The Cyber Toolchain — issue -005, February 28, 2026
THE CYBER TOOLCHAIN
NO. -005
Tail
THE DAILY RELEASE FIREHOSE
PUBLISHED FEBRUARY 28, 2026 · EVERY DAY
EDITIONStail|grep|head|ls|diff|uniq
The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Sliver is an adversary emulation and red team framework
Sliver v1.7.2 adds multi-shell management, Windows PE metadata spoofing, and local file tab completion.
└──▷ GET THIS VERSION
$ git clone --branch v1.7.2 https://github.com/BishopFox/sliver.git
# already have the repo? check out this version:$ git checkout v1.7.2
└──▷ TRY IT
Background an interactive shell mid-session, start another task, then return to it — useful when juggling multiple objectives on one implant.
$ # Inside an active shell session
# Press ctrl+] to background the shell
shell ls # list all active shells and their IDs
shell attach 2 # re-attach to shell ID 2
Adds multi-shell management: background a shell with ctrl+], list active shells with shell ls, and re-attach with shell attach.
Implements Windows PE metadata spoofing to blend implants into target environments.
Adds local file tab completion for most commands and flags.
Improves macOS shellcode loader.
4 details in Everything
2 more releases in this issue
· 2026-02-01 → 2026-02-23
Sliver v1.6.10 adds xxd command, shellcode encoders, WASMWASMA binary instruction format for a stack-based virtual machine, maintained by the W3C, that lets code compiled from any language run at near-native speed inside a sandboxed environment across browsers and servers. Donut support, and expanded chtimes time formats.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.10 https://github.com/BishopFox/sliver.git
# already have the repo? check out this version:$ git checkout v1.6.10
Adds xxd command for hex-dump inspection of data from within a session.
Adds shellcode encoders for payload generation.
Adds WASM-based Donut integration for in-memory shellcode generation.
Expands time formats accepted by chtimes for more flexible timestamp manipulation.
Adds --tui mode improvements, a new version subcommand, and the masscan discovery backend.
└──▷ GET THIS VERSION
$ git clone --branch v6.1.0 https://github.com/Ullaakut/cameradar.git
# already have the repo? check out this version:$ git checkout v6.1.0
└──▷ TRY IT
Scan a target network using masscan for faster port discovery instead of the default backend.
$ cameradar --backend masscan -t 192.168.1.0/24
Check the installed version of cameradar in scripts or CI pipelines.
$ cameradar version
Adds masscan as a supported discovery backend option for network scanning
Adds a version subcommand to output tool version information programmatically
Improves the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. mode interface with new layout and interaction enhancements
3 details in Everything
1 more release in this issue
· 2026-02-01 → 2026-02-28
Adds TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. SIGINT handling and startup logging for plain/debug modes
└──▷ GET THIS VERSION
$ git clone --branch v6.0.2 https://github.com/Ullaakut/cameradar.git
# already have the repo? check out this version:$ git checkout v6.0.2
Implemented Ctrl+C (SIGINT) handling in TUI mode to gracefully cancel operations
Implemented startup configuration logging for plain/debug mode
ADScan v4.1.0 adds DCSyncDCSyncAn attack that abuses Active Directory replication permissions to request password-related data from a domain controller. It imitates the synchronization normally performed between controllers. fallback, WriteSPN exploitation, and KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application.-first ADCSADCSActive Directory Certificate Services, Microsoft's PKI role for issuing and managing X.509 certificates inside a Windows domain; cyber tools target it because misconfigurations frequently allow privilege escalation or domain compromise. enumeration
└──▷ GET THIS VERSION
$ git clone --branch v4.1.0 https://github.com/ADScanPro/adscan.git
# already have the repo? check out this version:$ git checkout v4.1.0
pypykatz integration dumps hashes directly from .DMP files without leaving adscan.
DCSync fallback chain automatically tries SAM, LSALSALocal Security Authority — a Windows subsystem that handles authentication, enforces local security policy, and stores credential material, making it a frequent target for credential-harvesting cyber tools., and DPAPIDPAPIA Windows OS cryptographic API that encrypts and decrypts secrets tied to a user or machine identity, so applications can store credentials without managing raw keys themselves. dump when primary DCSync fails.
New attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. for WriteSPNACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. exploitation enables SPN manipulation.
ADCS enumeration and exploitation now defaults to Kerberos authentication via the new Kerberos-first logic.
SeBackupPrivilegeprivilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. changed from WinRMWinRMA Windows-native remote management protocol from Microsoft, implementing the WS-Management standard, that lets tools execute commands and access data on remote Windows hosts over HTTP or HTTPS. to SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. for broader compatibility.
Metasploit Pro adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tags for KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. modules and enhances MongoBleed with new options
Adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. metadata tags to modules related to Kerberos and unconstrained delegation, enabling content searches by ATT&CK technique ID.
Updates the MongoBleed auxiliary module to use the Wiz Magic Packet for quick detection, warn or halt if zlib is not enabled, reuse the MongoDB socket connection during memory scanning, and store extracted data in raw or JSON format.
$ git clone --branch v1.4.0 https://github.com/pwndoc/pwndoc.git
# already have the repo? check out this version:$ git checkout v1.4.0
Adds the pwndoc-cli script for unified environment management and test execution
Integrates LanguageTool for real-time grammar and spell-checking across HTML editors
Adds full CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. v4 scoring capability with a dedicated calculator and report export support
Accepts MONGODB_URI as an environment variable for MongoDB connection configuration
Includes reviewers in generated Word audit reports
Predatory ESP32 firmware for M5Stack, Cardputer and LilyGo devices.
Bruce 1.14 adds BLEBLEBluetooth Low Energy, a wireless protocol maintained by the Bluetooth SIG for short-range communication at minimal power draw, making it useful for cyber tools that interact with IoT devices or proximity-based systems. wardriving scanning, JS microphone support, SRIX4K NFCNFCNear Field Communication, a short-range (≤4 cm) wireless standard maintained by the NFC Forum, enabling data exchange between devices; cyber tools use it to probe, emulate, or intercept contactless card and tag transactions. tool, and CYD/M5 Stick32 devices.
└──▷ GET THIS VERSION
$ git clone --branch 1.14 https://github.com/BruceDevices/firmware.git
# already have the repo? check out this version:$ git checkout 1.14
Added password recovery using wordlist for T-embed
Add SRIX4K/SRIX512 NFC Tool
Add microphone support for js scripting
Startup App JS Interpreter Scripts + Input Masking + All Keyboards Available in JS
Add 6 new display JS interpreter functions
+4 moreshow less
Added an IR custom command function to IR files in the Files app
Add LED Strip support to IR Read button
Add CYD-3248S035C and CYD-3248S035R device support
M5 Sticks3 support
9 details in Everything
└──▷ BREAKING ON UPGRADE
!Change javascript runtime to mQuickJS from ducktape
A pocket sized WiFi Pineapple built for those on the go.
Adds payload commands for WiFi hopping, loot archiving, and battery status in v1.0.7
Adds PINEAPPLE_HOPPING_START and PINEAPPLE_HOPPING_STOP commands to payloads for controlling SSID pool hops
Adds PINEAPPLE_LOOT_ARCHIVE command to automatically trigger recon sessions, Wigle logs, and PCAPsPCAPsA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. upon archiving loot
Adds BATTERY_CHARGING and BATTERY_PERCENT commands to payloads for battery status monitoring
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
ESP32 Marauder v1.10.2 adds Marauder Mini v3 support and overhauls EAPOL sniffer with complete tracking.
