, smb-signing-not-required, telnet-cleartext, vnc-detected, and ftp-cleartext
3 details in Everything
1 more release in this issue
· 2026-03-13 → 2026-03-27
nerva v1.1.0 adds 14 HTTP fingerprinters, TeamViewer plugin, and --resume/-R/-H flags for control
└──▷ GET THIS VERSION
$ git clone --branch v1.1.0 https://github.com/praetorian-inc/nerva.git
# already have the repo? check out this version:$ git checkout v1.1.0
Adds --resume and --state-file flags to resume interrupted scans from a saved state file.
Adds -R / --rate-limit flag to control the scan rate.
Adds -H / --max-host-conn flag to limit concurrent connections per host.
Adds --auto-save flag to enable periodic state saving during scans.
Adds 14 new HTTP fingerprinters: checkpoint, cockroachdb, gitea, gotenberg, harbor, juniper, keycloak, localai, portainer, sonicwall, tidb, triton, plus gotenberg-health for older versions.
+1 moreshow less
Adds a new TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. fingerprinting service plugin for TeamViewer (port 5938).
Smarter AI Assistant with natural language search and Exclude saved companies filter in Discover
AI Assistant translates natural language descriptions (e.g., Sales Managers at SaaS companies) into precise filters, company results, and contacts without manual configuration
New filter to exclude companies already saved to Leads from search results in Discover
Hunter adds native Progressive Sending feature for new inboxes to scale outbound volume automatically and avoid spam filters
└──▷ HOW TO FIND IT
Automatically ramp up daily sending volume for a new inbox connected to Sequences without manual intervention.
📍Navigate to email account settings and enable Progressive Sending for the target inbox.
Adds Progressive Sending automation for newly connected or inactive email accounts in Sequences to gradually increase daily sending limits until a target is reached.
New Email Accounts Center for managing sender accounts and Global Health score.
└──▷ HOW TO FIND IT
View the overall sender health status and access specific fix links from the overview bar.
📍In the Sequences navigation panel, open Email Accounts Center and view the Global Health Score at the top.
Filter accounts by status to quickly identify issues across your sender setup.
📍In Email Accounts Center, use the search and filter options to view accounts by email address or health status.
Execute bulk maintenance tasks like updating sender names or disconnecting multiple accounts simultaneously.
📍In Email Accounts Center, select multiple accounts and choose Edit sending limits, Update sender names, or Disconnect from the bulk actions menu.
Adds the Email Accounts Center page to manage all connected sender accounts in one place
Adds Global Health score feature with breakdowns for Authentication (SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders., DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit., DMARC), Reputation, and Email account health
Enables bulk actions across multiple accounts: run health checks, edit sending limits, update sender names, enable Inbox Protection, or disconnect
Nmap 7.99 adds VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. adapter scanning, Zenmap universal wheel install, new NSE URL functions, and improved OS/service fingerprints.
Adds --vpn-adapter support for scanning over VPN virtual adapters like OpenVPN TAP
Distributes Zenmap as a universal wheel (zenmap-7.99-py3-none-any.whl) for Python 3 installation
Updates included OS and service fingerprints with many new IPv4/IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. entries
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The hostmap-crtsh .lax script argument is required to preserve the old substring-matching behavior
The open-source wireless research platform for ESP32.
GhostESP v1.9.7 adds MIC RGB visualizer and Ethernet ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery. poisoning/DNS interception capabilities
└──▷ GET THIS VERSION
$ git clone --branch v1.9.7 https://github.com/GhostESP-Revival/GhostESP.git
# already have the repo? check out this version:$ git checkout v1.9.7
Adds MIC RGB visualizer adapted from SensoryBridge by Connor Nishijima
1 detail in Everything
3 more releases in this issue
· 2026-03-02 → 2026-03-23
GhostESP v1.9.4 adds wifistatus CLI, WiGLEWiGLEA crowdsourced database and website that maps wireless networks and cell towers worldwide, collected by volunteers wardriving. Cyber tools use it to geolocate networks by BSSID or SSID during reconnaissance. upload/stats commands, split-channel wardriving, and NMEA RX backend.
└──▷ GET THIS VERSION
$ git clone --branch v1.9.4 https://github.com/GhostESP-Revival/GhostESP.git
# already have the repo? check out this version:$ git checkout v1.9.4
Adds wifistatus CLI command to show connection status and saved network info
Adds new wardriving and GPS info display view with fix mode and satellite count
Adds GhostLink split-channel wardriving helper mode via startwd --helper flag
Adds SD JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. mounting for custom evil portal menu option
Adds hold to invert letter case on joystick select in keyboard view
Adds option to select custom portal for karma attack
Flipper Zero Unleashed Firmware, an unlocked alternative firmware.
Unleashed Firmware unlshd-086 adds Ditec GOL4 and KeyFinder SubGHz protocols, Indala 224-bit LFRFID support, and makes view_port_send_to_back public.
└──▷ GET THIS VERSION
$ git clone --branch unlshd-086 https://github.com/DarkFlippers/unleashed-firmware.git
# already have the repo? check out this version:$ git checkout unlshd-086
Adds support for the Ditec GOL4 54bit dynamic protocol in SubGHz (with programming mode, button switch, and manual add).
Adds support for the KeyFinder 24bit static protocol in SubGHz.
Adds manual add and button switch support for Somfy Keytis in SubGHz.
Adds Indala 224-bit (long format) protocol support to LFRFID.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
Adds channel switch announcement and quiet time attacks, meta device scanning, CLI commands, PWM brightness control, and new hardware binaries.
└──▷ GET THIS VERSION
$ git clone --branch v1.11.0 https://github.com/justcallmekoko/ESP32Marauder.git
# already have the repo? check out this version:$ git checkout v1.11.0
Add channel switch announcement attack
Add quiet time attack
Add scan for meta devices
Add build config for dual mini c5
Add BT callback check for wardriving
+2 moreshow less
toggle channel hop for beacon sniff
Manual channel scrolling for non-touch sniffers
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Reformat of settings to default values when updating.
The firmware for the HackRF+PortaPack H1/H2/H4/H4M.
Mayhem v2.4.0 adds HackRF Pro support and numerous new RF apps including Morse, RTTY, FPV Detect, TPMS, and P25 transmitters.
└──▷ GET THIS VERSION
$ git clone --branch v2.4.0 https://github.com/portapack-mayhem/mayhem-firmware.git
# already have the repo? check out this version:$ git checkout v2.4.0
Adds official support for the HackRF Pro hardware, including iCE40iCE40A family of low-power FPGAs made by Lattice Semiconductor, favored by cyber tools for its fully open-source synthesis toolchain, making it easy to deploy custom hardware logic without proprietary software. FPGA bitstream loading, MAX2831 transceiver driver, software RSSI, and dedicated diagnostic views
Adds Morse RX application with full CW/AM/FM/SSB Morse decoder, adaptive timing, tone frequency display, and logging capabilities
Adds RTTY RX application with radioteletype receiver, auto-baud detection, and Baudot decoding
Adds FPV Detect application for analog FPV drone detection scanning all 5.8 GHz bands with confidence-based locking
Adds Time Sink application providing an oscilloscope-style time-domain viewer with persistence and triggering
+21 moreshow less
Adds Morse TX application as a CW key transmitter with AM/FM/DSB/USB/LSB modes, adjustable WPM, and sidetone
Adds RTTY TX application for radioteletype transmission with configurable baud, shift, and tones
Adds EPIRB TX application to simulate emergency beacons (406 MHz BPSK + 121.5 MHz AM) with file-based or manual configuration
Adds SAME TX application as an EAS/Weather alert encoder
Adds MDC-1200 TX application for stun, unstun, radio check, call alert, selective call, and more
Adds P25 TX application to transmit Project 25 TSBK control channel signals
Metasploit Pro 4.22.9 adds GHSA/OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. references, child services reporting, GitLab service reports, default module options precedence, and social engineering tracking details.
Adds negative caching to the LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. entry cache, recording missing objects by DN, sAMAccountName, or SID
Updates the single module run page to support default module options precedence: User Selection > Default Target Options > Payload Options
Enhances services to support child services for improved reporting (e.g., SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. -> HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.)
Adds reporting support for GitLab services
Adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tags and technique references to LDAP, AD CS, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. account, SCCM, Windows password cracking, getsystem, cve_2020_1472_zerologon, and atlassian_confluence_rce_cve_2023_22527 modules
+3 moreshow less
Adds support for GHSA (GitHub Security Advisories) and OSV (Open Source Vulnerabilities) references in modules
Allows Acunetix vulnerabilities to be imported without complete web page data
Updates social engineering campaign capabilities with details on email open tracking affected by auto-fetch or blocked tracking pixels
$ git clone --branch v5.1.0 https://github.com/ADScanPro/adscan.git
# already have the repo? check out this version:$ git checkout v5.1.0
Added Domain Admin Sessions as a new attack step in attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. execution
Added attack path cache for faster attack path generation and better responsiveness
Improved local credential reuse logic for more accurate path generation
BloodHound v8.9.0 adds federated identity credential support, audit-log stdout streaming, standalone nodes, API token expiration, and an OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. schema API.
└──▷ GET THIS VERSION
$ git clone --branch v8.9.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v8.9.0
Adds support for Federated Identity Credentials as a new Azure node/relationship type.
New option to stream audit logs to stdout, enabling log-pipeline integrations without file access.
New GetGraphSchemaDisplayKinds API endpoint for querying OpenGraph schema display kinds.
Supports standalone (unconnected) nodes in ingestion — nodes no longer require edges to be persisted.
Supports arbitrary endpoint matching for edge ingest, enabling more flexible OpenGraph data ingestion.
+5 moreshow less
Adds an Expiration column to the API Tokens management UI.
Updates the Explore page Table View with a new ScrollArea component for improved large-dataset navigation.
Container image base updated to Debian 12.
Adds a new reusable payload validator and CLI interface for ingest pipelines.
Updated SimpleEnvironmentSelector to support OpenGraph environments.
10 details in Everything
1 more release in this issue
· 2026-03-04 → 2026-03-23
BloodHound v8.7.0 adds OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. extension management UI, cancelable analysis runs, column resizing, and API key controls.
└──▷ GET THIS VERSION
$ git clone --branch v8.7.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v8.7.0
Adds OpenGraph extension upload dialog in the UI, allowing users to upload custom graph schema extensions directly from the interface.
Adds delete extension UI flow in OpenGraph Management, enabling removal of custom extensions from within the product.
Adds Upsert Extension endpoint for programmatically creating or updating OpenGraph schema extensions via the API.
Adds Delete Extension endpoint for removing OpenGraph schema extensions via the API.
Adds new validation checks on the Upsert Schema Extension endpoint to enforce correctness of extension definitions.
+11 moreshow less
Adds SourceKind to the DAWGS Kinds table, expanding OpenGraph schema metadata.
Adds Source Kind Deactivation support in the Schema Service.
Adds a migration for the OpenGraph Findings list findings table.
Enables table view column resizing in the UI for more flexible data exploration.
Enables cancellation of a queued analysis run from the Scheduled Analysis interface.
Allows the analysis.scheduled parameter to be updated directly from the UI, removing the need for manual config changes.
Adds a new scheduled_analysis_configuration feature flag to gate scheduled analysis configuration controls.
Adds a new opengraph_collector_platform_support feature flag for OpenGraph collector platform support.
Adds API key disablement support in the auth middleware, allowing API keys to be disabled without deletion.
Adds an API-level check enforcing constraints on removal of API keys.
Deletes all auth tokens on startup to enforce clean session state.
16 details in Everything
└──▷ BREAKING ON UPGRADE
!All existing auth tokens are deleted on startup; any sessions or integrations relying on persisted auth tokens will be invalidated after upgrading.
evil-winrm-py v1.6.0 adds runexe, loaddll, and services commands plus PowerShell tab completion.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.0 https://github.com/adityatelange/evil-winrm-py.git
# already have the repo? check out this version:$ git checkout v1.6.0
└──▷ TRY IT
Enumerate non-system services on the remote machine to identify privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. targets.
$ services
Adds runexe command to upload and execute local executables on the remote host, with support for passing arguments.
Adds loaddll command to load a remote DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. as a PowerShell module.
Adds services command to list running non-system services on the remote machine.
Adds tab auto-completion for PowerShell cmdlets and aliases in the interactive shell.
Supports multiple encodings when reading PowerShell scripts loaded via load_ps.
+2 moreshow less
Enables case-insensitive function name matching in load_ps.
Strips single quotes from paths when drag-and-dropping files for uploads/downloads.
hcxpcapngtool adds FT-PSK PMKIDPMKIDA 128-bit identifier derived from a PMK, the access point MAC, and the client MAC in WPA2 handshakes, allowing offline cracking of Wi-Fi passwords without capturing a full four-way handshake. and EAPOL conversion via new -f flag (hashcat mode 37100)
└──▷ GET THIS VERSION
$ git clone --branch 2026-03-25 https://github.com/ZerBea/hcxtools.git
# already have the repo? check out this version:$ git checkout 2026-03-25
ZeroPath is an AI-native SAST platform that finds 2x more real vulnerabilities with 75% fewer false positives.
ZeroPath 2026-03 adds AI AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. Assistant dashboard, SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. compiled scanning, fix verification via PR comments, V2 APIs, and custom reports.
└──▷ HOW TO FIND IT
Trigger a deeper AI re-investigation of findings on a Pull Request using the new bot command syntax.
📍@bot retriage
Adds new AI AppSec Assistant dashboard with Overview, Activity, Chat, Schedules, Triggers, Memory, and Settings tabs.
Adds custom MCP server installation for the AI AppSec Assistant.
Enables Slack thread control (cancel, replace, amend) within the AI AppSec Assistant.
Adds on-demand investigation for findings in issue detail view, bulk, via API, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.
Adds mandatory data flow path and step-by-step exploitation steps to confirmed findings.
+42 moreshow less
Surfaces exploitability preconditions with expandable evidence in the issue detail view.
Adds new Informational status for findings where exploitability cannot be determined.
Enables deep codebase analysis following extended call chains and complex cross-file data flows.
Smart rescans match issues to changed line ranges per file.
Enables fix verification by referencing ZeroPath issues in PR descriptions using ZP-ID: syntax or dashboard URLs.
Adds @bot retriage command on PRs to trigger fix verification instead of standard investigation.
Adds AL (Business Central) to supported SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. languages.
Links SCA findings to the manifest file and line number where the dependency is declared.
Detects packages embedded in JARs, WARs, Python wheels, and other binary artifacts via compiled asset scanning.
Walks up to 5 hops for multi-hop transitive dependency resolution.
Provides remediation instructions for unpatchable findings when no safe version exists.
Adds SBTSBTA build tool for Scala and Java projects, maintained by the open-source community, that handles compilation, dependency resolution, and packaging using an incremental build model to speed up iterative development. (Scala) transitive dependency support with lockfile parsing and automatic sandbox fallback.
Adds Haskell (Hackage) and R (CRAN) ecosystems to SCA support.
Adds new filters for ecosystem, package reachability, source type, and info severity level in SCA.
Adds Gradle version catalog support with line-level tracking; parses PEP 621 pyproject.toml and Poetry 1.2+ group dependencies.
Includes exploitability preconditions in SCA findings.
Enables SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation directly without first running an SCA scan.
Adds multi-engine secrets detection with automatic cross-engine deduplication.
Adds GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflow security scanning for CI/CD pipeline misconfigurations.
Adds Custom Reports dashboard with interactive charts, 14 filterable fields, six preset templates, and save/share capabilities.
Adds new Assets tab in Reports alongside Views, Generate, and History tabs.
Adds Custom Report permissions (View, Create, Delete) to team settings.
Allows separate PR summary comment controls for scans that find issues and clean scans, both enabled by default.
Limits inline display in PR summary comments to the top 10 findings with a link to the full dashboard.
Adds detailed vulnerability info toggle to PR scan settings.
Adds @bot rescan command for triggering PR rescans and @bot retriage for deeper AI investigation.
Accepts @ZeroPath as a universal bot alias in PR comments, in addition to the configured bot username and @zeropath-ai.
Redesigns Integrations settings page with a master-detail sidebar layout.
Adds History cutoff setting to ignore scan history before a configured date during dependency analysis and deduplication.
Adds custom rules only mode at the repository level.
Supports bulk export of multiple findings in Jira and Linear integrations.
Adds Linear custom templates with title, description, labels, and priority fields for auto-ticketing.
Allows Linear integration to be connected at the organization level.
Supports GitLab pipeline webhooks for pipelines outside of merge requests.
Adds scans.rescanPR tool to the MCP server for triggering PR rescans.
Adds new V2 API endpoints for semantic searchsemantic searchSearching by meaning rather than requiring the same words. It commonly compares vector representations to find related content, even when the wording differs. across vulnerabilities and detected endpoints.
Adds new V2 Agent API with endpoints for patch management, PR creation, repository access, event triggers, and global agent instructions.
skylos v4.1.4 improves dead code detection for modern Python frameworks and speeds up LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. scans.
└──▷ GET THIS VERSION
$ git clone --branch v4.1.4 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.1.4
skylos --llm output now includes populated Problem: descriptions, rule IDs, and severity levels for dead code findings
Dead code detection now treats Flask add_url_rule, FastAPI add_api_route, Starlette add_route/add_websocket_route, and Sanic register_listener/register_middleware as live entrypoints
Skylos v4.1.2 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. validate_code_change for diff-level security regression and pattern scanning
└──▷ GET THIS VERSION
$ git clone --branch v4.1.2 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.1.2
Adds MCP validate_code_change command for diff-level validation with dangerous pattern scanning, secret leak detection, and SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. checks
Adds definitions field to the upload payload to populate the Code City dashboard
Enables auto-detection of changed files from git for quality checks when no explicit diff base is provided
skylos v4.1.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. guardrails, AI provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. tagging, public web scanner, and skylos rules management
└──▷ GET THIS VERSION
$ git clone --branch v4.1.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.1.0
Adds MCP endpoints validate_code_change and get_security_context for agent integration
Adds --provenance flag to annotate findings with AI authorship data
Adds skylos provenance CLI subcommand for detecting AI-authored code in PRs
Adds public web scanner at skylos.dev/scan for unauthenticated GitHub URL risk scoring
Adds skylos rules install|list|remove|validate CLI commands to manage YAML rule packs from duriantaco/skylos-rules or any URL
+5 moreshow less
Adds TypeScript dead code detection using SKY-E003 and SKY-E004 with transitive propagation analysis
Adds Next.js security checks SKY-D280, SKY-S102, and SKY-D281 for API route auth, client-side secrets, and SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. in server actions
Adds Go quality rules (Q301, Q302, C303, C304) via tree-sitter-go integration
Adds skylos[fast] optional Rust accelerator for performance acceleration
Adds Agent-aware quality gate configuration under [tool.skylos.gate.agent]
Skylos v4.0 adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. agent verification, --all shortcut, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool, and AI Defense dashboard integration.
└──▷ GET THIS VERSION
$ git clone --branch v4.0.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.0.0
└──▷ USE IT
Run all analysis types with a single flag
shell
skylos . -a
Adds the -a / --all flag to run --danger, --secrets, --quality, and --sca simultaneously
Adds addopts configuration key in [tool.skylos] of pyproject.toml to set default CLI flags
Introduces the new skylos agent verify <path> command for 3-pass dead code verification
Exposes the verify_dead_code tool via MCP for use by external AI agents
Adds the --verification-mode flag to skylos agent analyze, agent audit, and agent verify subcommands
+3 moreshow less
Adds the --upload flag to skylos defend . to send results to the Skylos Cloud dashboard
Adds skylos cicd init --defend command to generate workflows with AI Defense steps
Adds the new skylos-defend pre-commit hook name to block critical failures
8 details in Everything
└──▷ BREAKING ON UPGRADE
!skylos agent analyze, agent audit, and agent verify now default to judge_all mode instead of previous defaults
Adds --upload CI/CD flag, five new detection rules (SKY-L016/023/024/026, SKY-D260), LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. reports, and vibe confidence metadata
└──▷ GET THIS VERSION
$ git clone --branch v3.5.7 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.7
Introduces --llm flag for LLM-optimized reports
Adds skylos cicd init --upload flag for cloud dashboard upload workflows
SKY-L026: Unfinished Generation — detects stub-only functions in production code
+2 moreshow less
SKY-D260: AI Supply Chain Security — multi-file prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. scanner with canonicalization engine
Adds vibe confidence metadata (vibe_category, ai_likelihood) on all vibe rules
Skylos v3.5.6 adds --diff line-level filtering, Git blame attribution, 7 new security detections, auto-upload, and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. toggle
└──▷ GET THIS VERSION
$ git clone --branch v3.5.6 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.6
Adds --diff [BASE_REF] flag for line-level precision filtering; enables Git blame attribution so findings show the author who introduced the code; introduces auto-upload of scan results for linked projects, controllable via --no-upload
Adds SKY-L010 detection for Security TODO/FIXME markers; adds SKY-L011 detection for Disabled security controls (e.g. verify=False); adds SKY-L012 detection for Phantom calls to undefined/unimported functions; adds SKY-L013 detection for Insecure randomness (CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-330); adds SKY-L014 detection for Hardcoded credentials (CWE-798); adds SKY-L017 detection for Error information disclosure (CWE-209); and adds SKY-L020 detection for Overly broad file permissions (CWE-732)
Expands default exclude folders for Go, TypeScript, VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures., and IDE directories
Switches Table output to the default mode, making TUI opt-in via --tui
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Table output is now the default; TUI is now opt-in via --tui
New skylos ingest claude-security subcommand and GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. integration for Claude Code Security findings
└──▷ GET THIS VERSION
$ git clone --branch v3.5.5 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.5
└──▷ USE IT
Initialize a GitHub Actions workflow that runs Claude Security scanning in parallel with Skylos.
shell
skylos cicd init --claude-security
Adds skylos ingest claude-security CLI subcommand with flags --input, --token, --no-upload, and --json to ingest Anthropic's AI vulnerability scanner findings into the Skylos dashboard
Adds skylos cicd init --claude-security subcommand that generates a 3-job GitHub Actions workflow for parallel scanning and sequential upload
Skylos v3.5.4 adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. code-level fix suggestions with fallback to _RULE_SUGGESTIONS
└──▷ GET THIS VERSION
$ git clone --branch v3.5.4 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.4
_merge_llm_findings passes through vulnerable_code and fixed_code fields
Adds skylos whoami CLI command for org/project/plan info and Python SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. reachability analysis with coverage.json discovery
└──▷ GET THIS VERSION
$ git clone --branch v3.5.3 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.3
Adds skylos whoami command to display organization, project, and plan details.
Implements CVE reachability analysis for Python SCA findings using the new ca9 engine, eliminating false positives by proving code reachability.
Adds a Reachability column in SCA table output showing red (Reachable), green (Unreachable), or yellow (Inconclusive) status.
Enables auto-discovery of coverage.json for dynamic reachability analysis.
Snyk API & Web MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. adds IDE-native security workflows via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. for onboarding, scanning, and triaging.
Adds support for the Model Context Protocol (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) to enable natural language interactions with Snyk directly from AI-native IDEs
Enables automated onboarding and configuration of new Snyk targets within the IDE without manual menu navigation
Provides AI-assisted generation and implementation of authentication scripts required for deep web (DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces.) scans
Adds Custom Headers module to Postman target settings for static vs. testable header control
Adds a Custom Headers module in the Scanner tab of Postman target settings to configure specific headers and toggle them as static prerequisites or active attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
Displays Custom Headers status (Enabled/Disabled) in the USED SETTINGS module on the Scan results page for Postman targets.
Snyk API & Web introduces Credentials Manager from March 6, 2026, centralizing DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. authentication credentials for sharing and rotation.
Snyk now offers a centralized way to manage DAST authentication credentials via the Credentials Manager, improving secret sharing and rotation workflows.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!The Secret Obfuscation feature is discontinued and replaced by Credentials Manager.
Snyk Universal Broker GA adds broker context for Org/Group-specific SCMSCMSource Code Management: version-control systems (Git, SVN, etc.) that track changes to code over time, giving cyber tools reproducible builds, audit trails, and collaborative development workflows. credentials
Adds broker context support to Universal Broker for Org or Group-scoped connection parameters
Enables overwriting SCM credentials at the Organization level via snyk-broker-config tool
Adds --show-cli flag to SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. agent scan command for human-readable CLI summary alongside JSON output.
9 more releases in this issue
· 2026-03-02 → 2026-03-31
New --appname flag in SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. agent v3.8.113 links scans to application profiles via OAuth or HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. auth.
Adds --appname flag to the SCA agent scan command to link results to an application profile
Requires authentication with Veracode using OAuth or HMAC for the new app name linking feature
Assign Unified Policies to SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. Agent-based Scan workspaces in the US Federal region
Security Labs users and teams integrated with Veracode Platform via IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.
Adds authentication of Security Labs users through Veracode IAM, allowing administrators to manage user access from the Veracode Platform.
Enables access to Security Labs under the Security Training section of the Veracode Platform for migrated customers.
New beta queries for Azure ACR permissions, storage encryption, AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. auditing, GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. clusters and managed identity
└──▷ GET THIS VERSION
$ git clone --branch v2.1.20 https://github.com/Checkmarx/kics.git
# already have the repo? check out this version:$ git checkout v2.1.20
Implements Beta - Azure Container Registry With Broad Permissions query
Implements Beta - Storage Account Without CMK query
Adds TLS 1.2+ verification for Terraform/Azure
Implements Beta - AKS Without Audit Logs query
Adds alpha cluster detection for Google Kubernetes Engine clusters
+5 moreshow less
Implements Beta - Cluster Without Network Policy Support query
Ensures GKE version management uses release channels
Checks if managed identity is not enabled (Azure)
Enables integrity monitoring checks for Shielded GKE Nodes
Adds Alibaba Cloud support, Aikido AutoFix refinement, and multiple API endpoints for threat modeling.
Adds Alibaba Cloud as a supported platform to scan for misconfigs, exposed resources, and risky settings.
Adds ability to refine AutoFixes iteratively using natural language via the Talk to Aikido AI feature.
Adds Pentest Threat Model providing a real-time view of attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. and testing posture.
3 details in Everything
1 more release in this issue
· 2026-03-04 → 2026-03-23
Aikido Infinite continuous pentesting, VM reachability diagrams, IDE full scans, and new API endpoints for PR config and subdomains.
Adds Aikido Infinite continuous pentesting to automatically re-pentest apps after code changes and validate exploitability.
Adds VM Reachability Diagrams to visualize network paths, entry points, and exposed ports for cloud findings.
Adds full Workspace Scan across VS Code, Jetbrains, Visual Studio, Eclipse, and Cursor, with IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. scanning in VS Code.
Adds GitHub support for ignoring security issues and code quality within the PR directly from Aikido.
Adds package health for PHP and malware detection for skills.sh, Go, Rust, and WordPress plugins in Intel.
+12 moreshow less
Adds Autofix suggestions for Code Quality fixes.
Adds ELS libraries support for .NET autofix.
Adds container image include/exclude by pattern matching.
Adds support for multiple tags of an image for the same cluster in Kubernetes scanning.
Adds file upload support for the AI Pentest agent browser.
Adds SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels.-based two-factor authentication and OAuth Password Grant support for AI Pentest.
Adds Jira custom field setting support in Integrations.
Adds direct actions and improved detail views in Slack alerts.
Adds Comp AI integration for Governance, Risk, and Compliance.
Adds API endpoint Save pull request config for Azure, Bitbucket and Github.
Adds API endpoint Adjust group severity.
Adds API endpoint Add subdomains to attack surface domains.
Openlayer adds MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. trace rendering, API project deletion, and custom function MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration.
Adds platform-wide multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. (MFA) for enterprise security
Images and audio now render inline in trace steps and data tables via UI/UX updates
PDF preview is available in traces and data tables through the UI
Enables deployment-wide directory sync with project-level access group support for granular IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.
Governance and frameworks pages surface rule-result summaries for audit readiness
+8 moreshow less
Data download capability is now available in development mode
New diagnostics page allows testing connections and sending test emails on-prem
Adds Langflow integration for workflow interoperability
TypeScript SDK gains OpenAI Responses API support
Pulls rows from specific test results via a new API endpoint
Adds the ability to delete projects via the API
Custom metrics bundles are viewable and downloadable directly from the UI
Supports MCP custom functions callable from Openlayer for extended agent capabilities
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Adds credential leak detection and TeamPCP behavior detection rules
└──▷ GET THIS VERSION
$ git clone --branch v0.2.10 https://github.com/sheeki03/tirith.git
# already have the repo? check out this version:$ git checkout v0.2.10
TeamPCP behavior detection rules are now included to detect specific behavioral patterns.
1 detail in Everything
1 more release in this issue
· 2026-03-05 → 2026-03-25
Mend SCA 26.3.1 adds uv support, zero-dayzero-dayA vulnerability for which defenders have had no prior opportunity to apply a fix, often because it was previously unknown. A zero-day exploit takes advantage of that gap. catalog, and RESOLVEDEPENDENCIES env var control
└──▷ HOW TO FIND IT
View live zero-day data independently of your inventory.
📍In the Mend AppSec Platform, navigate to Profile › Zero-Day Catalog
Adds uv package manager support via Mend CLI and repository integrations for Python scanning and Reachability analysis
Adds a dedicated Zero-Day Catalog page accessible from the Profile menu in the Mend AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. Platform
2 details in Everything
1 more release in this issue
· 2026-03-08 → 2026-03-22
Mend SCA adds EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. Score column to UI findings table and dependencyContexts field to Get Project Security Findings API
└──▷ TRY IT
Retrieve vulnerability data with immediate visibility into how components appear in the dependency graph via the API.
$ GET /rest/project/security/findings?include=dependencyContexts
Sort vulnerabilities by exploit likelihood directly in the UI to prioritize triage.
📍In the console, go to Dependencies → Findings and click the EPSS Score column header.
Adds dependencyContexts field to the Get Project Security Findings API to show direct vs. transitive dependency roots.
Adds a new EPSS Score column to the Dependencies → Findings table for in-place risk sorting.
Mend Platform v26.2.2 adds EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. column, Auditor role, AI scan filter, and dependencyContexts API field.
Adds dependencyContexts field to the Get Project Security Findings API endpoint
Adds a new pre-defined Auditor role for read-only access
Adds support for filtering scans, reports, findings, and violations by AI scan engine
Adds EPSS Score column to the Dependencies → Findings table
Mend SAST v26.2.2 adds CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-457/828 C/C++ detection and GitHub suppression audit trail
Adds support for CWE-457 (Use of Uninitialized Variable) and CWE-824 (Access of Uninitialized Pointer) to C/C++ analysis in low probability mode.
Suppressions synchronized with GitHub now add a comment to the linked issue containing the suppression reason, extra comments, and the user who performed the suppression.
Suppression request tables now display a Reviewed By column showing who approved or rejected each request.
Integrates FrameShift mutation engine by default, improving time-to-coverage and total coverage; tune or disable via AFL_FRAMESHIFT_DISABLE and AFL_FRAMESHIFT_MAX_OVERHEAD.
Adds AFL_FORCE_FASTRESUME to skip saved target-hash validation on resume (requires unchanged coverage map size).
Adds AFL_LLVM_DENY_EXEC to abort common exec calls from instrumented binaries, preventing fuzz-target child processes from polluting coverage.
Adds LLVM 22 support in afl-cc.
Extends COMPCOV string comparison coverage to g_, curl_, and xml_ prefixed string functions in afl-cc.
+4 moreshow less
Adds -f flag support to afl-showmap.
Adds faster stream mode to afl-showmap.
afl-cmin and afl-cmin.py now honor AFL_SHA1_FILENAMES for filename hashing.
afl-plot now supports multiple AFL++ output directories simultaneously.
GitLab 18.10 adds SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment./Secret false positive AI detection, passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices., MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration, and SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. Gradle support
SAST false positive detection is generally available with GitLab Duo Agent Platform, analyzing critical/high vulnerabilities automatically or manually via the vulnerability details page.
Introduces AI-powered secret false positive detection (beta) for Critical and High severity secrets, providing contextual reasoning and confidence scores in the vulnerability report.
Allows configuring a required merge request title regex pattern to enforce naming conventions as a mergeability check at Settings > Merge requests.
Enables custom agents in the AI Catalog to access external data sources via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP).
Extends GitLab Blob Search for group and instance code search, allowing AI agents to search across all projects in a group or on an instance.
+14 moreshow less
Adds the manage_pipeline MCP server tool for creating, canceling, retrying, deleting, and updating pipeline metadata via AI agents.
Allows project Maintainers to enable custom agents and flows directly from the project level without top-level group permissions.
Configures network access controls for remote flows using GitLab runners via the network_policy section in agent-config.yml.
Supports the Agent Skills specification, allowing agents to load specialized workflows triggered by name, file path, or slash commands.
Downloads credit usage data as a CSV file directly from the GitLab Credits dashboard in Customers Portal.
Links credit usage rows in the Usage by User table to specific GitLab Duo Agent Platform sessions via clickable hyperlinks in the Action column.
Supports Dependency Scanning SBOM for Java Gradle build.gradle and build.gradle.kts files with manifest fallback using the DS_ENABLE_MANIFEST_FALLBACK CI/CD variable.
Enables SBOM-based dependency scanning on self-managed instances by default via the dependency_scanning_sbom_scan_api feature flag.
Adds license scanning support for Dart/Flutter projects using the pub package manager, sourcing data from pub.dev.
Promotes Conan 2.0 registry support to Beta with full v2 API compatibility and recipe revision support.
Provides a dedicated group-level UI to create and manage container virtual registries without API calls.
Makes GitLab Helm Chart registry generally available with Geo replication support for Helm metadata cache.
Adds macos-26-xcode-26 host runner image for building applications on macOS Tahoe 26 and Xcode 26.
Enables Kubernetes runners to define Pod level resources for build pods.
opentaint v0.2.0 introduces a new GitHub Action integration with ZAP support.
└──▷ GET THIS VERSION
$ git clone --branch github/v0.2.0 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout github/v0.2.0
Adds the github action allowing users to integrate OpenTaint's taint analysis capabilities directly into GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflows via a new ZAP action
1 detail in Everything
3 more releases in this issue
· 2026-03-19 → 2026-03-26
Adds --osv-url flag to route vulnerability lookups via internal proxies or mirrors
└──▷ GET THIS VERSION
$ git clone --branch v1.0.5 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.0.5
└──▷ USE IT
Scan for CVE details using an internal, air-gapped OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. mirror instead of the public endpoint
First public release of CVE Lite CLI: a developer-focused scanner for JS/TS projects with SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface./JSON output.
└──▷ GET THIS VERSION
$ git clone --branch 1.0.2 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout 1.0.2
Supports SARIF and JSON output formats suitable for CI pipelines and automation workflows.
Noir v0.29.0 adds support for Salvo, Hono, Nitro.js, httprouter, GoFrame, gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. spec analysis, and the NOIR_PARSER_MAX_DEPTH env var.
└──▷ GET THIS VERSION
$ git clone --branch v0.29.0 https://github.com/owasp-noir/noir.git
# already have the repo? check out this version:$ git checkout v0.29.0
└──▷ USE IT
Limit how deep the parser follows imports to prevent excessive resource usage or cycles in complex codebases.
shell
NOIR_PARSER_MAX_DEPTH=50 noir scan ./target
NOIR_PARSER_MAX_DEPTH environment variable to cap import-following depth
Akto discovers APIs, MCP servers and AI agents, tests and red-teams them, and enforces runtime guardrails and posture management.
New endpoint posture dashboard, Salesforce/Okta integrations, and agentic scan enhancements in Akto Atlas
Agentic Asset Tabs added to the Atlas dashboard to filter agentic assets by type for inventory review
Agent Details Panel provides User Analysis, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers, and Agent Logs within Endpoint Shield
HTTP Transport for MCP Sync enables automatic transport detection and synchronization of MCP tools over HTTP
Guardrail configuration now supports defining request/response field validation paths and blocked response behavior directly in the schema
OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ASI categories are viewable directly in the guardrail configuration interface
+11 moreshow less
SSO-Only Login Restrictions enforce consistent authentication by restricting non-SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. logins for SSO-signed-up users
Okta Group-to-Role Mapping maps Okta groups to Akto roles (Admin, Member, Developer, Guest) for automatic RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. during SSO
Extended Timeout limit allows longer agentic red teaming scans for complex multi-step LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. interactions
Bulk Scan AI Agent Groups enables running security scans against multiple grouped agents simultaneously
AI-generated summaries and insights are now included in scan results for identified findings
Multi-Module Probing allows running scans across multiple probing modules simultaneously in a single operation
GitHub Sync for Probe Libraries syncs probe libraries directly from GitHub via Settings
Salesforce integration connects to instances to discover, monitor, and scan Salesforce API endpoints
Google AI ADKADKGoogle's Agent Development Kit, an open-source framework for building and orchestrating AI agents; cyber tools use it to compose multi-agent workflows with built-in tool-calling and state management. integration enables security, probing, and guardrail enforcement for Google AI agent workflows
Databricks is supported as an LLM provider in agent configuration
Akto Nodes added to n8n for integrating guardrails and ingestion into automation workflows
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. agent 4.77.0 adds Envoy External Processing Filter support and three new attack signals (SSTISSTIServer-Side Template Injection, a vulnerability class where attacker-controlled input is evaluated by a server-side template engine, enabling remote code execution or data exfiltration., INSECURE-DESER, NOSQLI).
Adds SSTI attack signal (SSTI) detection, part of Fastly Security Labs.
Adds insecure deserializationdeserializationTurning stored or transmitted data back into objects a program can use. Unsafe handling of untrusted data can allow unexpected behavior or code execution. signal (INSECURE-DESER) as a GA anomaly signal effective 2026-10-05.
Adds NoSQLi attack signal (NOSQLI) detection, part of Fastly Security Labs.
Adds the Client-Side Protection API to manage domains, CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. policies, and third-party script monitoring.
Adds Website resources for configuring domains for Client-Side Protection monitoring
Adds Page resources to define URL paths to monitor within each website and configure notification settings
Adds Script resources to view detected scripts and manage authorization status (authorized or unauthorized)
Adds Policy resources to create and manage Content Security Policies with report or enforce modes
Adds Report resources to view CSP violation reports for each policy
+1 moreshow less
Adds Header/Event monitoring to track security header changes on pages
Enablement API gains kv_store support for Fastly KV StoreKV StoreA key-value store is a database that maps arbitrary keys to values with no fixed schema, offering fast lookups that cyber tools use for caching, state sharing, or configuration at scale. product configuration.
kv_store added as a supported value in the Enablement API to configure the KV Store product.
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. for HAProxy 1.5.2 adds platform support for Debian 13, Ubuntu 24.04, and multiple Alpine Linux versions
BunkerWeb v1.6.9 adds a gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. proxy plugin, ZeroSSL CA support, three new DNS providers, country group filtering, and new NGINX timeout controls.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.9 https://github.com/bunkerity/bunkerweb.git
# already have the repo? check out this version:$ git checkout v1.6.9
└──▷ USE IT
Tune database connection pooling for high-traffic deployments to improve scheduler resilience under load.
New gRPC plugin enables proxying of gRPC traffic to upstream services with TLS, SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address., custom headers, and retry policy support.
Let's Encrypt plugin now supports selecting between Let's Encrypt and ZeroSSL as the certificate authority, including ZeroSSL-specific settings.
Adds Gandi, Hetzner, and ClouDNS as DNS providers in the Let's Encrypt plugin.
Country plugin gains the ability to whitelist or blacklist groups of countries, not just individual countries.
New CLIENT_BODY_TIMEOUT, CLIENT_HEADER_TIMEOUT, KEEPALIVE_TIMEOUT, and SEND_TIMEOUT settings expose NGINX timeout controls for long-lived connections.
+15 moreshow less
New file setting type lets users upload files directly from the Web UI and use their content as setting values.
Adds MAX_REQUESTS setting (with UI_MAX_REQUESTS / API_MAX_REQUESTS overrides) to configure Gunicorn worker max requests before restart.
Adds MAX_CONTENT_LENGTH setting to the Web UI to configure the maximum upload size (defaults to 50 MB).
Sensitive field values in the Let's Encrypt plugin are now redacted from logs and process arguments (except at TRACE level).
HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate./STREAM/TLS ports can now be left empty to disable listening on those ports.
Global settings UI gains an override non-global services functionality.
Web UI now supports editing settings via the wizard method.
Adds DATABASE_POOL_SIZE, DATABASE_POOL_MAX_OVERFLOW, DATABASE_POOL_TIMEOUT, DATABASE_POOL_RECYCLE, DATABASE_POOL_PRE_PING, DATABASE_POOL_RESET_ON_RETURN, DATABASE_RETRY_TIMEOUT, DATABASE_REQUEST_RETRY_ATTEMPTS, and DATABASE_REQUEST_RETRY_DELAY settings for fine-grained database connection pool tuning.
Autoconf adds experimental support for GRPCRoute in the Kubernetes Gateway API integration.
CUSTOM_SSL_CERT_DATA and CUSTOM_SSL_KEY_DATA settings are now of type file, allowing direct certificate and key upload from the Web UI.
Permissions-PolicyPermissions-PolicyAn HTTP response header that lets a server declare which browser features—camera, geolocation, microphone—are allowed or blocked for a page and its iframes, replacing the older Feature-Policy header. header default value updated to include the gamepad feature.
Home dashboard enhanced with new IP blocking metrics and improved tooltips.
Reports page gains improved filter handling and data fetching.
CrowdSec updated to version 1.7.6 in the all-in-one image.
c/side adds per-connection JA4JA4A network fingerprinting method that hashes observable TLS handshake fields into a short, readable tag, giving cyber tools a stable, version-agnostic way to classify clients and detect anomalies.TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. fingerprinting to detect VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. clients masquerading as browsers
Computes the JA4 hash from the full TLS ClientHello (including cipher suites, extensions, ALPN, and elliptic curves)
Detects VPN client software that attempts to masquerade as a standard web browser
2 details in Everything
1 more release in this issue
· 2026-03-17 → 2026-03-18
Wallarm AASM adds IP/CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. scanning, single-host rescans, and PDF Security Report Card export
└──▷ HOW TO FIND IT
Discover hidden internet-facing assets by scanning a specific network block rather than just known domains.
📍Navigate to AASM Configuration and add your target CIDR range (e.g., 192.168.1.0/24) to the scan targets list.
Share a concise, executive-ready snapshot of your security posture and top critical findings with stakeholders.
📍Open the AASM dashboard, click Share Report, and select Security Report Card to generate the PDF export.
Validate that a specific fix has been applied without wasting time resanning your entire attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
📍Go to the asset details page for the recently patched host and click the Rescan button in the actions menu.
Scan single IPs, subnets, and CIDR ranges in addition to domains via the AASM Configuration screen
Export a Security Report Card as a PDF containing your top 10 critical findings from the Share Report widget
Rescan a single asset directly from the per-asset view to validate remediation
3 details in Everything
1 more release in this issue
· 2026-03-23 → 2026-03-26
Levo March 2026 adds DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. engine maturity, unified AI Gateway policies, async reporting, and configurable session management.
Enables scheduled and re-runnable web app scans via a new DAST scan action in CI/CD
Supports smart crawl depth with configurable per-scan depth and crawl-only mode for discovery
Allows AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-driven authentication for authenticated scans using cookies, local storage keys, and headers
Parses OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. specs to broaden DAST vulnerability coverage including soft-404 and stored-XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. detection
Deploys on-prem scan runners with scheduled, org-isolated execution
+23 moreshow less
Captures endpoint URL on DAST findings and adds a finding Kind filter (Web App Scans / Traffic / All)
Configures API discovery to skip specific HTTP methods via configurable ignored methods
Exports endpoints including created date and last-trace-received date with sorting by last trace arrival
Parses header parameters such as Content-Type and Accept automatically in API discovery
Adds a Recently Discovered filter at the application level for API Discovery
Streams live UI logs per test suite and provides quieter CLI output in non-interactive mode
Implements unified AI Gateway policy architecture with hot-reloaded policies from SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.
Runs AI traffic through a forward-proxy governance pipeline for inline inspection
Enables live guardrail scanners in the AI Firewall via the AI Gateway and AI Firewall pages
Integrates Chrome extension AI Guardrails with LLM interception in enforce or observe modes
Sends AI Gateway traffic to the Levo Satellite for full API observability alongside other APIs
Forwards full LLM request bodies via a new Levo AI receiver and AI-proxy span processing for AI Discovery
Groups threats for easier triage with evidence surfaced in the Threat Feed and severity sorting
Applies bulk tag actions to findings and sorts findings by severity
Adds more filters on Findings and Applications pages, saved views on API Scans, and a stats API for consistent counts
Shows inline sample traces for PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. with row selection, pagination by type, and auto-updating view
Creates findings with evidence from protection rules including Lua-based rules and deduplicates rate-limit findings
Adds bulk rule exclusions and custom header-injection rules with configurable content types and active WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. protection
Configures session inactivity and absolute timeouts with a banner explaining session end reason
Creates new organizations with a default staging environment for immediate traffic capture
Compares applications side by side with a new application comparison report available in the dashboard
Migrates reporting to an async pipeline for reliability at scale with additional report types and a new Reports page
Supports multiple CSV previews and adds solution field and detected AI endpoints to DAST scan report findings
Apiiro maps an application's architecture and risk graph and runs AI-SAST, SCA, secrets, API and threat-modeling checks on AI- and human-written code.
Apiiro GA release adds automatic risk updates, custom closed statuses, Data Center support, and manual unlinking to its bi-directional Jira integration.
Adds automatic risk updates in Jira by allowing users to choose between adding a comment or fully updating the ticket description when risk attributes change
Adds ability to define custom closed status on risk resolution by configuring preferred Jira statuses for resolved, accepted, or ignored risks with built-in fallbacks
Adds Jira Data Center (On-Prem) support for the bi-directional Jira integration for versions v9.12 or later
Adds manual unlinking of Jira tickets from Apiiro risks
Adds four new payload decoders (URL encoding, Unicode escapes, HTML entities, hex escapes) to bypass obfuscation in inputs.
Expands the NLP analyzer to process .json, .yaml, and .yml files for authority and credential checks.
Adds a RiskScore field (0-100) to ScanResult, exposed as risk_score in JSON, run.properties.riskScore in SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface., and risk: X/100 in the terminal.
Nexus Repository Cloud March 25 adds Instance Migrator for OrientDB migration and Yum metadata regeneration.
Added Instance Migrator to migrate OrientDB-based Nexus Repository 3.70.5 instances to Nexus Repository Cloud or self-hosted Nexus Repository version 3.90.2+
Yum repository migrations now automatically regenerate repository metadata, including repomd.xml and associated .xml.gz files
2 details in Everything
5 more releases in this issue
· 2026-03-04 → 2026-03-25
Release 3.70.5 adds the Instance Migrator feature for seamless migration of self-hosted Nexus Repository data and configuration to Cloud or newer self-hosted versions.
New Instance Migrator enables zero-downtime migration from Nexus Repository 3.70.5 to Cloud or 3.90.2+
Adds the Instance Migrator tool for migrating OrientDB-based Nexus Repository 3.70.5 deployments to Nexus Repository Cloud or self-hosted 3.90.2+ without service interruption.
Preserves hosted repository content, configurations, users, roles, and authentication mappings during migration.
Sonatype 3.90 adds Terraform group repos, Swift hosted repos, Recovery Mode, User Token API, and PCCS visibility.
Support for Terraform group repositories aggregates multiple Terraform hosted/proxy repos into a single endpoint with configurable TTLs and conflict resolution.
Support for Swift hosted repositories enables publishing and managing Swift packages as .zip files with MIME type validation.
New Recovery Mode provides a controlled operational state to prevent background tasks from interfering with data repair operations.
Re-enabled Repair - Execute Data Repair Plan task is now active by default, restoring the data reconciliation workflow.
New User Token API allows administrators to create, view, and delete user tokens via API endpoints.
+2 moreshow less
sonatype_filtered_versions field in npm metadata exposes versions filtered out by Repository Firewall policies (PCCS).
Granular Permissions for Log Management API introduces nexus:logging:read permission and nx-logging-read privilege, removing the need for broad nexus:* access.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed Legacy Application Health Check plugin and Hosted Repository Analysis capabilities (self-hosted only).
Adds EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. filtering to findings API, CVSSv4 support,VERS version matching, internal status policies, and configurable OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. Index base URL.
└──▷ GET THIS VERSION
$ git clone --branch 4.14.0 https://github.com/DependencyTrack/dependency-track.git
# already have the repo? check out this version:$ git checkout 4.14.0
GET /api/v1/finding/project/{uuid} accepts epss query parameter to filter by EPSS score
Adds CVSSv4 score parsing and display support in findings model
Adds VERS approach for PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. version matching with VERSATILE
Internal status policy condition support for project lifecycle policies
Configurable base URL for OSS Index API via environment variable or config
+1 moreshow less
Support for CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence. Scope Data in BOMBOMA Bill of Materials listing every component, library, and dependency in a software project; cyber tools use it to track what is in a codebase and flag known-vulnerable components quickly. upload
lavamoat-core v18 exports the MODULE_REFS constant for programmatic policy inspection.
└──▷ GET THIS VERSION
$ git clone --branch lavamoat-core-v18.0.0 https://github.com/lavamoat/lavamoat.git
# already have the repo? check out this version:$ git checkout lavamoat-core-v18.0.0
└──▷ USE IT
Import MODULE_REFS to reference canonical module identifier keys when building or inspecting LavaMoat policies programmatically.
javascript
import { MODULE_REFS } from 'lavamoat-core'
// Use MODULE_REFS to look up entries in a generated policy
const ref = MODULE_REFS.some_key
console.log(policy.resources[ref])
└──▷ BREAKING ON UPGRADE
!Node.js v18 is no longer supported; upgrading requires Node.js v20 or later.
Spectra Assure Community adds RL-Protect CLI for OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. manifest scanning and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server for AI coding assistant integration
Introduces rl-protect standalone CLI tool to parse PyPI, npm, and RubyGems manifest files and check declared dependencies
Adds rl-protect-skills plugin pack enabling Claude Code to install, configure, scan packages, and interpret reports via natural language
Releases new MCP server running as a Docker container to integrate Spectra Assure checks with Claude Code, Cursor, Gemini CLI, and other MCP clients
GitGuardian Detection Engine v2.160 adds private key registration checks and new Paymob/Sentry/Figma/Datadog/GCloud support
Adds Generic Private Key, OpenSSH Private Key, RSA Private Key, and Elliptic Curve Private Key checkers to verify if keys are registered with GitLab or GitHub
Adds new detectors for Paymob API Key, Paymob Secret Key, Paymob HMAC Secret, and ConvertTo-SecureString Password
Adds new analyzers for Sentry User Auth Token, Figma Personal Access Token, Datadog API Credentials, and Google Cloud Keys
3 details in Everything
2 more releases in this issue
· 2026-03-03 → 2026-03-31
GitGuardian Detection Engine v2.159 adds 19 new detectors and 4 analyzers for Azure, SAP, Oracle, and other services.
Add a detector for Polar Organization Access Token
Add a detector for Google Cloud Express API Key
Add a detector for Microsoft Azure Storage Account Key with Account Name
Add a detector for Azure Language API Key
Add a detector for Azure IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. Hub Connection String
+18 moreshow less
Implement detector for DeepL Free API keys
Implement detector for DeepL Pro API keys
Add a detector for Azure Document Intelligence Key
Add a detector for Azure Speech Services Key
Add a detector for Azure Computer Vision API Key
Add a detector for Azure Text Translation Key
Add a detector for Oracle JDBCJDBCA Java standard API for connecting applications to relational databases, maintained as part of the Java SE platform, letting tools query any compliant database through a single consistent interface. credentials
Add detector for new GitGuardian Public Monitoring API Key format
Add detector for new GitGuardian Internal Monitoring Key format
Add a detector for SAP AI Core Credentials
Add a detector for Odoo External API Key
Add a detector for K3s tokens
Add a detector for Zoho API Key
Add a detector for passwords in ServiceNow configuration files
Add a new analyzer for Azure App Configuration Connection String
GitGuardian adds email MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. for login/sensitive actions and new API/location fields
Adds POST /v1/scan/create-incidents endpoint support for optional location.url field to link scanned documents back to their origin
Personal Access Tokens (PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.) and Service Account Tokens (SAT) now use an improved v2 format with gg_pat_ and gg_sat_ prefixes
2 details in Everything
4 more releases in this issue
· 2026-03-03 → 2026-03-24
GitGuardian adds Okta Integration Network support for SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties. and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning
Adds Okta-verified app integration on the Okta Integration Network for streamlined identity management.
Enables One-click SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider.SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. configuration via the Okta app catalog without custom SAML apps.
Supports automatic user lifecycle management through built-in SCIM provisioning (create, update, deactivate).
Adds Group Push capability to sync Okta groups and memberships directly into GitGuardian teams.
Supports both SP-initiatedSP-initiatedA SAML or OAuth/OIDC login flow where the Service Provider redirects the user to an Identity Provider to authenticate, rather than the IdP pushing an assertion unprompted; tools use it to trigger SSO from their own login page. and IdP-initiated SSOIdP-initiated SSOA single sign-on flow where the identity provider redirects an already-authenticated user directly to a service provider without the service provider first requesting authentication, removing the need for a separate login prompt. flows from the GitGuardian dashboard or Okta portal.
+1 moreshow less
Introduces Just-in-Time provisioning for new users on first login, independent of SCIM status.
GitGuardian SaaS adds Red Hat Quay integration and a public API for egress IPs
Adds Red Hat Quay container registry integration to Settings > Integrations > Sources for scanning image layers in both quay.io and self-hosted instances
Adds public API endpoint to retrieve GitGuardian's egress IP addresses in CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. notation
Enables OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. authentication for the Red Hat Quay integration with read-only access
GitGuardian adds JFrog Artifactory package registry integration for secrets detection in build artifacts.
Adds JFrog Package Registries integration to the Package registries section under Settings > Integrations > Sources
Adds PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. scope restriction setting in Security Settings, allowing workspace managers to limit members to specific scopes like Scan only
Adds customizable session duration setting in Authentication Settings for automatic dashboard logout
Adds filename and line number template options in Jira ticketing templates
Adds System theme mode option in Dashboard that matches OS light/dark preference
+1 moreshow less
Adds feedback content (remarks) to Slack and Webhook alert payloads for monitoring incidents
Infisical v0.159.2 adds SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. enrollment, secret rotation webhooks, and a PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. data explorer.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.2 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.2
Adds SCEP enrollment method for PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. certificate requests
Adds support for webhook triggers on secret rotations in the UI
Adds an in-browser data explorer for Postgres databases within the PAM module
Infisical v0.159.0 adds PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. alerts, access approval expiration times, and manual gateway health checks
└──▷ GET THIS VERSION
$ git clone --branch v0.159.0 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.0
request_expiration_time on access approval policies to control how long an approval request remains valid before expiring automatically
New PKI alert types for certificate lifecycle events (CA revocation, intermediate cert expiry, CA/intermediate expiry)
Manual gateway health check trigger in the UI to diagnose remote gateway connectivity on demand
Infisical v0.158.22 adds Microsoft SQL Server (MSSQL) as a PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. provider for dynamic credential rotation.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.22 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.22
Infisical v0.158.21 adds custom roles in org invites, IP SANs for ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction. certs, and actor_id filtering in audit logs
└──▷ GET THIS VERSION
$ git clone --branch v0.158.21 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.21
└──▷ HOW TO FIND IT
Create an organization invitation with specific custom roles instead of relying on default permissions.
📍In the UI, navigate to Organization Settings › Members and use the invite flow to select Custom Role during the invitation process.
Generate a certificate via ACME that includes internal IP addresses as valid SANs.
📍When requesting an ACME certificate, ensure the CSR or extension requests include IP:<address> entries in the Subject Alternative Name field.
Adds support for selecting custom roles during the organization invite flow instead of forcing a single default role
Adds IP address Subject Alternative Name (SAN) support to ACME certificate issuance for PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. workflows
Adds an actor_id filter field to audit logs queries
Infisical v0.158.20 adds Infisical-to-Infisical secret sync and automated PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. intermediate CA signing via AD CS
└──▷ GET THIS VERSION
$ git clone --branch v0.158.20 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.20
Adds feat(secret-sync) enabling direct Infisical-to-Infisical secret synchronization between instances
Adds feat(pki) for automated intermediate CA signing and auto-renewal using Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Certificate Services (AD CS)
Infisical v0.158.19 adds HP iLO password rotation and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. cert metadata
└──▷ GET THIS VERSION
$ git clone --branch v0.158.19 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.19
secret-rotation now supports HP iLO local account password rotation, enabling automated credential refresh for HPE Integrated Lights-Out hardware.
PKI certificate metadata management gains new RBAC policy conditions, allowing role-based access controlrole-based access controlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. to be applied to certificate attributes.
Infisical v0.158.18 adds PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. code-signing and Windows PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. discovery via WinRMWinRMA Windows-native remote management protocol from Microsoft, implementing the WS-Management standard, that lets tools execute commands and access data on remote Windows hosts over HTTP or HTTPS.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.18 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.18
Adds feat: code-signing support to the PKI module for signing artifacts
Enables pam-discovery on Windows local accounts with dependency detection via WinRM protocol
Infisical v0.158.17 adds Redis web access in PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded., audit log visibility for AWS sync secrets, and Azure auth SPID length increase
└──▷ GET THIS VERSION
$ git clone --branch v0.158.17 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.17
Adds redis web access capability in the Privileged Access ManagementPrivileged Access ManagementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. (PAM) interface with arrow key support
Adds audit log visibility for created/updated/deleted secrets during AWS synchronization
Increases the maximum Service Principal ID (SPID) length allowed for Azure authentication
Infisical v0.158.14 adds CA CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. automation, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. audit token metadata, Azure SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. app connections, and relative secret references
└──▷ GET THIS VERSION
$ git clone --branch v0.158.14 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.14
Adds an automated job to rebuild Certificate Authority (CA) Certificate Revocation Lists (CRL).
Enables credential rotation for application connections.
Adds support for relative import of secret references.
Syncs Azure SCIM token secrets and establishes application connections for Azure SCIM.
Adds audit log token metadata to track machine identity actions.
+2 moreshow less
Supports Venafi as an external signature provider in the reworked CA intermediate flow.
Enables auto-tidy functionality for expired certificates.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The Helm chart release method switches to OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. push.
!OIDC re-auth redirect is skipped if the user is already authenticated via OIDC.
Infisical v0.158.13 adds the ability to bypass SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. enforcement actions in permissions.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.13 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.13
Adds bypass action for SSO enforcement in permissions
Logs Infisical version on startup via new log entry
Adds SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials. machine auth for PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. and PostHog tracking for approval workflows.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.12 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.12
Adds PostHog event tracking for approval workflow events.
Infisical v0.158.8 adds HashiVault import, ClickHouse dynamic secret provider, and PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. SSH web access
└──▷ GET THIS VERSION
$ git clone --branch v0.158.8 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.8
Adds a new clickhouse dynamic secret provider type for generating credentials on-demand.
Adds hashicorp-vault import capability to migrate secrets from HashiCorp Vault into Infisical via the secrets overview page.
Adds SSH web access support within PAM resources, allowing users to establish SSH sessions directly through the browser.
Adds metadata-based RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and filtering capabilities for PAM resources and accounts, enabling access control based on resource metadata attributes.
Adds auto KMIP setup for orgs, wildcard/regex kube auth, sub-org login selection, secrets navigation in reference tree, and PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. metadata/search.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.7 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.7
add wildcard and regex support for kube auth
implement sub-organization login selection
add navigation to secrets from reference tree
add metadata support to certificate and certificate requests including searching
TruffleHog finds, verifies, and analyzes leaked credentials across Git, chat, wikis, cloud storage, and more
TruffleHog v3.94.0 adds a Datadog API key detector and MuleSoft Anypoint OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. detector.
└──▷ GET THIS VERSION
$ git clone --branch v3.94.0 https://github.com/trufflesecurity/trufflehog.git
# already have the repo? check out this version:$ git checkout v3.94.0
New Datadog API key detector (datadogapikey) for detecting Datadog API keys in scanned sources.
Adds MuleSoft Anypoint OAuth2 detector to the default detector set.
2 details in Everything
1 more release in this issue
· 2026-03-04 → 2026-03-20
GitGuardian 2026.3 adds JFrog/Quay integrations, ~30 new detectors, and a public API for egress IPs.
Adds support for scanning JFrog Artifactory package registries (Maven, npm, PyPI, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., Go, and more) with historical and incremental scanning.
Adds Red Hat Quay integration for detecting secrets in container images across quay.io and self-hosted deployments, with full image layer analysis and OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. authentication.
Adds the Okta Integration Network integration for one-click SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties., SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning, and Group Push.
Adds 30 new secret detectors (v2.157/v2.158) including WooCommerce, Iyzico, Mercado Pago, Bitbucket HTTP Access Token, PostgreSQL, MariaDB, Azure Event Hub, Azure Container Registry, Coralogix, Azure Web PubSub, Azure Batch, Azure APIM Gateway, Azure IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. Provisioning, Azure AI Search, GitLab CI/CD Job Token, PostHog, MiniMax, Retell, Azure Storage Account Key, Curl Username Password.
Adds 4 new revokers for SendGrid, Slack User Token, Slackbot, and Heroku.
+4 moreshow less
Adds a public API endpoint for retrieving GitGuardian egress IP addresses.
Adds customizable session duration for dashboard sessions.
Adds the ability for workspace managers to restrict Personal Access Token scopes for members.
Adds filename and line number fields to Jira templates.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!Embedded cluster installations running 2026.2.0 must manually delete the replicated PodDisruptionBudget before upgrading.
Rotating API auth tokens, scan duration estimates, site structure path visibility, and incremental scan support for instant/scheduled scans
└──▷ HOW TO FIND IT
Verify your API scanner can now handle token rotation without interruption during long-running assessments.
📍Configure the scan target to use dynamic/rotating tokens in the scan setup wizard.
Use incremental scans for immediate follow-up checks on changed code without re-scanning the whole app.
📍Initiate an Instant scan and select Incremental mode in the scan options.
Rerun a previous assessment with identical configuration to validate remediation quickly.
📍Click Repeat Scan on the completed scan entry in the dashboard.
Adds rotating authentication token support for API scans to prevent mid-scan failures.
Shows estimated time to completion for ongoing scans in the UI.
Displays full paths and HTTP response codes in the site structure tab.
Visually marks excluded paths and allows re-including them directly from the site structure tab.
Adds WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. indication during scans to clarify firewall influence on results.
+3 moreshow less
Enables filtering scans by target collection.
Adds a one-click repeat scan feature using identical settings.
Extends incremental scan support to instant and one-time scheduled scans.
Juice Shop v19.2.0 adds a new Password Hash Leak challenge, coding challenge expansions, and CTFCTFCapture The Flag — a competitive hacking challenge format where participants exploit intentionally vulnerable systems or puzzles to retrieve hidden strings, used by cyber tools to practice and demonstrate offensive and defensive techniques. system-wide notification support.
└──▷ GET THIS VERSION
$ git clone --branch v19.2.0 https://github.com/juice-shop/juice-shop.git
# already have the repo? check out this version:$ git checkout v19.2.0
└──▷ HOW TO FIND IT
Integrate MultiJuicer or another CTF platform so its system-wide notifications appear inside Juice Shop for all players.
📍In your Juice Shop config file, set the CTF notification endpoint to your MultiJuicer notification URL so the UI polls it and displays broadcast messages.
Adds new two-star _Password Hash Leak_ challenge for practicing credential exposure scenarios.
Adds coding challenges for the _Wallet Depletion_ and _Mint the Honeypot_ challenges.
Supports displaying CTF system-wide notifications from MultiJuicer and other CTF systems via a configurable endpoint.
Payloads in challenge descriptions on the Score Board can now be copied to clipboard by clicking on them.
Language dropdown now includes backend strings in its translation gauge and percentage.
+4 moreshow less
Adds _Jump to related coding challenge_ button to challenge-solved notifications.
Coding challenge flow now auto-scrolls to the _Fix It_ tab when _Find It_ has already been solved.
Updated SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation to CycloneDX 1.6CycloneDX 1.6An OWASP-maintained Software Bill of Materials standard that catalogs components, dependencies, and supply-chain metadata; tools use it to produce or consume machine-readable SBOMs in a widely supported schema. format; only JSON SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. are now generated (no XML).
Official Docker image now uses Node.js 24.x base images.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The challenges.showFeedbackButtons option has been removed from all configuration files — any customization referencing this key will break on upgrade.
Cortex Analyzers 3.7.12 adds CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. support to AbuseIPDB v2 and SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders./DMARC analysis for .eml sender domains.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.12 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.12
Extends AbuseIPDB v2 analyzer to support CIDR range inputs in addition to individual IPs.
Extends DomainMailSPFDMARC v1.2 analyzer to support SPF/DMARC analysis for the sender domain extracted from .eml files.
Adds error templates to analyzer report views for clearer failure output.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!CSFalcon unofficial/deprecated analyzers and responders are disabled and will no longer run.
!VirustotalDownloader is disabled — existing workflows using it must migrate to newer VirusTotal integrations.
3 more releases in this issue
· 2026-03-02 → 2026-03-11
Cortex Analyzers 3.7.11 adds category support to the Lookyloo analyzer.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.11 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.11
EmlParser analyzer now extracts sender domain and reply-to domain from email artifacts.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.10 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.10
Virustotal analyzer now supports saving IDSIDSAn intrusion detection system, monitoring traffic or host activity for suspicious behavior and producing alerts. Detection alone does not necessarily block the activity. and YARA rules as files
└──▷ GET THIS VERSION
$ git clone --branch 3.7.9 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.9
Timesketch 20260311 adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-powered forensic report generation, Plaso event filters, local auth bypass for OAuth deployments, and bulk star controls.
└──▷ GET THIS VERSION
$ git clone --branch 20260311 https://github.com/google/timesketch.git
# already have the repo? check out this version:$ git checkout 20260311
└──▷ HOW TO FIND IT
When you want to automatically generate a forensic report narrative from your starred timeline events without manually writing it.
📍In the Timesketch UI, star the relevant events in your sketch, then navigate to the LLM features panel and select Starred events to forensic report — the output is saved as a Story in the current sketch.
New LLM feature converts starred events into a forensic report stored as a Story, accelerating analyst reporting workflows.
Adds support for Plaso event filters in the importer and backend, enabling more targeted ingestion of Plaso timelines.
Supports local authentication for allowlisted accounts via API even when OAuth is the default auth method, improving API automation flexibility.
Adds bulk star/unstar-all capability in the v3 UI, allowing analysts to quickly bookmark or clear entire result sets.
Adds a muting feature to suppress specific events or rules from view.
+1 moreshow less
Backend version information is now exposed via tsctl info, making it easier to audit deployed component versions.
Adds ts_omit_logtail build tag to disable logtail, enhanced adbpair prompts, exit node and user trust features for mesh v0.1.1-alpha.1.
└──▷ GET THIS VERSION
$ git clone --branch v0.1.1-alpha.1 https://github.com/barghest-ngo/mesh.git
# already have the repo? check out this version:$ git checkout v0.1.1-alpha.1
Add ts_omit_logtail build tag to disable the logtail feature
Enhance adbpair command with interactive prompts
Add exit node feature to allow traffic egress through a peer
Add user trust feature for managing authorized users
New open-source RT MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connector enables AI assistants like Claude to read and update Request Tracker tickets via Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface..
Releases the RT MCP server as a new open-source integration that exposes Request Tracker ticket data and actions to AI tools supporting the Model Context Protocol.
1 detail in Everything
1 more release in this issue
· 2026-03-12 → 2026-03-31
Best Practical releases an open-source RT MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. to connect AI assistants to Request Tracker.
└──▷ USE IT
Configure Claude Code to access your internal RT instance using natural language commands.
Adds RT URL MCP Server on GitHub and npm to bridge AI assistants (e.g., Claude Code) directly to a Request Tracker instance via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
Enables natural language interactions for finding tickets, updating status/reassignment/due dates/fields, and adding comments without leaving the AI chat session
Adds a secondary Timesketch integration with Yeti and OpenRelik in the OSDFIR Helm charts.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.8.4 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.8.4
v4.1.1 adds Windows Sigma Rules, abuse.ch hash checks, BitLockerBitLockerA full-disk encryption feature built into Windows, maintained by Microsoft, that protects data at rest by encrypting entire volumes; cyber tools use it to audit encryption status or recover keys from managed endpoints. key collection, and script logging.
└──▷ GET THIS VERSION
$ git clone --branch 4.1.1 https://github.com/johnng007/live-forensicator.git
# already have the repo? check out this version:$ git checkout 4.1.1
Implements robust Script execution logging for Windows environments
Elcomsoft Distributed Password Recovery 5.0 adds NVIDIA Blackwell GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. support
Adds native support for NVIDIA Blackwell GPUsGPUsA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. (RTX 50 series) and modern CUDACUDANVIDIA's platform and programming interface for running general computation on its GPUs. Nearly every AI training and inference stack is built on it first. toolkits
Frida 17.9.0 adds override_option(), eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. spawn gater, XCFramework packaging, and control-endpoint config.
Adds override_option() to configure backend-specific options when creating a host session; an established session picks up changes on its next connection.
Adds the control-endpoint backend option (default tcp:27042) to Fruity and Droidy layers
Adds an eBPF-based spawn gater implementation on Linux
Adds a tool to package devkits as XCFrameworks
Adds a spawn gating example in the Python module
5 details in Everything
1 more release in this issue
· 2026-03-09 → 2026-03-26
Frida 17.8.0 adds frida-strace syscall tracer with CoreProfile ktrace support on iOS and eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. backend improvements on Linux.
└──▷ TRY IT
Trace syscalls for a specific Android app package to detect RASP artifacts.
CHIPSEC 2.0.2 adds Lunar Lake platform config, firmware data retrieval, and UEFIUEFIA firmware specification maintained by the UEFI Forum that replaces legacy BIOS, defining how an OS and hardware initialize at boot. Cyber tools target or hook it to inspect pre-OS execution environments. Shell support for chipsec2.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:$ git checkout 2.0.2
Adds initial configuration support for Intel Lunar Lake (LNL) platforms, enabling hardware security analysis on the new architecture.
Adds firmware data retrieval capability for extracting firmware information during platform analysis.
Updates chipsec2 to run in the UEFI Shell environment, expanding pre-OS assessment options.
Updates ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. support for the return thunk introduced in Linux kernel 6.19, maintaining compatibility with modern kernels.
Adds org/project config for nightly vuln updates, Jira ticket type selection, and Python SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. via API/CLI
Adds organization-level and project-level settings pages for nightly vulnerability updates, with a global enable/disable toggle and a scope selector (Global vs Per Project)
Enable Python SAST (Bandit) scanning via the customer API and CLI by passing type=python during binary upload
Select a Jira issue type when creating tickets from the Bill of MaterialsBill of MaterialsA structured list of every component, library, and dependency that makes up a piece of software or hardware, used by cyber tools to track what is inside a product and surface known vulnerabilities in its parts. or Findings views, with smart defaulting and per-project type availability
Product tagging with dependency rollup metrics, Jira ticket type selection, and fixed PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. encoding
Adds the ability to tag projects as Products for hierarchical distinction.
Provides aggregated component counts, finding totals, and policy violation summaries that roll up through transitive dependency chains for product-tagged projects.
Enables filtering and sorting the project list by product tag, dependency count, and reverse-dependency count.
Adds a Ticket Type dropdown to the Jira ticket creation dialog for selecting issue types (Bug, Task, Story, etc.).
Grants Global Component Editor and Portfolio Viewer roles the ability to create project tickets without requiring additional permissions.
Refinery 0.10.2 adds xtsf, cbor, asn1, and dncode units for new extraction and parsing capabilities
└──▷ GET THIS VERSION
$ git clone --branch 0.10.2 https://github.com/binref/refinery.git
# already have the repo? check out this version:$ git checkout 0.10.2
Adds the xtsf unit for extracting SetupFactory binaries.
Adds the cbor unit for parsing the CBOR format.
Adds the asn1 unit for generic ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses..1 structure parsing.
Adds the xtrar unit for extracting RAR archives.
Adds the xtdmg unit for extracting DMG volumes.
+6 moreshow less
Adds carve-elf and carve-pdf units.
Adds the a3xs unit for extracting only the script part of an AutoIt3 binary.
Adds the sm3, aria, twofish, scryptscryptA password-hashing function that requires substantial memory for each guess, making large-scale password cracking more expensive., and simon cryptographic units.
Adds the plist, puny, and qp units for various common encodings.
Adds the dsstore unit for parsing MacOS' .DS_Store files.
Adds dncode unit for extracting the MSILMSILMicrosoft Intermediate Language, the CPU-agnostic bytecode that .NET compilers produce before the JIT compiler translates it to native code, giving cyber tools a stable target for .NET binary analysis and instrumentation. code from functions in a .NET assembly.
11 details in Everything
└──▷ BREAKING ON UPGRADE
!The qr unit can no longer parse arbitrary bar codes but is restricted to QR codes.
ILSpy v10.0-preview3 adds dedicated UI and decompiler APIs for C# 14 extension members.
└──▷ GET THIS VERSION
$ git clone --branch v10.0-preview3 https://github.com/icsharpcode/ILSpy.git
# already have the repo? check out this version:$ git checkout v10.0-preview3
Corellium 7.10 adds SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. artifacts, Generic Linux VMs, Cluster Admin role with snapshot management and console access
New Cluster Administrator role for on-premises appliances enabling centralized snapshot management (clone, restore, rename, share, delete) and web-based appliance console access.