└──▷ GET THIS VERSION
$ git clone --branch v1.10.2 https://github.com/justcallmekoko/ESP32Marauder.git
# already have the repo? check out this version:$ git checkout v1.10.2
Adds Marauder Mini v3 configuration support for compatible hardware
Overhauls the EAPOL sniffer to track complete EAPOL handshakes
Updates AP Info view to show EAPOL completion status during sniffing
The open-source wireless research platform for ESP32.
GhostESP v1.9.3 adds GhostLink commands, BadUSB support for four boards, and auto-saving for five scan types.
└──▷ GET THIS VERSION
$ git clone --branch v1.9.3 https://github.com/GhostESP-Revival/GhostESP.git
# already have the repo? check out this version:$ git checkout v1.9.3
Adds GhostLink display commands to enable/disable the on-device AP and change credentials
Adds BadUSB display and CLI support with built-in test script for Cardputer, Cardputer ADV, TEmbedC1101, and The Wired Hatter's Banshee
Adds auto saving of scans for AP scan, Station scan, Flipper scan, Airtag scan, and BLEBLEBluetooth Low Energy, a wireless protocol maintained by the Bluetooth SIG for short-range communication at minimal power draw, making it useful for cyber tools that interact with IoT devices or proximity-based systems. GATT scan
Flipper Zero Unleashed Firmware, an unlocked alternative firmware.
Unleashed Firmware unlshd-085 adds Cardin S449 and Beninca ARC AES128 SubGHz support, remote simulation, TX Power control, and IR to the JS engine.
└──▷ GET THIS VERSION
$ git clone --branch unlshd-085 https://github.com/DarkFlippers/unleashed-firmware.git
# already have the repo? check out this version:$ git checkout unlshd-085
Adds Cardin S449 protocol full support for SubGHz with Add manually and all button codes.
Adds Beninca ARC AES128 protocol full support for SubGHz with Add manually and 3 button codes.
Adds FSK12K modulation to read remotes (e.g., Cardin S449).
Adds Treadmill37 protocol support for SubGHz.
Adds Jarolift protocol full support for SubGHz with Add manually and all button codes.
+18 moreshow less
Adds new modulation FSK with 12KHz deviation.
Adds KingGates Stylo 4k support with Add manually and button switch.
Adds Stilmatic (R-Tech) 12bit discriminator fix and button 9 support.
Adds refactored counter editor for SubGHz signals.
Adds speedup for Alutech AT-4N and Nice Flor S in SubGHz.
Updates Sommer fm2 Add manually to use FM12K modulation.
Adds support for last button code 0x6 on Sommer remotes (mapped to arrow keys).
Adds two counter mode support for V2 Phoenix (Phox).
Adds 390MHz and 430.5MHz to the default SubGHz hopper list.
Adds decrypted hop display in Hop field for KeeLoqKeeLoqA proprietary block cipher developed by Microchip Technology, used in rolling-code systems for keyless entry devices; cyber tools target it to analyze or attack RF-based access control protocols. protocols.
Enables decoding BFT KeeLoq with zero seed.
Displays BFT programming mode TX in KeeLoq when arrow button is held.
Adds counter mode 7 for KeeLoq (sends 7 signals increasing counter with 0x3333 steps).
Enables remote simulation via signals button editor (full signal transmit with one click).
Adds TX Power setting control.
Changes Desktop lock menu to use BT ON/OFF instead of Lock/Unlock action.
Allows opening power settings via left button when holding back button to power off.
proxmark3 v4.21128 adds Ultralight AES full-stack support, QR code generation, hf seos write/sim, and a new multi-KDF keygen command.
└──▷ GET THIS VERSION
$ git clone --branch v4.21128 https://github.com/RfidResearchGroup/proxmark3.git
# already have the repo? check out this version:$ git checkout v4.21128
└──▷ TRY IT
Generate Bambu Lab (or Snapmaker U1) MIFARE keys by KDF without the removed bambukeys command.
$ hf mf keygen
Generate a QR code from arbitrary data (e.g. a card UID or URL) directly inside the pm3 client session.
$ data qrcode
New standalone mode HF_DOEGOX_AUTH0 unlocks UL-C / UL-AES tags without a host connection.
Adds -- argument separator in the pm3 client to pass trailing arguments directly to scripts.
Adds hf mf keygen with multiple KDF support (including Snapmaker U1 filament spool and Bambu Lab keys), replacing hf mf bambukeys.
Adds data qrcode command to generate QR codes from inside the pm3 client.
Adds support for reading Bruce dump files (.rfid format).
+11 moreshow less
Adds hf 14b config command with polling-loop annotation support and better ECP configuration aliases.
Adds full Ultralight AES support across hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey, including auth, secure messaging, and basic DataProtKey emulation.
Adds Ultralight AES secure messaging support in hf 14a raw.
Adds ATR fingerprinting to hf 14a info and hf 14b info.
Adds hf seos write command for writing SEOS card data.
Adds hf seos sim command for simulating SEOS cards.
Adds Verkada 40-bit credential format support.
Adds Kaba evolo AID identification.
Adds identification of NDEF/Open print tag records.
Adds client/resources/pm3_generic_private_key.pem to enable self-signing a modified device.
Adds script read_t-union.py for reading T-Union transit cards.
16 details in Everything
└──▷ BREAKING ON UPGRADE
!hf mf bambukeys has been replaced by hf mf keygen; existing scripts or workflows calling hf mf bambukeys will break.
SharpHound v8.6.0 adds AzureHound User-Agent flag and Last Sign-In data tracking; enhances Cypher query permissions and Zone Builder.
└──▷ TRY IT
Customize the HTTP user agent string used by AzureHound when collecting data from Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments.
$ AzureHound --user-agent "MyCyberTool/1.0"
Adds --user-agent flag to AzureHound to customize the HTTP User-Agent header for requests
Enables tracking of user activity via last successful sign-in timestamp from Entra ID in collected data
user-scanner v1.3.1 adds OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. logic and new email/username modules with updated result status labels
└──▷ GET THIS VERSION
$ git clone --branch v1.3.1 https://github.com/kaifcodec/user-scanner.git
# already have the repo? check out this version:$ git checkout v1.3.1
Replaces the previous Available / Taken status labels with Not Found / Found for clearer result interpretation
Adds multiple new modules for scanning emails and usernames via OSINT logic
Adds lonkero ai interactive agent and WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. bypass button
└──▷ GET THIS VERSION
$ git clone --branch v3.7.0 https://github.com/bountyyfi/lonkero.git
# already have the repo? check out this version:$ git checkout v3.7.0
└──▷ TRY IT
Start an interactive AI-assisted testing session directly from the CLI.
$ lonkero scan --target https://example.com --ai
Execute the new WAF bypass workflow via the UI button to test resilience against common attacks.
📍In the scan results view, click WAF Bypass to launch the bypass engine.
Adds --ai flag to enable the new AI-powered interactive security testing agent (lonkero ai)
Adds a WAF Bypass button in the UI that triggers 220+ known bypass techniques
RedAmon v2.1.0 adds CyberFix agentic remediation pipeline with triage agent and automated PR generation
└──▷ GET THIS VERSION
$ git clone --branch v2.1.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v2.1.0
Adds cypherfix_triage/ AI agent that queries Neo4j graph to deduplicate, rank, and produce prioritized remediation plans
Adds cypherfix_codefix/ autonomous code-repair agent that clones repositories, implements fixes for triaged vulnerabilities, and opens GitHub pull requests
Adds /api/remediations/ endpoint for persisting and retrieving remediation results
Adds /api/cypherfix/ API routes for triggering and managing triage and codefix sessions
Adds CypherFixTab component to the Graph dashboard for launching triage and monitoring remediation progress
+2 moreshow less
Adds CypherFixSettingsSection in Project Settings to configure GitHub repo, branch, AI model, and agent behavior
Adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. streaming hooks useCypherFixTriageWS and useCypherFixCodeFixWS for real-time agent status
7 details in Everything
2 more releases in this issue
· 2026-02-08 → 2026-02-27
RedAmon v1.3.0 adds multi-provider LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. support, stealth mode toggle, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools for Kali shell and code execution
└──▷ GET THIS VERSION
$ git clone --branch v1.3.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v1.3.0
Adds Multi-Provider LLM Support for OpenAI, Anthropic, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code., and AWS Bedrock with dynamic model fetching.
Adds Stealth Mode toggle in Project Settings to enforce passive scanning and disable active probes like Kiterunner and GVM.
Adds new MCP Tools: kali_shell, execute_code, msf_restart, and execute_nmap for sandbox interaction and Metasploit management.
Adds GET /models API endpoint (proxied as /api/models) to fetch available models from configured providers.
Adds Markdown Report Export capability to download full agent conversations.
RedAmon v1.1.0 adds attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. system, Agent Guidance, full Project Creation UI, and PostgreSQL-backed agent settings.
└──▷ GET THIS VERSION
$ git clone --branch v1.1.0 https://github.com/samugit83/redamon.git
# already have the repo? check out this version:$ git checkout v1.1.0
Agent Guidance — send real-time steering messages to the agent while it works, injected into the system prompt before the next reasoning step
New Project Creation UI for configuring all recon modules (Naabu, Httpx, Katana, GAU, Kiterunner, Nuclei) and agent behavior settings
Agent Settings migrated from hardcoded params.py to PostgreSQL, editable via webapp UI
Strix v0.8.2 exposes the Caido proxy port for human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. workflows.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.2 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v0.8.2
1 more release in this issue
· 2026-02-19 → 2026-02-24
Strix v0.8.0 adds mouse text selection auto-copy in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and nested XML vulnerability reports
└──▷ GET THIS VERSION
$ git clone --branch v0.8.0 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v0.8.0
Adds mouse text selection auto-copy to clipboard in the terminal UI (TUI)
Redesigns vulnerability reporting output to include nested XML code locations and CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. scores
BloodHound v8.6.0 adds OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. management, Integrated Windows Auth, Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. last-logon data, and scheduled analysis improvements.
└──▷ GET THIS VERSION
$ git clone --branch v8.6.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v8.6.0
Adds OpenGraph Management admin page for managing OpenGraph nodes, relationships, and extensions via the UI.
Adds OpenGraph nodes to the shortest-path endpoint, enabling cross-graph pathfinding.
Adds OpenGraph edge filtering in the UI to control which relationship types are displayed.
Supports OpenGraph remediations, surfacing remediation guidance for OpenGraph findings.
Adds a Get Extension Information endpoint for querying schema extension details.
+13 moreshow less
Adds namespace support to schema extensions via the API.
Generates AD and Azure extension schemas automatically and applies them on startup.
Adds a new app configuration field to disable API keys globally.
Adds support for bypassing query limits when the prefer:wait=-1 header is provided.
Adds Integrated Windows Authentication (IWA) support in the frontend.
Adds Last Logon Timestamp as a property on Entra ID (AzureAD) User nodes.
Displays zone information in the object info panel for graph nodes.
Adds file ingest warnings directly to the file ingest table.
Supports an Analyze Now trigger for scheduled analysis.
Adds scheduled analysis as a user-updatable parameter.
Adds a finding resource and type to the API client.
ligolo-ng v0.8.3 adds an API listener flag, insecure WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. support, enhanced interface management, and smarter autoroute UI.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.3 https://github.com/nicocha30/ligolo-ng.git
# already have the repo? check out this version:$ git checkout v0.8.3
└──▷ TRY IT
Bind the proxy API to a specific interface/port — useful when running multiple proxies or restricting API access to a management network.
$ ./proxy --api-laddr 127.0.0.1:9090
Adds --api-laddr flag to bind the proxy's API listener to a specific address.
Supports insecure (plain) WebSocket connections between proxy and agent.
Enhanced interface management commands for more granular tunnel and interface control.
Improved proxy/agent recovery: better agent reconnection and tunnel management after disconnects.
Autoroute UI now displays existing routes for each interface when adding a new route, reducing misconfiguration.
NetExec v1.5.1 adds shadow copy snapshot listing for SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. & WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk. and allows password changes on locked pre-2k accounts.
└──▷ GET THIS VERSION
$ git clone --branch v1.5.1 https://github.com/Pennyw0rth/NetExec.git
# already have the repo? check out this version:$ git checkout v1.5.1
Adds list-snapshots function to the ShadowCopy module, supporting both SMB and WMI transports.
Enables password changes for locked pre-Windows-2000 (pre2k) accounts.
Brutespray v2.4.2 adds Redis brute-force support including Redis 6.0+ ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. auth across all input formats.
└──▷ GET THIS VERSION
$ git clone --branch v2.4.2 https://github.com/x90skysn3k/brutespray.git
# already have the repo? check out this version:$ git checkout v2.4.2
Adds Redis brute-force module targeting port 6379, with support for Redis 6.0+ ACL username/password authentication.
Supports Redis targets across all input formats: GNMAP, JSON, XML, Nexpose, Nessus, and list files.
Akto discovers APIs, MCP servers and AI agents, tests and red-teams them, and enforces runtime guardrails and posture management.
Akto Feb 2026 Agentic Release adds Vertex/TrueFoundry/Arcade integrations, CSV export, session guardrails, and Ollama Qwen support
Vertex AI Integration discovers and secures agents running on Google Vertex AI.
TrueFoundry Integration monitors and secures agents deployed on TrueFoundry's MLOps platform.
Arcade Integration secures Arcade AI agent tool calls with Akto guardrails.
QWEN Model Support (Ollama) allows using the Qwen model in Ollama for agentic scans.
GitHub Copilot CLI Hooks monitors prompts to GitHub Copilot CLI and enforces guardrails in real time, also supporting VS Code agent workflows.
+20 moreshow less
Gemini CLI Hooks monitors prompts to Gemini CLI and enforces security guardrails in real time.
Export dashboard tables as CSV files for reporting and analysis.
View token estimation for each Red Teaming scan before running it to plan usage and estimate costs.
Set a maximum agent token limit while configuring a scan to control usage and resource consumption.
Guardrail Playground allows running and validating guardrail policies in the playground before deploying to production.