Corellium MATRIX now generates Software Bill of MaterialsSoftware Bill of MaterialsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. (SBOM) artifacts listing all direct and transitive dependencies with version details to improve supply chain visibility.
Viper Advanced and Falcon instances now include a Generic Linux VM running Ubuntu, allowing deployment of Linux tooling (e.g., Appium server, MITM proxies) alongside mobile VMs without external VPNsVPNsA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection..
Secure LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. (LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext.) configuration now supports customer-supplied certificates or automatic acceptance of server-presented credentials for encrypted communications.
New Container Transforms system adds automatic detection and extraction for nested binary formats like firmware images and archives.
└──▷ USE IT
Programmatically unwrap nested archives to analyze the deepest file.
python
from binaryninja import TransformSession, load
session = TransformSession("firmware.img4")
session.process()
def find_leaf(ctx):
if ctx.is_leaf: return ctx
return find_leaf(ctx.children[0])
leaf = find_leaf(session.root_context)
session.set_selected_contexts(leaf)
with load(leaf.input) as bv:
print(bv.file.virtual_path)
Adds automatic container resolution tree during file load via the Container Transform system
Adds detection-enabled transforms for IMG4, LZFSE, UImage, FIT, TRX, DMG, Universal (Fat Mach-O), CPIO, AR, CaRT and standard compression formats
Adds support for password-protected containers with automatic multi-password attempts via new UI Container Browser
Adds three new configuration keys in .binaryninja/settings.json: files.container.mode, files.container.autoOpen, files.container.defaultPasswords, files.container.excludedTransforms
Adds TransformContext API for navigating the extracted container tree with child_count, transform_name, is_leaf properties and children list
+1 moreshow less
Adds TransformSession class with process() and set_selected_contexts() methods for programmatic container handling
Prisma Cloud Compute Edition 34.04 adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. via env var, nginx_unit vuln detection, and UI access key restriction
Adds FIPS_ENABLED environment variable support in twistlock.cfg to configure FIPS mode
Adds vulnerability detection for nginx_unit application server binaries
Adds feature flag capability to restrict UI login via access keys for the CWP login page
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Defenders below release v31 will disconnect from the Console
!Support is no longer available for Defender versions previous to 31.00
Cortex Analytics 2026.03.04 adds detectors for cloud database exfiltration and Microsoft Teams phishing.
Added detector [Low] Data exfiltration from cloud database
Added detector '[Low] Possible phishing attack via Microsoft Teams'
Added detector [Medium] Azure Privilege Escalation Using an Application
Added detector [Low] Possible Insider Threat Activity
Added detector '[Low] Potential extraction of NAA Account Credentials in Microsoft Configuration Manager'
+3 moreshow less
Added detector '[Low] Suspicious LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. queries followed by shared folder access'
Added detector '[Informational] Windows CGO, actor process and action module with anomalous characteristics'
Added detector '[Informational] A Cloud DB instance was exported to an unknown destination'
Prisma Access 6.1 introduces NGFWNGFWA next-generation firewall, combining network access rules with deeper inspection of applications and traffic. It can apply security controls beyond basic addresses and ports. as ZTNAZTNAZero Trust Network Access, a framework that grants users access to specific applications only after continuously verifying identity and device posture, replacing broad VPN-style network access with least-privilege connections. Connector automation and Server Initiated Traffic for automated private app onboarding.
Enables configuring an existing Next-Generation Firewall (NGFW) as a Zero Trust Network Access (ZTNA) Connector to automate connectivity, NAT configurations, and application onboarding.
Adds Server Initiated Traffic support for the NGFW Connector, allowing data center application servers to initiate outbound TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it., UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery., and ICMP sessions to GlobalProtect users and Remote Network hosts.
PAN-OS 12.1 adds customizable capacity settings in Panorama to scale SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience. VIFs up to 16 members
Panorama allows customization of firewall capacity settings for flexible and efficient SD-WAN deployments
Supports scaling to up to 16 members per VIF while maintaining optimal system performance
Enables balancing of system resources between SD-WAN rules, interfaces, and members based on deployment needs
Prisma Access 6.1 adds customizable re-auth frequency (10h–30d), warning timers and aggressive auth for Dynamic Privilege Access.
Adds a configurable re-authentication frequency setting to control user refresh tokenrefresh tokenA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. lifetime globally across your deployment, with intervals ranging from 10 hours to 30 days
Adds customizable warning timers that notify users before re-authentication is required, preventing unexpected disconnections and workflow disruption
Enables aggressive authentication to force immediate re-authentication when users connect or extend gateway sessions for stricter security enforcement
The gateway session timeout setting has been renamed for clarity
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The gateway session timeout setting name has changed, requiring updates to any existing configuration references or documentation pointing to the old name
Prisma Access 6.1 Preferred Innovation adds Post-Quantum CryptographyPost-Quantum CryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. (PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA.) support for TLS traffic inspection.
Supports hybrid post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. encryption schemes combining ECC with NIST-standardized ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. algorithms for TLS key establishment
Prisma Cloud Compute Edition 34.04 adds Debian 13, TLS 1.3, GCP Gen 2, Nftables and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Bottlerocket support.
Adds Debian 13 (Trixie) as a supported operating system for Defenders
Adds TLS 1.3 protocol support for secure communications
Adds support for GCP Cloud Function Gen 2 discovery and protection via the Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity.Admin APIAdmin APIA dedicated HTTP interface that exposes management and configuration operations separately from the data plane, letting cyber tools automate provisioning, policy changes, or monitoring without touching the main user-facing service.
Adds Nftables support for Cloud Native Network Firewall in Defenders to replace iptables on modern Linux systems
Vectra AI v9.9 adds new Azure token misuse detections, expands brute-force coverage, and moves Cobalt Strike/Meterpreter/Ursnif to native flow engine.
Adds Azure Suspicious Token Usage - User Principal detection for stolen user principal access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions.
Adds Azure Suspicious Token Usage - Service Principal detection for misused service principal and managed identity tokens
Enhances Azure AD Successful Brute-Force detection with ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. parameters, trusted device logic, and faster time-to-detect
Central 2026.11 adds VLAN override per SSID and secondary RADIUSRADIUSA networking protocol for centralised authentication, authorisation, and accounting of users connecting to a network, maintained under IETF standards. Cyber tools use it to integrate with existing enterprise identity infrastructure. server support for Sophos Access Points
Adds the ability to override the VLAN assigned to an access point by an SSID, enabling multiple VLANs for AP groups via a single SSID
Allows configuring a secondary RADIUS server for enterprise encryption modes on an SSID, which is contacted when the primary server fails to respond
Aviatrix CoPilot 4.31.0 adds VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware.CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. overlap detection and DCF ruleset managed-by indicators
Adds VPC overlapping CIDR tracker to identify IP address conflicts across multicloud networks.
Adds AWS Transit GatewayTransit GatewayAn AWS-managed network hub that connects VPCs and on-premises networks through a single gateway, replacing complex peering meshes and giving cyber tools a central point to route or inspect cross-network traffic. (TGW) peering attachments view on the Gateway Details page.
Adds Managed By column to Distributed Cloud Firewall (DCF) Rulesets page to show Terraform or CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. origin.
Enables selection of multiple templates and template stacks per firewall in FireNet Vendor Integration.
Implement XPN Cipher Suites for MKA/MACsec protocol analysis
Add ability to display multiple Coloring Rules simultaneously in the GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands.
Add new s6c AVPs and enhance S6c support for Diameter protocol dissector
Add Mailbox-VoE dissector for EtherCAT, with mailbox activation enabled
Add VNI and Group Policy ID to the VXLANVXLANA network encapsulation protocol that wraps Layer 2 Ethernet frames inside UDP packets, extending virtual LANs across Layer 3 networks. Cyber tools use it to simulate or inspect traffic across large-scale virtualized and cloud environments. tree item display
+3 moreshow less
Add MWD-Status Decode for the Diameter protocol
Add new TCP/IP Interface Object attributes support in the ENIP dissector
Add support for new QoS attributes in the ENIP dissector
8 details in Everything
3 more releases in this issue
· 2026-03-01 → 2026-03-29
Adds LS ELECTRIC XGT protocol dissector, TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. Ethertype support, and NATS Decode As handling
└──▷ HOW TO FIND IT
Inspect LS ELECTRIC XGT traffic by adding the Ethertype to the Decode As list in Wireshark Preferences > Protocols > decode as.
📍Preferences › Protocols › decode as -> Add Ethernet Type = TTL (new) map to XGT
Force NATS messages to be decoded as a specific protocol using the Decode As dialog.
📍Right-click packet › Decode As › Select NATS and choose target protocol
Enable payload inspection for TTL packets via the new preference.
📍Preferences › Protocols › TTL › Check Dissect the payload
epan adds a new dissector for the LS ELECTRIC XGT protocol.
TTL adds a new Ethernet Type (Ethertype) for Traffic Tagged Link Layer with preference to dissect payload.
NATS adds Decode As handling to allow manual protocol selection.
CAN and LIN protocols add can_get_bus_id_from_interface_name and lin_get_bus_id_from_interface_name functions respectively.
TTL gains support for Segmented Message Entry reassembly.
+1 moreshow less
Modbus dissector distinguishes between RTU over TCP and RTU only modes.
Security Onion 3.0.0 adds Gemini AI integration, OpenAI protocol support, AI session reports in cases, and removes Stenographer in favor of Suricata-based PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic..
└──▷ GET THIS VERSION
$ git clone --branch 3.0.0-20260331 https://github.com/Security-Onion-Solutions/securityonion.git
# already have the repo? check out this version:$ git checkout 3.0.0-20260331
Adds Google Gemini AI model support for the Assistant.
Adds OpenAI protocol support for AI Assistant integrations.
Introduces an AI Session Report Template in the Assistant for summarizing investigation sessions.
Attaches AI session transcripts to Case Reports via Case Report Update for AI Session Attachments.
Adds an Investigated Query Toggle Filter in the Assistant to filter by investigated status.
+10 moreshow less
Exposes login form lifespan as a configurable setting in the Security Onion Console.
Removes Stenographer (steno); PCAP capture and cleanup now handled by Suricata.
Enables and disables PCAP capture for Suricata directly from the SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. interface.
Removes the 10 TB virtual disk limit for VM deployments.
Supports additional Subject Alternative Names (SANs) in the web certificate.
Upgrades to Elasticsearch 9.0.8.
Upgrades Salt to version 3006.19.
Adds upgrade path support from 2.4.x to Security Onion 3.0.
Switches Elastic Agent log ingestion from the deprecated logs integration to filestream.
Includes all so-grid-nodes_* policies in automatic Elastic Agent upgrades.
15 details in Everything
└──▷ BREAKING ON UPGRADE
!Stenographer (steno) is removed; any configuration or workflows depending on Stenographer for PCAP capture will break — PCAP is now handled by Suricata.
!The QWEN 235B model is removed from defaults.yaml; any AI Assistant configurations referencing that model ID will no longer function.
!The Elastic Agent logs integration is replaced by filestream; any custom configurations using the deprecated logs integration will need to migrate to filestream.
2 more releases in this issue
· 2026-03-02 → 2026-03-31
Security Onion 2.4.211 removes the 10 TB virtual disk limit for VM deployments.
└──▷ GET THIS VERSION
$ git clone --branch 2.4.211-20260312 https://github.com/Security-Onion-Solutions/securityonion.git
# already have the repo? check out this version:$ git checkout 2.4.211-20260312
Removes the 10 TB virtual disk size limit for virtual machine hosts, enabling larger storage allocations.
Security Onion 2.4.210 adds Gemini AI integration, OpenAI protocol support, AI session reports in cases, and a path to upgrade to 3.0.
└──▷ GET THIS VERSION
$ git clone --branch 2.4.210-20260302 https://github.com/Security-Onion-Solutions/securityonion.git
# already have the repo? check out this version:$ git checkout 2.4.210-20260302
Adds Google Gemini as a supported AI backend for the Assistant.
Adds OpenAI protocol support for the Assistant AI integration.
Introduces an AI Session Report template in the Assistant for structured session summaries.
Attaches AI session transcripts to Case Reports, enriching incident documentation.
Adds an Investigated Query Toggle Filter in the Assistant for focused alert triage.
+4 moreshow less
Exposes login form session lifespan as a configurable option in the Security Onion console.
Adds upgrade path support for migrating to Security Onion 3.0.
Global Safelist now covers Teams messages for unified trusted sender management
└──▷ HOW TO FIND IT
Reduce false positives for trusted senders in Teams without separate configuration
📍In the Abnormal portal, add the sender domain to the Global Safelist (previously used for email only). These rules now apply automatically to Teams Messaging Security.
Global Safelist rules applied to email are automatically extended to Teams Messaging Security
1 detail in Everything
13 more releases in this issue
· 2026-03-02 → 2026-03-31
Abnormal AI releases general availability for its Microsoft Phish Report Button, enabling in-client threat reporting from Outlook desktop and mobile.
└──▷ HOW TO FIND IT
Deploy the new in-client reporting button to an Outlook environment using the provided manifest file.
📍Follow the US Deployment Guide or EU Deployment Guide linked in the release notes to configure the Phish Report Button manifest in your Microsoft environment.
Adds a native Phish Report Button to Microsoft Outlook (desktop and mobile) allowing employees to report suspicious emails with one click
Automatically moves reported emails to Deleted Items upon submission via the Phish Report Button
Provides instant recognition for users who correctly identify AI Phishing Coach simulations through the in-client reporting interface
Abnormal AI adds admin toggle for Just-In-Time Training quizzes to reduce user interruptions.
└──▷ HOW TO FIND IT
Admins managing training fatigue can use this setting to pause JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. quiz interruptions for all users across the organization.
📍In the AI Phishing Coach settings, toggle the Just-In-Time Training Quizzes switch to enable or disable them org-wide.
Adds ability for admins to enable or disable Just-In-Time (JIT) Training quizzes org-wide via the AI Phishing Coach settings.
Outbound Log now surfaces free-text SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. feedback on MEP decisions directly in the message details view.
└──▷ HOW TO FIND IT
View historical SOC feedback for a specific misdirected email detection without consulting external ticketing systems.
📍In the Outbound Log, click on a MEP entry to open message details and review the admin-submitted feedback text.
Adds AI-driven BEC and VEC social engineering simulations to Abnormal's Phishing Coach
New BEC and VEC simulations in AI Phishing Coach that use behavioral relationship patterns to generate realistic manager, colleague, and vendor fraud scenarios.
AI Phishing Coach now automatically delivers tailored simulations based on identified communication patterns to test employee responses to social engineering attacks.
Abnormal AI expands attachment metadata visibility with new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoint and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. field.
└──▷ TRY IT
Fetch attachment metadata via API for a specific message to correlate artifacts quickly.
$ GET /messages/{message_id}/attachment/{attachment_name}
Adds attachment_analysis field to SIEM Email Threats events for richer investigation context
Adds REST API support for /messages/{message_id}/attachment/{attachment_name} endpoint
Expands attachment metadata (MD5, SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data., SHA1 hashes, type, size) visibility in Portal Message Details View
Abnormal AI revamps Email Productivity dashboard with mode-aware views and CSV exports
Adds a mode‑aware view that auto-adjusts to deployment stages (All Active, All Passive, Partial) to show graymail remediation progress
Adds independent filters for user type (VIPVIPA Virtual IP address — a single IP shared across multiple hosts or services, commonly used for load balancing or failover so traffic can be rerouted without changing the client-facing address. vs. non‑VIP) and status (Active vs. Passive), plus the ability to hide bypassed senders
Enables CSV exports of graymail reporting with day‑by‑day breakdowns by frequency, senders, and recipients
Abnormal AI adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. group targeting for phishing simulations to align tests with real team structures.
Target phishing simulations using existing Active Directory groups
Sophos Email Security 2026.11 adds AI email header analysis and TLS encryption filtering in Mailflow.
Adds AI Analysis feature to generate AI-powered summaries of email headers and authentication results (SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders., DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit., DMARC) for quick threat assessment
Adds TLS encryption filtering support in Sophos Mailflow, allowing message filtering based on the encryption used between Sophos Email and Microsoft 365
Rspamd 4.0 adds /checkv3 multipart API, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.-native workers, multi-class Bayes, HTML phishing fuzzy hashes, and LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG..
└──▷ GET THIS VERSION
$ git clone --branch 4.0.0 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:$ git checkout 4.0.0
└──▷ TRY IT
Submit a message to the new v3 API endpoint using msgpack encoding for lower overhead in high-throughput pipelines.
New /checkv3 HTTP endpoint uses multipart/form-data requests and multipart/mixed responses with structured JSON/msgpack metadata, per-part zstd compression, zero-copy writev responses, and proxy support.
Hyperscan compilation and caching moved to a pluggable async Lua backend with Redis storage, enabling shared databases across workers and hosts with self-healing stale-blob detection.
Single fuzzy hash can now carry up to 8 flags simultaneously (epoch 12), with multiple rules matching the same digest independently.
New FUZZY_HTML_PHISHING symbol detects reused phishing templates where an HTML template matches but link domains differ.
Workers now serve HTTPS natively (auto-detected from bind socket flags), enabling secure WebUI and API without a reverse proxy.
+15 moreshow less
Built-in mmap-based fasttext shim shares model memory across workers via MAP_SHARED, saving ~500 MB–7 GB per host and supporting hot-reload via maps infrastructure.
Native UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. v7 generation per task with ClickHouse UUID v7 column support for cross-system correlation.
Neural module supports external pretrained models with multi-layer funnel architecture, multi-model fasttext embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. with SIF word weighting, and expression-based autolearn for LLM providers.
Bayes classifiers now support arbitrary classes beyond binary spam/ham, with updated WebUI learning UI and new /bayes/classifiers endpoint.
Milter add/remove headers and extended symbol info exposed in RSPAMC/SPAMC text protocol for Exim and other legacy clients.
Token bucket load balancing for proxy upstreams with configurable burst parameters.
Ring Hash (Ketama) consistent hashing replaces Jump Hash for Redis sharding with minimal disruption and a rspamadm statistics_dump migrate shard migration tool.
ARC trusted_authserv_id support for reusing upstream Authentication-Results headers.
Reply-To validity checks added to headers_checks.
Fuzzy hashes stored in Redis history for matched hash tracking.
HTTP content negotiation framework with zstd compression for the /stat endpoint.
GPT module adds configurable consensus thresholds and a context_augment hook.
New rspamadm subcommands: autolearnstats, logstats, and mapstats.
ASCII85 decode support added for PDF extraction.
20 details in Everything
└──▷ BREAKING ON UPGRADE
!Jump Hash replaced with Ring Hash (Ketama) for Redis sharding: run rspamadm statistics_dump migrate after upgrading or accept temporary Bayes accuracy loss while data is re-learned (single Redis server setups unaffected).
!URLs from PDF and other computed parts are now included by default in task:get_urls(); set include_content_urls = false in local.d/options.inc to restore old behavior.
!The ssl = true worker option is removed; SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. is now auto-detected from bind socket flags.
!ENABLE_FASTTEXT cmake option no longer exists as libfasttext has been replaced with a built-in shim.
!SenderScore RBLs are disabled by default (require MyValidity account registration).
!Suspicious TLDs are now map-based via conf/maps.d/suspicious_tlds.inc instead of a hardcoded list.
!Neural autolearn options have been renamed to match RBLRBLA DNS-based blocklist of IP addresses known to send spam or host malicious traffic, maintained by various operators, used by cyber tools to reject or flag connections from listed sources at lookup speed. module naming conventions.
!Token bucket load balancing is now enabled by default for proxy upstreams, replacing simple round-robin.
Snort3 3.12.1.0 adds FILE logging and richer SSH telemetry to the extractor, plus payload injection for HTTP/HTTP2 s2c traffic.
└──▷ GET THIS VERSION
$ git clone --branch 3.12.1.0 https://github.com/snort3/snort3.git
# already have the repo? check out this version:$ git checkout 3.12.1.0
Adds FILE logging output to the extractor module.
Adds SSH event logging to the extractor, including direction, version, and computed shared (selected) algorithm fields.
Adds payload injection support for server-to-client (s2c) packets on HTTP and HTTP2 traffic in the payload injector.
Adds dump_inspector_map command to the inspector manager for serviceability.
Adds list_plugins command for serviceability.
+3 moreshow less
Enables so (shared object) library reloads for the OPC-UAOPC-UAAn open, platform-neutral communication protocol for industrial automation systems, maintained by the OPC Foundation, giving cyber tools a standardized way to read and monitor data from PLCs, sensors, and SCADA equipment. inspector.
Adds content-length validation in the pub/sub subsystem.
Removes the block_udp_fragmentation configuration option from the socks inspector.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The block_udp_fragmentation configuration option has been removed from the socks inspector; any config referencing it will break.
!The ssl.server_name_identifier field in the extractor has been renamed; consumers of that field must update their references.
!Plugins API version has been bumped for base and all types; rules from snort.org require the Talos_lightSPD package from version 2026-03-16-001 or later.
CrowdSec v1.7.7 switches to RE2RE2A regular-expression engine developed by Google that guarantees linear-time matching, preventing the catastrophic backtracking that plagues PCRE-style engines and making it safe to run untrusted patterns. regexp engine on Linux, adds flexible WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. AND/OR conditions, a new allowlist import command, and a kind alert attribute.
└──▷ GET THIS VERSION
$ git clone --branch v1.7.7 https://github.com/crowdsecurity/crowdsec.git
# already have the repo? check out this version:$ git checkout v1.7.7
└──▷ HOW TO FIND IT
Revert to the Go regexp engine if the new RE2 default causes issues with existing parsers on Linux.
📍In the CrowdSec console or config, enable the feature flag re2_disable_grok_support (see https://docs.crowdsec.net/docs/next/configuration/feature_flags/#enabling-a-feature-flag).
Enables RE2 as the default regexp engine on Linux, delivering significantly faster parser evaluation with the option to revert via the re2_disable_grok_support feature flag.
WAF rules now support arbitrary mixes of AND/OR conditions with no structural limits, enabling much more expressive rule authoring.
Adds cscli allowlist import command for bulk importing allowlist entries.
Introduces a new kind attribute on alerts to identify their source (scenario, WAF rule, manual decision, etc.).
Adds LookupFile and FileMap expression helpers for use in parsers.
+2 moreshow less
Exposes additional Coraza transformations in the WAF engine.
Supports the HTTP_PROXY environment variable in the notification-http plugin for proxy-aware HTTP notifications.
March 29 20264 releases · 2026-03-01 → 2026-03-29Stable
Minimus adds NGINX-Hardened CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline./FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. images and default port visibility
Adds NGINX-Hardened image compliant with CIS NGINX Benchmark
Adds NGINX-Hardened-FIPS image option for FIPS validation
Displays default listening and exposed ports in the image version specification tab
3 details in Everything
3 more releases in this issue
· 2026-03-01 → 2026-03-29
Minimus adds EOL display enhancements, FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. cert for OpenSSL, and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. label standardization.
Console redesigned the display of EOL, near EOL, and LTS indications to help teams plan deployments and maintenance
Minimus Cryptographic Module acquired new CMVP certificate 5177 (FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. 140-3) for OpenSSL
Image labels updated to use standard OCI format (e.g. org.opencontainers.image.version)
Inspektor Gadget v0.50.0 adds a kernel module tracing gadget and container image digest filtering.
└──▷ GET THIS VERSION
$ git clone --branch v0.50.0 https://github.com/inspektor-gadget/inspektor-gadget.git
# already have the repo? check out this version:$ git checkout v0.50.0
New trace_init_module gadget to trace kernel module loading events.
Supports filtering container collection by image digests.
Gatekeeper v3.22.0 adds gator bench/policy commands, namespace-aware CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine./Rego, remote cluster support, and VAP scope sync on by default.
└──▷ GET THIS VERSION
$ git clone --branch v3.22.0 https://github.com/open-policy-agent/gatekeeper.git
# already have the repo? check out this version:$ git checkout v3.22.0
New gator bench command benchmarks Rego and CEL policy engines with latency percentiles, throughput metrics, memory profiling, concurrent load testing, and baseline comparison for CI/CD regression detection.
New gator policy command enables brew-style discovery, installation, upgrading, and uninstallation of policies from gatekeeper-library, with bundle support (e.g., pod-security-baseline), enforcement overrides, and dry-run previews.
CEL expressions can now access namespaceObject and Rego policies can access input.namespace for namespace-scoped policy decisions during admission and audit.
New --enable-remote-cluster flag allows Gatekeeper to run outside the target cluster, supporting nested or hosted control plane topologies.
Supports disabling the forced fake-reader audit sidecar for users who supply their own log monitoring (e.g., an OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. collector).
+2 moreshow less
Adds metrics backend configuration options to the Helm chart.
Supports print statements in gator for policy debugging.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The sync-vap-enforcement-scope flag now defaults to true, meaning VAP resources will automatically reflect constraint enforcement actions on upgrade — existing setups that relied on the previous false default may see changed ValidatingAdmissionPolicy behavior.
Adds configurable pod overhead per-shim and hotplug support for memory/block on s390x in Kata Containers v3.28.0
└──▷ GET THIS VERSION
$ git clone --branch 3.28.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.28.0
└──▷ HOW TO FIND IT
Tune resource overhead specifically for shim-v2-go pods using the new kata-deploy configuration option.
📍# In your values.yaml or helm install command, add per-shim pod overhead:
# pod_overhead_per_shim:
# shim-v2-go: 50m
# shim-kata-collectd: 10m
Adds per-shim configurable pod overhead in kata-deploy to tune resource limits individually for each shim type (e.g. shim-v2-go).
Adds support for memory hotplug via virtio-mem on s390x architecture.
Adds support for block device hotplug on s390x architecture in the runtime-rs component.
Implements trusted ephemeral data storage in the coco subsystem.
CloudGoat v2.5.0 adds a new IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. enumeration basics training scenario.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
# already have the repo? check out this version:$ git checkout v2.5.0
New iam_enum_basics scenario for practicing foundational AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. enumeration techniques.
eksctl v0.225.0 adds Fargate EKS internal endpoint support and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. Public pulls for Auto Mode nodes.
└──▷ GET THIS VERSION
$ git clone --branch v0.225.0 https://github.com/weaveworks/eksctl.git
# already have the repo? check out this version:$ git checkout v0.225.0
Supports permissionPolicyName for pod identity inline IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. policies, enabling named permission policies to be honoured during pod identity configuration.
Adds Fargate profile support for EKS internal endpoints, allowing Fargate workloads to operate with private cluster configurations.
Adds ECR Public container pull permissions to the Auto Mode NodeRole, enabling nodes to pull images from public ECR registries without manual IAM changes.
3 details in Everything
1 more release in this issue
· 2026-03-04 → 2026-03-30
Adds Gateway API ELB cleanup during eksctl cluster deletion, ensuring load balancers provisioned via the Gateway API are removed when a cluster is deleted.
Updates nodeAdm API to the latest version via go module changes.
Prowler 5.22.0 adds Attack Paths custom openCypher queries, batch filter apply in Findings, and check_title substring filtering in the API.
└──▷ GET THIS VERSION
$ git clone --branch 5.22.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.22.0
└──▷ HOW TO FIND IT
Explore lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. paths or custom threat scenarios in your cloud graph without being limited to predefined queries.
📍In the Prowler Cloud UI, go to Attack Paths, open the query panel, select Custom Query, enter your openCypher query (optionally use Lighthouse AI to generate it), and click Run.
Adds custom openCypher query support in Attack Paths, with Cartography schema guidance and Lighthouse AI assistance for query generation.
New batch-apply filter pattern on the Findings page — configure multiple filters before executing, eliminating per-selection API calls and layout shifts.
Finding groups API now supports check_title substring filtering.
3 details in Everything
3 more releases in this issue
· 2026-03-04 → 2026-03-24
Prowler 5.21.0 adds Google Workspace and Container Image UI support, AWS CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. timeline, Lighthouse AI query skills, and new M365/GitHub checks.
└──▷ GET THIS VERSION
$ git clone --branch 5.21.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.21.0
Adds Google Workspace provider full support in the Prowler App UI — connect and scan Google Workspace environments directly from the interface.
Adds Container Image (container registry) provider support in the Prowler App UI, including badge icon, credentials form, and provider-type filtering.
Adds AWS Resource Timeline: a new Events tab in Findings and Resource detail cards shows the last 90 days of AWS CloudTrail events with expandable event rows, actor details, request/response JSON payloads, error info, and a read-event toggle.
Adds Lighthouse AI skill system with a new Attack Path Custom Query skill that supplies the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. with openCypher syntax guidance and Cartography schema knowledge for writing graph queries.
Adds a new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool to retrieve the Cartography Neo4j DB scan schema for use in Attack Path queries.
+10 moreshow less
Adds entra_conditional_access_policy_device_code_flow_blocked check for M365/Entra: detects whether Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. policy blocks device code flow to prevent phishing attacks.
Adds entra_conditional_access_policy_require_mfa_for_admin_portals check for M365/Entra: detects whether Conditional Access policy requires MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. for Microsoft Admin Portals.
Adds organization_repository_deletion_limited check for GitHub: verifies that organization repository deletion and transfer is restricted to owners.
Adds SecNumCloud 3.2 compliance framework coverage for AWS, Azure, GCP, Alibaba Cloud, and Oracle Cloud.
Adds Reserve Bank of India (RBI) compliance framework for the Azure provider.
Adds misconfig scanner as the default scanner for Image provider scans.
Enables CORS_ALLOWED_ORIGINS to be configured via environment variable in the API.
Adds tenant and provider-related labels to Attack Path graph nodes to enable easier filtering in custom queries.
Adds AWS Organizations UI management improvements: edit organization names and credentials, run connection tests scoped to all accounts or a specific organizational unit, and delete individual organizational units or full organizations.
Adds OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. region support for US DoD regions.
15 details in Everything
└──▷ BREAKING ON UPGRADE
!Attack Paths completes migration to private graph labels and properties, removing deprecated dual-write support — existing integrations relying on the deprecated graph labels or properties will break.
Adds Google Workspace scanning via the Prowler API (previously CLI-only since v5.19.0), enabling programmatic provider connection and scan triggering.
Adds 7 new OpenStack Object Storage security checks covering container access control, versioning, encryption, metadata hygiene, and lifecycle management.
New AWS check guardduty_delegated_admin_enabled_all_regions verifies a delegated administrator is configured for GuardDuty across all regions.
New trusted_ips configuration option for opensearch_service_domains_not_publicly_accessible eliminates false positives when an OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. domain restricts access to known IPs via resource policy.
New M365 check entra_conditional_access_policy_approved_client_app_required_for_mobile enforces approved client apps on mobile devices.
+5 moreshow less
New M365 check entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required enforces compliant/hybrid-joined device or MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone..
AWS Organizations findings now include Organizational Unit ID and name across ASFF, OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work., and CSV output formats.
Attack Paths network exposure queries migrated from APOC to standard openCypher, enabling compatibility with Neo4j and Neptune.
Official community-maintained Helm chart published as an OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. artifact to oci://ghcr.io/prowler-cloud/charts/prowler for self-hosted Kubernetes deployments.
POST /api/v1/providers now returns 409 Conflict when a provider already exists.
Prowler 5.19.0 adds container image scanning, Google Workspace & OpenStack multi-region support, 40+ new checks, and Attack Paths upgrades.
└──▷ GET THIS VERSION
$ git clone --branch 5.19.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.19.0
└──▷ TRY IT
Push findings from an existing CLI scan to Prowler Cloud for centralized correlation and reporting.
$ prowler aws --push-to-cloud
New --push-to-cloud CLI flag uploads findings in OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. format directly to Prowler Cloud for centralized visibility.
New POST /api/v1/ingestions API endpoint enables CI/CD pipelines to import scan findings into Prowler Cloud.
New Image provider (powered by Trivy) enables container image vulnerability scanning by tag, digest, or full registry enumeration across OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. registries, Docker Hub, and Amazon ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure..
New Google Workspace provider brings organizational security visibility starting with the Directory service.
OpenStack provider now supports multiple regions from a single provider configuration.
+15 moreshow less
Adds 26 new OpenStack security checks across Compute, Networking, Block Storage, and Image services.
Adds 12 new Microsoft 365 security checks covering Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Defender for Identity, Defender XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss., and email protection.
Adds enhanced AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege.privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. detection checks using patterns from the pathfinding.cloud library.
Adds organization_verified_badge check for the GitHub provider.
Cloudflare provider now has full Prowler App (UI) support with 29 security checks covering TLS/SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination., DNS, email security, WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server., bot protection, and zone configuration.
AWS Organizations onboarding in Prowler Cloud allows connecting multiple AWS accounts from an Organization hierarchy in a single flow.
Attack Paths feature gains the full query library from pathfinding.cloud, covering privilege escalation and lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. detection.
Attack Paths queries now include detailed descriptions and source links to pathfinding.cloud.
Prowler MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. now includes Attack Paths tools, enabling AI agents to query privilege escalation and lateral movement paths.
Adds CSA CCM 4.0 compliance framework across AWS, Azure, GCP, Oracle Cloud, and Alibaba Cloud.
Adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Amazon Web Services Foundations Benchmark v6.0 compliance framework.
Adds ANSSI SecNumCloud compliance framework for AWS.
Unified provider connection wizard redesigned as a modal with a consistent experience across all provider types.
OpenStack providers can now be managed from the Prowler App UI.
Respects AWS_ENDPOINT_URL environment variable for STSSTSAWS Security Token Service, an Amazon Web Services API that issues short-lived credentials for IAM roles, letting cyber tools authenticate to AWS without storing long-term secrets. session creation.
Cloud Custodian 0.9.50 adds 12 new AWS resources, 4 Azure Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. resources, 3 GCP Vertex AI resources, and dozens of new filters and actions across all providers.
└──▷ GET THIS VERSION
$ git clone --branch 0.9.50.0 https://github.com/cloud-custodian/cloud-custodian.git
# already have the repo? check out this version:$ git checkout 0.9.50.0
└──▷ TRY IT
Detect EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. clusters where a Kubernetes version upgrade is available, so you can prioritize remediation before support ends.
$ custodian run -s out policy.yml
# policy.yml:
policies:
- name: eks-upgrade-available
resource: aws.eks
filters:
- type: upgrade-available
Find IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. users with service-specific credentials (e.g., CodeCommit HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. credentials) to audit or rotate them.
$ custodian run -s out policy.yml
# policy.yml:
policies:
- name: iam-user-service-specific-creds
resource: aws.iam-user
filters:
- type: service-specific-credentials
Use the cross-account filter on OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. Ingestion pipelines to catch pipelines accessible from outside your AWS Organization.
$ custodian run -s out policy.yml
# policy.yml:
policies:
- name: opensearch-ingestion-cross-account
resource: aws.opensearch-ingestion
filters:
- type: cross-account
Adds ability to normalize tag keys in filters across AWS, Azure, and GCP providers.
Adds start-of-day option to the metrics filter across AWS, Azure, and GCP.
New upgrade-available filter for AWS EKS to detect clusters with a newer Kubernetes version available.
New upgrade-available filter for AWS ElasticSearch to detect domains eligible for upgrade.
New aws.bedrock-inference-profile resource with delete action for managing Bedrock inference profiles.
+25 moreshow less
New aws.bedrock-model-invocation-job resource for managing Bedrock model invocation jobs.
New aws.directconnect-gateway and aws.directconnect-virtual-interface resources for Direct Connect management.
New aws.ec2-instance-ami resource and image-metadata filter on aws.ec2 to query AMI metadata for running instances.
New aws.event-api-destination resource for managing EventBridgeEventBridgeAWS's managed event bus service that routes events between cloud services, SaaS apps, and custom code using rules and targets, letting tools react to state changes without polling or managing message infrastructure. API destinations.
New aws.opensearch-reserved resource for managing OpenSearch Reserved Instances.
New aws.savings-plan resource for querying and managing AWS Savings Plans.
New aws.transfer-connector and aws.transfer-web-app resources for AWS Transfer Family.
New aws.vpc-lattice-listener and aws.vpc-lattice-service-network-association resources for VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Lattice management.
New cross-account filter on aws.opensearch-ingestion to detect cross-account pipeline access.
New VpcEndpointPolicySupported filter (service-details) on aws.vpc-endpoint to check endpoint policy support.
New service-specific-credentials filter on aws.iam-user to audit IAM user service-specific credentials.
New toggle-recording action on aws.config-recorder to enable or disable AWS Config recording.
New network-location, security-group, and subnet filters on aws.transfer-server.
Adds whitelist_patterns option to the cross-account filter to skip deleted IAM principals.
Adds WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. filter support for AWS Managed Rule Groups.
Adds ASG termination action for Auto Scaling Groups.