Apply session-based guardrail policies consistently across the entire agent session for persistent policy enforcement.
Set severity levels in guardrail policies for better prioritization of security alerts.
Export guardrail activity reports to a custom webhook for SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or alerting pipeline integration.
Enable or disable guardrails for specific agent tools and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. methods with automatic discovery via the agent proxy.
View traces and spans directly in agentic workflow details for full request-level observability.
Discover agents using RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. automatically for better visibility into retrieval workflows.
Get a high-level summary of top Agents and MCPs through Agentic Inventory Insights.
Access scan results from previously deleted agents for continued auditing.
Select probe engine and modify hosts in the editor playground when validating agentic scans.
View actual probe requests sent during scans for debugging visibility.
Run bulk Red Teaming across multiple AI Agents and MCPs with consolidated results.
SkillGuard discovers agent skills installed on employee endpoints and analyzes .md files for malicious instructions.
Surface unauthorized MCP servers running on developer machines through Akto Atlas.
See PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. types in guardrail configuration reflecting data types defined on the Sensitive Data page.
See associated username in guardrail activity on endpoints for better traceability.
Fastly adds eight new Image Optimizer format counting metrics to analytics responses
Real-time analytics and Historical Stats responses now include imgopto_avif_count, imgopto_jpeg_count, imgopto_png_count, imgopto_gif_count, imgopto_webp_count, imgopto_jpegxl_count, imgopto_svg_count, and imgopto_mp4_count metrics.
Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. for Node.js 2.4.1 adds framework identification to request metadata
Wallarm adds RAML input support, JUnit output, full request/response logs, and mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. testing for Schema-Based Testing.
Adds RAML file upload as an input source for Schema-Based Testing with automatic conversion to OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth.
Adds JUnit format export for test results to enable CI/CD integration
Adds export of complete request and response logs for troubleshooting and reporting
Adds support for testing APIs that require mTLS authentication
4 details in Everything
2 more releases in this issue
· 2026-02-04 → 2026-02-16
Wallarm adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-powered recommendations for API session parameters based on discovery data
└──▷ HOW TO FIND IT
Use the new UI recommendations to configure a session for an unfamiliar third-party API without manual parameter mapping.
📍In the Wallarm console, go to API Sessions › New Session and review the auto-suggested parameters before saving.
Adds automatic parameter suggestions when configuring API sessions, leveraging existing API Discovery data to reduce setup time.
FCaptcha v1.4.1 adds Docker Hub publishing, one-click deploy for Render/Fly.io/Railway, and Artifact Hub listing.
└──▷ GET THIS VERSION
$ git clone --branch v1.4.1 https://github.com/webdecoy/fcaptcha.git
# already have the repo? check out this version:$ git checkout v1.4.1
└──▷ TRY IT
Pull the latest FCaptcha image directly from Docker Hub instead of GHCRGHCRGitHub Container Registry, GitHub's hosted service for storing and distributing OCI-compatible container images, giving cyber tools a versioned, access-controlled image store tied directly to a GitHub repository..
$ docker pull webdecoy/fcaptcha
Launch FCaptcha on Fly.io using the new configuration file.
$ fly launch --copy-config
Publishes images to Docker Hub via docker pull webdecoy/fcaptcha when DOCKERHUB_USERNAME repository variable and DOCKERHUB_TOKEN repository secret are configured in GitHub settings
Enables one-click deployment to Render using the included render.yaml blueprint
Enables one-click deployment to Railway via the new deploy button in the README
Enables one-click deployment to Fly.io using the included fly.toml with the command fly launch --copy-config
Adds artifacthub-repo.yml to support listing on Artifact Hub
5 details in Everything
1 more release in this issue
· 2026-02-08 → 2026-02-10
Adds Playwright detection globals, /api/pow/challenge endpoint, and PoW hard-fail logic to FCaptcha v1.2.1
└──▷ GET THIS VERSION
$ git clone --branch v1.2.1 https://github.com/webdecoy/fcaptcha.git
# already have the repo? check out this version:$ git checkout v1.2.1
Adds __pw*, __playwright*, deleted/configurable webdriver, and missing chrome.runtime checks in the new _detectPlaywright() function for client-side Playwright detection
Adds the /api/pow/challenge endpoint for issuing proof-of-work challenges, which was previously missing
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Missing PoW solution now triggers a hard-fail with score 0.9 and confidence 0.95, whereas it previously scored 0.5/0.6
!Accessibility exemption thresholds for touchEvents and keyEvents are raised to >= 3 and >= 2 respectively, blocking previously allowed trivial spoofing
BunkerWeb v1.6.8 adds concurrent Let's Encrypt cert generation, three new DNS providers, Gateway API support, and services import with drag-and-drop.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.8 https://github.com/bunkerity/bunkerweb.git
# already have the repo? check out this version:$ git checkout v1.6.8
└──▷ USE IT
Enable concurrent Let's Encrypt certificate generation across all services to cut provisioning time on multi-site deployments.
yaml
LETS_ENCRYPT_CONCURRENT_REQUESTS=yes
Preserve the running nginx config across scheduler restarts to avoid a temporary-config gap during maintenance windows.
yaml
KEEP_CONFIG_ON_RESTART=yes
Disable request body buffering on a reverse-proxy service to stream large uploads directly to the upstream without holding them in memory.
yaml
REVERSE_PROXY_REQUEST_BUFFERING=off
New REVERSE_PROXY_REQUEST_BUFFERING setting in the Reverse Proxy plugin lets operators control whether request bodies are buffered before proxying (default: on).
New LETS_ENCRYPT_CONCURRENT_REQUESTS setting enables parallel certificate generation across multiple services, speeding up multi-site Let's Encrypt provisioning (default: no).
Adds GoDaddy, TransIP, and Domeneshop as DNS challenge providers in the Let's Encrypt plugin.
New global KEEP_CONFIG_ON_RESTART setting preserves the existing nginx configuration across restarts instead of regenerating a temporary one each time (default: no).
Templator engine refactored to use Jinja2, unlocking richer templating capabilities for custom configurations.
+9 moreshow less
Experimental Kubernetes Gateway API controller support added (Gateway/HTTPRoute resources) for Autoconf deployments.
API now supports HTTP/2 in Gunicorn for improved performance and protocol compatibility.
CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. annotation support added for FORWARDED_ALLOW_IPS and PROXY_ALLOW_IPS settings; defaults updated to cover common private network ranges.
Web UI services table now displays security mode per service at a glance.
Web UI gains services import functionality with drag-and-drop support.
Redis report querying in the UI enhanced with filter parsing and chunked retrieval for large datasets.
Easy Install script gains an option to automatically install a Redis server for data persistence and caching.
DuggyTuxy Data-Shield IPv4 Blocklist added to the built-in blacklist sources.
NGINX updated to v1.28.2 and Core Rule Set updated to v4.23.0 (CRSv3 to v3.3.8).
Apiiro maps an application's architecture and risk graph and runs AI-SAST, SCA, secrets, API and threat-modeling checks on AI- and human-written code.
Apiiro introduces OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. Package Health SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. risk category with OpenSSF Scorecard and release recency analysis
Adds OSS Package Health as a new SCA risk category to triage dependencies based on operational health signals.