Adds EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. gp3 modify IOPS action.
New azure.entraid-authorization-policy, azure.entraid-conditional-access-policy, azure.entraid-named-location, and azure.entraid-security-defaults resources for Azure Entra ID.
New storage-metrics filter on azure.storage for metric-based storage account policies.
Adds tag actions to azure.subscription resource.
New gcp.vertex-ai-batch-prediction-job, gcp.vertex-ai-endpoint, and gcp.vertex-ai-location resources for GCP Vertex AI.
Adds set-label action to GCP buckets, BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., BigTable, and several additional GCP resources.
Adds set-iam-policy action for gcp.bucket to manage bucket IAM policies.
Enhances GCP iam-policy filter with value filter semantics and remove-bindings: matched option.
Promotes aws-accounts script to a proper CLI command in c7n_org.
cloud-nuke v0.48.0 adds support for nuking AWS SSMAWS SSMAWS Systems Manager, an Amazon service that lets operators manage EC2 instances and on-premises servers without opening inbound ports, replacing SSH with API-driven session and command execution. Parameter Store resources.
└──▷ GET THIS VERSION
$ git clone --branch v0.48.0 https://github.com/gruntwork-io/cloud-nuke.git
# already have the repo? check out this version:$ git checkout v0.48.0
Adds SSM Parameter Store as a supported resource type for discovery and deletion.
1 detail in Everything
1 more release in this issue
· 2026-03-22 → 2026-03-24
Adds support for nuking AWS Data Pipeline resources.
Adds GCP Cloud Functions (Gen2) as a nuke-able resource type.
Adds GCP Artifact Registry as a nuke-able resource type.
Adds GCP Pub/Sub topic resource with first-seen label support.
New --include-tag CLI flag enables global tag-based resource filtering across all resource types.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Config YAML keys are now case-sensitive and must match Go struct names exactly (e.g., s3 → S3, NatGateway → NATGateway, EcsCluster → ECSCluster, EksCluster → EKSCluster, RdsParameterGroup → RDSParameterGroup); old keys are rejected with errors.
!The tag and tag_value config fields have been removed; replace them with the tags map syntax (tags:\n my-tag: my-value).
!Unknown fields in config YAML now cause errors instead of being silently ignored.
!Some resource type names used with --resource-type have changed; run cloud-nuke inspect to see current names.
!Nuke() now returns []NukeResult instead of error.
!GetAllResources() now requires an additional *reporting.Collector parameter.
!The report/ and ui/ packages have been replaced by reporting/ and renderers/.
!The PrepareContext and IsGlobal interfaces have been removed.
Plerion adds 86 new AI-SPMAI-SPMAI Security Posture Management: a discipline for continuously discovering, assessing, and remediating risks across AI pipelines, models, and data, giving cyber tools a structured way to govern AI infrastructure the way CSPM governs cloud. checks for Amazon SageMaker and Bedrock covering encryption, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., network exposure, and runtime config.
Adds 86 new AI-SPM checks for Amazon SageMaker and Bedrock assets including encryption status, IAM privileges (admin/overly permissive), VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. egress bypass detection, root access enablement, data capture status, and privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. paths.
Adds support for persisting egress policies to a local file via OPENSANDBOX_EGRESS_POLICY_FILE
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.4 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.4
└──▷ USE IT
Persist the egress policy to a specific file path instead of relying on in-memory or default storage.
OpenSandbox v0.1.6 adds persistent sessions, OSSFS volumes, and manual lifecycle control to the Python SDK
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.6
Adds run_in_session subcommand in the Python SDK for persistent shell workflows
Adds ossfs volume backend support in the Python SDK
Adds uid, gid, and environment variable fields to run-command requests
Adds manual cleanup lifecycle support (e.g., cleanup() method) in the Python SDK
Initial release of OpenSandbox C# SDK adds runInSession API.
└──▷ GET THIS VERSION
$ git clone --branch csharp/sandbox/v0.1.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout csharp/sandbox/v0.1.0
└──▷ USE IT
Execute a session using the newly available SDK method.
JavaScript SDK supports sandbox endpoint auth headers for code-interpreter requests
└──▷ GET THIS VERSION
$ git clone --branch js/code-interpreter/v0.1.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/code-interpreter/v0.1.3
OpenSandbox v1.0.5 adds sandbox endpoint auth header support for code-interpreter requests in the Java SDK
└──▷ GET THIS VERSION
$ git clone --branch java/code-interpreter/v1.0.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/code-interpreter/v1.0.5
└──▷ USE IT
Pass a custom authentication header when invoking code interpreters via the Java SDK to secure sandbox endpoint access.
java
CodeExample.java:
CodeInterpreterClient client = new CodeInterpreterClient();
client.setSandboxEndpointAuthHeader("Bearer <token>");
OpenSandbox v1.0.5 adds egress patching, PVC subPath volumes, client-side pooling, and manual cleanup for Java SDK users
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.5
Adds egress patch support for sandbox network configuration allowing traffic rule updates
Adds Docker named volume support with PVC subPath in sandbox lifecycle integration
Adds client-side sandbox pool support for Java SDK to manage connections locally
Adds manual-cleanup sandbox lifecycle support in the Java SDK for explicit resource control
Adds command exit-code support for Java SDK command execution flows
+2 moreshow less
Adds OSSFS volume support to the Java SDK sandbox models and converters
Adds x-request-id propagation support in the Java SDK for distributed tracing
OpenSandbox v0.1.5 adds runInSession, exit codes, OSSFS backend, and uid/gid support
└──▷ GET THIS VERSION
$ git clone --branch js/sandbox/v0.1.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/sandbox/v0.1.5
runInSession flag and subcommand in the JavaScript SDK to execute commands within an existing session
Command exit-code return value for JavaScript sandbox command execution
OSSFS volume backend integration in the JavaScript SDK
x-request-id header propagation in the JavaScript SDK
uid/gid and environment variable fields in run-command requests
OpenSandbox server v0.1.9 adds websocket proxy, experimental auto-renew, and Pool CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. API
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.9 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.9
Adds server proxy by websocket to enable bidirectional sandbox communication.
[EXPERIMENTAL] Enables auto-renew on sandbox proxy/ingress access per OSEP-0009 for session persistence.
[UNSTABLE] Adds Pool CRUD API and Kubernetes CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. service for automated pool management.
Adds EXPERIMENTAL publish_renew_intent to Redis for sandbox auto-renew on ingress access
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.5
[EXPERIMENTAL] publishing renew-intent to Redis for OSEP-0009
OpenSandbox server v0.1.8 adds configurable egress modes and manual cleanup for sandboxes.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.8
egress.mode is a new configuration option accepting dns or dns+nft (default: dns) to control network egress behavior.
The OPENSANDBOX_EGRESS_MODE environment variable wires the egress mode into the sidecar for both Docker and Kubernetes deployments.
Per-sandbox egress auth header generation is now supported, propagating headers through lifecycle endpoint responses.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Some unset optional lifecycle response fields are serialized as explicit JSON null values instead of being omitted, which may break older released SDKs that do not tolerate null.
OpenSandbox execd v1.0.8 adds Session API for pipe-based bash sessions
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.8
OpenSandbox execd v1.0.7 adds env support in run requests and uid/gid execution.
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.7 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.7
└──▷ USE IT
Pass environment variables when executing a command via the API.
OpenSandbox v0.1.7 adds PVC support to agents, user-defined Docker networks, and RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for secrets.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.7 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.7
Adds Persistent Volume Claim (PVC) support to the agent-sandbox and batchsandbox runtimes
Supports user-defined Docker network stacks within sandboxed environments
Adds server-side Role-Based Access ControlRole-Based Access ControlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. (RBAC) rules for accessing secrets
OpenSandbox v1.0.3 adds denied hostname webhook fanout and includes sandboxID in deny payloads
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.3
Adds denied_hostname webhook fanout to notify external listeners when egress is blocked
Includes the sandboxID field within the deny webhook payload for request tracing
OpenSandbox v1.0.2 adds nameserver exemption for direct DNS forwarding and updates patch policies.
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.2 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.2
Adds nameserver exempt configuration option to bypass direct DNS forwarding rules
OpenSandbox v0.1.6 adds configurable resource limits to the execd init container.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.6
└──▷ USE IT
Set specific resource constraints for the execd init container when launching a sandbox.
shell
export EXECD_INIT_CPU_LIMIT=500m
export EXECD_INIT_MEM_LIMIT=128Mi
# Then launch your sandbox as usual
Adds official linux/arm64 image support for OpenSandbox ingress
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.3
OpenSandbox server v0.1.5 adds server.eip config key for Docker runtime endpoint host and improves proxy error handling.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.5
Adds server.eip configuration key to specify the endpoint host when running in Docker runtime
Preserves HTTP errors from upstream proxies and expands route coverage for better debugging
Correlates spans with server logs by propagating the X-Request-ID header
Adds --unhide-pid1 command to optionally expose PID 1 inside the sandbox, which is now hidden by default.
Adds --hostname-randomize command and profile option to opt into randomized sandbox hostnames (no longer the default).
Adds --debug-syscall-groups command for inspecting resolved syscall groups during seccomp policy development.
Adds AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profiles for the --nettrace command, enabling confined network tracing.
Makes Xephyr the default backend for --x11, replacing Xpra.
+3 moreshow less
Adds new application profiles: fragments, srb2, zen/zen-bin/zen-browser, and halloy IRC client.
Supports Deno JavaScript engine and browser cookies in the yt-dlp profile.
Requires a full or relative file path for --profile=FILE — using a bare filename is no longer accepted for security reasons.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The --profile=FILE option now requires a full or relative path; passing a bare filename will be rejected.
!PID 1 is now hidden inside the sandbox by default; use --unhide-pid1 to restore previous behavior.
!Hostname randomization is no longer active by default; use --hostname-randomize to re-enable it.
!Xephyr is now the default for --x11, replacing Xpra.
!The ./configure --disable-man build option has been removed.
!The ./configure --disable-usertmpfs build option has been removed.
Tetragon is an eBPF-based security observability and runtime enforcement tool for Kubernetes and cloud-native environments.
Tetragon v1.6.1 adds uprobe match-args support, BTFBTFBPF Type Format, a metadata format in the Linux kernel that embeds type and debug information directly into eBPF programs, letting cyber tools inspect kernel structures safely without kernel headers at runtime. resolution for uprobes, and switches to tracefs.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.1 https://github.com/cilium/tetragon.git
# already have the repo? check out this version:$ git checkout v1.6.1
└──▷ USE IT
Filter uprobe events by argument value — useful when you only want events for a specific argument passed to a user-space function.
Supports matchArgs filtering in uprobe-based tracing policies.
Enables BTF-based type resolution for uprobe sensors.
Switches from debugfs to tracefs for BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. tracing attachment.
Allows tracing policies to load even when kptr_restrict is set to 2.
The /api/stix endpoint now outputs STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. bundles, including SRO relationships for indicators, threat actors, malware families, and attack patterns.
isMalicious introduces a daily NRDNRDNewly Registered Domain — a domain name created within a recent window (often 30–90 days); cyber tools flag these because attackers frequently register fresh domains to evade reputation-based blocklists. feed providing domain metadata and risk verdicts in CSV and JSON formats.
isMalicious introduces NRDNRDNewly Registered Domain — a domain name created within a recent window (often 30–90 days); cyber tools flag these because attackers frequently register fresh domains to evade reputation-based blocklists. feed, STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. export API, and read-only API key scoping in March 2026 release.
/api/stix endpoint now returns STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.1 bundles with SRO relationships linking indicators to threat actors, malware families, and attack patterns.
Launched a daily NRD (newly registered domain) feed available as CSV and JSON, providing age, registrar, nameserver, and isMalicious verdict for each entry.
Added read-only API key scope to prevent accidental use of write-capable keys in automated pipelines.
Anomali search adds OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. schema support, MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. heatmaps with configurable gradients, and lookup tables for asset data.
Adds OCSF Schema Support (Limited Availability) to leverage OCSF-normalized event telemetry alongside eventlog
Adds Visualization Type (Limited Availability) for frequency view in MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. heatmaps with configurable gradients and tooltips
Adds Lookup Tables (Limited Availability) including asset and investigation_elements lookup tables for asset data and investigation querying
Cloudmersive Cloud Virus API v11-2-0 adds support for scanning LibreOffice Open Document formats (.odt, .ods, etc.)
v11-2-0 enhances file format verification to include the LibreOffice Open Document family: .odt, .ods, .odp, .odg, .odc, .odf, .odb, .odi, .odm, .ott, .ots, .otp, .otg.
Private Cloud Installer v3-75 adds Management Agent v3.6.0 support and HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. long polling option
Adds cloudmersive-management-agent version 3.6.0 support in the Private Cloud Installer for Virus Scan API.
Enables forcing HTTPS long polling for remote management instead of WebSockets.
$ git clone --branch v2.5.35 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.35
└──▷ HOW TO FIND IT
Use the new decomposed event view endpoints and mass-select actions in the Event Index via the Overmind UI.
📍In the console, go to Administration › Server Settings › MISP › enable theming, set the theme to the Overmind/EventTest theme, then navigate to an event to load attributes, objects, related events, and warninglist hits as separate AJAX panels. In the Event Index, use the mass-select checkboxes to bulk publish, delete, or export events.
Adds new AJAX endpoints (view2(), viewAttributes(), viewObjects(), viewRelatedEvents(), viewWarninglistHits()) that decompose the monolithic event view into asynchronously loaded components for faster rendering.
Introduces a new correlation dispatcher enabling per-page correlation loading instead of loading all correlations for an entire event at once.
Adds a new EventTest reference UI theme demonstrating the decomposed endpoints with paginated attributes, quick filters, and a flatten toggle.
Switches restsearch to cursor-based pagination, eliminating performance degradation on deep pagination of large attribute datasets.
Adds a benchmark suite and comparison tool for tracking and documenting attribute search pipeline performance.
+4 moreshow less
Adds mass-select actions for publication, deletion, and export within the Event Index in the Overmind UI.
Transitions Overmind UI from jQuery to Vanilla JS and integrates Tom Select for improved dropdown and selection interactions.
Hardens Debian 12/13 and RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9.4 installer scripts following SC3 audit: credentials stored at /root/misp_settings.txt with 600 permissions, mktemp used for API key capture, and hard-fail on Composer checksum mismatch.
Updates MISP-STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. to include indicator and observable fingerprinting capabilities.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The default ordering for restsearch has changed to accommodate the new cursor-based pagination logic (can be overridden if a specific order is required).
!MISP-STIX minimum version requirement has been updated; instances must upgrade MISP-STIX to remain compatible with the new search pipeline.
2 more releases in this issue
· 2026-03-02 → 2026-03-19
MISP v2.5.34 adds a visual debug mode section in the Overmind theme.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.34 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.34
└──▷ HOW TO FIND IT
Enable debug mode in MISP and use the new Overmind theme visual section to inspect debug output directly in the UI.
📍In the MISP console, go to Administration › Server Settings & Maintenance, enable Debug mode, then switch your theme to Overmind to see the new visual debug section.
New theme system (MISP.enable_themes) lets users opt into the modern Overmind development UI or the gradual BetaUI redesign, both built on Bootstrap 5 and Font Awesome 7.
New client-side caching endpoint for synchronization bypasses heavy restSearch logic, reducing memory footprint and speeding up large-instance sync.
New /attributes/getAttributeByB64Value endpoint enables efficient attribute lookups by Base64 value.
New settings to gate arbitrary URLs in event reports and workflows, controlling SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly.attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
Freetext extraction now supports Chrome and Edge browser extension IDs.
+1 moreshow less
Workflow modules threat-level-if and aggregate-if receive new enhancements.
New Microsoft Teams integration with dedup/summarization and Novel TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. AI model for detecting first-seen techniques
Microsoft Teams integration now available on the Microsoft Marketplace with built-in deduplication, AI-generated summaries, and automatic translation.
New Novel TTPs AI Model in AI Feeds detects articles documenting attack techniques observed for the first time.
New AI Model for IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. file paths launched to identify file path indicators of compromiseindicators of compromiseAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself..
Articles now display a structured IoC list at the top, with new IoC Insights Card accessible from inline mentions.
4 details in Everything
3 more releases in this issue
· 2026-03-05 → 2026-03-18
Feedly adds PDF upload and Ask AI integration for closed-source threat intelligence analysis
└──▷ HOW TO FIND IT
Cross-reference threat actor TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. from a closed-source incident report against real-time open web activity using Ask AI.
📍Upload incident response report PDF to Feedly, then ask: 'Based on the uploaded report, which TTPs were used by the threat actor, and are these same techniques being reported in the open web right now?'
Enrich CVEs from a vendor vulnerability report with exploit status and patch availability data from the Threat Graph.
📍Upload vulnerability report PDF to Feedly, then ask: 'Based on the uploaded report, which CVEs were exploited in this incident, are they currently being actively exploited by other threat actors in the open web, and what does the latest reporting say about patch availability and exploit status?'
Enables uploading PDF files directly into Feedly to analyze alongside open-source intelligenceopen-source intelligenceOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. feeds via Ask AI
Uses the Threat Graph knowledge base to automatically extract and correlate entities like TTPs, CVEs, and IoCs from uploaded documents
OpenCTI 7.260326.0 adds RSS feed import/export, rulesRescanAsync API for async rescans, and new mobile carrier observables.
└──▷ GET THIS VERSION
$ git clone --branch 7.260326.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260326.0
Adds the rulesRescanAsync backend function to enable asynchronous rule rescanning without timeout errors
Adds import/export functionality for RSS Feeds with XTMHub integration
Adds new IMEI, ICCID, and IMSIIMSIA unique 15-digit number that globally identifies a subscriber on a cellular network, stored on the SIM card. Cyber tools target or capture it to track devices or correlate identities across mobile networks. Observable types to StixDomainObject
Enables organization sharing within Drafts workflow items
4 details in Everything
4 more releases in this issue
· 2026-03-05 → 2026-03-26
Adds pre-configured Copilot agents for technical documentation access in OpenCTI 7.260318
└──▷ GET THIS VERSION
$ git clone --branch 7.260318.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260318.0
└──▷ HOW TO FIND IT
Access built-in technical documentation via the new Copilot agents interface.
📍In the OpenCTI UI, navigate to the AI assistant or Copilot section and select from the pre-configured technical documentation agents.
OpenCTI 7.260317.0 adds description filtering in Live streams, Notifiers, and Playbooks; introduces a customView module.
└──▷ GET THIS VERSION
$ git clone --branch 7.260317.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260317.0
Adds description filter support to Live Streams, Notifiers, and Playbooks
Introduces the new customView module for organizing views
Adds XTM One registration and ping mechanism as a Proof of Concept integration.
└──▷ GET THIS VERSION
$ git clone --branch 7.260306.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260306.0
Introduces XTM One registration and ping mechanism (PoC) for backend/frontend interaction.
OpenCTI 7.260305.0 adds Only equals to filter operator and relationship-based neighbor resolution in CSV Feed
└──▷ GET THIS VERSION
$ git clone --branch 7.260305.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260305.0
└──▷ HOW TO FIND IT
Export data where the CSV Feed column dynamically pulls neighbor entities connected via relationships, not just direct attributes.
📍# In OpenCTI UI: Go to Data › Feeds › Configure a CSV Feed. In the column configuration, select Relationship-based neighbor resolution and choose the target relationship type and entity filter.
Adds Only equals to operator to filters, allowing exact match comparisons beyond standard equality.
Enables relationship-based neighbor resolution in CSV Feed columns for deeper entity context in exports.
Adds SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. signal type support and optional note fields to bank content storage
└──▷ GET THIS VERSION
$ git clone --branch hma-v1.1.3 https://github.com/facebook/ThreatExchange.git
# already have the repo? check out this version:$ git checkout hma-v1.1.3
Adds SHA256 as a supported signal type for threat data
Dropzone AI March 2026 adds Rapid7 InsightIDR (Beta), ServiceNow investigation integration, Threat Hunter catalog, Context Memory API and Swimlane enrichment.
Tines 40.1.0 introduces PAD_LEFT and PAD_RIGHT string functions, remote MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server OAuth integration, and a tenant health dashboard.
Adds PAD_LEFT function to pad strings on the left side
Adds PAD_RIGHT function to pad strings on the right side
Enables connecting AI Agent actions to remote MCP Servers using OAuth authentication
Adds a Tenant health dashboard view for monitoring system status
4 details in Everything
4 more releases in this issue
· 2026-03-03 → 2026-03-31
Shuffle adds Azure DevOps sync integration for workflow automation.
└──▷ GET THIS VERSION
$ git clone --branch v2.2.1-nightly-1774453486 https://github.com/Shuffle/Shuffle.git
# already have the repo? check out this version:$ git checkout v2.2.1-nightly-1774453486
ESET PROTECT 7.1 adds XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. Tasks, cloud VM discovery and deployment, manual incident creation, PDF export, and more.
Adds the XDR Tasks subsection in Tasks for centralized cross-domain operations
Enables automatic and manual discovery and security product deployment to public cloud VMs (Azure, AWS, GCP)
Allows downloading Incidents as .pdf reports from the Incident Graph
Permits creation of Incidents manually from Advanced Search
Adds new notification type for MDRU customers when an incident is waiting for user input
+1 moreshow less
Provides Weekly, monthly, and Threat Intelligence reports for MDRU customers
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Setup of new synchronization with VMware Workspace One (Android) is removed
!Incident management permission sets are no longer supported for non-tenant groups (Sites and nested static groups)
The release adds real-time diagnostic log streaming for the Private Access Connector. It also introduces support for a new South Africa home site, extends DNS log rotation, and improves container image pull reliability with retry mechanisms and local verification.
Trend Vision One security playbook emails now attach a CSV of vulnerability details
Security Playbook email notifications for CVE risk events now include a comma-separated value (CSV) attachment with event metadata, risk details, and asset attributes
Shows detection coverage visibility indicating whether Cyber Risk Exposure Management can detect specific vulnerabilities
Provides detailed vulnerability profiles with exploitability information including public exploits and XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. alert triggers
Trend Vision One MDE Log Collection v1.0.74 shifts ingestion from Table to Blob Storage and supports >64KB logs.
Adds support for log entries larger than 64 KB, enabling processing of more comprehensive security event data
Replaces the Table Storage ingestion pipeline with an event-driven Blob Storage pipeline for better scalability and reliability
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The Table Storage ingestion pipeline has been completely removed. Existing data stored in Table Storage will not be migrated to the new Blob Storage architecture.
Container Protection for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. v2.0.4 adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. compliance and resolves deployment issues
Scout, falco, and pdig components are now FIPS compliant.
Image URI parameters now correctly use the new default.
Cloud Risk Management introduces IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. support via a Terraform provider, enabling automated management of key risk resources.
Trend Vision One supports CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Azure Foundations v5.0.0 and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Foundations v3.1.0, removing support for Azure v3.0.0.
Adds compliance checks for CIS Azure Foundations Benchmark v5.0.0
!CIS Azure Foundations Benchmark v3.0.0 is removed; it will no longer be accessible in filters, preventing the creation of new reports or configurations with this benchmark.
Adds RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. audit log collection for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves., GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure., AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. and self-managed clusters
└──▷ USE IT
Enable the new capability by deploying or upgrading the Helm chart to the 3.3.5 release.
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. On-premises Gateway v1.0.80 enhances device posture checking, adds AI-powered prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. detection, and improves scanning capabilities.
Adds enhanced device posture checking for Internet Access and AI Service Access rules
Updates the prompt injection detection service with AI capabilities
Adds base64 decoding support for Google Drive file scanning
Enhances scanning performance for large archive files downloaded from the internet
Automated Response Playbooks now support flexible notification sequences without preceding response actions.
Adds the ability to insert a notification action (webhook or email) directly after a target or condition node in Automated Response Playbooks, removing the requirement for a preceding response action.
TrendAI Vision One Endpoint Security agent adds support for Red Hat Enterprise Linux 10 ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead..
Endpoint Inventory adds Last agent status reported and expanded protection module status fields with filtering support
Adds Last agent status reported column to the Endpoint Inventory table for consolidated connection timing, replacing Sensor connectivity, Sensor last connected, Protection module status, and Protection module last connected.
Renames Credit allocation status field to Package for quicker visibility of enabled credit packages.
Adds support for filtering by configuration and status (enabled/disabled; running/not running/partially running) for Advanced risk telemetry, Anti-malware, Application Control, Browser extension, Data security Sensor, Device Control, Firewall, Identity security sensor - Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments., Integrity monitoring, Intrusion prevention, Log inspection, Sandbox analysis, Web reputation, and XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. for Endpoints (EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device.).
TrendAI Vision One Endpoint Security agent now supports deployments to Windows 11 IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. Enterprise LTSC 2024.
Trend Vision One Email Security adds header-sender signing, oversigning, and unlimited body signing for outbound DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit..
Supports header-sender signing in Outbound DKIM Signing settings
Adds oversigning capability to outbound DKIM signatures
Enables unlimited body signing for outbound DKIM messages
Adds Device Vulnerabilities data scope to Google Security Operations SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., Splunk HECSplunk HECAn HTTP endpoint built into Splunk that accepts JSON-formatted log and event data pushed directly from applications or agents over HTTPS, letting cyber tools ship telemetry to Splunk without requiring a forwarder agent on the sending host., and AWS S3 outbound connectors.
Device Vulnerabilities is now available as a selectable data scope for the Google Security Operations SIEM connector
Device Vulnerabilities is now available as a selectable data scope for the Splunk HECHECAn HTTP API endpoint provided by Splunk that lets applications stream JSON-formatted events directly into a Splunk index without a forwarder agent, reducing pipeline complexity for log-shipping tools. connector
Device Vulnerabilities is now available as a selectable data scope for the AWS S3 Bucket connector
Container Protection for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. v2.0.3 adds controls to disable automated patching and configure Scout daemon log levels.
Added option to disable automated patching/install for Scout daemon and Fargate sidecar
Trend Vision One's Endpoint Alerts feature is now generally available, providing centralized management and configurable notifications for endpoint security events.
Adds configurable alert watchlists for security and system events in the Notifications module
Adds a centralized list view for alerts within the Endpoint Security module
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. On-premises Gateway v1.0.79 adds sensitive data upload detection for public AI services
Adds support for sensitive data upload detection across Perplexity, DeepSeek, Claude, Amazon BedRock, and GitHub Copilot
Huntress adds Managed ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. for Microsoft 365 identities with drift detection and self-enrollment in Early Access
Adds continuous hardening of Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. settings including MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., admin accounts, passwords, standard users, and guests
Adds Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. policy management with recommended templates and drift detection with Continuous Enforcement
2 details in Everything
7 more releases in this issue
· 2026-03-03 → 2026-03-31
Managed ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. for Google Workspace reaches general availability with identity threat detection and response capabilities.
Account admins can now configure email recipients to receive automated monthly and quarterly reports via a new Manage Recipients button in the Platform portal.
Huntress exposes External Recon data via two new API endpoints
Adds GET /v1/external_ports endpoint for querying external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. records
Adds GET /v1/external_ports/{id} endpoint for retrieving details of a specific record
Huntress adds /v1/reseller/subscriptions API for resellers to manage managed account subscriptions programmatically.
Adds /v1/reseller/subscriptions endpoints to create, retrieve, update, and upgrade Managed EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device., ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions., SAT, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. subscriptions.
Huntress Managed EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. introduces the Attack Disruption Engine for Windows to create friction against threat actors.
Workspace Protection GA, device tagging GA, Partner MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. reset, and PSA ticket enrichment
└──▷ HOW TO FIND IT
Start a trial for Workspace Protection components via the console.
📍Navigate to My Products › Free Trials and select Workspace Protection
Adds steps for Workspace Protection (Protected Browser, DNS Protection, ZTNAZTNAZero Trust Network Access, a framework that grants users access to specific applications only after continuously verifying identity and device posture, replacing broad VPN-style network access with least-privilege connections., Email Monitoring) to the Free Trials menu
Adds device tagging capabilities including tag filtering in search/filters and tag suggestions during install or list view
Adds Partner Super Admin ability to reset MFA for users/admins in managed customer tenants
Adds Integrated MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. Tool Data enrichment to Sophos PSA Tickets for Autotask and ConnectWise
Exabeam March 2026 adds AI monitoring collectors, Agent Behavior Analytics detections, Outcomes Navigator compliance tracking, and configurable analytics rule logic.
Adds ChatGPT Enterprise Cloud Collector for ingesting ChatGPT Enterprise data via Agent Behavior Analytics
Adds Microsoft Copilot support with Agent Behavior Analytics for monitoring AI-driven activity
Adds new AI-driven detections including identity/privilege misuse, prompt/model abuse, and agent lifecycle monitoring
Adds Discard_EM_USER and Discard_EM_HOSTm_tags values in Log Stream enrichment rules to control entity type creation in Attack Surface Insights
Adds Link Reasons column to view linking methods between user entities and accounts in Attack Surface Insights
+30 moreshow less
Adds automatic bulk tag removal capability in Attack Surface Insights rules actions
Adds manual playbook execution on manually created Threat Center cases via Automation Management
Adds Automation History tab for viewing automation history on manually created Threat Center cases
Adds ChatGPT Enterprise Cloud Collector and Microsoft Entra ID Context Cloud Collector enhancements with MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone./SSPR attributes
Adds Phishing Email Inbox Cloud Collector in Early Access for phishing mailbox monitoring
Adds new Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. user context table columns: MFA Capable, MFA Registered, SSPR Registered, Auth Methods Registered, Manager
Adds new Agent Behavior Analytics context tables: AI/LLM Web Domains, AI/LLM Web Categories, AI/LLM Applications
Adds new detection context tables Unsafe Countries and Credentials Dumping Processes for New-Scale Analytics
Adds Home tab in Dashboards application to set a default landing dashboard
Adds Threat Center Dashboard Enhancements including Mean Time to Close measure, four new dimensions, and filters by Case Creation Timestamp/Case Number
Adds global search bar Early Access feature for platform-wide entity lookup
Adds Outcomes Navigator compliance coverage tracking for HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against. and PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. with Compliance Coverage Score
Adds customizable framework selection in Outcomes Navigator (TDIR, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., HIPAA, PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. DSS)
Adds configurable Detection Rule Display preference to control rule information display in Search
Adds visible rule severity scores on the Detections tab Details panel in Search
Adds pinned fields persistence to top of Parsed Fields list in Search Details panel
Adds locked header row and compact display improvements to Search Table view
Adds new column options menu per cell and Details link in Search Table view
Adds Reorder button for enrichment rule priority ordering in Log Stream Enrichments tab
Adds new selection menu with Expressions and Fields lists for field mapping in Log Stream enrichment rules
Adds Direct Access Agent (DAA) Windows Collector Early Access for native Windows Event Log collection
Adds Case Bulk Edit capability to update up to 50 cases at once in Threat Center
Adds step-by-step risk score explanation view under How was this calculated? in Threat Center
Adds complex AND/OR and nested logic support for Applicable Events in Analytics Rule Builder
Adds three new analytics rule functions: isRandomHostName(), isRandomDomain(), contextGetValue()
Adds minTotalEventsThreshold and maxTotalEventsThreshold fields to analytics rule JSON configuration for numericCountProfiledFeature rules
Adds Testing status indicator in Analytics Rule Builder Change column and direct Testing selection
Adds new QUICK SEARCH column (managed via Manage Columns) to navigate to triggering events from analytics rules
Adds Score Unless field configuration in the Analytics Rule Builder for profiledFeature and factFeature rules
Adds 25+ new pre-built AI-focused analytics rules including token count, first-time role/group/agent creation, and prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. indicators
35 details in Everything
└──▷ BREAKING ON UPGRADE
!Dimensions whose names start with Closed Timestamp have been renamed to start with Case Closed Timestamp in the Threat Center data model
Databricks Auto Loader adds addNewColumnsWithTypeWidening schema evolution mode to automatically widen data types during ingestion.
Adds the addNewColumnsWithTypeWidening schema evolution mode to Auto Loader, enabling automatic widening of data types (e.g., int to long, float to double) without requiring a data rewrite.
Extends automatic type widening support in Auto Loader to all file formats with schema evolution capabilities, including text formats (JSON, CSV, XML) and binary formats (Avro, Parquet).
Auto Loader adds addNewColumnsWithTypeWidening schema evolution mode for automatic type widening (Public Preview)
Adds addNewColumnsWithTypeWidening schema evolution mode to Auto Loader, automatically widening data types like int to long or float to double without rewriting data.
Enables automatic type widening for text formats (JSON, CSV, XML) and binary formats (Avro, Parquet) in Auto Loader schema evolution.
Databricks AI Runtime single-node GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. tasks enter Public Preview
Adds AI Runtime for single-node deep learning workloads with GPU support to Databricks serverless compute.
Databricks JDBCJDBCA Java standard API for connecting applications to relational databases, maintained as part of the Java SE platform, letting tools query any compliant database through a single consistent interface. driver 2.8.0 sets EnableTelemetry to true by default and removes Log4j dependency.
Databricks adds Inbound Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. for Zerobus Ingest and Lakebase Autoscaling in Public Preview
Adds Inbound Private Link support for performance-intensive services including Zerobus Ingest and Lakebase Autoscaling.
Opens configuration path to set up Inbound PrivateLink specifically for these performance-intensive services.
Beta adds endpoint telemetry for custom model serving endpoints into Unity Catalog Delta tables via OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor..
OpenAI GPT-5.4 now available as a Databricks-hosted model via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves..
Knowledge Assistant available by default for Enhanced Security and Compliance customers with HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against. controls
Adds managed OAuth flows for external MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers to eliminate manual credential management.
Supports managed OAuth for select external MCP servers (Glean MCP, GitHub MCP, Google Drive API, SharePoint API).
Allows connecting these providers without registering a separate OAuth application or managing client credentials.
March 31, 20263 releases · 2026-03-02 → 2026-03-31Stable
Multi-stage queries in YARA-LYARA-LA rule language developed by Google for Chronicle that extends YARA syntax to express multi-event, time-windowed detections over log data rather than single-file pattern matching. reach GA for Dashboards and Search
└──▷ HOW TO FIND IT
Build sophisticated detection logic by chaining query stages directly within the UI.
📍In the Search interface, create a new query and utilize Multi-stage queries to feed output from one stage into another.
Multi-stage queries in YARA-L are now generally available, enabling feeding the output of one query stage into another for granular data transformation.
Multi-stage queries can be used in both Dashboards and Search interfaces.
2 details in Everything
2 more releases in this issue
· 2026-03-02 → 2026-03-31
Unified rules interface with AIP-160 search, non-atomic batch updates via rules.modifyRules, and CONFIG_ONLY/TRENDS views in rules.list.
Adds a unified dashboard for managing both custom and curated rules from a single location
Enables viewing YARA-LYARA-LA rule language developed by Google for Chronicle that extends YARA syntax to express multi-event, time-windowed detections over log data rather than single-file pattern matching. text of curated rules and toggling their status independently
Adds inline error highlights and UDM field definitions on hover in the rule editor
Supports AIP-160 compliant structured search across UI and API for filtering rules by text, tags, author, and execution state
Adds non-atomic batch updates via rules.modifyRules to change status, tags, and archive settings for multiple rules
+1 moreshow less
Introduces CONFIG_ONLY and TRENDS views to rules.list with up to 5000 results per page
Sekoia.io introduces Reveal add-on providing unified asset intelligence with new connectors and context panels.
Adds Asset Connectors to collect, unify, and enrich assets from connected systems for the Reveal add-on module
Adds Vulnerability Enrichment capability to add vulnerability context directly to assets in the Asset Context Panel
Adds Points of Interest feature to surface notable behavioral and risk signals, including early UEBA-driven insights, on assets
Adds Endpoint Hygiene identification for hygiene issues impacting asset health within Reveal
Adds Attack Path Visualization to explore observed relationships between assets and identities for lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. analysis
5 details in Everything
3 more releases in this issue
· 2026-03-12 → 2026-03-31
Adds intake_formats datasource and tags column to SOL, plus asset filtering in Cases
Adds intake_formats new datasource that maps dialect and format UUIDsUUIDsA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. to human-readable names for cleaner ingestion pipeline analytics
Adds tags column to the assets table in SOL to list all tags associated with each asset for tag-based filtering and enrichment
Adds ability to filter alerts by specific assets within a Case's Alerts tab
Sekoia introduces Alert Storm Control to cap runaway rule alert volumes via rule-level cooldown.
Adds automatic cooldown mechanism for detection rules generating more than 30 distinct alerts in 30 seconds, entering a 30-minute rate-limited state.
Adds per-IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. cooldown logic for CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. rules where individual IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. reaching 30 matches trigger a rule-level cooldown while other IOCs continue normally.
Adds configurable notification A detection rule entered rate-limited state to alert on when a rule enters cooldown.