Enriches package insights with OpenSSF Scorecard metrics, release recency labels (Outdated, Stale, Mature), and popularity signals (GitHub stars, weekly downloads).
2 details in Everything
1 more release in this issue
· 2026-02-01 → 2026-02-24
Swift/Terraform repo support and User Token API (CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.) added to Nexus Repository Cloud.
Adds Swift hosted repository format
Adds Terraform group repository format
Adds POST /api/admin/users/tokens, GET /api/admin/users/tokens, and DELETE /api/admin/users/tokens/{id} endpoints for User Token API
3 details in Everything
3 more releases in this issue
· 2026-02-03 → 2026-02-25
Sonatype Nexus Repository Cloud enables proxy URL validation by default and adds quarantine audit logging to Sonatype Repository Firewall.
proxy.url.validation is enabled by default to block outbound connections to private network addresses, localhost, and cloud metadata endpoints
Sonatype Repository Firewall writes firewall.quarantine audit log events when components are newly quarantined or when users attempt to download already quarantined components (requires self-hosted IQ version 201 or Sonatype Lifecycle Cloud)
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Outbound connections to private network addresses, localhost, and cloud metadata endpoints are now blocked by default unless proxy.url.validation is explicitly disabled or configured.
Nexus Repository 3.89.0 adds Swift proxy format support, hosted Terraform repositories, and expanded Terraform authentication options.
Adds Swift proxy repository format to integrate Swift Package Manager (SPM) workflows
Adds Terraform hosted repository format for distributing versioned source archives, platform-specific binaries, and providers as .zip files
Enables anonymous access to Terraform repositories when enabled
3 details in Everything
└──▷ BREAKING ON UPGRADE
!SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. login fails if the SAML2_AUTH_REQUEST cookie is blocked by browser or infrastructure policies.
SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. report pages now display a scan type indicator in the header.
Socket introduces a centralized UI for organization-level triage policy management.
The new Triage page consolidates visibility of PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously.-based and Alert Key-based rules.
Adds https://socket.dev/purl/<purl> endpoint for universal package page redirects
Adds a new standardized PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously.-based redirect endpoint at /purl/$URL_ENCODED_PURL that routes to the correct package page regardless of ecosystem
syft v1.42.0 adds GGUFGGUFThe single-file model format used by llama.cpp and Ollama, holding the weights, usually quantized, together with the tokenizer and settings needed to run the model locally. model scanning from OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. registries and captures yarn dev dependencies
└──▷ GET THIS VERSION
$ git clone --branch v1.42.0 https://github.com/anchore/syft.git
# already have the repo? check out this version:$ git checkout v1.42.0
└──▷ TRY IT
Generate an SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. for an AI model stored as a GGUF file in an OCI registry.
Spectra Assure Community adds IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. export and enhanced malware detection details to the UI.
Improves the Malware page to show detection location (dependency or component) and unique threat type details
Aguaara v0.4.0 adds supply-chain, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly., and credential leak detection rules with installation improvements.
└──▷ GET THIS VERSION
$ git clone --branch v0.4.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.4.0
Adds five new detection rules for supply-chain, MCP, SSRF, and credential leak categories
Displays a one-time PATH hint to users after running go install
Includes an installation script alongside the PATH hint for new users
3 details in Everything
1 more release in this issue
· 2026-02-25 → 2026-02-28
sbomify v0.27.0 adds TEATEATiny Encryption Algorithm, a symmetric block cipher designed by Wheeler and Needham in 1994, valued for its minimal code footprint and simplicity, making it attractive for embedded or constrained environments. API support, SPDX 3SPDX 3An open standard from the Linux Foundation for expressing software bill-of-materials data, letting cyber tools exchange dependency, license, and vulnerability metadata in a machine-readable, interoperable format..0 format, scoped personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it., and user self-deletion with GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. export
└──▷ GET THIS VERSION
$ git clone --branch v0.27.0 https://github.com/sbomify/sbomify.git
# already have the repo? check out this version:$ git checkout v0.27.0
Adds full Transparency Exchange API (TEA) support including the well-known endpoint, dynamic URL generation with request parameter support, and dynamic API versioning
Adds SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format. 3.0 format support with detection, validation, and schema handling for all built-in assessment plugins (NTIA, CISA, BSI, FDA, checksum, GitHub attestation)
Adds GET /api/v1/user/export GDPR data export endpoint accessible during the self-deletion grace period
Personal access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. are now scoped to workspaces (workspace_id) for finer-grained API access control
Adds User Self-Deletion capability with a 14-day soft-delete grace period, Stripe customer deletion, Keycloak user disabling, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. re-authentication prevention
+1 moreshow less
SBOM upload limit increased to 100MB
6 details in Everything
1 more release in this issue
· 2026-02-16 → 2026-02-24
sbomify v0.26.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. dashboard updates, BSI compliance plugin, and account self-deletion
└──▷ GET THIS VERSION
$ git clone --branch v0.26.0 https://github.com/sbomify/sbomify.git
# already have the repo? check out this version:$ git checkout v0.26.0
└──▷ HOW TO FIND IT
Monitor SBOM generation status in real-time without page refresh.
📍Connect the dashboard frontend to the WebSocket endpoint (Django Channels + Redis)
Add BSI TR-03183-2 checks using the new plugin architecture.
📍Install and configure the BSI TR-03183-2 compliance plugin via the dependency system
WebSocket real-time updates for live dashboard data via Django Channels and Redis
New BSI TR-03183-2 compliance plugin with a new plugin dependency system
Component visibility gating & document access control capabilities
cosign v3.0.5 adds mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. for TSA signing, auto-requires signed timestamps with Rekor v2, and expands local image bundle support.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.5 https://github.com/sigstore/cosign.git
# already have the repo? check out this version:$ git checkout v3.0.5
└──▷ TRY IT
Sign a local OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. image tarball and produce a v2/v3 bundle format — now supported together with --local-image.
Snyk Learn introduces Learning Programs in Early Access for Learning Management Add-On customers, with UI-managed education tracks and bulk enrollment.
Adds Learning Programs to curate education paths, enroll groups of users through the Snyk Learn Management menu, and track progress with automated email reminders; custom management roles can be created through the Snyk API.
Introduces a limit of 300 users per program during Early Access, requiring programs to be created using the UI.
2 details in Everything
10 more releases in this issue
· 2026-02-02 → 2026-02-26
Snyk CLI v1.1303.0 adds AIBOMAIBOMAn inventory of every AI model, dataset, and dependency used in a system, analogous to a software bill of materials, giving cyber tools a structured way to audit AI supply-chain risk. persistence via --upload flag and HTML reports for Redteam.
snyk sbom test JSON output now includes isDisputed, severityBasedOn, and alternativeIds fields for richer vulnerability context
snyk sbom test adds dependency scope information (e.g., dev vs. production) for Maven and npm projects
Snyk Studio introduces snyk_package_health_check in the Experimental MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. profile to evaluate dependency health before installation.
Adds snyk_package_health_check capability for evaluating open-source packages in agentic development workflows.
Provides health outcomes across Security, Maintenance, Community, and Popularity dimensions (Healthy, Review recommended, Not recommended, Unknown/insufficient data).
Enables policy-driven guardrails for Organizations to require checks, pause on risk, block unsafe packages, or enforce human approval.
Snyk begins a gradual GA rollout of improved .NET scanning with native SDK dependency resolution and expanded project support.
Improved .NET scanning is now generally available in Snyk.
Scanning now uses the native dependency resolution logic of the .NET ecosystem via the dotnet SDK directly.
Full support for private packages hosted on brokered connections to Artifactory and Nexus via the Universal Broker.
Supports SDK-style projects that build successfully with the dotnet SDK, including global.json, Directory.Build.props, and Directory.Packages.props customization without additional scanning configuration.
Snyk GA adds BOLABOLABroken Object Level Authorization, an API vulnerability class where a server fails to verify that the requesting user owns or may access the object ID they supply, letting attackers read or modify other users' data. detection for OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. targets using AI-driven scanning profiles.
Adds Broken Object Level Authorization (BOLA) detection for OpenAPI targets in the general availability release.
Adds automatic SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment./DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. correlation linking DAST findings to exact source code lines
Adds AI-based correlation between linked Snyk API & Web targets and Snyk Code projects, connecting DAST findings with matching SAST issues.
Adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 (2025) report for mapping and filtering security issues by new rankings
Replaces the legacy OWASP Top 10 (2021) report with a new OWASP Top 10 (2025) report in the Reports UI
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!The OWASP Top 10 (2021) report is removed from the dropdown; its existing direct URL remains temporarily accessible, while Reports > OWASP Top 10 (2025) opens the replacement report.
Static Analysis Engine v2026.02 adds veracode.json exclusion config, Go 1.26 and .NET taint coverage.
Adds veracode.json configuration file support to exclude specific Java classes from Static Analysis
Adds taint propagation support for framework APIs for Apple Platforms
Adds support for Go 1.26 in the Static Analysis Engine
Expands .NET taint sink coverage for CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-80 to detect System.Web.UI.Page.Title and System.Web.UI.HtmlControls.HtmlHead.Title
4 details in Everything
8 more releases in this issue
· 2026-02-02 → 2026-02-23
DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. target creation defaults to Enterprise mode; legacy Full scan deprecated for new configs
└──▷ BREAKING ON UPGRADE
!The legacy Full scan option is deprecated and no longer available when creating new DAST targets or configuring Quick scan targets.
DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. target creation defaults to Enterprise mode; legacy Full scan option removed
DAST target creation now uses Full scan Enterprise mode by default
Legacy Full scan option deprecated and no longer available for new targets or Quick scan configurations
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The legacy Full scan option is no longer available when creating new targets or configuring Quick scan targets
Veracode Java API Wrapper adds configurable retry logic for Apps API and support for Findings REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.
Implements a configurable retry mechanism for the appsec/v1/applications endpoint to improve handling of transient failures, timeouts, and intermittent network issues.
Adds support for the Veracode Platform Findings REST API to access open and mitigated application findings.
Veracode Java API Wrapper v26.2.18.0 adds Findings REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. support and configurable retry for Applications API.
Adds support for the Veracode Platform Findings REST API to access open and mitigated application findings
Implements a configurable retry mechanism for the Veracode Platform Applications API (appsec/v1/applications) to improve handling of transient failures, timeouts, and intermittent network issues
Veracode CLI v2.45.0 adds disk token reading, prioritizes NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. results, and categorizes secrets as Critical
veracode scan now prioritizes vulnerability results from the NVD database when available.
veracode scan now categorizes secret-type findings as Critical in scan results.
All Veracode CLI commands can consistently read access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. from the disk.
Skyos v3.5.1 adds new Go language support and several TypeScript/Python detection rules.
└──▷ GET THIS VERSION
$ git clone --branch v3.5.1 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.5.1
Adds initial Go language analysis to skylos.
Adds SKY-D245: Dynamic require() with variable argument detection.
Adds SKY-D246: jwt.decode() without verification detection.
Adds SKY-D247: CORSCORSA browser mechanism that lets a server declare which foreign origins may read its HTTP responses, enforced by the browser to block unauthorized cross-site requests from JavaScript. wildcard origin cors({ origin: '*' }) detection.
skylos v3.4.1 adds skylos credits CLI command and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server auth/credits.
└──▷ GET THIS VERSION
$ git clone --branch v3.4.1 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.4.1
Adds skylos credits subcommand to check remaining credits before running commands with --upload
Adds MCP server authentication, rate limiting, and per-tool credit deduction
Skylos v3.4.0 adds architecture metrics (SKY-Q802-804), TypeScript dead code detection, skylos badge, and severity bar charts
└──▷ GET THIS VERSION
$ git clone --branch v3.4.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.4.0
Adds Architecture metrics: distance from Main Sequence (SKY-Q802), Zone of Pain/Uselessness classification (SKY-Q803), Dependency Inversion violations (SKY-Q804), per-module and package-level instability/abstractness scoring with system-wide fitness scores in JSON output
Adds CBO coupling (SKY-Q701) with 7 dependency types, afferent/efferent breakdown, and framework-aware filtering; LCOM cohesion (SKY-Q702) with Union-Find LCOM1/4/5, Python-aware method categorization, and dataclass exemption
Adds TypeScript interface, enum, and type alias dead code detection
Adds TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. detected languages display and severity bar chart in Overview panel
skyos v3.2.4 adds DeadCodeVerifierAgent, pipeline.py, and node_modules to default excludes.
└──▷ GET THIS VERSION
$ git clone --branch v3.2.4 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.2.4
Adds DeadCodeVerifierAgent that reviews static findings with call graph evidence and defs_map context
Adds pipeline.py containing run_pipeline and run_static_on_files functions
Adds node_modules to default exclude folders for static analysis
3 details in Everything
└──▷ BREAKING ON UPGRADE
!LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-only findings are now always marked as needs_review and never block CI
Skylos v3.2.0 adds LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-based taint analysis, false positive filtering, CI auto-detection, and secret-triggered uploads
└──▷ GET THIS VERSION
$ git clone --branch v3.2.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v3.2.0
Adds graph.py module for taint analysis, data flow tracking, and context slicing for the LLM agent
Adds FalsePositiveFilterAgent in agents.py to verify static findings using the LLM
Adds automatic detection of GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure., Jenkins, CircleCI, and GitLab CI via api.py
Adds environment variable overrides SKYLOS_COMMIT, SKYLOS_BRANCH, SKYLOS_ACTOR, SKYLOS_PR_NUMBER to control CI metadata
Adds a security-only "upload now?" prompt that triggers automatically when secrets are detected
Skylos v0.3 adds AI-driven real-time bug analysis with OpenAI/Anthropic support and configurable providers via new settings.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.0-skylos-vsce https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v0.3.0-skylos-vsce
aiProvider, openaiApiKey, anthropicApiKey, openaiModel, anthropicModel, idleMs, and popupCooldownMs settings added to control AI behavior
Real-time analysis detects bugs as you type without requiring a file save
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, environment variable/network detection, Pro-tier enrichment, and Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. license verification
└──▷ GET THIS VERSION
$ git clone --branch v0.2.0 https://github.com/sheeki03/tirith.git
# already have the repo? check out this version:$ git checkout v0.2.0
└──▷ TRY IT
Detect sensitive environment variables and network destinations in code.