ClickHouse 26.3 adds map bucketing, async insert default, materialized CTEs, WebAssemblyWebAssemblyA binary instruction format that runs in browsers and server runtimes at near-native speed, letting developers compile C, Rust, or other languages into a portable, sandboxed module any compliant host can execute. UDFs and new UTF functions.
└──▷ TRY IT
Optimize single-key lookups on large Map columns by enabling bucketed serialization.
Inspect the contents of a text index on a table without scanning the entire dataset.
$ SELECT * FROM mergeTreeTextIndex('default', 'my_table', 'text_idx') WHERE match(column, 'pattern');
Adds bucketed serialization for Map columns via the map_serialization_version, max_buckets_in_map, map_buckets_strategy, map_buckets_coefficient, and map_buckets_min_avg_size settings to enable faster single-key lookups
Enables async insert by default using the compatibility layer, allowing ClickHouse to batch small inserts automatically
Supports materialized CTE by allowing evaluation of CTEs only once and storing results in temporary tables
Adds experimental support for WebAssembly-based user-defined functions (UDFs) via the Wasmtime backend
Adds the mergeTreeTextIndex(database, table, index) table function to read data directly from a text index
+14 moreshow less
Adds the table_readonly MergeTree setting to mark tables as read-only and prevent inserts/modifications
Adds use_partition_pruning and alias use_partition_key settings to control partition pruning behavior
Implements ALTER TABLE ... EXECUTE expire_snapshots('<timestamp>') for Iceberg tables
Allows each type=http entry in <protocols> to specify a custom <handlers> key pointing to a separate <http_handlers_*> config section
Adds pretty=1 option to EXPLAIN for tree-style indented output and compact=1 to collapse Expression steps
Adds the restore_access_entities_with_current_grants server setting for backup restoration behavior
Adds caseFoldUTF8, removeDiacriticsUTF8, and normalizeUTF8NFKCCasefold functions for Unicode handling
Adds unicode_word tokenizer for full-text indexes
Adds max_skip_unavailable_shards_num and max_skip_unavailable_shards_ratio settings to limit silently skipped shards
Supports the SOME keyword for subquery expressions, identical to ANY
Adds output_format_trim_fixed_string setting to strip trailing null bytes from FixedString values in text output
Supports parenthesized table join expressions in the FROM clause
Implements the toDaysInMonth function
Allows accepting array of part names instead of regexp for mergeTreeAnalyzeIndexes{,UUID}
19 details in Everything
└──▷ BREAKING ON UPGRADE
!The hypothesis skip index type is removed; creating tables with INDEX ... TYPE hypothesis will produce an error
!The experimental detectProgrammingLanguage function is removed
!NOT operator precedence now matches the SQL standard, changing the parse result of queries like NOT (x) IS NULL compared to previous versions
!Downgrading after upgrading to 26.3 may cause data loss because newly created data parts with nested types using propagated serialization versions cannot be read by older versions
Splunk Security Content v5.24.0 adds 14 new detections covering Cisco SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience. exploitation, BlankGrabber stealer, and Lotus Blossom APT, plus 4 new analytic stories.
└──▷ GET THIS VERSION
$ git clone --branch v5.24.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.24.0
Adds detections for Cisco SD-WAN arbitrary file overwrite exploitation activity and uncommon user-agent multi-URI HTTP patterns targeting SD-WAN infrastructure.
Introduces BlankGrabber stealer coverage with new analytics for browser data access, suspicious registry queries, WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk. reconnaissance, and PowerShell exclusion tampering.
Adds Lotus Blossom (Chrysalis Backdoor) detections including Bitdefender DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. sideloading abuse, BluetoothService-based persistence, and TinyCC shellcode execution tied to the Notepad++ supply chain compromise.
New detection: Windows Bluetooth Service Installed From Uncommon Location — catches persistence via BluetoothService abuse.
New detection: Windows TinyCC Shellcode Execution — identifies staged shellcode delivery associated with Lotus Blossom intrusion chains.
+12 moreshow less
New detection: Windows Excel Spawning Microsoft Project Application — flags suspicious parent-child process chains indicative of phishing-delivered payloads.
New detection: Linux Docker Root Directory Mount — identifies container escape attempts via host root filesystem mounting.
New detection: Linux Docker Shell Execution — detects interactive shell spawning inside Docker containers.
New detection: Linux Auditd AI CLI Permission Override Activated — covers privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. via AI CLI permission manipulation.
New detection: Windows MpCmdRun RemoveDefinitions Execution — catches Windows Defender definition removal as a defense evasion technique.
New detection: Windows WMI Reconnaissance Class Query — surfaces WMI-based system enumeration consistent with stealer and APT post-compromise behavior.
New detection: Windows Hosts File Access — detects suspicious reads of the hosts file used for C2 redirection or lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. staging.
New detection: Windows Product Key Registry Query — identifies registry-based system fingerprinting associated with BlankGrabber and similar stealers.
New detection: Windows WinRAR Launched Outside Default Installation Directory — flags portable or dropped WinRAR used for data staging and exfiltration.
New detection: Windows Rundll32 Execution With Log.DLL — identifies abuse of log.dll via rundll32 for stealthy code execution.
Introduces 4 new analytic stories: BlankGrabber Stealer, Lotus Blossom Chrysalis Backdoor, MuddyWater, and QuietVault.
Standardizes risk scoring across all analytics: 50 for TTPTTPTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. detections and 20 for anomaly-based detections to improve alert prioritization and triage.
17 details in Everything
1 more release in this issue
· 2026-03-04 → 2026-03-18
Splunk Security Content v5.23.0 adds a Cisco Catalyst SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience. analytic story with three new detections for rogue peers and abnormal peering.
└──▷ GET THIS VERSION
$ git clone --branch v5.23.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.23.0
New analytic story: Cisco Catalyst SD-WAN Analytics — covers anomalous control-plane relationships across vManage, vSmart, and edge devices using control-connection telemetry.
New detection: Cisco SD-WAN – Low Frequency Rogue Peer — identifies rare or unexpected peer interactions that may indicate unauthorized infrastructure or adversary presence in SD-WAN environments.
New detection: Cisco SD-WAN – Peering Activity — surfaces abnormal peering patterns deviating from established network baselines.
New detection: Curl Execution with Percent Encoded URL — detects endpoint activity where curl is invoked with percent-encoded URLs, a technique used to evade URL-based controls.
Tenzir is a data pipeline engine for security teams that collects, transforms, enriches, and routes telemetry.
OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. web identity auth for AWS operators and OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. 1.8.0 support
Adds web_identity config option to AWS operators for OIDC authentication via token_file, token_endpoint, or token sources
Adds OCSF 1.8.0 support in the ocsf::derive operator
2 details in Everything
6 more releases in this issue
· 2026-03-05 → 2026-03-31
Homebrew cask install on macOS, dynamic ClickHouse tables, Suricata 8 schema types, and syslog 32-char limit removal.
└──▷ TRY IT
Install Tenzir directly via Homebrew on macOS without configuring taps
$ brew install --cask tenzir/tenzir/tenzir
brew install --cask tenzir/tenzir/tenzir enables direct Homebrew installation of Tenzir on Apple Silicon macOS without manual tapping
Adds table=... expression support to the to_clickhouse operator for dynamic table naming and automatic database creation
Feather store files now include a TENZIR:store:origin key in Arrow schema metadata indicating partition production method (ingest, rebuild, or compaction)
Bundled Suricata schema adds support for IKE, HTTP2, PGSQL, and Modbus event types, completing Suricata 8 coverage
read_syslog operator and parse_syslog function now accept RFC 5424RFC 5424The IETF standard that defines the Syslog protocol's message format, severity levels, and transport rules, giving cyber tools a common structured log schema to parse and forward system events reliably. structured-data parameter names longer than 32 characters
Tenzir v5.29.0 adds Suricata 8 schema alignment and structured data extraction in legacy syslog
Suricata 8 bundled schema alignment enables ingestion of POP3, ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery., BitTorrent DHT events and adds ja4/ja4s fields to QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. events
Tenzir Ship v1.4.0 introduces an init command to initialize and scaffold changelog projects, supporting both interactive and non-interactive modes via the --yes flag.
tenzir-ship init scaffolds changelog projects and supports --yes for non-interactive setup
Tenzir v1.29.1 adds experimental Insights tab for pipeline backpressure and PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT support.
Adds an experimental Insights tab to the pipeline detail modal that visualizes per-operator backpressure, available only for pipelines running on the experimental new executor
Adds PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT environment variable to override PUBLIC_WEBSOCKET_GATEWAY_ENDPOINT in the app backend
tenzir v5.28.0 adds Check Point syslog parsing and opt-in DNS resolution for load_tcp
parse_syslog() and read_syslog now accept Check Point structured-data variants (key:"value", semicolon-separated, omitting SD-ID) and normalize records under checkpoint_2620.
load_tcp operator gains the resolve_hostnames parameter (default false) to make DNS hostname resolution opt-in.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The load_tcp operator's resolve_hostnames parameter defaults to false, changing behavior from always resolving hostnames to never resolving by default.
New detection rules for Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. federation abuse, SharePoint policy weakening, M365 search access, and kernel discovery via bpftool.
└──▷ GET THIS VERSION
$ git clone --branch dev-v1.6.0 https://github.com/elastic/detection-rules.git
# already have the repo? check out this version:$ git checkout dev-v1.6.0
Entra ID Domain Federation Abuse rule added
M365 SharePoint Site Sharing Policy Weakened rule added
Microsoft 365 SharePoint/OneDrive Sensitive Search and File Access rule added
Kernel Discovery & BPF Load/Tampering via bpftool rules added
ESQL LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-Based Alert Triage Rules introduced
+10 moreshow less
Execution via OpenClaw Agent detection rule added
Potential Persistence via Mandatory User Profile detection added
AWS GuardDuty Member Account Manipulation detection added
AWS SSMAWS SSMAWS Systems Manager, an Amazon service that lets operators manage EC2 instances and on-premises servers without opening inbound ports, replacing SSH with API-driven session and command execution. Inventory Reconnaissance by Rare User detection added
AWS Sensitive IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. Operations Performed via CloudShell detection added
AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. new identity federation provider rules added
AWS EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. Serial Console Access Enabled detection added
dev-v1.5.0 adds ESQL query validation, SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. package category, and numerous new detection rules for cloud and Windows threats.
└──▷ GET THIS VERSION
$ git clone --branch dev-v1.5.0 https://github.com/elastic/detection-rules.git
# already have the repo? check out this version:$ git checkout dev-v1.5.0
feat: ESQL query validation against Elastic cluster allows validating ESL queries against a running cluster before deployment
Adds SIEM to the package category mapping for better organization of SIEM-related rules
New detection rule: Credential Access via TruffleHog Execution
New detection rule: GitHub Authentication Token Access via Node.js
New detection rule: Azure Storage Account Keys Accessed by Privileged User
+10 moreshow less
New detection rule: Node.js Pre or Post-Install Script Execution
New detection rule: Potential Command Shell via NetCat
New detection rule: Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. Actor Token User Impersonation Abuse
New detection rule: Azure Storage Account Blob Public Access Enabled
New detection rule: Azure RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. Built-In Administrator Roles Assigned
New detection rule: Attempt to Clear Logs via Journalctl
New detection rule: Potential Ransomware Behavior - High count of Readme files by System
New detection rule: Suspicious SeIncreaseBasePriorityPrivilege Use
New detection rule: Microsoft Entra ID Protection Alert and Device Registration
New detection rule: Curl or Wget Spawned via Node.js
Cribl Stream 4.17 adds Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. Source, OpenAI Source, Cribl Search Destination, custom AI providers, and Pack cross-routing.
Adds Microsoft Graph Source to replace the legacy Message Trace Source for M365 data ingestion
Adds OpenAI Source to ingest model invocation and audit logs for governance
Adds Cribl Search Destination which targets the local_search endpoint in Cribl.Cloud
Adds Custom AI Provider support (BYOM) via AI Settings at Workspace/Global level
Makes Cribl MCP Server generally available on-prem and cloud for AI assistant integration
+1 moreshow less
Allows routing from global Sources to Packs containing Destinations and vice versa
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Pack IDs must be entirely lowercase; the system now validates uniqueness based on lowercase strings.
!The legacy Microsoft Message Trace Source is deprecated; users must migrate to the new Microsoft Graph Source before May 2026.
NodeZero adds ServiceNow VR sync, Tripwire CSV export, AD validation, ESC11 support and more.
Adds ServiceNow VR integration to synchronize NodeZero findings with ServiceNow Vulnerability Response
Adds CSV export for all Tripwire data including metadata fields such as name, type, file path, monitored processes, status, and deployment date
Adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. credential validation for Tripwire jobs against domain-joined systems
Adds utility to assist in rotating service account passwords for Tripwires
Adds ESC11 support within Active Directory Certificate Services (ADCSADCSActive Directory Certificate Services, Microsoft's PKI role for issuing and managing X.509 certificates inside a Windows domain; cyber tools target it because misconfigurations frequently allow privilege escalation or domain compromise.)
Stratus Red Team v2.30.0 adds YAML configuration file support for persistent CLI settings.
└──▷ GET THIS VERSION
$ git clone --branch v2.30.0 https://github.com/datadog/stratus-red-team.git
# already have the repo? check out this version:$ git checkout v2.30.0
└──▷ TRY IT
Persist default settings (e.g., AWS region, output format) in a config file so every stratus command picks them up automatically.
$ # Create ~/.stratus-red-team.yaml with your defaults, then run attacks without repeating flags
stratus detonate aws.credential-access.ec2-get-password-data
1 more release in this issue
· 2026-03-09 → 2026-03-26
Stratus Red Team v2.29.0 adds an Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. attack technique to elevate privileges to User Access Administrator at root scope.
└──▷ GET THIS VERSION
$ git clone --branch v2.29.0 https://github.com/datadog/stratus-red-team.git
# already have the repo? check out this version:$ git checkout v2.29.0
Cloud Security adds bot threshold controls, r7_hostid correlation in Log Search, and InsightsVM bulk remediation export API; IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. Scanner breaks with new flag names.
LogSearch now correlates endpoint authentication events with other logs using the r7_hostid key for faster investigation context.
Cloud Security > Bot Factory introduces threshold controls to automatically stop Bot runs when configured limits are exceeded.
InsightVM adds a Bulk Export API endpoint to export up to 3 months of remediation metadata for external BI reporting.
Mimics Infrastructure as Code (IaC) Scanning Tool v2.0.0 requires the files_to_scan positional argument in GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure., replacing the deprecated target flag.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The Mimics IaC Scanner GitHub Action positional argument target is removed; workflows must update to use files_to_scan.
!The Mimics IaC ScannerOPAOPAOpen Policy Agent, a CNCF-graduated policy engine that evaluates rules written in the Rego language against JSON-structured data, letting tools enforce authorization and compliance decisions without hardcoding logic. dependency is upgraded to v1.0, breaking custom Rego policies that rely on 0.x syntax.
DefectDojo 2.56.0 adds a Scheduled engagement status, Trivy enrichment fields, fix_version support in Generic Import, and Dependency Track UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. tracking.
└──▷ GET THIS VERSION
$ git clone --branch 2.56.0 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.56.0
Adds Scheduled status to engagement models, enabling pre-planned engagement tracking.
Adds remediation, messages, category, and publishedDate field mappings to the Trivy Operator parser.
Adds fix_version support to the Generic Findings Import parser.
Stores Dependency Track UUID into unique_id_from_tool (previously used vuln_id_from_tool) for more accurate finding identity.
Adds LocationData support for parsers via database migration.
+1 moreshow less
Optimizes language import process with bulk creation and improved validation.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Dependency Track parser now stores the DT UUID into unique_id_from_tool instead of vuln_id_from_tool, which may affect deduplication and finding matching for existing Dependency Track findings.
Adds passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. support for user authentication to replace traditional passwords
Enables configuring passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. in account settings for phishing-resistant sign-in
1 detail in Everything
3 more releases in this issue
· 2026-03-04 → 2026-03-31
Tenable Exposure Management adds full Attack Path export (CSV/JSON), API access, and AWS/Azure AI service mapping
Adds global export button for Attack Path Top Paths and Top Attack Techniques supporting CSV and JSON output formats with granular scope selection
Enables programmatic extraction of Attack Path data via the Tenable Public API for SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents./SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. integration
Adds discovery and visualization support for AWS AI services (Amazon Bedrock, SageMaker) and Azure AI services (Azure Cognitive Services, Azure Machine Learning)
Edgescan GA release adds vulnerability detection history timeline, visible discard notes, and superuser note event notifications.
└──▷ HOW TO FIND IT
Review why a vulnerability was re-detected by checking the timeline on the asset detail page.
📍In the Edgescan console, go to Asset › Details and open the Vulnerability detection history tab to view the re-detection entries
Ensure discard notes are visible in exported reports for audit trails.
📍In the Edgescan console, generate a report and verify that discarded vulnerabilities display their note text in the output
Adds a Vulnerability detection history timeline view that logs a new entry each time a vulnerability is re-detected during retesting
Makes the Discard Vulnerability Notes action more visible in the platform UI and reports, and allows updating discard notes for already-discarded vulnerabilities
Enables event notifications when updates are made to superuser notes fields
Fleet 4.82.0 adds Android fully-managed enrollment, a new Technician role, kernel vuln scanning on RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence., and app rollback.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.82.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.82.0
└──▷ USE IT
Export Fleet server logs to an OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. collector for centralized observability of your Fleet deployment.
yaml
logging:
otel_logs_enabled: true
Supports enrolling fully managed Android hosts without a work profile.
Adds automatic uninstall of Android apps on device (and removal from self-service in managed Google Play) when an app is removed from Fleet.
Adds per-policy control to allow or disallow end-users to bypass conditional access.
Adds filtering by platform and status in the Software > Add Fleet-maintained apps table.
Adds ability to roll back to previously added versions of Fleet-maintained apps.
+15 moreshow less
Introduces new Technician role for help desk and IT support teams, with permissions to run scripts, view results, and install or uninstall software.
Supports JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. provisioning of the Technician role via SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. attributes.
Adds automatic retries for failed software operations.
Enables scanning for kernel vulnerabilities on RHEL-based hosts.
Adds AWS GovCloud RDS CA certificates to the RDS MySQL TLS bundle, enabling IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. authentication for Fleet deployments in us-gov-east-1 and us-gov-west-1.
Adds CVE alias support for the Python Visual Studio Code extension.
Adds a new activity log entry for edited enroll secrets.
Adds configurable body size limits for the /api/osquery/log and /api/osquery/distributed/write endpoints.
Adds logging.otel_logs_enabled config option to export server logs to OpenTelemetry.
Adds ability to enable or disable logs by topic.
Adds ability to specify allowed Entra tenant IDs for enrollments.
Increases maximum script execution timeout from 1 hour (3600 seconds) to 5 hours (18000 seconds).
Adds team_id to host details page URL parameter to retain team context on refresh.
Supports adding and removing multiple Microsoft Entra tenant IDs in the UI.
Surfaces Fleet-maintained app (FMA) version and out-of-date status in the UI.
20 details in Everything
└──▷ BREAKING ON UPGRADE
!Teams and queries are renamed to fleets and reports in the UI, API, CLI, and GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. — consumers of these API fields or GitOps keys must update to the new names.
!Certain API field names are deprecated to reflect the renaming of teams to fleets and queries to reports.
!no-team.yml in GitOps is deprecated in favor of unassigned.yml — GitOps configurations using no-team.yml should migrate to unassigned.yml.
Devicie refreshes Overview page with combined fleet insights and Modern Work Vitals shows status counts.
└──▷ HOW TO FIND IT
Monitor overall fleet health directly on the main dashboard without navigating to individual reports.
📍In the console, go to Overview and view the combined active/enrolled counts and warranty visibility.
Identify specific health issues quickly by viewing status counts instead of abstract scores in Modern Work Vitals.
📍In the console, go to Modern Work Vitals and review the new status counts for root cause analysis.
Refreshed Overview page now displays combined active and enrolled device counts, OS-level patching and encryption breakdowns, and improved warranty visibility in a single view.
Modern Work Vitals now replaces abstract scores with clearer status counts to accelerate root cause analysis and device-level investigation.
Apple DDM for iOS line-of-business apps, macOS Recovery Lock, RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9/10 support, and scoped RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. preview
Adds Declarative Device Management as a management type for required line-of-business apps on iOS/iPadOS 18+, enabling per-app options such as associated domains.
Adds Recovery lock configuration via Settings Catalog policy and Remote device action for macOS, allowing admins to set and rotate a recovery OS password to prevent unauthorized booting.
Adds support for Red Hat Enterprise Linux 9 LTS and RHEL 10 LTS as managed platforms, with enrollment support via the Microsoft Identity Broker.
Introduces Scoped permissions (preview) for Role-based access controlRole-based access controlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. (RBAC), restricting role assignments to their specific scope tag context rather than merging across scopes.
Adds Disable Cross Device Resume policy setting in Windows Settings Catalog to prevent cross-device activity continuation notifications.
+1 moreshow less
Adds Remove Microsoft Copilot App policy setting in Windows Settings Catalog to uninstall the Copilot app from eligible Windows devices.
Automox adds a Policy Catalog with curated best-practice templates for OS and application management
Adds the Policy Catalog tab in the Automox console under Policies for browsing curated best-practice policy templates
Enables one-click policy creation from template selections, auto-populating configuration logic while allowing customization of scheduling, device targeting, and group assignments
runZero 4.0 adds BACnetBACnetA communication protocol for building automation systems, standardized as ASHRAE 135, covering HVAC, lighting, and access control devices. Cyber tools use it to discover and interact with building infrastructure on IP or serial networks./CIP/MODBUS/KNX gateway asset identification and automatic IT/OT/IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. categorization with function assignment.
network-reachable BACnet, CIP, MODBUS and KNXnet gateway devices now identified as assets
automatic Category (IT, OT, IoT) assignment for discovered assets
runZero 4.0.260326.0 adds API key IP allowlist configuration and asset tag imports for InsightVM.
Adds optional API key IP address allowlist configurable in Account Settings to restrict API access by source IP
Adds asset_tags import support in the InsightVM integration to sync asset tags from InsightVM to runZero
Improves Tanium integration by filtering additional invalid attribute values during data ingestion
Enhances Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. integration to include LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. search referral information in error messages when available
runZero 4.0.260323 adds BACnetBACnetA communication protocol for building automation systems, standardized as ASHRAE 135, covering HVAC, lighting, and access control devices. Cyber tools use it to discover and interact with building infrastructure on IP or serial networks. BBMD/FDT probe support and LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. extension attributes.
Adds BACnet Broadcast Management Device (BBMD) and Foreign Device Table (FDT) data collection to the BACnet probe.
LDAP integration now includes extension attributes in its available data.
runZero v4.0 adds BACnetBACnetA communication protocol for building automation systems, standardized as ASHRAE 135, covering HVAC, lighting, and access control devices. Cyber tools use it to discover and interact with building infrastructure on IP or serial networks. port coverage, kevy:true search, SentinelOne timeout and Tanium/LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. integration improvements
Covers additional default ports for the BACnet protocol during scanning
Allows querying for Known Exploited VulnerabilitiesKnown Exploited VulnerabilitiesCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. directly using kev:true in vulnerability inventory queries instead of using the retired Kev finding
Improves asset matching accuracy in the Tanium integration
Speeds up directory group imports in the LDAP integration
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The Known Exploited Vulnerability finding is retired; users must now use kev:true in vulnerability inventory queries to access this data
Acsense adds Okta Identity Governance backup, BYO HashiCorp Vault, Google Chat/ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. integrations, and granular recovery via feature flags.
Expanded platform coverage with support for 50+ new Okta object types
Added Okta Identity Governance support within Backup and Recovery workflows
Introduced feature flags for controlled rollout of new capabilities
Added granular object recovery with the ability to select specific related entities
JumpCloud adds a dedicated India AWS region for Vault to support local data residency.
Deploys JumpCloud Vault in a dedicated India AWS region with exclusive local storage for secrets and session recordings
Extends full regional support to JumpCloud Password Manager and Privileged Access ManagementPrivileged Access ManagementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. (PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded.)
JumpCloud adds device-based SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI discovery, QR/asset labels, and Lenovo warranty sync in March 2026 release.
└──▷ HOW TO FIND IT
Toggle device-based SaaS discovery to track desktop applications via the agent.
📍In the Admin Portal, navigate to AI & SaaS Management › Settings › General Settings and toggle the discovery method on.
Enable Lenovo warranty sync to automate hardware lifecycle tracking.
📍In the Admin Portal, navigate to Device Management › Asset Management › Settings and Fields › General Settings and toggle Lenovo Warranty Sync to On.
Generate standardized asset labels for onsite audits.
📍In the Admin Portal, navigate to Device Management › Asset Management › Settings and Fields › Labels to configure and print QR/barcode labels for multiple devices.
Adds AI & SaaS ManagementSaaS ManagementA category of software that tracks, governs, and optimises an organisation's portfolio of SaaS subscriptions, covering spend, access, and licence utilisation from a single control plane. capability to identify SaaS and AI applications installed on macOS, Windows, and Linux endpoints via existing JumpCloud agent data.
Adds automated inventory updates every 30 minutes for application activity attributed to specific JumpCloud users within AI & SaaS Management.
Adds QR and Barcode label generation in small, medium, or large sizes directly from the Admin Portal for physical hardware identification and tracking.
Adds Lenovo Warranty Sync feature that automatically populates asset records with real-time warranty status and expiration dates for supported devices.
JumpCloud adds customizable SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. attribute mapping and custom admin roles for service accounts
└──▷ HOW TO FIND IT
Configure SCIM mappings to sync user attributes like manager and custom fields from JumpCloud to a service provider.
📍In the Admin Console, navigate to Directory › Integrations, select your SCIM integration, and use the new attribute mapping editor to define source and destination pairs, apply expressions for date formatting, and preview the output before saving.
Assign custom admin roles to a service account for granular permission management.
📍Create or edit a Service Account in the Admin Console and select from the newly available Custom Admin Roles during the setup process.
Adds fully customizable SCIM attribute mapping in public preview, allowing admins to precisely specify source and destination attributes, map manager and custom fields, create new mappings, utilize expressions for data manipulation, and preview configurations.
JumpCloud adds Managed Google Domain upgrade for Android EMMEMMEnterprise Mobility Management: a category of software for enforcing policies on mobile devices, apps, and data, giving cyber tools a hook to monitor or control endpoints without managing the full OS. with visibility in the Admin Portal
└──▷ HOW TO FIND IT
Check which Android EnterpriseAndroid EnterpriseA Google program that gives organizations APIs and management modes to enroll, configure, and enforce policy on Android devices through an EMM platform. type is currently active for your organization.
📍Go to Device Management › MDM › Google in the Admin Portal and look for the Enterprise Type label.
Migrate an existing Android EMM tenant from Managed Google Play to Managed Google Domain.
📍Go to Device Management › MDM › Google in the Admin Portal and click the migration banner for Upgrading to a Managed Google Domain.
The Admin Portal now displays the specific Enterprise Type (Managed Google Play or Managed Google Domain) for Android Enterprise devices.
Admins can initiate a direct upgrade from Managed Google Play to Managed Google Domain via a migration banner in the Device Management > MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. > Google tab.
JumpCloud adds Slack integration for real-time notifications and interactive access request approvals.
└──▷ HOW TO FIND IT
Route critical directory changes and security incidents to a dedicated Slack channel for immediate team visibility.
📍Install the JumpCloud Slack App in your workspace and configure it to route security incidents and directory changes alerts to #security-ops.
Accelerate incident response by acknowledging or resolving alerts directly from the Slack notification interface.
📍Click Mark as Acknowledged or Mark as Resolved on a JumpCloud alert in Slack to update the status without leaving the channel.
Streamline access governance by approving user requests directly within the communication tool where they occur.
📍Use the interactive action buttons in a Slack message to approve or deny an Access Request sent via an Approval Flow.
Adds the ability to send JumpCloud notifications (security incidents, directory changes, system events) to Slack channels via the JumpCloud Slack App.
Adds interactive buttons in Slack notifications allowing admins to Mark as Acknowledged or Mark as Resolved without leaving Slack.
Enables in-channel access request approvals by integrating with Access Request approval flows, allowing admins to approve or deny requests via interactive actions in Slack.
Nudge Security is a SaaS security platform that discovers shadow IT assets, manages identity governance, and hardens security posture.
Research preview adds AI agent discovery and risk assessment across connected apps like ChatGPT, Copilot, and Gemini
Adds ability to discover AI agents across connected apps including ChatGPT, Microsoft Copilot, Gemini, Salesforce Agentforce, ServiceNow, n8n, Tines, Abacus, and Workato
Adds UI fields showing who built an agent, what it's connected to, and what it's authorized to do
Adds capability to assign a technical contact to hold accountability for each agent
Surfaces agentic risks such as publicly accessible agents, hardcoded credentials, unauthenticated MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connections, and connections to high-risk apps
Enables engaging creators directly by nudging the responsible contact to confirm purpose, justify use, and remediate risks
5 details in Everything
2 more releases in this issue
· 2026-03-03 → 2026-03-24
op item edit warns about passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. in JSON templates; CLI gains Account Trust Log support for desktop-authenticated users.
op item edit help text now includes a warning that JSON item templates don’t support passkeys
1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app
2 details in Everything
6 more releases in this issue13 more releases in this issue · 2026-03-10 → 2026-03-25
iOS 8.12.8 adds RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. key size constraints and Safari extension lock sync.
Find in current list search now ignores accented characters when filtering items
Private RSA SSH key bit-length slider restricted to three supported sizes with text field removed
1Password for Mac 8.12.10-28 Beta adds partial vault-less import, draft recovery improvements, and clamshell auth prompt support.
Adds partial import capability: when importing a 1PUX file without vault creation permissions, only private items are imported instead of failing entirely.
Improves the reliability of recovering draft items during editing sessions.
Enables Mac password unlock prompts on clamshell-mode MacBooks when biometric options are unavailable.
Reduces latency for app icons in SSH, CLI, and SDK authentication prompts.
iOS beta adds accented-char-ignore search, RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. key slider limits, Safari lock sync, and SSH key export fixes.
Find in current list on iOS now ignores accented characters (like é, ü) when filtering the item list
Bit-length slider for generating private RSA SSH keys on iOS is limited to the three supported sizes, removing the text field
1Password Safari extension locks synchronously when the 1Password app locks
Ory Hydra accepts custom domain issuer as audience in JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. Bearer Grant; Kratos adds specific error for disabled identities.
Adds Managed CAPTCHA and Bring Your Own CAPTCHA modes to protect self-service flows against credential stuffing and brute force attacks on Enterprise plans
Updates Ory Kratos to return a specific UI message (ID 4010011) indicating identity disabled state instead of generic unauthorized error
Ory Hydra now accepts the issuer-derived token URL as a valid audience in JWT Bearer Grant assertions when using a custom domain (CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin.)
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Disabled-identity recovery/login errors now include UI message 4010011. API/SPA clients that explicitly check the old generic unauthorized error must update; standard invalid-credential handling is unaffected.
3 more releases in this issue
· 2026-03-11 → 2026-03-25
Adds opt-in account_linking_mode: automatic for Apple and Google consumer accounts when both emails are verified; Google Workspace accounts are excluded.
Ensures Ory Oathkeeper removes all X-Forwarded* and Forwarded headers when serve.proxy.trust_forwarded_headers is disabled
Adds autofocus behavior to the first input field of authentication forms in Ory Elements
Ory Kratos v26.1.17 adds UAE PASS social sign-in and API-supported OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. link/unlink.
Adds UAE PASS social sign-in for web and mobile authentication.
Adds support for managing OIDC connections (link/unlink) in native/API settings flows
!Announces a rollout on or after March 20, 2026: disabled-identity login/registration errors move from 401 responses to flow UI messages. Clients explicitly parsing 401 must update; standard UI rendering needs no change.
Passbolt 5.10 adds Safari beta extension, TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. autofill, grid tags, and CSV export policies
GET /auth/logout endpoint is now disabled by default via PB-24273.
Admins can define exportPolicies to control CSV exports, with the feature disabled by default for security.
The browser extension now supports TOTP autofill in login forms via the in-form menu or Quick Access interface.
A tags column is now visible in the resources grid (Passbolt Pro), allowing direct filtering of workspace resources.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!GET /auth/logout endpoint is now disabled by default (issue PB-24273).
!CSV export is now disabled by default; organizations must re-enable it through configuration to use CSV exports.
30 Mar 20263 releases · 2026-03-18 → 2026-03-30Stable
Ping Identity is an identity and access management platform providing authentication, single sign-on, multi-factor authentication, and identity governance services.
New AI agent identity support enables OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. client onboarding for secure AI-driven solutions.
Adds Identity for AI (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.-9357) capability allowing AI agents to be onboarded as specialized OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..0 clients with distinct identities.
1 detail in Everything
2 more releases in this issue
· 2026-03-18 → 2026-03-30
/authorize and /par endpoints now accept the authorization_detailsauthorization_detailsA structured JSON field defined in RFC 9396 (OAuth 2.0 Rich Authorization Requests) that lets a client declare fine-grained permissions beyond simple scopes, giving cyber tools precise access control in OAuth flows. parameter for fine-grained authorization via RAR (RFC 9396)
New App Policy Decision node enables enforcing OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. application access policies in journeys with filtering by group, organization, etc.
OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. Token Exchange now supports specifying audience parameters that are allowlisted and included in the resulting token's aud claim
jwtValidator and jwtAssertion bindings are available in all next-generation scripts for scripted JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. operations
Next-generation scripts include utils.base64url.encode() and utils.base64url.decodeToBytes() for Base64URL encoding/decoding
+3 moreshow less
PingOne Worker Service connection can now be configured using a credential JWT (AME-33973)
New scopeValidatorHelper binding with inheritAccessTokenScopesOnRefresh() method in next-generation OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..0 scope validation scripts
Next-generation OAuth 2.0 scope validation scripts gain access to the availableScopes binding and throwInvalidScope() method
Commvault Cloud is a backup, recovery, and cyber-resilience platform for hybrid, multi-cloud, and SaaS workloads.
Commvault Cloud March 2026 adds Break Glass account, Threat Scan Arlie Insights, and Jira GA.
Adds Break Glass Account for emergency login to bypass identity configuration lockouts
Adds Arlie Insights in the Threat Scan detail panel for AI-enabled malware context and remediation links
Adds Generally Available (GA) support for Atlassian Jira Backup & Recovery in SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and Software deployments
Adds automated cross-region and cross-account snapshot sharing for Amazon EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware.
Adds auto-provisioning of access nodes for Amazon S3 backup and recovery
+23 moreshow less
Adds auto-provisioning and auto-scaling of access nodes for Azure VMs
Adds ability to schedule and retain hardware snapshots independently for NAS & File Systems (NetApp, Dell EMC Isilon/PowerScale, Amazon FSx, Nutanix Files, Windows/Volumes Linux)
Adds Cloud Rewind support to rebuild Azure Managed SQL Instance Configuration with associated Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes.
Adds Cloud Rewind capability to rebuild Azure SQL Server along with Local SQL Authentication
Adds Cloud Rewind capability to rebuild Azure Service Bus and associated Private Link configuration
Adds Cost Transparency in the Cost Estimator module for extended retention and cross-cloud copies
Adds Empowering Tenant users with resources visibility to discover and view their own cloud assets
Adds New Centralized Backup Plan Management Across Cloud Environments
Adds automatic discovery and onboarding of multiple AWS accounts via Onboard to AWS Faster
Adds Cleanroom recovery support for on-premises cleanroom/IRE (VMware) using HyperScale X
Adds Threat Scan feature to import and manage Hashes and YARA Rules
Adds auto-provisioning of compute resources for Amazon DynamoDB protection operations
Adds Google BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. backup and restore of configurations with data (external connections, routines, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. bindings)
Adds Bring your own Storage Gateway (SaaS) feature for Azure VMs
Adds HPE Alletra Storage API Integration for HPE Morpheus VM backups
Adds VM Replication capability to preserve disk layout changes during failback
Adds Project Jaguar Workload support for Azure Lustre changelog integration
Adds Automated VM Provisioning for Domain Controller Promotion in Forest Recovery
Adds Expanded Forest Recovery Support on AWS EC2 for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments.
Adds Protection for Microsoft Intune Device Compliance Policies and Configuration Profiles
Adds Streamlined HyperScale Edge Deployment for SaaS via Command Center with HyperScale AutoDock
Druva is a SaaS data protection platform that backs up enterprise workloads, endpoints, and SaaS applications and restores them after ransomware.
Druva introduces a unified identity protection suite securing on-premises Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. and Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., enabling granular restore operations to improve recovery time.
6 more releases in this issue
· 2026-03-05 → 2026-03-17
New guided AWS proxy upgrades and automated NAS backup prechecks
Adds guided upgrades via CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. for Disaster Recovery AWS Proxies, accessible from the Management Console to align infrastructure with specific AWS accounts, regions, and VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules..