$ tirith scan --detect-env--detect-network ./src
MCP server with JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. lifecycle, gateway, and cloaking detection
environment variable and network destination detection capabilities
Pro-tier enrichment pipeline and verdict extensions
Ed25519 signed license verification with key rotation and CI guard
noir v0.28.0 introduces AI Agent Mode for autonomous discovery and ACP integration for local agents
└──▷ GET THIS VERSION
$ git clone --branch v0.28.0 https://github.com/owasp-noir/noir.git
# already have the repo? check out this version:$ git checkout v0.28.0
└──▷ USE IT
Run autonomous endpoint discovery on an application directory using the new AI agent workflow.
shell
noir -b ./myapp --ai-agent
Analyze a target using a local ACP agent named codex without needing API keys.
shell
noir -b ./myapp --ai-provider=acp:codex
--ai-agent flag to enable iterative tool-callingtool-callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. AI workflow with subtools like list_directory, read_file, grep, and semantic_search.
--ai-provider=acp:<name> argument to analyze targets using locally configured ACP agents without external API keys.
Enhanced analyzer support for Cross-file Express.js routers.
Launch the interactive wizard for a guided audit — ideal for onboarding new team members or quickly auditing an unfamiliar skill repo.
$ skill-scanner wizard
Adds a YAML-based Scan Policy Engine with three built-in presets (strict, balanced, permissive) and 13 independently configurable sections, replacing all hardcoded thresholds and allowlists.
Introduces skill-scanner generate-policy --preset <name> -o policy.yaml to export a baseline policy and skill-scanner configure-policy for a full terminal UI (Textual TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency.) to edit every policy setting.
Replaces the monolithic signatures.yaml with a modular Rule Pack Architecture (packs/core/) including 14 YARA rule files, 12 Python check modules, a formal pack.yaml manifest, and --custom-rules support for user-supplied packs.
Adds first-class JavaScript and TypeScript scanning: eval, child_process, Function constructor, fetch, fs access, secrets, obfuscation patterns, and asset-level prompt-injectionprompt-injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. scanning for .html, .css, .svg, .xml, .xsd.
New Strict Structure Validator (SkillValidator) performs pre-load structural checks for hidden files, symlinks, disallowed extensions, binary content, non-UTF-8 encoding, and missing/malformed SKILL.md frontmatter.
+17 moreshow less
New Interactive Scan Wizard provides a guided step-by-step scanning mode that auto-detects skills, walks through analyzer/policy/output selection, and generates the equivalent CLI command.
New Pipeline Analyzer models taint flow through shell pipelines using a source → transform → sink model to detect multi-step attack chains (data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels., fetch-execute, find-exec, variable laundering).
New Bytecode Analyzer detects .pyc files without matching .py source and bytecode whose ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. doesn't match its source file, flagging hidden code and supply-chain tampering.
New Content Extractor recursively unpacks ZIP, TAR, DOCX/XLSX/PPTX, JAR/WAR/APK archives with zip-bomb protection, path-traversal rejection, and VBA macro/OLE detection, producing virtual SkillFile objects for nested analysis.
New File Magic Detection (Magika) uses Google Magika (200+ types, ~99% accuracy) with magic-byte fallback to flag extension-vs-content mismatches (e.g., a .py file that is actually an ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. binary) as CRITICAL severity.
New Bash Taint Tracker performs lightweight dataflow analysis for bash scripts, tracking taint from command substitution, env vars, sensitive file reads, and network sources through variable propagation to dangerous sinks.
Adds a four-tier Command Safety model (SAFE / CAUTION / RISKY / DANGEROUS) that evaluates commands in full context — arguments, pipes, redirects, and chained commands — fully configurable via scan policy.
Expands static analysis to a 13-pass architecture covering manifest validation, prompt injection in SKILL.md, Python and Bash code checks, PDF structural analysis, Office macro detection, homoglyph attacks, YARA binary patterns, and asset-level prompt injection.
Adds Finding Deduplication: when multiple engines flag the same line for the same threat, findings collapse to a single entry at the highest severity with full engine attribution.
Adds Analyzability Scoring (0–100) quantifying what fraction of a skill the scanner can inspect, surfacing a HIGH-severity finding when coverage is low.
Introduces two-phase scan execution: Phase 1 runs all deterministic analyzers; Phase 2 feeds their enrichment context to the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. for semantic analysis and false-positive filtering.
Adds native Azure AD/Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. authentication for Azure OpenAI via DefaultAzureCredential; install with pip install skill-scanner[azure].
Adds DeepSeek model support with automatic json_object response format fallback for models that don't support JSON Schema mode.
Supports multiple simultaneous output formats in a single scan run via repeated --format flags and per-format output flags (--output-json, --output-sarif, --output-markdown, --output-html, --output-table).
New standalone HTML Reporter generates self-contained reports with a severity summary, verdict banner, inline pipeline flow diagrams, sortable findings table, and dark theme.
Adds --version / -V flag to print the installed version.
Adds Homebrew installation support for macOS via brew tap cisco-ai-defense/skill-scanner && brew install skill-scanner.
22 details in Everything
└──▷ BREAKING ON UPGRADE
!The --max-file-size CLI flag is replaced by policy knobs; any automation passing --max-file-size will break on upgrade.
!The monolithic signatures.yaml is replaced by the packs/core/ directory with a pack.yaml manifest; any tooling or config referencing signatures.yaml directly will break.
1 more release in this issue
· 2026-02-06 → 2026-02-26
Adds CSV, XML, and JSON export for SAST reports containing resolved (historical) findings via API and Platform UI
Increases accuracy of CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-79: Cross-site Scripting detection for JavaScript
Improves Rust detection accuracy with multiple minor enhancements
Enhances secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. to detect hardcoded database connection strings in configuration files without code changes
Adds historical SAST report export in CSV/JSON/XML via API and UI; improves CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-79, Rust, and secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. detection.
Added sast.report.historical capability to generate reports including resolved findings for a selected time frame, exported as CSV, XML, or JSON via API and Platform UI
Improved accuracy of CWE-79 (Cross-site Scripting) detection specifically for JavaScript files
Multiple minor improvements to increase the accuracy of Rust language detection in the SAST engine
Enhanced secret scanning to better detect hardcoded database connection strings in code changes
Triggered secret scanning on configuration file changes even when no actual code is present in the repository
StackHawk v5.3.0 adds JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets./gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. support, modern AJAX spider, and DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime.XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. detection
└──▷ TRY IT
Create a new application profile without typing the org ID on every command line invocation
app.jsonRpcConf section in hawk-config.yaml enables security testing of JSON-RPC 2.0 APIs
New authentication types JSON_RPC and GRPC in app.authentication allow native auth for respective protocols
Rewritten AJAX Spider with multi-pass discovery automatically detects Angular, React, Vue, and Next.js to extract routes from framework routers and JS bundles
DOM XSS sink detection instruments dangerous DOM APIs during crawling to identify real-time vulnerabilities
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Firefox browser support is removed; FIREFOX_HEADLESS and FIREFOX options for hawk.spider.ajaxBrowser are deprecated and defaulting to CHROME_HEADLESS
GitLab 18.9 adds Agentic SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. resolution, Container Virtual Registry API, Valkey opt-in, and new Security Profiles UI.