Introduces Automated prechecks for NAS backups that validate proxy connectivity, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. credentials, mount status, and folder existence during backup set creation.
Druva Managed Services Center adds ConnectWise ticket resolution automation and expanded consumption parameter sync.
Adds Update ticket status on alert resolution configuration option in Druva's Ticket Update settings to automatically change ConnectWise ticket states when alerts resolve.
Adds Add new note on alert resolution configuration option in Druva's Ticket Update settings to append notes to ConnectWise tickets upon alert resolution.
Enables mapping of additional consumption parameters sourced from Chargeback Reports during ConnectWise Consumption Sync for granular billing options.
Adds --apply flag to the install command, enabling Kubernetes apply semantics for updating existing Velero installs.
Adds cache volume configuration for data mover pods during restore for CSICSIAn ambiguous acronym spanning Container Storage Interface, Crime Scene Investigation, and other expansions — without more context about which domain this tool operates in, a reliable definition cannot be given. snapshot data movement and fs-backup, preventing failures when ephemeral disk is limited.
Adds incrementalSize field to DataUpload/PodVolumeBackup resources so users can observe data reduction from incremental backups.
Adds snapshotSize field to DataDownload and PodVolumeRestore resources for restore size visibility.
Supports wildcard patterns (*, ?, [abc], {a,b,c}) in namespace includes/excludes during backup and restore operations.
+9 moreshow less
Adds Secret-based CA certificate support for BackupStorageLocation.
Adds an option for running fs-backup pods in privileged mode.
Adds Prometheus metrics for maintenance jobs.
Adds VolumePolicy support for PVC phase conditions, enabling actions such as skipping PVCs in Pending or Lost status.
Enables concurrent processing of multiple backups simultaneously, improving throughput for multi-tenant environments.
Applies VolumePolicy filtering to VolumeGroupSnapshot PVC selection.
Records Kubernetes events into data mover pod diagnostics for improved troubleshooting.
Adds label and annotation configuration for maintenance jobs and data mover pods.
Adds Role, RoleBinding, ClusterRole, and ClusterRoleBinding to the restore sequence ordering.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!The PVC selected-node feature is deprecated in v1.18 and its associated code has been removed; Velero now handles the selected-node annotation automatically.
Veeam Backup & Replication is backup, recovery, and replication software for virtual, physical, cloud, and SaaS workloads.
Veeam Backup & Replication 13.0.1.2067 patches 5 critical/high CVEs and shifts VDC vault registration to a code-based flow.
Backup server authorization for Veeam Data Cloud Vault now communicates directly with Veeam Data Cloud (VDC), removing the License Admin requirement so any user with the right VDC permissions can register a server.
VDC portal registration is now code-based: the backup server generates a registration code entered into the VDC portal, replacing the previous redirect-based authentication method.
Acronis Cyber Infrastructure is hyperconverged software that pools storage, compute, and networking on commodity servers, often as a backup storage target.
Acronis Cyber Infrastructure 7.3 adds Cyber Protect Cloud integration, TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. 2FA, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. 3.0 storage, S3 health-check endpoint, and GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. metering.
Adds a new S3 health-check API endpoint for external load balancers to monitor S3 node health and route traffic only to healthy endpoints.
Introduces SMB 3.0-based file storage shares with Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. integration for Windows and compatible clients.
Adds TOTP-based two-factor authentication (2FA) for both the admin and self-service panels, supporting Google Authenticator and Microsoft Authenticator, with admin-configurable optional or mandatory enforcement.
Integrates with Acronis Cyber Protect Cloud, allowing registration of an installation in one or more Acronis Cyber Protect Cloud locations to provide a self-service virtual data center.
Introduces S3 storage multitenancy with project-based isolation via the command-line interface.
+13 moreshow less
Adds GPU metering support for creating custom metrics and mapping GPU-enabled flavors to those metrics, enabling GPU usage tracking in GPU-hours.
Introduces automated VM live migration based on resource policies, enabling workload balancing by distributing VMs evenly across nodes or consolidating them for workload segregation.
Adds VM migration management — administrators can monitor migration progress, cancel or retry migrations, view migration task history, and see the exact step where a failed migration occurred.
Updates S3 API schemas to support protocol extensions including Object Tagging.
Adds support for seamless migration of dual-stack (IPv4 and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.) infrastructure networks directly from the admin panel or CLI without manual reconfiguration.
Adds support for custom erasure coding (EC) schemes including custom N+M configurations, with built-in validation and automatic overhead calculation.
Introduces a Grafana dashboard providing visibility into the data healing (replication) process, including estimated completion times (ETAs).
Adds support for new guest operating systems: AlmaLinux 10, Rocky Linux 10, SUSE Linux Enterprise 15 SP6 and SP7, Oracle Linux 10, Windows 11, and Windows Server 2025.
Expands collected metrics with additional metric labels for more precise monitoring and alerting in Grafana dashboards.
Improves IOPS performance for storage tiers using replication redundancy with checksumming enabled by removing additional write overhead.
Improves performance for workloads using small block sizes (for example, 8 KB) with erasure coding.
Enhances automatic identification logic for storage drives likely to fail based on I/O metrics, enabling earlier detection.
Adds an additional layer of certificate validation before establishing a connection to store or retrieve backups.
DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. On Demand Appliance 135 adds authenticated explicit proxy support for DRM and GCP Image Sharing via UI.
Adds authenticated explicit proxy support for DRM requests, allowing them to pass through an authenticated explicit proxy
Adds GCP Machine Image assignment capability to the management UI
New Enterprise Browser usage dashboards and enhanced Device Client data collection with steering/config fields
Adds Enterprise Browser Usage Monitoring dashboard to Netskope Library for visibility into user onboarding, app count, and traffic volume
Adds Enterprise Browser Usage Monitoring – Risk & Control dashboard to Netskope Library for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. alerts, cloud threats, and suspicious behavior in Enterprise Browser
Adds Steering Configuration field to the Device Client Overview dashboard widget showing how traffic is steered to Netskope
Adds Client Configuration field to the Device Client Overview dashboard widget showing operational parameters for the Steering Client
Netskope Private Access v135 adds Steering Exception Bypasses and improves Local Broker selection.
└──▷ TRY IT
Manually launch the publisher configuration wizard when auto-start is suppressed on new deployments.
$ sudo ./npa_publisher_wizard
Adds Steering Exception Bypasses for Private Apps to configure granular routing exceptions for specific IPs, subnets, domains, and hostnames
Improves Local Broker Selection with optimal low-latency auto-reconnection support
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The Publisher wizard no longer automatically executes after SSH login for newly deployed Publishers; administrators must run sudo ./npa_publisher_wizard manually
!The change to manual Publisher wizard execution also applies to all existing publishers in v135 that are below v133
Netskope REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 adds Service Account auth, Library access for new users, and default row limits.
Adds Service Account token support to REST API v2 endpoints for Advanced Analytics and Enhanced Reports
Allows users with no prior Netskope Advanced Analytics or Enhanced Reports usage to fetch data from the Netskope Library or group folders via REST API v2
Sets the customer number of rows parameter default to 5000 and maximum to 10000 for REST API v2 Reporting Endpoints
New Netskope 135.0 features: Agentic Broker (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.), AI Guardrails/Red Teaming, Dest Profiles API, RBI v2 API, Owner attrs, Steganography DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest.
Agentic Broker delivers visibility, audit logs, and header-based detection/blocking for Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) communications.
AI Guardrails provides prompt and response content moderation and protection against AI threats like prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and jailbreaking.
New AI Red Teaming product enables adversarial attack simulation against LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to identify safety gaps.
Behavior Analytics adds Insider Threat detections for command-and-control callbacks using the Advanced UEBA ML engine.
Adds new REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. v2 GET endpoints for Application Instances (/api/v2/profiles/app-instances) and Constraint Profiles (/api/v2/profiles/constraint-profiles).
+20 moreshow less
Generative AI risk attributes are now computed in the Cloud Confidence Index (CCI) score for cloud apps.
Introduces Steganography detection via ML classification to identify images containing hidden payloads in DLP.
Adds India TAN, UAN, and Voter ID as new predefined entities for Data Loss Prevention.
Enterprise Browser supports granular site-specific configuration for 8 features with up to 128 URL pattern exceptions per setting.
Enterprise Browser Security Configuration Policies support targeting by User, User Groups, or Organizational Units (OUs) via Move Tool priority logic.
New API v2 endpoints for Enterprise Browser policy management: /configurationpolicies and /api/v2/nsbrowser/configurationpolicies.
Netskope Client Steering supports real-time protection policies using Enterprise Browser as an access method with Device Classification criteria.
Endpoint DLP (EPDLP) can force Microsoft Edge/Google Chrome PrintPreview by default, configurable via tenant settings ForceChromePrintPreview and ForceEdgePrintPreview.
Forensics adds a Manager Approval Workflow for out-of-band DLP incidents with instant email notifications.
Log Streaming introduces granular data collection type filters to selectively stream Alerts, Events, or Incidents.
New Destination Profile Object replaces URL Lists in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions./CFW policies with flexible matching options.
Adds SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Do Not Decrypt (DND) policy evaluation for UCI scores using the feature flag ssl_dnd_evaluate_uci.
Next Generation API Data Protection adds support for Smartsheet, dedicated GitHub activity alerts/dashboard, and Purview Data Classification Insights in the M365 Copilot dashboard.
Next Gen API Data Protection Owner attribute policy support extends to Atlassian Confluence, Box, Cisco Webex, Dropbox, Microsoft Copilot, M365 Teams, Slack Enterprise, Smartsheet, Workday, and Zoom.
Netskope Client Steering supports Zone Selection based on User Identity for the China Elite zone.
NG SWG adds support for PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key-exchange algorithms including X25519MLKEM768 for quantum-resistantquantum-resistantCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. encrypted traffic.
Remote Browser Isolation (RBI) introduces v2 REST API templates, enhanced clipboard with image copy/paste support, and HTML-based branded notifications using dynamic variables like {{USER_URL}}.
SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. adds discovery and risk scoring for third-party apps in Zoom.
Threat Protection introduces network traffic-based beacon detection for new/unknown malware without signatures.
User Management UI revamp consolidates user management into a unified page with customizable columns and direct group membership management.
25 details in Everything
└──▷ BREAKING ON UPGRADE
!The addonmanSCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. API endpoints are deprecated starting in release 135.0; requests to these v1 endpoints will return error code 500.
New DEM Insights page, DEM Data Intelligence Agent with conversational AI, BETA Enterprise API, and expanded alert configurations.
Adds the new DEM Data Intelligence Agent which integrates LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to transform telemetry into actionable insights via a conversational interface
Introduces the new Insights page providing a unified 360-degree view of digital health with a Global Insights Map, Comprehensive Filtering, and targeted widgets
Enables RBAC Support for the Insights page, configurable under Settings > Administration > Roles within Digital Experience Management
Adds new TTFB alert options (2000ms, 2500ms, 3000ms, 3500ms, 4000ms) for site-based application performance alerts
Increases the site selection limit for DEM site-based alert configurations from 10 to 100 sites
+2 moreshow less
Launches DEM Enterprise API (BETA) providing programmatic access to critical DEM data
Expands User Experience Score alert conditions to support additional configuration options for score, number of impacted users, and time duration
Launch of Netskope AI Security Ops Agent for automated DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. incident triaging and response
New Netskope AI Security Ops Agent service that automates creation of high-priority Cases and grouped Views from DLP incidents to shift focus to investigation
Assisted Investigation capability that automatically gathers, enriches, and ties together context from the Netskope platform and external systems to provide verdicts and recommendations
End-to-End Response Workflows with Triage, Investigate, and Respond stages, including agent-triggered response actions to reduce Mean Time to Resolution
Netskope AI Gateway v1.2 introduces custom rate limit API responses and multi-tenant license enforcement.
Allows defining specific response behaviors when a rate limit threshold is reached via the AI Gateway MP API
Introduces License Management that enforces maximum gateway count based on purchased licenses
Sets default capacity of 10,000 API calls per gateway; exceeding this disables policy evaluation and bypasses traffic
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Netskope no longer supports 36-CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. / 72GB appliance deployments
!Renamed Configure AI Services to Configure Content Inspection Services in the Configuration Wizard UI
!Renamed LLM Guardrails Service to AI Guardrails Service in the Configuration Wizard UI
Varonis adds support for customer-managed secrets in Databricks integration and Apply Salesforce Data Classification Labels action.
Supports customer-managed secrets from AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves., Azure Key Vault, or Google Cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. for the Databricks integration
Adds Apply Salesforce Data Classification Labels action to classify sensitive Salesforce data using Varonis advanced classification
2 details in Everything
5 more releases in this issue
· 2026-03-01 → 2026-03-30
Varonis adds AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves. key policy integration for S3 access analysis and full ServiceNow ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. table visibility.
Incorporates AWS KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. key policies into effective access calculations for encrypted Amazon S3 data to accurately determine exposure
Displays KMS key policy details directly in the UI for investigation workflows without leaving Varonis
Varonis adds MongoDB monitoring, ServiceNow ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. support, AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves. side-scanning, and a unified DB Security dashboard.
Adds monitoring and protection for ServiceNow ITSM environments, including record- and field-level classification, threat detection via login/CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. activity, CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. risk coverage, and CMDBCMDBA Configuration Management Database: a repository that stores records of IT assets and the relationships between them, giving cyber tools a single authoritative source for infrastructure context. discovery.
Supports AWS database side scans using customer-managed KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. keys to maintain strict encryption control.
Introduces Database Security dashboard with a unified view of sensitive data exposure, classification coverage, access behavior, and risk indicators across Azure, Databricks, Snowflake, AWS, and on-premises databases.
Adds database activity monitoring for MongoDB and MongoDB Atlas through the Gatekeeper Proxy with DNS multiplexing.
Enhances investigation filters and contextual columns to identify high-impact events, involved databases, and roles.
Varonis adds customer-managed encryption keys for Snowflake via AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves., Azure Key Vault, or Google Cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves.
Adds support for customer-managed encryption keys (CMEK) when integrating with Snowflake
Enables key supply from AWS KMS, Azure Key Vault, or Google Cloud KMS for data protection
Bytebase 3.16 adds JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. data access approval, GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. landing page, dynamic masking for MongoDB/Elasticsearch, and workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials. federation.
└──▷ GET THIS VERSION
$ git clone --branch 3.16.0 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.16.0
└──▷ HOW TO FIND IT
Access the new GitOps landing page in the Bytebase UI to generate CI/CD YAML files.
📍In the Bytebase console, navigate to the new GitOps section and follow the guided setup for workload identity selection.
Adds Just-In-Time (JIT) data access feature allowing users to request read-only query approval with REQUEST_ACCESS source type in project settings
Adds GitOps landing page with guided setup for workload identity selection and CI/CD YAML generation
Adds dynamic data masking support for MongoDB collections via Catalog objectSchema configuration
Adds dynamic data masking support for Elasticsearch indices via Catalog objectSchema configuration
Adds pre-execution drift validation to detect schema changes before executing stale tasks
+6 moreshow less
Adds access-token authentication for Bytebase Action enabling CI/CD pipelines to authenticate via workload identity federation
Adds preview of query results in document view or table view for MongoDB and Elasticsearch databases
Adds live syntax checking and auto-complete in SQL Editor for MongoDB and Elasticsearch databases
Adds support for Workload Identity Federation credentials for non-GCP hosted Bytebase with BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. & Spanner
Adds ROW STORE COMPRESS syntax support for Oracle databases
Adds search_path resolution via current user for PostgreSQL databases
11 details in Everything
└──▷ BREAKING ON UPGRADE
!Policy API paths change from /v1/policies to /v1/workspaces/{id}/policies; all workspace-scoped APIs now require explicit workspace ID instead of /v1/workspaces/-
!User API User.user_type field and UserType enum are removed; Service Accounts and Workload Identities must use dedicated services
!Resource IDs for revisions, changelogs, issue comments, and project webhooks migrate from sequential integers to opaque UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. strings, invalidating previously bookmarked integer IDs
Clevis v22 adds non-block-device LUKSLUKSA disk-encryption standard built into the Linux kernel that stores encryption metadata in a header on the volume itself, letting cyber tools unlock encrypted drives portably across distributions and implementations. unlocking, a pin authoring template, and TPM2 PCR algorithm auto-detection.
└──▷ GET THIS VERSION
$ git clone --branch v22 https://github.com/latchset/clevis.git
# already have the repo? check out this version:$ git checkout v22
Adds a pin template with documentation and a sample file pin to help authors write custom Clevis pins.
TPM2 pin now auto-selects the first PCR algorithm bank supported by the TPMTPMA dedicated hardware chip, standardized by the Trusted Computing Group, that stores cryptographic keys and measurements in tamper-resistant silicon, giving cyber tools a root of trust that software alone cannot fake. as the default, improving hardware compatibility.
Copies a CA certificate bundle into initramfs-tools so curl can perform HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. connections during early boot.
Installs clevis-pin-tpm2 into the initrd automatically when the TPM2 pin is required.
Cyera MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. release enables building data security agents and querying sensitive data via MCP-compatible AI tools.
Adds the ability to connect any MCP-compatible AI tool to Cyera's DataPort for querying sensitive data locations, access paths, exposure risks, and classification insights using natural language.
Enables accelerating investigations, automating threat hunting, and generating reports grounded in real security intelligence through the new integration surface.
Client Connector 4.9 adds secondary DNS for Legacy VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection., PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. parser override, post-upgrade CLI params, and specific software version posture checks.
Adds V8 JavaScript based PAC Parser as the mandatory parser regardless of app profile settings, deprecating the Legacy (SpiderMonkey-based) PAC parser
Adds support for using a secondary DNS server as a backup in network segments configured for VPN (for Legacy Apps)
Adds the ability to update some installation parameters using the CLI without having to reinstall Zscaler Client Connector
Adds checking for specific software versions for device postures: Process Check, Detect Carbon Black, Detect CrowdStrike, Detect SentinelOne, and Detect Microsoft Defender
Adds support for registry keys with the REG_BINARY type with the Registry Key device posture profile
+1 moreshow less
Adds Zscaler Deception service entitlement support for Authentication Service tenants
Zscaler UVM integrates External Attack Surface Management (EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do.) for native asset inventory and vulnerability scanning of internet-facing assets.
Adds integrated External Attack Surface Management (EASM) capabilities to the Zscaler SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. platform, enabling automated discovery and scanning of internet-exposed assets starting from admin-configured seeds.
AEM integrates native EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do. capabilities for automated discovery and scanning of internet-facing assets.
Adds app.avalor.io integrated External Attack Surface Management (EASM) capabilities to the Zscaler Security Operations (SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation.) platform.
New IP Detector, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. disable actions, prompt action filtering, and six new AI providers in AI Guard 2.12.0
Adds IP Detector to analyze user input against context for semantic similarity indicating potential leak, paraphrase, or direct exposure.
Adds the Disable policy action option for PII detectors, allowing specific labels (defaulted to Person's name) to be excluded from detection.
Adds filtering by prompt action in Log Exports with options Export Allowed/Detected Prompts and Export Blocked Prompts.
Adds support for six new AI providers: Napkin AI, DeepAI, Google Gemini Enterprise, OpenCode, Gamma, and Builder.io.
Adds NSS integration to stream Authentication Service logs to external SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point.
Enables streaming of authentication service logs (admin audit, auth, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.) to Nanolog Streaming Service (NSS) and Cloud NSS for external SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. ingestion.
Service update introducing HITRUSTHITRUSTA US-based certification framework for healthcare data security, maintained by the HITRUST Alliance, that maps controls from HIPAA, NIST, and ISO into a single assessable standard tools can target to prove compliance. framework support for risk assessment workflows.
Zscaler Cloud & Branch Connector platform updates to AMI version ZS42.1.0 and GCP VM zs-cc-ga-03092026 with new defaults.
Updates the Zscaler Cloud Connector Amazon Machine Image (AMI) version to ZS42.1.0 on cloud platforms connector.zscaler.net, connector.zscalertwo.net, connector.zscalerthree.net, and connector.zscloud.net
Updates the Zscaler Cloud Connector Google Cloud Platform Virtual Machine image version to zs-cc-ga-03092026 on cloud platforms connector.zscaler.net, connector.zscalertwo.net, connector.zscalerthree.net, and connector.zscloud.net
Updates the GCP Terraform scripts (v0.3.1) to default to the new Google Cloud Marketplace image zs-cc-ga-03092026
Updates the Zscaler Cloud Connector Microsoft Azure Virtual Machine image version to 42.1.0 on cloud platforms connector.zscaler.net, connector.zscalertwo.net, connector.zscalerthree.net, and connector.zscloud.net
Workflow Automation adds Response Available widget, finer-grained policy exception durations, standalone Incident Summary, Digest Type filtering, and type-specific merge tags
Adds a Response Available widget to the Incidents page and Incident Analytics dashboard to display counts of incidents with user or manager responses.
Enables manual creation of policy exceptions on the Incident Details page with duration specified in days, hours, and minutes (previously minutes only).
Makes the Incident Summary page a standalone view accessible via a link from the main Incidents page, opening in a new tab.
Adds a Digest Type field to the Notification Templates page to separate configuration for end user/admin digest templates versus user/escalation notification templates.
Restricts available merge tags on notification templates based on the selected Digest Type, showing distinct sets for digest vs. escalation/user notifications.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Editing existing notification templates configured with merge tags no longer supported for that specific notification type will now show an error message.
iOS 4.5 adds Auth Service integration, custom Strict Enforcement notifications, and MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. captive portal control.
Enables disableCaptivePortalNotification in the MDM VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. configuration to disable captive portal prompts
Adds custom notification capability for users blocked by Strict Enforcement mode
Integrates Authentication Service for OTPs, device group-based app profiles, posture-based entitlements, quarantine, and force-removal
ZIA adds APIs for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. settings, HTTP header profiles, root/intermediate certificates; introduces Microsoft Copilot Readiness Assessment dashboard and NSS feed fields
Adds GET /webDlpGlobalOptions and PUT /webDlpGlobalOptions endpoints to retrieve and update DLP Advanced Settings
Updated ZPA Network Connector Azure image prepared for upcoming OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. enrollment support
Adds PDF export to AI Guard Dashboard/Insights, masking config flags, and new User mode AI providers.
Adds send_masked_piiPIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. flag on Product with Enable/Disable behavior for controlling whether masked content is sent to LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. providers
Adds PDF format export option from the Dashboard and Insights pages in the UI
Supports MaxAI (api.maxai.me), Lovable (api.lovable.dev), Bolt (bolt.new), and Google Gemini Code (*.gemini.google.com, cloudcode-pa.googleapis.com) as User mode providers
ZIA adds Workday RaaS API support, Microsoft Teams DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. quarantine tombstones, and public cloud Custom IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. with dynamic validation
Workday tenant configuration now supports RaaS-based API Access for secure programmatic data retrieval and management.
SaaS Security Data at Rest DLP Policy adds a new option to quarantine sensitive content in Microsoft Teams, including a configurable tombstone message for end users.
Custom IPS is now supported on Zscaler's public cloud (zscalertwo.net and zscalerthree.net) without requiring Private Service Edge infrastructure, with a rule limit increased to 1,000.
Custom IPS adds dynamic validation for signature rules, accessible via the new Save & Promote button in Add/Edit Signature Rule windows and the Promote All button on the Custom Signature Rules page.
Custom IPS extended support includes inspection of decrypted web traffic (via SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Inspection) and HTTP protocol-aware signatures with HTTP-specific options.
ZIA adds Quarantine action for Outbound Email DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. and Grammarly Gen AI prompt support via API/config
Adds enableGrammarlyPrompt Boolean field to the AdvancedUrlFilteringCloudAppOptions model in the /advancedUrlFilterAndCloudAppSettings API, enabling generative AI prompts for Grammarly.
Adds a Quarantine action option in the UI under Policy > Email DLP for Outbound Email DLP policies targeting Microsoft Exchange.
Zero Trust Branch 8.0.8P3a adds switchover thresholds, WAN prioritization for IPSec tunnels, and PBR for system traffic.
Adds a configurable Switchover Threshold to routing policies to control WAN failover sensitivity in both Best and Balanced traffic distribution modes.
Enables defining a preferred order of WAN interfaces for establishing IPSec tunnels to ZIA or site-to-site, prioritizing link quality/cost while maintaining automatic failover.
Adds an Apply for locally generated traffic option in the PBR rule configuration to route appliance-originated system traffic (e.g., DHCP relay packets) to a specified nexthop interface.
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds M365 tenant onboarding, GCP data classification evidence, NetApp SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./NFS scanning, column-level DB scans, and OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. for embedded images
Adds support for on-premises NetApp file shares using NFS and SMB protocols for discovery and classification.
Adds column-level sensitive data scanning for databases with visibility in the Data Tab and Column-Specific Evidence Tab.
Adds Optical Character Recognition (OCR) scanning to identify sensitive data in images embedded in PDF, Word, and PPT files.
Adds Microsoft 365 tenant onboarding to monitor data stores, access MIP labels, and integrate with Microsoft Copilot.
Adds GCP as a supported platform for Data Classification Evidence generation for scanned files and tables.
+4 moreshow less
Adds detailed error messages for failed on-premises file server discovery to diagnose networking or authentication issues.
Extends MIP labeling to on-premises SMB and NFS file shares with automatic sensitivity label application via action rules.
Adds a File Activity Tab to view MIP labeling actions, entities, and timestamps.
Introduces new data posture policies for AWS Databricks, Azure OpenAI, Azure AI Foundry, Azure Cosmos DB, GCP Vertex AI, and GCP BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data..
ZIA adds Lucidchart and Zendesk support in Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. and RPM file type detection
Adds Lucidchart as a supported platform for onboarding via the 3rd-Party App Governance Admin Portal in Advanced SSPM
Adds Zendesk as an API-based platform for onboarding via the 3rd-Party App Governance Admin Portal in Advanced SSPM
Extends File Type Control and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. policies to detect and inspect RPM files in the Archive category
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds GCP data classification evidence, on-prem NetApp support, column-level DB scanning, M365 tenant onboarding, and new posture policies for AWS/Azure/GCP.
Adds Data Classification Evidence in GCP, generating evidence data for scanned files and tables to allow in-context investigation of sensitive data
Adds Summary View and Full View options to the export feature on the Data Duplications page to report duplicate file locations and attributes
Introduces new AWS, Azure, and GCP Data Posture Policies covering Databricks, MongoDB, OpenAI, Cosmos DB, Vertex AI, and BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. configurations with sensitive data
Adds support for discovering and classifying sensitive data in on-premises NetApp file shares using NFS and SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. protocols
Adds column-level scanning for databases, enabling visibility into specific columns containing sensitive data with associated DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dictionaries
+4 moreshow less
Adds OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. scan capability to identify sensitive data in images embedded within PDF, Word, and PPT files
Provides detailed discovery status and error messages (networking, authentication, permission issues) for on-premises file servers that fail scanning
Adds support for onboarding Microsoft 365 (M365) tenants to monitor data stores and access MIP labels or integrate with Copilot
Adds MIP labeling for on-premises SMB and NFS file shares via action rules, and a new File Activity tab to view MIP labeling events
ZIA adds HTTP NSS feeds, Copilot readiness assessment, Grammarly Gen AI prompts, and bandwidth latency fields.
%s{doc_subtype} and %s{upload_doc_subtype} fields added to NSS Feed Output Format for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. classification
HTTP feed support for Nanolog Streaming Service (NSS) with a new copy action in Admin Console
Web Insights Logs gain Request Latency Due to Bandwidth Control (ms), Response Latency Due to Bandwidth Control (ms), and Total Latency Due to Bandwidth Control (ms) columns/filters
%d{txn_delay_req} and %d{txn_delay_resp} fields added to NSS Web Logs Feed Output Format
enableGrammarlyPrompt Boolean field available in AdvancedUrlFilteringCloudAppOptions model at /advancedUrlFilterAndCloudAppSettings API
+2 moreshow less
SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Workflows includes new Microsoft Copilot Readiness Assessment page accessible via Analytics menu
%s{labelname}, %s{accessibility_flags}, and %s{copilot_accessible} fields added to SaaS Security NSS/Cloud NSS Feed Output Format
New Azure partner integration API endpoints and increased subscription limits for Cloud & Branch Connector
Adds programmatic management of Azure accounts and groups via new REST endpoints including GET /publicCloudTenant, POST /publicCloudTenant, PUT /discoveryService/azure/subscriptionSync, and others for CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations on Azure tenant and subscription data.
Increases the maximum number of subscriptions per Cloud Connector Azure partner integration account from 32 to 128.
Zscaler DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds M365 tenant onboarding, GCP evidence data, NetApp discovery, and column-level DB scanning.
Adds Microsoft 365 (M365) tenant onboarding to monitor and scan data stores, access MIP labels, and integrate with Copilot
Enables Data Classification Evidence in GCP for in-context investigation and validation of sensitive files and tables
Expands On-Premises NetApp File Shares support using NFS and SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. protocols for discovery and classification
Introduces Column-Level Scanning for databases to map sensitive data types to specific columns with evidence details
Adds OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. Scan capability for sensitive data in images embedded in PDF, Word, and PPT files
+1 moreshow less
Provides MIP Labeling for On-Premises File Shares (SMB/NFS) via action rules to auto-apply sensitivity labels
ZIA adds Cloud Custom IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. on public cloud with dynamic validation and 1000 rule limit; Teams DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. quarantine
Enables Custom IPS signature rules directly on Zscaler's public cloud without Private Service Edge infrastructure, raising the limit to 1,000 rules (previously 500).
Adds dynamic validation for Custom IPS signature rules via new UI actions: Save & Promote button in rule editor and Promote All button on the rules list page.
Extends DLP policy quarantine capability to sensitive content in Microsoft Teams, allowing admins to specify a tombstone message and remove quarantined items via the SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Assets Report.
Zscaler Client Connector for VDIVDIVirtual Desktop Infrastructure: a model where desktop operating systems run as VMs on a central server and stream to thin clients, giving cyber tools a single managed environment to monitor or scan. 1.7 adds a global VIPVIPA Virtual IP address — a single IP shared across multiple hosts or services, commonly used for load balancing or failover so traffic can be rerouted without changing the client-facing address. to mandatory TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. bypass rules.
ZIA adds RPM file support to DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. and File Type Control policies for Archive category.
ZIA Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. 26.02.0.21 adds network type enforcement, CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network./regex matching, EDM support, and Base64 inspection.
Adds network type filtering (Trusted, Off-Trusted, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection.) to Network Share, Printing, and Device Control policy rules
Adds Classless Inter-Domain RoutingClassless Inter-Domain RoutingA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. (CIDR) ranges and regular expressions for matching in Network Share resources
Adds Exact Data Matching (EDM) page at Analytics > Endpoint Data Scan > Sensitive Information for structured data protection
Adds Share Files Externally capability to encrypt sensitive files into secure HTML format, accessed via Analytics > Endpoint Data Scan > Sensitive Information
Adds enhanced blocking of unauthorized file save operations on removable storage or network shares within Microsoft Office applications
+2 moreshow less
Adds ability to completely exclude specific printers from Endpoint DDP and Device Control inspection by selecting disabled in Exception Settings for Printers
Adds inspection of Base64-encoded content for sensitive data
ZIA adds Oracle Financials SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications., network share CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network./Regex, endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. EDM, custom IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. on public cloud, firewall filtering API filter, and recipient email profile APIs.
SSPM Scan checkbox on tenant onboarding for Oracle Financials Cloud tenants
%d{txn_delay_req} and %d{txn_delay_resp} in NSS Feed Output Format for web logs
Support for CIDR ranges and regular expressions when creating or editing Network Share DLP resources
Support for specifying a network type (Trusted, Off-Trusted, VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection.) on Endpoint DLP policy rules for the Network Share, Printing, and Device Control channels
ruleLabelId query parameter on GET /firewallFilteringRules and GET /firewallFilteringRules/count endpoints to filter by rule label ID
+4 moreshow less
CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints for recipient email profiles: POST /emailRecipientProfile, GET /emailRecipientProfile, GET /emailRecipientProfile/{profileId}, PUT /emailRecipientProfile/{profileId}, DELETE /emailRecipientProfile/{profileId}, GET /emailRecipientProfile/count
Custom IPS rules deployable on Zscaler public cloud (zscalerone.net) with dynamic validation and a limit of 1,000 rules
Save & Promote button to trigger dynamic validation and Promote All button for Custom IPS signature rules on the Custom Signature Rules page
Expanded SSPM coverage for Salesforce with three new controls
9 details in Everything
└──▷ BREAKING ON UPGRADE
!UI labels SSL Inspection and SSL Policy renamed to SSL/TLS Inspection and SSL/TLS Policy across the Admin Console navigation.
Workflow Automation adds new merge tags for notification templates and supports apostrophes/hyphens in email addresses
Adds External Collaborators, External Recipients, Internal Collaborators, Internal Recipients, Manager Email, and Manager Name merge tags to custom Email, Slack, and Microsoft Teams notification templates
Expands email address input validation across Approvers, Integration Users, Incident Details, Custom Workflows, Import CSV, Incidents, and Incident Summary pages to accept apostrophes and hyphenated characters
ZPA adds credential agent for PRA, ZIA traffic inspection with multimatch, and LSS business continuity logging
Adds a new credential agent for Privileged Remote Access (PRA) to enable integration with Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. and Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. for credential discovery.
Adds capability to deploy the credential agent via the Zscaler Admin Console to automate privileged credential lifecycle management, including LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./search queries, rotation policies, and credential pools.
Enables ZIA traffic inspection for Application Segments when Multimatch and Pattern Matching are enabled.
Supports streaming logs directly to SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. receivers using Log Streaming Service (LSS) App Connectors for Business Continuity events.
App Connector 26.52.3 adds group-level Local OS Network Settings and UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. App Segment selection.
Adds support for editing Local OS Network Settings (routes, DNS, SSH) at the App Connector group level and executing remote commands.
Enables selection of the closest App Connector to an application when configuring application segments that include UDP ports.
Zscaler Client Connector 4.8 adds Auth Service integration, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. refresh, Z-Tunnel 2.0 DR, process bypass, and CrowdStrike posture checks.
Adds support for Authentication Service integration, enabling Digital Experience without ZIA/ZPA, device group usage, machine tunnel authentication, OTPs, device quarantine, and service disable reason display
Enhances CrowdStrike ZTA posture with two new device posture checks: CrowdStrike ZTA Device OS Score and CrowdStrike ZTA Sensor Setting Score
Adds support for forcing a Kerberos ticket refresh after ZPA reauthentication
Adds failover settings to the app profile that can override the global fail over settings
Supports a device posture check for specific Zscaler Client Connector versions
+2 moreshow less
Supports process-based application bypass using custom application bypasses defined in the Zscaler Client Connector Portal when using Transparent Proxy-based Traffic Interception
Adds a new traffic forwarding action for ZIA Disaster Recovery to forward traffic using Zscaler Tunnel (Z-Tunnel) 2.0
ZIA adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./File Type Control for RPM files and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for DNS application groups.
└──▷ TRY IT
Use the new API endpoints to programmatically create or update DNS application groups for ZIA firewall policies.
$ POST /dnsApplicationGroups
Retrieve a list of all DNS application groups using the lite endpoint to reduce payload size.
$ GET /dnsApplicationGroups/lite
File Type Control and DLP policies now support RPM files in the Archive category
Adds GET /dnsApplicationGroups, POST /dnsApplicationGroups, GET /dnsApplicationGroups/{groupId}, PUT /dnsApplicationGroups/{groupId}, DELETE /dnsApplicationGroups/{groupId}, and GET /dnsApplicationGroups/lite endpoints to manage DNS application groups
New Authentication Audit Logs export to sync login and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. event data
Adds Authentication Audit Logs for Client logins, Resource access attempts, and MFA setups
Prevents downgrading plans when it would exceed current usage entitlements
└──▷ HOW TO FIND IT
Attempt a plan downgrade in the UI and observe the new restriction if current usage exceeds the target plan's limits.
📍In the ZeroTier Central console, navigate to Account › Billing and attempt to switch to a lower tier. The system will block the change if your current usage exceeds the entitlements of that plan.
Enforces plan downgrade restrictions to ensure current usage stays within lower-tier entitlements
OpenVPN 2.7.1 adds username-only auth mode and boosts default hash map sizing for large-client deployments.
└──▷ GET THIS VERSION
$ git clone --branch v2.7.1 https://github.com/OpenVPN/openvpn.git
# already have the repo? check out this version:$ git checkout v2.7.1
Adds username-only flag to --auth-user-pass, letting clients send only a username (with a dummy password) to trigger server-side external challenge schemes.
Increases default internal hash map sizing to 4 * --max-clients, improving performance on servers with large client counts.
CertCentral now validates DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit. for domain control and CAA checks, returning dns_sec_validation_error.
Adds dns_sec_validation_error as a new error code in the Services API for certificate requests with reject_if_pending: true when DNSSEC validation fails.
OpenSC 0.27.x adds PKCS#11PKCS#11The standard programming interface software uses to ask an HSM, smart card or token to sign or decrypt with a key it holds. Supporting it lets a tool keep its keys in hardware. 3.2 support (ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code./ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake.), PKCS#11 URI support in pkcs11-tool, and new card mechanisms
└──▷ GET THIS VERSION
$ git clone --branch 0.27.1 https://github.com/opensc/opensc.git
# already have the repo? check out this version:$ git checkout 0.27.1
Adds pkcs11-tool support for ML-DSA, ML-KEM, and SLH-DSASLH-DSANIST's hash-based post-quantum signature standard (FIPS 205), formerly SPHINCS+. Its security rests only on hash functions, so it is slower and larger than ML-DSA but a conservative backup. keys from PKCS#11 3.2
Adds initial support for PKCS#11 URIs to pkcs11-tool
Adds support for ChaCha20 and Poly1305 algorithms in pkcs11-tool
Adds AES CTR support in decrypt_data() and encrypt_data() in pkcs11-tool
Adds CKK_MONTGOMERY derive key support to pkcs11-tool
+1 moreshow less
Adds OS-level FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. mode detection via custom configuration file
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Obsolete tokend support removed
1 more release in this issue
· 2026-03-30 → 2026-03-31
OpenSC 0.27.0 adds PKCS#11PKCS#11The standard programming interface software uses to ask an HSM, smart card or token to sign or decrypt with a key it holds. Supporting it lets a tool keep its keys in hardware. 3.2 support (ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code./ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake.), Ed448/X448 and ChaCha20/Poly1305 mechanisms to pkcs11-tool.
└──▷ GET THIS VERSION
$ git clone --branch 0.27.0 https://github.com/OpenSC/OpenSC.git
# already have the repo? check out this version:$ git checkout 0.27.0
pkcs11-tool supports ML-DSA, ML-KEM, and SLH-DSASLH-DSANIST's hash-based post-quantum signature standard (FIPS 205), formerly SPHINCS+. Its security rests only on hash functions, so it is slower and larger than ML-DSA but a conservative backup. keys from PKCS#11 3.2
Added support for Ed448 and X448 mechanisms in tools
Added support for AES CTR in encrypt_data() and decrypt_data()
pkcs11-tool prints more information about RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. keys
Supports Brainpool twisted curves in pkcs11-tool and SC-HSMHSMA tamper-resistant device that generates and stores cryptographic keys and performs operations with them, so the private key never leaves the hardware. Cloud KMS services run on fleets of them.
Warden v0.6.0 introduces RDS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. auth tokens, transparent mode only, and dev TLS support
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.6.0
Adds RDS provider with Access gateway type for issuing short-lived IAM authentication tokens to PostgreSQL, MySQL, and SQL Server on RDS/Aurora
Removes token_type field from auth method configs and roles; all roles now use jwt_role or cert_role automatically
Removes /auth/jwt/login and /auth/cert/login endpoints; they now return 400 errors, forcing direct gateway usage
Removes transparent_mode config key from provider configs; authentication is controlled via the required auto_auth_path field instead
Removes warden_crypto_token self-contained encrypted token support
+1 moreshow less
Adds --dev-tls CLI flag to generate a self-signed certificate at startup for HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. in development mode
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The token_type field on auth method configs and roles no longer exists; all roles use the transparent type (jwt_role or cert_role) automatically.
!Calling /auth/jwt/login or /auth/cert/login returns 400 errors; clients must use the gateway endpoint directly.
!The transparent_mode config key must be removed from provider configs as it is no longer supported.
!Self-contained encrypted tokens (formerly warden_crypto_token) are no longer supported.
2 more releases in this issue
· 2026-03-20 → 2026-03-27
Adds --dev-tls and related flags to enable HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. and mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. in dev mode
└──▷ GET THIS VERSION
$ git clone --branch v0.5.1 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.5.1
Adds --dev-tls flag to automatically generate a self-signed ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. P-256 certificate for HTTPS in dev mode
Adds --dev-tls-cert-file, --dev-tls-key-file, --dev-tls-ca-cert-file, and --dev-tls-require-client-cert flags to support user-provided certificates and mTLS client verification
Aembit MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Authorization Server adds unauthenticated OAuth flows via Enforce SSO toggle
Allows MCP Authorization Server to issue access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. without identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. redirection when Enforce SSO is off
1 detail in Everything
1 more release in this issue
· 2026-03-17 → 2026-03-31
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Identity Gateway v1.29.4419 adds MCP resource support for identity-aware proxying
resources/list endpoint discovers available resources across all assigned MCP servers
resources/read endpoint retrieves a specific resource by URI from the appropriate MCP server
SPIRE v1.14.3 adds agent version visibility, standardizes post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. KEM, and doubles OPAOPAOpen Policy Agent, a CNCF-graduated policy engine that evaluates rules written in the Rego language against JSON-structured data, letting tools enforce authorization and compliance decisions without hardcoding logic. policy evaluation performance.
└──▷ GET THIS VERSION
$ git clone --branch v1.14.3 https://github.com/spiffe/spire.git
# already have the repo? check out this version:$ git checkout v1.14.3
Adds spire-agent version reporting to spire-server via the PostStatus API, now visible in GetAgent/ListAgents CLI output.
The RequirePQKEM TLS policy now uses the standardized X25519MLKEM768 algorithm instead of the draft x25519Kyber768Draft00.
OPA policy evaluation performance improved by approximately 2× through use of partial evaluation.
Selectors are no longer logged at the agent level, preventing potential leakage of sensitive information.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The RequirePQKEM TLS policy switches from x25519Kyber768Draft00 to X25519MLKEM768; any peer or configuration that negotiated the draft KEM will no longer be compatible.
v18.7.2 adds TeleportAccessMonitoringRuleV1 and session summarizer support to the Kubernetes operator, plus scoped token updates to tctl.
└──▷ GET THIS VERSION
$ git clone --branch v18.7.2 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.7.2
Adds update scoped token support to tctl and removes the status requirement from the upsert scoped token RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets.
Vanta adds Claude Code plugin for IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. remediation, auto-indexing of public webpages to Knowledge Base with sub-pages, and AI-assisted policy version history.
Adds Vanta Plugin for Claude Code (Private Preview) allowing discovery of failing compliance tests and generation of infrastructure-as-code fixes directly in the code editor via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connection.
Enables include sub-pages option for public webpage indexing to automatically capture content one level deep from a single URL using LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-based filtering.
Introduces automatic version history for AI-assisted edits in the Policy Editor, saving every edit with summaries and allowing one-click restoration.
3 details in Everything
4 more releases in this issue
· 2026-03-01 → 2026-04-04
New Splunk access sync integration, ENUM support in custom tests, multiple parallel vendor assessments, and agentic onboarding for small teams.
Adds automatic syncing of user, group, role, and access data from Splunk to enable continuous monitoring of access controls
Adds ENUM data type support in the test builder for creating custom tests with enumerated values
Enables creation of multiple assessment types (e.g., privacy, legal, financial) for TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. with parallel AI-powered evaluations
Introduces an agentic onboarding experience for 1-10 HC customers including company research, policy creation, and Vanta Agent support
Vanta adds business unit scoping for vendors, structured TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. questionnaires, and GA Privacy Hub Impact Assessments with Vanta AI suggestions
Adds Business Unit-level vendor scoping to manage different vendor scopes for each audit leading to faster and more complex audit strategies
Adds new sidebar navigation for managing TPRM questionnaire sections (create, rename, duplicate, delete, reorder) in the Privacy Hub
GA of Impact Assessments in the Privacy Hub with Vanta AI DPIADPIAA Data Protection Impact Assessment — a structured process, required under GDPR, for identifying and mitigating privacy risks before deploying a system that processes personal data at scale. suggestions, approval workflows, and customizable review cadences
GA of TPRM Multiple Assessments Phase 1 allowing different assessment types per vendor, single decisioning, and evergreen exchanges
Vanta adds Linear ticket linking with evidence sync, Miradore MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. integration, and QAuto agent response approvals.
Adds Linear ticket linking to Vanta Documents with automatic attachment syncing for audit evidence
Adds Miradore MDM integration for continuous device inventory sync and posture evaluation against controls
Introduces QAuto (public preview) for optional auto-approval of unflagged agent answers and automated questionnaire completion
Adds privacy impact assessment task tracking in the My Work view
SafeBase Chrome Extension gains portal-agnostic parsing with AI questionnaire assistance
Adds portal-agnostic question extraction to parse questions from any third-party TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. portal by extracting visible HTML without requiring portal-specific builds.
Enables side panel questionnaire rendering inside the SafeBase Chrome Extension for structured review of extracted questions.
Introduces AI-assisted response generation within the Chrome Extension to provide suggested answers for imported questions.
3 details in Everything
2 more releases in this issue
· 2026-03-06 → 2026-03-20
New NinjaOne MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. connection to monitor device security and compliance in Drata
Adds NinjaOne as a new MDM integration for automatic device security monitoring
Improves collection of full disk encryption (FDE) and screen lock data for macOS and Linux devices via the new connection
Enhances detection of antivirus and password manager tools through the NinjaOne integration
Drata introduces Content Collections for Early Access to scope AIQA responses
Admins can now create curated content collections by filtering the Trust Library on content type (documents, knowledge base entries, Trust Center items) and tags
Users can select a specific content collection when running AI Questionnaire Assistance (AIQA) to restrict the source content for that run
Trust Library Search and Ask AI now support filtering results to a specific content collection
A new test the collection workflow allows admins to verify a curated subset returns correct content before saving
Automated device exclusion from compliance evaluation based on employee checklist scope
Devices from integrations not required by an employee’s applicable checklist are hidden from employee technical details and excluded from compliance evaluation, task generation, and evidence automation.
Compliance status, evidence automation, and task generation are now scoped strictly to in-scope integrations defined by the employee's checklist.
Device visibility and compliance recalculation are automatically triggered on the next sync when an employee's checklist changes.
3 details in Everything
16 more releases in this issue
· 2026-03-10 → 2026-03-19
Adds My Tasks tab in Task Center to view all assigned compliance items in one place.
Adds My Tasks tab inside Task Center that aggregates compliance tasks (Policies, Evidence, Vulnerabilities, Vendors, Audit Requests, and Findings) across Scrut for a specific user.
Adds mandatory attachment enforcement per question and CSV column in vendor assessments
Enforces attachment uploads as a required step for specific questions in Vendor Assessment questionnaires, preventing submission until all are provided.
Adds an Attachment Required (Yes/No) column to support bulk configuration of mandatory attachments via CSV import.
Import existing policy files into the inline editor; a notification confirms when processing is complete and editing is ready.
Adds ability to import existing policy files (including PDF) directly into the inline editor during policy creation, enabling direct editing rather than just attaching them.
Scrut adds ISO/IEC 27701:2025ISO/IEC 27701:2025An international standard extending ISO/IEC 27001 to cover privacy information management, giving organizations a certifiable framework for demonstrating GDPR and broader privacy-law compliance. framework support in the Frameworks module
Adds ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 27701:2025 to the Frameworks module for privacy control integration with ISO 27001.
Provides integrated controls mapping to link existing ISO 27001 controls to PIMS-specific privacy requirements.
Includes a default Statement of Applicability (SOA) for ISO 27018 with pre-suggested in-scope controls and out-of-scope justifications.
TrustCloud version 351 introduces an automated workflow allowing assessors to directly send existing assessments to new users, replacing a previous white-glove process.
Kovr introduces Agent Artemis, a conversational agentic AI layer for generating compliance artifacts from connected security ecosystems.
Introduces Agent Artemis, a natural language interface that connects to cloud environments and cybersecurity toolchains to generate any NIST-based artifact or attestation.
CISO Assistant v3.15.0 adds SoA generation, chat mode, batch GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. inputs, and PASSI support
└──▷ GET THIS VERSION
$ git clone --branch v3.15.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.15.0
SoA generation UX added to streamline Statement of Applicability creation
Chat mode (epic) launched for interactive query capabilities
Batch input operations added for GDPR personal data fields
PASSI framework support introduced via the library component
Applied controls can now be synced directly to reference controls
+3 moreshow less
Score toggling now supports batch selection and average-of-averages calculation
Requirements tree in EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. report now supports expand/collapse interaction
Control suggestions now allow direct selection of controls
8 details in Everything
12 more releases in this issue
· 2026-03-02 → 2026-03-29
CISO Assistant v3.14.6 adds vulnerability import via the data wizard and a back button in the stakeholder view.
└──▷ GET THIS VERSION
$ git clone --branch v3.14.6 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.6
└──▷ HOW TO FIND IT
Import vulnerability data into CISO Assistant using the newly added data wizard feature.
📍Go to Data Wizard › Vulnerabilities and upload your CSV file
Navigate back from the detailed stakeholder view to the previous workshop step.
📍In the stakeholder view, click the back button to return to workshop 3
CISO Assistant v3.14.5 adds universal fuzzy search, a visual risk matrix editor, and Korean language support
└──▷ GET THIS VERSION
$ git clone --branch v3.14.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.5
Adds universal search with fuzzy search for finding assets, controls, and risks across the entire platform.
Introduces a visual editor for risk matrix allowing drag-and-drop configuration of likelihood and impact levels.
Adds Korean (ko) as a supported interface language.
CISO Assistant v3.14.4 persists table filters to browser localStorage
└──▷ GET THIS VERSION
$ git clone --branch v3.14.4 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.4
└──▷ HOW TO FIND IT
Retain applied column and status filters across page reloads or browser restarts without re-selecting them.
📍Open any data table in CISO Assistant and apply your preferred filters; they are now automatically saved to localStorage.
CISO Assistant v3.14.3 adds markdown policy editing, SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. TLS 1.2 forcing, and UX improvements.
└──▷ GET THIS VERSION
$ git clone --branch v3.14.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.3
feat(oidc): deep search for email in nested IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. token claims to improve authentication reliability.
CISO Assistant v3.14.1 adds cost summaries on action plans, asset-based filtering for measures, ReCyF library support, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. token-via-cookie delivery.
└──▷ GET THIS VERSION
$ git clone --branch v3.14.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.1
Sends SSO tokens via cookie instead of URL, reducing token-leakage exposure in browser history and server logs.
Adds cost summary view on action plans (with CRQ IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. alignment) to surface financial impact of remediation work.
Adds filter by asset capability in the measures view to scope security measures to a specific asset.
Shows a UI indicator when an ID field will be auto-generated if left blank, clarifying object-creation behaviour.
CISO Assistant v3.14.0 adds DORA NBB-compliant exports and custom report/email templates
└──▷ GET THIS VERSION
$ git clone --branch v3.14.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.14.0
Adds NBB-compliant export format for DORA ROI to meet regulatory specifications.
Enables customization of email notifications and Word report templates in the Pro tier.
CISO Assistant v3.13.6 extends folder selection and search to all folder fields
└──▷ GET THIS VERSION
$ git clone --branch v3.13.6 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.6
└──▷ HOW TO FIND IT
Use the global folder picker to quickly filter or select assets by their assigned folder without navigating deep into hierarchies.
📍Open any folder field selector and start typing the folder name to search and filter available options across the entire application.
CISO Assistant v3.13.5 adds default language admin settings, ref_id to audit action plans, and currency expansion.
└──▷ GET THIS VERSION
$ git clone --branch v3.13.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.5
admin can set a default language and optionally force it on users
Adds owner field support to Applied Controls bulk import wizard
└──▷ GET THIS VERSION
$ git clone --branch v3.13.4 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.4
New AWS S3 identity token support, AWS_LOCATION env var, BI data wizard section, and CISA CPG 2.0 framework coverage.
└──▷ GET THIS VERSION
$ git clone --branch v3.13.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.2
AWS_WEB_IDENTITY_TOKEN_FILE, AWS_S3_REGION_NAME, and AWS_S3_ROLE_ARN environment variables for AWS web identity S3 authentication
AWS_LOCATION environment variable to configure the object-storage location for deployments
Business impact analysis section in the data wizard for importing business context data
$ git clone --branch v3.13.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.1
Adds the ANSSSI - MonAideCyber Questionnaire (v2) framework to enable compliance mapping for this specific French cybersecurity aid program
Adds the ability to include comments on individual requirements assessments, allowing auditors to provide context alongside their answers
Introduces a new auditor/respondent workflow with notifications, separating the roles of those who perform audits from those who respond to them
Adds a boolean flag on risk assessments and audits to request autosync, controlling whether changes trigger immediate synchronization
Implements cleaner layout for the audit toolbox UI component for improved usability during active audits
CISO Assistant v3.13.0 adds MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enforcement for admins, searchable folder list in Focus Mode, and advanced audit analytics.
└──▷ GET THIS VERSION
$ git clone --branch v3.13.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.13.0
secops-v0.7.0 adds rule exclusions management tools to the MCP Security service.
└──▷ GET THIS VERSION
$ git clone --branch secops-v0.7.0 https://github.com/google/mcp-security.git
# already have the repo? check out this version:$ git checkout secops-v0.7.0
Runlayer is an MCP gateway that enforces identity-mapped permissions and detects threats across the agents and MCP servers employees use.
Runlayer 1.28.2 adds agent subagents, v2 analytics tabs, audit events, and API rename.
Adds AGENT_RUN, AGENT_RUN_SUCCESS, and AGENT_RUN_FAILURE audit log events for agent runs
Introduces shadow subagents that inherit parent connectors but follow separate instructions
Adds a Delete All option in Deployments to remove connected servers alongside the deployment
Includes Kandji in Shadow MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. device filtering
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The public Agents API routes have been renamed from /assistants to /agents.
2 more releases in this issue
· 2026-03-25 → 2026-03-31
codex plugin support is now installed via CLI for first-class integration
Agent templates (workspace agent, research agent, weekly summary, morning brief) pre-fill name, prompt, connectors, and tools
Failed agent runs can be retried from the Activity view
Agent owner is displayed on the agent detail page
Grant access button appears on connector cards for authorization-required connectors
+3 moreshow less
Kandji MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. support added for auto-provisioning
Vimeo connector available in the connector catalog
Workday deployments now support configurable OAuth scopes
Runlayer 1.28.0 adds granular admin roles, shadow skill detection, LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. proxying and CLI keychain storage
Adds Security Admin, IT Admin, Helpdesk, Developer and Analytics Admin roles alongside Super Admin for separation of duties
Enables Shadow AI coverage now includes skills to discover, classify and surface analytics on shadow skills in supported clients
Supports workspace-level LLM provider settings with Anthropic, OpenAI, and OpenAI-compatible gateways
Routes OpenAI model traffic through the backend proxy layer via new proxying configuration
Adds per-agent SQLite-backed memory scoped to individual agents
+18 moreshow less
Allows disabling agents without deletion, blocking Slack, webhook and scheduled execution until re-enabled
Introduces SkillWatch analytics with skill discovery metrics, risk breakdowns and outdated-skill visibility
Captures install analytics to track adoption of skills and plugins
Rebuilds deploy UX around guided dialogs, inline CLI commands and clearer setup states
Adds Build with Runlayer MCP entry point connecting deployment setup with the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Builder workflow
Supports renaming deployments directly from the UI
Expands plugin publishing workflow to support Claude-format plugin publishing via CLI and inline manifest support
Reads mcpServers from .claude-plugin/plugin.json with fallback to legacy .mcp.json
Adds native install guidance for clients including VS Code
Improves plugin push stability, root skill path handling and removal by UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide.
Supports multiple principals (users, groups, roles or agents) per permission rule
Enables capability-gated UI and API navigation so users only see what their role allows
Provides read-only troubleshooting and analytics access for Helpdesk and Analytics workflows
Updates global and connector-level policy flows with a better editing UX
Ensures audit parity for plugins and skills by logging installs, updates and upstream token refresh events
Stores CLI credentials in the OS keychain instead of plain local config
Folds verified-local into run to simplify local run flow
Portkey Enterprise Gateway 2.4.4 adds Anthropic Files API support via /v1/files, cache TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit., and OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. semconv alignment.
Adds EXPERIMENTAL_GEN_AI_OTEL_RESOURCE_ATTRIBUTES environment variable for custom OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. resource attributes
Supports the /v1/files endpoint for Anthropic Files API integration
Adds optional ttl field to cache_control (values 5m or 1h) for Prompt Caching
3 details in Everything
8 more releases in this issue
· 2026-03-02 → 2026-03-25
Portkey Enterprise Gateway 2.4.3 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. event observability and Prometheus env var support
Adds PROMETHEUS_INCLUDE_MODEL_LABEL, PROMETHEUS_INCLUDE_METADATA_LABELS, PROMETHEUS_HISTOGRAM_BUCKETS, PROMETHEUS_HTTP_DURATION_BUCKETS, and PROMETHEUS_GC_BUCKETS environment variable support for configuring Prometheus metrics.
Enhances MCP GatewayMCP GatewayA server that sits between MCP clients and one or more Model Context Protocol backends, routing tool calls and aggregating context sources so a single endpoint exposes many AI-agent integrations at once. logging to capture all MCP events, including caller identity, authorization scope, decision, and gateway trace_id.
Enterprise Gateway v2.4.2 adds native Bedrock structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. enforcement via Converse API's json_schema.
Bedrock structured outputsstructured outputsForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. now use outputConfig with json_schema text format via the Converse API for Claude models on Bedrock
Portkey Backend v1.12.1 adds Akto Agentic Security guardrail, inline image URL processing, and Bedrock Custom Host support.
Adds Akto Agentic Security guardrail integration for advanced threat detection and security scanning of LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. inputs and outputs
Adds Inline Image URLs guardrail that fetches external image URLs and converts them to Base64 inline data, with configurable providers, maxSizeBytes (default: 20MB), timeoutMs (default: 30000), and failOnError (default: false)
Adds optional Custom Host field to the AWS Bedrock guardrail integration schema
Portkey Enterprise Gateway 2.4.0 adds DeepInfra tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. and Vertex AI metadata forwarding
Adds tool_choice and parallel_tool_calls parameters to the DeepInfra integration for function callingfunction callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. workflows
Adds support for the completions and embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. endpoints in the DeepInfra provider configuration
Forwards Portkey request metadata as Vertex AI resource labels to enable enterprise governance
Portkey Backend 1.12.0 adds Secret Manager integrations, Zscaler guardrail, and GCP WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys. log storage.
Adds secret_mappings config key and full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. API for managing external secret references to AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault
Adds new Zscaler AI Guard integration via beforeRequestHook and afterRequestHook with policyId and timeout parameters
Adds GCP Workload Identity Federation support for cross-cloud log storage using gcs_assume type and env vars GCP_WIF_AUDIENCE / GCP_WIF_SERVICE_ACCOUNT_EMAIL
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Requires Helm chart upgrade to app-1.6.0 or higher to function correctly
Portkey Enterprise Gateway 2.3.0 adds Akto guardrails, DeepSeek tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions./reasoning, Azure rerank, Vertex web search, AWS-to-GCP WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys., and Bedrock batch embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG..
beforeRequestHook and afterRequestHook now support the Akto Agentic Security guardrail with a configurable timeout (default 5000ms) for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and data leakage protection
deepseek-chat provider gains support for tools, tool_choice, and stream_options parameters, enabling tool calling capabilities
deepseek-reasoner provider adds reasoning mode via the reasoning_effort parameter and returns reasoning_content in streaming responses
Azure AI Foundry now supports rerankingrerankingA model that re-scores a first batch of search results against the query and reorders them, more accurately than the fast first-stage search. via Cohere models (e.g., cohere.Cohere-rerank-v4.0-pro) with automatic stripping of the cohere. prefix
Vertex AI provider accepts enterpriseWebSearch or enterprise_web_search in the tools array to enable enterprise web search grounding with distinct cost attribution
microsandbox v0.3.0 adds runtime CLI subcommands, msbnet with TLS interception, and a new Go SDK.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.0 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.3.0
Adds --host CLI flag to specify the bind address for sandbox services
Introduces new CLI subcommands under the runtime group for sandbox lifecycle management
Adds MSB_TMPFS environment variable to enable tmpfs mount support in sandboxes
Introduces msbnet networking stack with TLS interception and DNS policy support
Adds disk image rootfs support for qcow2, raw, and vmdk formats
+2 moreshow less
Adds OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. image pulling with OverlayFs rootfs support
Adds support for GitHub Container Registry as an image source
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The workspace is consolidated into a single microsandbox crate, removing the previous multi-crate structure
!Workspace crates have moved under the crates/ directory, updating internal module paths
code-on-incus v0.7.0 adds real-time security monitoring with nftables, opencode support, and permission modes.
└──▷ GET THIS VERSION
$ git clone --branch v0.7.0 https://github.com/mensfeld/code-on-incus.git
# already have the repo? check out this version:$ git checkout v0.7.0
(new) --monitor flag on coi shell enables real-time threat detection and automated response, plus ~/.config/coi/config.toml[monitoring] section to configure security monitoring settings
nftables kernel-level network monitoring catches all network events including short-lived connections
Support for [opencode](https://opencode.ai) AI coding agent via --tool opencode
(new) permission_mode config key under [security] to switch between bypass and interactive approval workflows, plus additional_protected_paths config key under [security] to add custom read-only paths
Protected paths .git/hooks, .git/config, .husky, .vscode mounted read-only by default
+2 moreshow less
coi resume [container] subcommand to resume containers paused by security monitoring
(new) --format json|text argument on coi container list for automation-friendly output, and -t flag on coi container exec for PTY allocation in interactive sessions
Adds scoped and user secret providers with system key isolation; fixes OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. config respect, token scope preservation, JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. error handling, PID 0 liveness, upstream CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. converter
└──▷ GET THIS VERSION
$ git clone --branch v0.14.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.14.1
Respect global config for OTel tracingOTel tracingAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. and metrics enabled in toolhive
Preserve scopes in token refresh request for toolhive API calls
Return JSON-RPC errors for expired sessions via the toolhive CLI/API
Treat PID 0 as dead in supervisor liveness check for toolhive processes
4 details in Everything
5 more releases in this issue
· 2026-03-02 → 2026-03-30
ToolHive v0.13.1 adds authorizationEndpointBaseUrl override and blocks Docker gateway addresses in the egress proxy by default
└──▷ GET THIS VERSION
$ git clone --branch v0.13.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.13.1
thv serve no longer fails when an experimental MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server initialization error occurs; it logs a warning and continues starting the rest of the service
Adds the authorizationEndpointBaseUrl config key to override the embedded auth server's authorization endpoint URL
Supports RFC 8414 path-based issuer discovery URLs for OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs./OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. integration
Implements Redis storage backend for sessions via the NewManagerWithRedis constructor and configurable SessionCacheSize in RunConfig.
Wires non-interactive registry authentication for serve mode, allowing thv serve to authenticate with a registry without manual prompts.
Adds multi-upstream sequential authorization chain support, enabling a tool to consult multiple identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. in order.
Maps BackendReplicas and SessionCacheSize into the RunConfig struct for programmatic control of stateful set scaling.
Supports overriding tool annotations directly within aggregation configuration files.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The webhook.Principal type has been replaced by auth.Identity, requiring updates to any code referencing the old webhook principal interface.
ToolHive v0.12.3 adds skills provider methods, resource links, and default grouping for skills.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.12.3
Adds skills provider methods to support the upstream MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. registry format
Adds ResourceLink content type support in the vmcp layer
Default-installs new skills to the default group instead of ungrouped
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes the non-spec progress/update method from the MCP parser
ToolHive v0.10.1 adds OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. build/push/pull for skills, Redis operator storage, and semantic discovery via TEI.
└──▷ GET THIS VERSION
$ git clone --branch v0.10.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.10.1
Adds OCI Build and Push capability to the skill service for publishing tools
Adds OCI pull-based install flow for skills allowing installation from container registries
Adds operator controller and runner integration with Redis storage for state management
Adds real TEI embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. client enabling semantic tool discovery across available skills
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The toolhive-registry name is renamed to toolhive-catalog in internal packages
Security scanner, red-team toolkit, and behavioural simulator for AI agents and MCP servers.
HackMyAgent v0.12.4 ships a pure-TypeScript Mamba inference engine and an ONNXONNXAn open file format for trained models, so a model built in one framework can run in another runtime or on other hardware. ONNX Runtime is the common engine that executes it. export pipeline, eliminating the Python runtime dependency.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.4 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.4
Adds pure-TypeScript neural inference: full Mamba forward pass in TS, loading a 7 MB binary model from MLXMLXApple's machine-learning framework for Apple silicon, which uses the unified memory shared by CPU and GPU to run and fine-tune models on a Mac.-trained weights with sub-second inference — no ONNX, no daemon, no Python required at runtime.
Adds an ONNX export pipeline (MLX -> PyTorch -> ONNX -> onnxruntime-node) as an alternative inference path for environments with ONNX support.
Ships retrained TME v3 model with 99.38% eval accuracy on a balanced 1,600-sample dataset, covering all 8 attack classes at F1 >= 0.96.
Publishes v3 model to HuggingFace in npz, ONNX, and binary formats.
4 details in Everything
13 more releases in this issue
· 2026-03-12 → 2026-03-27
HackMyAgent v0.12.2 adds supply chain typosquat detection, data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. patterns, and shell execution flagging in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. configs.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.2 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.2
Adds supply chain typosquat detection using Levenshtein distance matching against known package orgs (modelcontextprotocol, anthropic-ai), catching variants like @m0delcontextprotocol and @anthroplc-ai.
Adds data exfiltration pattern detection covering SELECT * FROM combined with external URLs, include-pii, and bulk data export patterns.
Adds postinstall/curl|sh shell execution pattern detection in MCP configs, flagged as supply chain risk.
HackMyAgent v0.12.1 adds local sub-millisecond TME intent classification and a programmatic nanomind-core subpath export.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.1 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.1
Adds import('hackmyagent/nanomind-core') subpath export for programmatic access to the Semantic Compiler, ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. types, and all 6 analyzers.
Adds local sub-millisecond intent classification via the trained Mamba TME model, running as Tier 1 inference in the Semantic Compiler before falling back to the daemon — no daemon needed.
HackMyAgent v0.12.0 adds a NanoMind semantic compiler, 28 ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text.-based checks, and a create-skill CLI command.
└──▷ GET THIS VERSION
$ git clone --branch v0.12.0 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.12.0
└──▷ TRY IT
Generate a hardened skill for a specific task without hand-writing agent code.
$ hackmyagent create-skill "fetch and summarize CVE advisories from an RSS feed"
Adds hackmyagent create-skill "<description>" subcommand to generate secured skills from a natural-language prompt.
Introduces 28 AST-based semantic checks across capability, credential, governance, scope, prompt, and code categories via the new NanoMind compiler architecture.
Adds a Secure Ingestion → NanoMind Compiler → Signed AST pipeline that runs semantic analysis before static checks on every artifact.
Adds input sanitization at the ingestion layer to defend NanoMind against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. via malicious artifacts.
Adds self-integrity verification on every CLI startup (self-securing CLI).
+1 moreshow less
Enforces defense-in-depth policy where NanoMind can upgrade but never suppress static findings.
HackMyAgent v0.11.15 introduces the NanoMind Semantic Compiler with ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text.-based scanning, self-securing binary verification, and tamper-evident audit logging.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.15 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.15
Adds 28 AST-based security checks across 6 analyzers (capability, credential, governance, scope, prompt, code) via the NanoMind Semantic Compiler, which queries a signed Abstract Security Tree instead of raw text.
Adds self-securing CLI that verifies its own binary integrity on every startup, entering QUARANTINE mode (exit code 3) on tamper detection and DEGRADE mode when the model is compromised.
Adds a tamper-evident event chain using rolling SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. hashes to detect log modification.
Adds AST signing so every compiled artifact is cryptographically signed before analyzers consume it.
Adds input sanitization to defend NanoMind against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. via malicious artifacts.
+2 moreshow less
Adds secret redaction that strips credentials before NanoMind processes artifact content.
Enforces defense-in-depth: NanoMind can upgrade findings but can never suppress static analysis results.
HackMyAgent v0.11.14 adds behavioral simulation battery, adaptive red-team engine, and NanoMind semantic analysis on by default
└──▷ GET THIS VERSION
$ git clone --branch v0.11.14 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.14
└──▷ TRY IT
Run a deep behavioral simulation against an agent to surface latent vulnerabilities across all 7 attack categories
$ hackmyagent secure --deep
Launch an adaptive red-team session against a target agent definition, generating target-specific payloads with up to 5 attack iterations per category
$ hackmyagent red-team agent-config.json
Pin CI pipelines to deterministic, daemon-free analysis so results are reproducible across runs
$ hackmyagent secure --static-only
Adds hackmyagent secure --deep to run a full 3-layer behavioral simulation: NanoMind TME (8ms) → targeted probes (3s) → full simulation (30s)
Adds hackmyagent red-team <file> for NanoMind-powered adaptive red-teaming with target-specific payload generation and up to 5 iterative attack iterations per category
Adds --static-only flag for CI/deterministic mode, bypassing NanoMind semantic analysis
Adds hackmyagent explain <findingId> with static fallback when the daemon is unavailable
Enables NanoMind semantic analysis automatically when the daemon is available — no flags required
+2 moreshow less
Introduces a 20-probe behavioral simulation battery across 7 attack categories with a mock tool environment covering API, database, memory, credential, and communication surfaces
Auto-exports training data from every red-team attack session
HackMyAgent v0.11.9 adds hackmyagent check-metadata command to export check definitions as JSON for downstream integration.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.9 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.9
└──▷ TRY IT
Pull all check definitions into a local file to feed into a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., ticket system, or custom reporting pipeline.
HackMyAgent v0.11.7 adds .hmaignore support so practitioners can exclude paths from HardeningScanner findings.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.7 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.7
└──▷ USE IT
Exclude test fixtures and payload directories from HardeningScanner findings so intentional vulnerability patterns in test data don't pollute real results.
text
# .hmaignore
test-fixtures/
__tests__/
src/attack/payloads/
# add any other paths to suppress here
HackMyAgent v0.11.5 adds secure-nemoclaw command with 28 checks for NVIDIA NemoClaw sandboxes plus a community result-sharing integration.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.5 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.5
└──▷ TRY IT
Run the full NemoClaw sandbox security scan against a local installation to surface secrets, network exposure, and OpenClaw layer issues in one pass.
$ hackmyagent secure-nemoclaw
Adds secure-nemoclaw command — a new scanner for NVIDIA NemoClaw sandbox installations covering 28 security checks across secrets, network, skills, process, OpenClaw layer, and internet exposure categories.
Adds NEMO static analysis with 10 checks for generic codebase vulnerability patterns including curl-pipe without checksum, empty artifact digests, exec() injection, predictable /tmp paths, process.env leakage, TOCTOU races, unsafe deserializationdeserializationTurning stored or transmitted data back into objects a program can use. Unsafe handling of untrusted data can allow unexpected behavior or code execution., and messaging API egress.
Adds Contribute integration — a shared community trust contribution client for anonymous scan result sharing.
HackMyAgent v0.11.4 adds a --ci flag for non-interactive pipelines and expands Unicode steganography detection to homoglyphs and bidi overrides.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.4 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.4
└──▷ TRY IT
Run a non-interactive security scan in CI so the pipeline fails fast on any finding without waiting for user input.
$ hackmyagent secure --ci ./my-agent/
Scan an agent codebase specifically to surface homoglyph and bidi-override Unicode smuggling in Python and YAML source files.
$ hackmyagent scan-soul --ci ./my-agent/
Adds --ci flag to secure and scan-soul subcommands: suppresses interactive prompts, defaults --no-contribute, and exits non-zero on any findings for pipeline integration.
Adds new check UNICODE-STEGO-005 for homoglyph confusable detection — finds Cyrillic, Greek, and Fullwidth characters that visually impersonate Latin letters in source code, skipping comment lines to reduce false positives; severity: high.
Expands UNICODE-STEGO-001 to detect zero-width characters (U+200B–200D), mid-file BOMBOMA Bill of Materials listing every component, library, and dependency in a software project; cyber tools use it to track what is in a codebase and flag known-vulnerable components quickly. (U+FEFF), and bidi overrides (U+202A–202E, U+2066–2069) in addition to existing variation selector and tag character detection; bidi/variation/tag severity: critical, zero-width-only: high.
Expands file type scanning to include .py, .md, .txt, .yaml, .yml, .json, and .toml alongside existing JS/TS coverage.
Adds buildContributionSummary() function for previewing what data would be shared before contributing.
HackMyAgent v0.11.3 adds AI Visibility Protection plugin, --fix --dry-run preview mode, and a 4-stage fix-all pipeline.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.3 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.3
└──▷ TRY IT
Preview all auto-fixes in a repo without writing any changes — safe to run in CI before committing.
$ hackmyagent --fix--dry-run
Run the full 4-plugin remediation pipeline, including the new AI Visibility Protection stage, after a credential scan.
$ hackmyagent fix-all --with-aim
Adds --fix --dry-run flag that shows [DRY RUN] Would fix: previews per finding before any changes are applied.
Adds --version output that includes the tool name (hackmyagent 0.11.3).
Adds --help Quick start section at the top of help output.
Adds AI Visibility Protection plugin to the fix-all pipeline — blocks .env from AI tools and encrypts MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. keys.
Adds cross-tool recommendations that suggest secretless-ai after credential findings.
+2 moreshow less
Adds Next steps section after secure with fix-all --with-aim recommendation.
Deduplicate findings by file:line, keeping the highest severity when duplicates exist.
HackMyAgent v0.11.0 adds 40 new payloads across 4 attack categories and hardens skill validation with 9 new checks.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.0 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.11.0
Adds Memory Weaponization attack category (MEM-001 to MEM-010) covering persistent memory injection and cross-session exploitation.
Adds Context Window attack category (CTX-001 to CTX-010) covering safety instruction displacement and context overflow.
Adds Supply Chain attack category (SUP-001 to SUP-010) covering dependency confusiondependency confusionAn attack that tricks a package manager into installing an attacker's public package in place of an intended internal dependency. The risk comes from how names and package sources are resolved., typosquattingtyposquattingUsing a name close to a trusted domain or software package to catch spelling mistakes. Attackers use it to lure people or installers to a malicious lookalike., and build injection.
Adds Tool Shadow attack category (SHADOW-001 to SHADOW-010) covering tool replacement, MITM, and resolution exploitation.
Expands total payload library from 75 to 115 payloads.
Adds --publish flag to push scan results to the OpenA2A Registry from the CLI.
Adds --registry-url flag to target custom registry endpoints instead of the default.
Adds Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. payload signing for authenticated scan submissions to the registry.
Adds community scan contribution support via weighted aggregation of submitted results.
nono v0.19.0 adds linux-arm64 support, macOS network tracing via nettop, and IPCIPCInter-process communication, ways for separate programs to exchange data or signals. Examples include pipes, sockets and shared memory. semaphore sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..
└──▷ GET THIS VERSION
$ git clone --branch v0.19.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.19.0
Adds linux-arm64 binary, extending nono to ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware.-based Linux environments.
Adds macOS network tracing via nettop in learn mode, enabling automatic discovery of network activity for policy generation.
Adds IpcMode capability for POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems. semaphores in the macOS Seatbelt sandbox, allowing sandboxed processes that use IPC semaphores to be properly profiled and contained.
nono v0.16.0 adds ABI-aware Landlock sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls., external proxy bypass routing, Claude Code integration, and a swival profile.
└──▷ GET THIS VERSION
$ git clone --branch v0.16.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.16.0
└──▷ TRY IT
Route a trusted internal domain directly around the nono proxy while keeping all other traffic sandboxed.
$ nono run --external-proxy-bypass internal.corp.example.com -- ./my-service
Adds ABI-aware Landlock capability system for fine-grained filesystem sandboxing tuned to the target binary's ABI.
New --external-proxy-bypass flag routes specified domains directly, skipping the sandbox proxy.
Injects nono sandbox instructions via Claude Code system prompt, enabling automated sandbox policy enforcement in AI coding sessions.
Adds same-sandbox process mode for signal and process-info operations.
nono v0.15.0 adds platform-aware profiles, capability elevation, Debian packaging, a built-in Codex profile, and Apple Passwords credential support.
└──▷ GET THIS VERSION
$ git clone --branch v0.15.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.15.0
└──▷ USE IT
Restrict a sandboxed AI coding agent to only the privileges it needs by declaring capability elevation in your profile.
yaml
# In your nono profile TOML/YAML:
capability_elevation = { groups = ["audio"] } # OS-aware; ignored on unsupported platforms
Pull API credentials from the macOS Passwords app instead of storing secrets in plaintext config.
yaml
# In your nono profile, set the credential URI to an Apple Passwords entry:
credential = "apple-passwords://MyVault/OPENAI_API_KEY"
Makes the claude-code profile platform-aware, adapting behavior based on the host OS.
Adds capability_elevation profile field with OS-aware group support for fine-grained privilege control in profiles.
Adds Debian package support, enabling installation via .deb on Debian-based systems.
Adds a built-in Codex profile for out-of-the-box OpenAI Codex sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..
Adds Apple Passwords URI credential support for sourcing secrets directly from the macOS Passwords app.
Docker Sandboxes v0.21.0 adds network policy controls, rm --all, multi-worktree --branch flag, and standalone Linux binary.
└──▷ GET THIS VERSION
$ git clone --branch v0.21.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.21.0
└──▷ TRY IT
Tear down every sandbox at once during CI cleanup or a fresh-start workflow.
$ sbx rm --all
Restore the default network policy for a sandbox after ad-hoc rule changes.
$ sbx policy reset
New policy reset command restores default network policies for a sandbox.
Adds default network policy selection during sandbox creation.
Deduplicates network domain rules so one rule is created per domain.
New rm --all flag removes all sandboxes in a single command.
New --branch flag enables multiple worktrees inside one sandbox, using the branch name as the worktree path.
+10 moreshow less
Adds --preserve-credentials / --preserve-secrets flag to reset for retaining secrets across resets.
Returns exit code 127 when a binary is missing in sbx exec, matching POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems. convention.
Handles Ctrl+Z to suspend the sbx process.
Supports configurable Docker volume size via environment variable for Docker-in-Docker (DinD).
Exposes internal error details in API error responses.
Supports dots in sandbox names by sanitizing Docker network names.
Adds Generic OAuth support for blueprint agents.
TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. gains reusable dialog open/close/resize animations and improved Warp terminal support.
Linux packaging now available as a standalone binary.
Points SSL_CERT_FILE, NODE_EXTRA_CA_CERTS, and REQUESTS_CA_BUNDLE at the full CA bundle.
15 details in Everything
└──▷ BREAKING ON UPGRADE
!The reset flag --preserve-credentials is renamed to --preserve-secrets.
Ai-Safe2-Framework provides governance, risk, and compliance controls for securing agentic AI systems and non-human identities.
AI SAFE2 v2.1 adds self-assessment tool, scoring methodology, and compliance crosswalk for AI governance
└──▷ GET THIS VERSION
$ git clone --branch 2026-3-23-AISM-Assessment_and_Measurement_Tools_+_Document https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-3-23-AISM-Assessment_and_Measurement_Tools_+_Document
Adds AISM-Self-Assessment-Tool.md with a structured checklist producing a scored AISM Sovereignty Score (1 to 5 scale) across five pillars.
Adds AISM-Scoring-Matrix-Methodology.md defining the quantitative evaluation framework, dimension weighting, and CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. integration for risk scoring.
Adds AISM-Compliance-Crosswalk.md mapping controls to NIST AI RMFNIST AI RMFA voluntary framework published by NIST that gives organizations a structured process for identifying, assessing, and managing risks introduced by AI systems, giving cyber tools a common vocabulary and governance scaffold. 1.0, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC 42001:2022, EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., CSA AICM, NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, MITRE ATLASMITRE ATLASA MITRE-maintained knowledge base of adversarial tactics and techniques targeting AI and machine learning systems, modelled on ATT&CK, giving cyber tools a structured taxonomy for AI-specific threat modelling., and OWASP Top 10 for LLM.
AI SAFE² Framework Dashboard v2.1 launches interactive taxonomy explorer with real-time search and risk filtering
Adds interactive web-based taxonomy explorer for AI SAFE² framework controls hosted on GitHub Pages
Enables real-time client-side search across control IDs, names, descriptions, sub-topics, and decision-maker impacts
Adds risk-level filtering (Critical, High, Medium, Low) and strategic pillar navigation to the dashboard
Introduces v2.1 control highlighting that automatically badges next-generation controls (Agent Security, Memory Security, NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls., Multi-Agent, Distributed Systems)
OpenShell runs autonomous AI agents in policy-controlled sandboxes with isolated filesystem, network, and credential access.
OpenShell v0.0.19 adds L7 query parameter matchers, custom inference timeouts, and streaming SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. identity resolution.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.19 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.19
Adds L7 query parameter matchers in the sandbox for fine-grained request filtering based on URL query strings.
Enables setting a custom inference timeout for inference workloads.
Introduces streaming SHA256 hashing and non-blocking spawn for identity resolution, improving performance at scale.
3 details in Everything
6 more releases in this issue
· 2026-03-17 → 2026-03-31
OpenShell v0.0.16 adds a dedicated cluster:gpu task to manage GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. cluster operations.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.16 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.16
└──▷ USE IT
Execute GPU-specific tasks within an OpenShell cluster environment.
shell
openshell run cluster:gpu
Run end-to-end tests that leverage the new GPU task infrastructure.
shell
openshell run e2e:gpu
feat(tasks): add cluster:gpu task and wire e2e:gpu to use it
OpenShell v0.0.13 adds GitHub Copilot CLI agent provider, standalone OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. event library, and a gateway-to-sandbox runtime settings channel.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.13 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.13
Adds GitHub Copilot CLI as an agent provider, enabling Copilot-backed shell interactions.
Introduces the openshell-ocsf crate — a standalone library of OCSF event types, formatters, and tracing layers for structured security telemetry.
Adds a gateway-to-sandbox runtime settings channel, enabling live configuration updates to sandboxes without restart.
Disables NFD/GFD and removes nodeAffinity from the device plugin chart, simplifying GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. node configuration.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The UpdateSettingsRPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. is renamed to UpdateConfig — any client or automation calling UpdateSettings will break.
!The pod_template field is removed from the CreateSandbox RPC — any client passing this field will break.
AgentShield v1.4.0 adds watch mode, runtime monitoring, PR gate, org policy enforcement and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool poisoning detections
└──▷ GET THIS VERSION
$ git clone --branch v1.4.0 https://github.com/affaan-m/agentshield.git
# already have the repo? check out this version:$ git checkout v1.4.0
Adds --watch flag for continuous scanning with config drift detection
Adds PreToolUse hook to intercept real-time tool calls via runtime monitoring
Adds .agentshield/policy.json configuration file for org-wide security baselines
Adds PR security gate with baseline comparison and inline annotations
Adds 5 new rules for MCP tool poisoning detection (description injection)
+1 moreshow less
Adds npm package metadata checks for supply chain verification of MCP servers
AI-Infra-Guard v4.0 introduces the Agent-Scan framework, ClawScan integration, and new AI component fingerprints.
└──▷ GET THIS VERSION
$ git clone --branch v4.0 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.0
EdgeOne ClawScan provides a dedicated security portal for OpenClaw via [https://matrix.tencent.com/clawscan/](https://matrix.tencent.com/clawscan/openclaw).
New Agent-Scan framework introduces a multi-agent architecture with specialized agents (SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly., config-scanner, vulnerability detector, etc.) for autonomous agent security scanning.
Added fingerprints for llama.cpp, HuggingFace TGI, NVIDIA NIM, and LocalAI in component detection.
Agent-Scan simulates interactions using actions: bash, file read/write, edit, grep, glob, ls, batch, thinking, todo, task, skill, MCP tool, dialogue, and finish.
Giskard tests and evaluates LLM applications for performance, bias, and security issues.
Adds scenario and check error details to suite reports in giskard-checks
└──▷ GET THIS VERSION
$ git clone --branch giskard-core/v1.0.1b1 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-core/v1.0.1b1
└──▷ BREAKING ON UPGRADE
!Removed Scenario.from_sequence method
0 more releases in this issue3 more releases in this issue · 2026-03-12 → 2026-03-26
giskard-checks v1.0.1a2 adds print_report to result models and makes Suite.append() chainable.
└──▷ GET THIS VERSION
$ git clone --branch giskard-checks/v1.0.1a2 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-checks/v1.0.1a2
Adds print_report method to check result models for direct report printing
Makes Suite.append() chainable by returning self instead of None
Adds metadata parameter to the generator completion pipeline and changes Interact injection to be name-based.
└──▷ GET THIS VERSION
$ git clone --branch giskard-agents/v1.0.2a1 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-agents/v1.0.2a1
Changes Interact injection behavior from position-based to name-based matching
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Interact injection is now name-based, breaking previous positional matching assumptions
Giskard v1.0.1a1 introduces RegexMatching checks, scenario annotations, batch suite execution, and agent step/type coercion.
└──▷ GET THIS VERSION
$ git clone --branch giskard-core/v1.0.1a1 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-core/v1.0.1a1
Add RegexMatching check implementation for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. and prompt reliability evaluation
Add support for annotations in Scenario and Trace objects
Suite now supports running batches of scenarios with dynamic binding
Introduce step-level type discriminator in agents (GAP-003)
Add tool input coercion and output serialization capabilities to agents (GAP-005)
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The project has been rewritten as a v3 monorepo with giskard-core, giskard-agents, and giskard-checks packages
!Scenario factory scenario() has been removed in favor of a mutable class structure
pipelock v2.1.0 adds assess CLI command, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocol scanning, new API endpoints, and A2AA2AAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools. foundation.
└──▷ GET THIS VERSION
$ git clone --branch v2.1.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.1.0
Adds the pipelock assess subcommand for generating signed security assessment reports, including flight recorder and agent bill of materialsbill of materialsA structured list of every component, library, and dependency that makes up a piece of software or hardware, used by cyber tools to track what is inside a product and surface known vulnerabilities in its parts. generation.
Introduces session management features: session_admin API endpoints for adaptive enforcement recovery, plus session manifest and signed decision records.
Adds domain configuration support: trusted_domains for forward proxy mode and exempt_domains for response scanning.
Implements MCP-related capabilities: A2A protocolA2A protocolAn open protocol from Google for communication between AI agents, letting them discover each other's capabilities and exchange tasks without custom integration code. scanning foundation (types, field walker, detection), binary integrity checks with denial-of-wallet detection, and redirect handlers (fetch-proxy, quarantine-write).
Adds canary token detection with simulate expansion capabilities.
+1 moreshow less
Introduces policy and compliance features: evidence mappings, trust attestation, and the policy capture and replay engine.
6 details in Everything
5 more releases in this issue
· 2026-03-03 → 2026-03-30
New sandbox profiles, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. proxy integration, attack simulation command, and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. exemptions.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.0.0
Adds --sandbox and --workspace flags to the JetBrains install subcommand, and --best-effort flag to the sandbox command for container environments
Adds adaptive enforcement of exempt_domains for DLP scoring, new security_scoring and tool_policy_overpermission_audit config sections, per-agent sandbox profiles/strict mode/diagnostics via config keys, and redirect policy action configuration for MCP tool call routing
Adds new attack-simulation built-in command for red-team exercises, JetBrains/Junie MCP proxy integration as a new connector type, and redirect policy action configuration for MCP tool call routing
Enables full-schema tool poisoning detection with state/control response patterns
Adds generic HTTP reverse proxy capability with body scanning support
+1 moreshow less
Adds sandbox-exec (Seatbelt) integration for macOS sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. and enables unprivileged process sandboxing using Landlock + seccomp + netns
pipelock v1.5.0 adds OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. log export, adaptive enforcement v2, community rules registry, filesystem sentinel, financial DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and key-scoped tool policies
└──▷ GET THIS VERSION
$ git clone --branch v1.5.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v1.5.0
Adds otlp log export sink supporting HTTP/protobuf transport
Enables adaptive_enforcement_v2 for escalation-aware policy enforcement across all transports
Unlocks community rules via the new registry URL in the build wiring
Introduces filesystem_sentinel to monitor subprocesses in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. mode
Adds financial DLP patterns with checksum validation for data leakage detection
+1 moreshow less
Supports key-scoped tool policy matching using the arg_key configuration field
Pipelock v1.3 adds CRLF/path traversal detections, SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output, a new evaluation API endpoint, and license install command.
└──▷ GET THIS VERSION
$ git clone --branch v1.3.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v1.3.0
Adds POST /api/v1/scan evaluation endpoint
Adds SARIF output format for audit and git scan-diff commands
Adds CRLF injection detection to the scanner pipeline
Adds path traversal detection to the scanner pipeline
Adds pipelock license install subcommand for enterprise license management
+3 moreshow less
Adds runtime license loading from environment variable and file path
Adds tier and subscription_id fields to the license token structure
Adds subdomain entropy exclusions for high-entropy cloud domains
pipelock v0.3.6 adds TLS interception for CONNECT tunnel scanning and a new report command for HTML/JSON audit reports
└──▷ GET THIS VERSION
$ git clone --branch v0.3.6 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.3.6
Adds TLS interception support for CONNECT tunnel scanning in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool poisoning detection
Adds parameter schema scanning to the MCP tool poisoning detection engine
Crust v4.3.0 introduces unified crust wrap stdio proxy, new detection rules for Cursor/Codex/Roo, and subcommand consolidation.
└──▷ GET THIS VERSION
$ git clone --branch v4.3.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v4.3.0
crust wrap handles all stdio proxy modes (ACP + MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. auto-detection) via single command
Adds protection rules for .cursor/cli.json, .codex/config.toml, .roo/mcp.json, and *.code-workspace files
New status --agents subcommand to view agent status
New list-rules --reload subcommand to manage rule reloading
CVE tracker expanded to cover 45 real-world vulnerabilities including Cursor workspace RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives., Codex CLI config injection, and Roo Code config poisoning
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed redundant acp-wrap, mcp gateway, agents, and reload-rules subcommands; use crust wrap and list-rules --reload instead
crust v3.1.0 adds PowerShell worker, .NET API detection, and multi-operation command classification
└──▷ GET THIS VERSION
$ git clone --branch v3.1.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v3.1.0
Adds persistent PowerShell (pwsh) worker with dual-parse architecture to detect static method calls like [System.Net.WebClient]::new() that the bash parser misses
Adds -EncodedCommand support using a temporary file to bypass the Windows 8191-character command-line limit
Adds Host extraction gate for network tools (socat, nc, ncat, netcat) to extract hostnames even when their primary operation is execution
Adds multi-operation classification via CommandInfo.ExtraOps []Operation allowing rules to match commands with multiple capabilities (e.g., vim as [OpRead, OpWrite])
Zenity discovers, secures and governs enterprise AI agents from buildtime to runtime across SaaS, endpoint and cloud.
Zenity adds native AI Security Posture Management and agent inventory integration with ServiceNow SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation..
Adds native AI Security Posture Management (AISPM) engine to Zenity, now integrated into ServiceNow SecOps for continuous analysis of agents' excessive permissions, unsafe prompt logic, data exposure risks, and broken integrations.
Extends Zenity's agent inventory visibility to include underlying workflows, API dependencies, identities, credentials, and data flows for agents across non-ServiceNow environments like SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and endpoints.
Enables real-time vulnerability insights, misconfiguration detection, and risk scoring for AI agents within ServiceNow SecOps workflows.
3 details in Everything
1 more release in this issue
· 2026-03-23 → 2026-03-24
Joplin v3.6.3 adds FrontMatter rendering, API note revision deletion, and context menus for non-image resources.
└──▷ TRY IT
Delete specific historical revisions for a note via the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to manage storage or data hygiene.
$ DELETE /notes/<note_id>/revisions/<revision_id>
Add support for FrontMatter block rendering in notes
Api: Add a delete revisions for note API
Add context menu to non-image resources in Markdown editor
VS Code 1.110 adds agent plugins, agentic browser control, session memory, context compactioncontext compactionCondensing an AI conversation or working history to free space in the model's context window. A summary preserves useful information, but details can be lost., and session forking for AI workflows.
└──▷ GET THIS VERSION
$ git clone --branch 1.110 https://github.com/microsoft/vscode.git
# already have the repo? check out this version:$ git checkout 1.110
Adds Agent Plugins (experimental): install prepackaged bundles of skills, tools, and hooks from the Extensions view to extend agent capabilities.
Adds Agentic Browser Tools (experimental): lets the agent drive the integrated browser to interact with your app and verify its own changes autonomously.
Adds Session Memory for plans: persists plans and guidance across conversation turns so agents maintain context in longer-running tasks.
Adds Context Compaction: manually compact conversation history to free up context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. space during long sessions.
Adds Fork a Chat Session: creates a new, independent session that inherits conversation history, enabling exploration of alternative approaches without losing prior context.
+4 moreshow less
Adds Agent Debug Panel (preview): provides real-time visibility into agent events, tool calls, and loaded customizations.
Adds Create Agent Customizations from Chat: generates prompts, skills, agents, and hooks directly from a conversation.
Adds Kitty graphics protocolKitty graphics protocolA terminal graphics protocol created by the Kitty terminal emulator project that lets applications render pixel-accurate images directly inside a terminal, giving cyber tools rich visual output without a GUI. support in the integrated terminal: renders high-fidelity images inline in the terminal.
Improves chat accessibility with screen reader enhancements, keyboard navigation, and notification signals.
Ghostty 1.3 adds scrollback search, native scrollbars, command notifications, key tables, and AppleScript support
Adds cmd+f (macOS) / ctrl+shift+f (GTKGTKA cross-platform widget toolkit maintained by the GNOME project for building graphical user interfaces in C, with bindings for many languages, giving cyber tools a native desktop UI without writing platform-specific rendering code.) for scrollback search with configurable keybinds
Adds native overlay scrollbars controlled by scrollbar config option
Enables click-to-move-cursor in shell prompts via OSC 133 support
Adds notify-on-command-finish, notify-on-command-finish-action, and notify-on-command-finish-after configuration options
Introduces key tables, chained keybinds, and catch_all special key to the keybind system
+2 moreshow less
Adds tab-inherit-working-directory and split-inherit-working-directory config keys for fine-grained directory inheritance control
Enriches clipboard copy with vt format support via the copy_to_clipboard binding parameter
gh agent-task supports ghe.com; new TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. prompter behind GH_EXPERIMENTAL_PROMPTER; search-based assignee selection on gh pr/issue create/edit
└──▷ GET THIS VERSION
$ git clone --branch v2.89.0 https://github.com/cli/cli.git
# already have the repo? check out this version:$ git checkout v2.89.0
└──▷ USE IT
Enable the experimental TUI prompter for interactive commands.
goshs v2.0.0-beta.2 adds SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. domain binding to prevent open-relay configurations.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.0-beta.2 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.0-beta.2
└──▷ TRY IT
Lock the SMTP server to your domain so it only accepts mail for that domain and cannot be abused as an open relay.
$ goshs --smtp-domain example.com
Binds the built-in SMTP server to a specific domain via --smtp-domain, preventing open-relay creation.
goshs v2.0.0-beta.1 adds a Burp-style Collaborator tab with built-in DNS, SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure., and HTTP logging for OOB exfiltration.
└──▷ GET THIS VERSION
$ git clone --branch v2.0.0-beta.1 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.0-beta.1
└──▷ HOW TO FIND IT
Catch DNS, SMTP, and HTTP callbacks during a CTFCTFCapture The Flag — a competitive hacking challenge format where participants exploit intentionally vulnerable systems or puzzles to retrieve hidden strings, used by cyber tools to practice and demonstrate offensive and defensive techniques. or XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session./CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. engagement — open the Collaborator tab in the goshs web UI after pointing your domain's NS/MX records at the host running goshs.
📍In the web UI, click the Collaborator tab to view captured DNS queries, inbound SMTP messages, and full HTTP request logs in real time.
New Collaborator tab provides out-of-band interaction capture similar to Burp Collaborator.
Built-in DNS server catches DNS callbacks when your domain points to the goshs instance.
Built-in SMTP server captures inbound mail for exfiltration detection in CTF, CSRF, and XSS scenarios.
Full HTTP request log now surfaced in the Collaborator tab, replacing the need for -V verbose mode.
Complete UI/UX redesign with new templates, CSS, and JavaScript.
SysReptor 2026.18 adds an in-editor image editor and expands the AI agent with write_todos and subagent support.
└──▷ GET THIS VERSION
$ git clone --branch 2026.18 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.18
└──▷ HOW TO FIND IT
Edit a screenshot or diagram inline while writing a pentest report, without leaving the Markdown editor.
📍In the report editor, insert or select an image, then click the image editor toolbar icon to crop, annotate, or adjust the image directly in SysReptor.
Adds an image editor directly inside the Markdown editor for inline image manipulation during report writing.
Expands the AI agent with a write_todos tool for task tracking within the agent workflow.
Introduces AI subagents, enabling the AI agent to delegate to specialized sub-processes.
Obsidian is a note-taking app that lets you write and organize Markdown files stored locally in a vault.
Obsidian CLI gains autocompletion and faster terminal interactions via bundled binary
Adds id= parameter support to enable terminal autocompletion for Obsidian commands in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
Replaces Electron binary invocation with a dedicated CLI binary for significantly faster terminal interactions.
Kali Linux 2026.1 adds BackTrack Mode via kali-undercover CLI, 8 new tools, and kernel 6.18
└──▷ TRY IT
Switch Kali desktop to BackTrack 5 aesthetic for a legacy look and feel.
$ kali-undercover --backtrack
kali-undercover --backtrack subcommand to activate BackTrack 5 theme recreation
AdaptixC2 post-exploitation framework package
Atomic-Operator package for executing Atomic Red Team tests
Fluxion social-engineering research tool package
GEF modern GDB experience package
+5 moreshow less
MetasploitMCP MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server package for Metasploit
SSTImap automatic SSTISSTIServer-Side Template Injection, a vulnerability class where attacker-controlled input is evaluated by a server-side template engine, enabling remote code execution or data exfiltration. detection tool package
WPProbe WordPress plugin enumeration tool package
XSStrike advanced XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. scanner package
Cloudflare Workers adds RFC 9440 mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. cert fields to request.cf.tlsClientAuth
Adds certRFC9440, certRFC9440TooLarge, certChainRFC9440, and certChainRFC9440TooLarge fields to the request.cf.tlsClientAuth object in Cloudflare Workers for direct access to client certificates in RFC 9440 format
Enables forwarding of mTLS client certificates to origin servers without custom parsing logic using the new RFC 9440 fields
Cloudflare adds Code Mode for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server portals, exposing a single code tool via dynamic Workers.
Adds optimize_context query parameter to MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. portal URLs for token savings
Adds minimize_tools context optimization mode via the optimize_context query parameter to strip tool descriptions and schemas from the initial context payload.
Adds search_and_execute context optimization mode via the optimize_context query parameter to expose only query and execute tools, reducing initial token cost.
DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. now processes ZIP files (and Office docs) using a streaming handler, removing per-file size limits.
DLP scanning for ZIP files uses a streaming handler that scans contents element-by-element as data arrives
Microsoft Office documents (DOCX, XLSX, PPTX) now benefit from the same streaming memory efficiency improvements
Durable Objects now expose ctx.id.jurisdiction for region-aware logic
Adds ctx.id.jurisdiction access inside Durable Object classes to report the creation jurisdiction (e.g., eu) without passing arguments or persisting state
Cloudflare Gateway adds Unsanitized HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session.DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. profile for detecting and redirecting unsanitized HTTP Archive uploads
Adds the Unsanitized HAR predefined DLP profile to detect HAR files in HTTP traffic
Enables Gateway Redirect action to send users to https://har-sanitizer.pages.dev/ for sanitization
Logs now classify detected HAR files as Unsanitized or Sanitized in Gateway logs
Cloudflare Gateway expands policy capabilities by introducing OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. Claims filtering for enhanced identity-based traffic control.
Adds OIDC Claims selector to Firewall, Resolver, and Egress policy builders
AI Crawl Control now preserves custom WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. rule modifications made in the WAF custom rules editor.
Custom modifications to the underlying WAF rule are preserved when updating crawler actions in AI Crawl Control.
Dynamic Workers open beta introduces runtime code execution via env.LOADER.load() and new helper libraries for agents
Adds env.LOADER.load() method to spin up new Workers at runtime with specified compatibilityDate, mainModule, modules, and globalOutbound settings
Adds worker.getEntrypoint().fetch(request) API to invoke the newly spawned Dynamic Worker
Adds get(id, callback) mode to cache and reuse Dynamic Workers by ID for subsequent requests
Introduces @cloudflare/codemode library with a code() tool to replace multiple LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. tool calls with single TypeScript execution
Introduces @cloudflare/worker-bundler library to resolve npm dependencies and bundle source files at runtime
+1 moreshow less
Introduces @cloudflare/shell library providing a virtual filesystem backed by SQLite and R2
Web Assets fields added to GraphQL Analytics API for request-level operation and label visibility
Adds webAssetsOperationId field to httpRequestsAdaptive dataset to expose the saved endpoint ID matched by a request.
Adds webAssetsLabelsManaged field to httpRequestsAdaptiveGroups dataset to expose managed labels (e.g., cf-llm, cf-log-in) mapped to the matched operation.
useAgent and AgentClient now expose a reactive state property for direct state access.
schedule() supports an idempotent option to deduplicate schedule rows across Durable Object restarts.
AgentClient accepts an optional agent type parameter for full TypeScript inference on RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. calls.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Zod v3 is no longer supported; agents, @cloudflare/ai-chat, and @cloudflare/codemode now require Zod ^4.0.0.
AI Search gains public endpoints, embeddable UI snippets, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. agent support
Adds Public Endpoint toggle in AI Search Settings to expose search without API auth.
Adds UI snippets (search modal component) configurable at search.ai.cloudflare.com for website embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG..
Adds MCP endpoint at https://<PUBLIC_ENDPOINT_ID>.search.ai.cloudflare.com/mcp for agent integration.
Cloudflare AI Search adds OpenAI-compatible /search and /chat/completions REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints
Adds POST /accounts/{account_id}/ai-search/instances/{name}/chat/completions endpoint for chat completions using an OpenAI-compatible messages array format.
Adds POST /accounts/{account_id}/ai-search/instances/{name}/search endpoint for AI Search queries.
New Metrics and Settings tabs for Workers VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Services add connection health monitoring and configuration editing in the dashboard
Adds a Metrics tab to each VPC Service in the Cloudflare dashboard to monitor connection health and debug failures.
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server portals can now route portal traffic through Cloudflare Gateway for logging and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest..
Moonshot AI Kimi K2.5 now available on Workers AI with multi-turn tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions., vision inputs, and async batch API
Adds @cf/moonshotai/kimi-k2.5 model to Workers AI inference platform
Adds support for 256k context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. in Kimi K2.5 requests
Adds multi-turn tool calling capability to Kimi K2.5
Adds vision input support (images alongside text) to Kimi K2.5
Adds structured outputsstructured outputsForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. with JSON modeJSON modeForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. and JSON Schema support in Kimi K2.5
+3 moreshow less
Adds function callingfunction callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. integration for external tools/APIs in Kimi K2.5
Surfaces cached tokens as a usage metric and offers pricing discount on cached tokens
Redesigns asynchronous batch API with pull-based system for processing queued requests
Hyperdrive now supports custom TLS/SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificates and client mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. for MySQL databases.
└──▷ USE IT
Upload a CA certificate that your MySQL database server uses, so Hyperdrive can verify it.
Cloudflare SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning operations now captured in Audit Logs v2
Logs specific SCIM actions: Create/Update/Replace/Delete SCIM User and Create/Update/Delete SCIM Group.
Cloudflare dashboard adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning support for Authentik identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.
Enables syncing users and group information from Authentik to Cloudflare via SCIM
Adds cf-aig-collect-log-payload header to AI Gateway for logging metadata without storing request/response bodies
New cf-aig-collect-log-payload HTTP header on the https://gateway.ai.cloudflare.com/v1/$ACCOUNT_ID/$GATEWAY_ID/openai/chat/completions endpoint lets you skip payload storage while keeping metadata logs like token counts and cost.
Default behavior for the new cf-aig-collect-log-payload header is true, storing payloads; setting it to false excludes sensitive data from logs.
@cloudflare/codemode v0.2.1 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. barrel exports, zero-dependency entry point, and custom sandbox modules.
@cloudflare/codemode/mcp exports codeMcpServer() to wrap an existing MCP server and openApiMcpServer() to create search/execute tools from an OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec.
The main entry point @cloudflare/codemode no longer requires ai or zod as peer dependencies.
DynamicWorkerExecutor accepts an optional modules option to inject custom ES modules into the sandbox.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!generateTypes and the ToolDescriptor / ToolDescriptors types have moved to @cloudflare/codemode/ai.
Wrangler adds wrangler containers ssh command and wrangler_ssh config keys for direct SSH access to Containers.
Adds the wrangler containers ssh <INSTANCE_ID> subcommand to open an interactive SSH session or execute single commands in a running Container instance
Adds the wrangler_ssh.enabled configuration key (supporting both JSON and TOML formats) to enable SSH access for a specific Container
Adds the authorized_keys configuration array to specify the public keys permitted for authentication within the Container
NVIDIA Nemotron 3 Super now available on Workers AI via @cf/nvidia/nemotron-3-120b-a12b
Adds @cf/nvidia/nemotron-3-120b-a12b model to Workers AI for reasoning and tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions.
WARP Windows beta gets Cloudflare One UI with connectivity button and collapsible nav, plus QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. metrics and Cubic tuning.
Introduces the new Cloudflare One Client interface for Windows, changing connectivity management from a toggle to a button and adding a collapsible navigation bar for settings and device profile access
Adds detailed QUIC connection metrics to diagnostic logs for improved troubleshooting
Switches tunnel congestion control algorithm to Cubic for improved reliability across platforms
Cloudflare WARP for macOS 2026.3.566.1 adds new UI with connectivity button, collapsible nav, and tunnel stats monitoring
Redesigned client interface changes connectivity management from a toggle to a button
New collapsible navigation bar in the expanded view exposes connectivity, settings, and device profile information
Added detailed QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. connection metrics to diagnostic logs for better troubleshooting
Added monitoring for tunnel statistics collection timeouts
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Empty MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. files are now rejected instead of being incorrectly accepted as a single MDM config.
Cloudflare launches open beta Web and API Vulnerability Scanner for API Shield subscribers via API.
Introduces the Web and API Vulnerability Scanner (Open Beta) as a stateful DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. platform for finding logic flaws in APIs
Adds support for detecting Broken Object Level Authorization (BOLABOLABroken Object Level Authorization, an API vulnerability class where a server fails to verify that the requesting user owns or may access the object ID they supply, letting attackers read or modify other users' data.) vulnerabilities by simulating attacker and owner contexts
New MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Portal Logs dataset and new fields added across multiple Cloudflare Logpush datasets
Adds the MCP Portal Logs dataset to Logpush with fields including ClientCountry, ClientIP, ToolCallName, SessionID, and ServerResponseDurationMs for tracking Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. interactions.
Adds HTTPResponseBody and HTTPResponseHeaders fields to the DEX Application Tests Logpush dataset.
Workers AI toMarkdown now accepts conversionOptions for HTML selectors, PDF metadata exclusion, and image description languages.
└──▷ TRY IT
Use the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to convert HTML while specifying a CSS selector for content extraction.
Cloudflare Gateway adds authorization proxy and hosted PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. files for identity-aware traffic without WARP client.
Adds Gateway Authorization Proxy to replace static IP-based authorization with Cloudflare Access authentication
Adds ability to display multiple identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. simultaneously for user login
Adds support for creating and hosting PAC files at https://pac.cloudflare-gateway.com/<account-id>/<slug>
Adds Copy as JSON and Copy as POST request options to Cloudflare One resource menus in the dashboard
Adds Copy as JSON menu option for supported Cloudflare One resources, outputting a minimal JSON representation of the resource's current fields.
Adds Copy as POST request menu option for supported Cloudflare One resources, outputting a ready-to-use API POST request body.
Initial support covers Access applications, Access policies, Gateway policies, Resolver policies, Service tokens, and Identity providersIdentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
Cloudflare Agents SDK v0.7.0 adds keepAlive, waitForMcpConnections, and structured observability
Adds keepAlive() and keepAliveWhile() methods to prevent Durable Object eviction during long-running work
Adds waitForMcpConnections option to AIChatAgent to ensure MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools are available before handling messages
Rewrites observability with structured events published to diagnostics_channels, exposed via the subscribe() helper from agents/observability
Arcade adds TelemetryPassbackMiddleware and full MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Resources support with enhanced dashboard auth.
Adds TelemetryPassbackMiddleware for serverExecutionTelemetry capability in arcade-mcp
Adds full support for MCP Resources, enhancing resource registration and JSON Schema generation in arcade-mcp-server
Upgrades dashboard authentication experience with a dedicated error page for OAuth failures
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Outlook Calendar, Outlook Mail, and SharePoint toolkits are renamed to microsoft_* prefix; old packages are deprecated
2 more releases in this issue
· 2026-03-06 → 2026-03-27
Arcade MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. adds Figma raw data inspection and a dedicated Microsoft Outlook/Calendar toolkit
Adds include_raw_data option to Figma_GetFileNodes for enhanced node detail inspection
Releases a separate Microsoft toolkit for Outlook Mail & Calendar functionalities
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The outlook and sharepoint toolkits are renamed to follow the standardized microsoft_* prefix; old packages are DEPRECATED
THE CYBER TOOLCHAIN
NO. -004