Adds Agentic SAST Vulnerability Resolution (Beta) to autonomously analyze and fix critical/high SAST findings via merge requests
Adds container_virtual_registries beta API for creating a unified endpoint to pull from multiple upstream container registries
Adds opt-in support for Valkey as a replacement for Redis in the Linux package binary distribution
Enables centralized security_configuration_profiles with bulk actions to apply scanner settings across groups/projects
Adds Vulnerabilities by age chart to the Ultimate security dashboard for analyzing unresolved vulnerability duration
+14 moreshow less
Adds support for requirements.txt manifest fallback in Dependency Scanning via the DS_ENABLE_MANIFEST_FALLBACK CI/CD variable
Adds support for pom.xml manifest fallback in Dependency Scanning via the DS_ENABLE_MANIFEST_FALLBACK CI/CD variable
Enables web-based commit signing on GitLab.com, available in group or project settings with a Verified badge
Adds OAuth authentication support for GitLab Duo plugin in JetBrains IDEs (Self-Managed/Dedicated)
Adds Minimal Access role users to no longer count against billable seat limits on Self-Managed Premium
Adds a new data management view on the primary Geo site for troubleshooting and verification status
Adds the ability to archive an entire group and all its subgroups/projects in one action
Adds Zero Downtime Upgrades support for Cloud Native Hybrid deployments on Kubernetes
Enables import of repositories from Bitbucket Cloud using API tokens via the GitLab import API
Restricts personal snippet creation for enterprise users on GitLab.com, managed by Group Owners
Adds CI job log timestamps (UTC) to identify bottlenecks, requiring GitLab Runner 18.7+
Updates Vulnerabilities over time chart to exclude vulnerabilities that are no longer detected
Adds UI for viewing CI/CD job metrics and analytics for projects in the UI
Displays security reports from child pipelines directly in merge request widgets
19 details in Everything
└──▷ BREAKING ON UPGRADE
!Atlassian app passwords for Bitbucket Cloud import are deprecated and will be removed in version 19.0; use API tokens instead.
!In version 19.0, Redis binaries are removed from the Linux package; existing Redis configuration settings remain functional but must be migrated to Valkey.
DeepSource adds AI Review engine, inline PR comments, and PR Report Card via new GraphQL types and UI toggles
Adds the Enable AI Agents flag in Policies > AI on the dashboard to activate the new AI code review engine alongside static analysis
Enables inline review comments on pull request diffs for GitHub, GitLab, Bitbucket (Cloud and Data Center), and Azure DevOps Services via the Settings > Quality Gates toggle
Generates a PR Report Card with grades A-D across Security, Reliability, Complexity, Hygiene, and Coverage dimensions for every reviewed pull request
Exposes new GraphQL types for retrieving AI issues, OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. vulnerabilities, and PR report card data
GitGuardian adds Ownership for Non-Human Identities with owner assignment, suggested owners, and Owner column/filter in NHI GovernanceNHI GovernanceThe policies, controls, and lifecycle management applied to Non-Human Identities — service accounts, API keys, tokens, and certificates — to enforce least-privilege access and reduce credential sprawl across systems..
Adds Ownership capability in NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. Governance to assign and track responsibility for each Non-Human Identity.
Adds automatic suggested owners based on integrated source data and secret incidents.
Adds an Owner column in the NHI inventory view showing responsible identities.
Adds ability to add, edit, or remove owners at any time from an NHI's detail view for workspace members and external users identified by email.
Adds filtering capability by owner (e.g., "identities with no owner" or "owned by my team") in the NHI inventory.
5 details in Everything
1 more release in this issue
· 2026-02-02 → 2026-02-11
TruffleHog v3.93.4 adds an NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory./JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. input source for scanning structured log and data streams.
└──▷ GET THIS VERSION
$ git clone --branch v3.93.4 https://github.com/trufflesecurity/trufflehog.git
# already have the repo? check out this version:$ git checkout v3.93.4
New org/suborg membership API, Azure DNS ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction. provider, AWS PCA CA integration, expanded PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. profile defaults.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.5 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.5
Adds a new membership API for organization and suborganization groups
Adds Azure DNS as a provider for ACME
Adds AWS PCA external Certificate Authority (CA) integration for PKI
Expands certificate profile defaults beyond TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. in the PKI system
Infisical v0.158.3 adds PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. network discovery, ClickHouse audit log support, PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. for AD/PostgreSQL, and Fly.io auto-redployment
└──▷ GET THIS VERSION
$ git clone --branch v0.158.3 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.3
feat(pam): add web launcher for browser-based terminal access to PostgreSQL accounts enables in-browser web access terminals for PAM postgres accounts
feat(pam): windows server adds Windows Server as a supported resource type for Privileged Access ManagementPrivileged Access ManagementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded.
feat(pam): ad server resource & account adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. server resources and accounts to PAM
feat(secret-sync): support for vault KV engine v1 allows secret synchronization from HashiCorp Vault Key-Value engine version 1
feat(overview): add commit history access to overview page introduces commit history browsing directly within the environment overview interface
+4 moreshow less
Adds pagerduty channel to PKI alerting configurations for certificate lifecycle notifications
feat(flyio): support automatic redeployment on Fly.io after secret change enables seamless secret propagation in Fly.io deployments
Configures sending of audit logs to ClickHouse via new API settings for high-performance log ingestion
Introduces PKI Network Discovery feature to automatically detect and catalog PKI assets across the infrastructure
Infisical v0.158.1 adds PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. webhooks (Slack), dbt rotation, AWS LB PKI sync, and access insights.
└──▷ GET THIS VERSION
$ git clone --branch v0.158.1 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.158.1
feat(pki): add slack webhook to alerts
feature: add PKI Cloudflare Sync
feature: add AWS load balancer PKI sync
feat: dbt app connection & service token secret rotation
access insights added to the overview page
+1 moreshow less
automatic reference updates for moved/updated secrets
GitGuardian 2026.2 adds Dark Mode UI, new detectors via Secrets Engine v2.156, and optional worker-check-runs
Dark Mode interface added under Account → Interface → Theme for cleaner layouts and improved contrast.
Secrets Detection Engine v2.156 adds coverage for Modelscope, Proxmox, ZegoCloud, Deepgram, Microsoft Power Apps Webhook, Mem0, and Obsidian detectors.
worker-check-runs optional worker introduced to offload check_run processing from worker-worker, enabled via Helm config.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Kubernetes minimum version raised to 1.30 (EOL); upgrade to 1.35 recommended for stability.
!Argo CD deployments now require a pre-created encryption secret before installing or upgrading.
Invicti adds scan tags and ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. internal agent support
Adds the ability to assign tags to scans for better organization and filtering
Docker image of internal scanning agent now supports ARM64 architecture
2 details in Everything
3 more releases in this issue
· 2026-02-05 → 2026-02-19
Adds tag assignment for scans and ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. support for internal scanning agent Docker image
Docker image of internal scanning agent now supports ARM64 architecture
Added the ability to assign tags to scans for better organization and filtering
2 details in Everything
└──▷ BREAKING ON UPGRADE
!DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. Scan schedules are no longer shown in the DAST scans page.
Invicti allows overriding vulnerability severity, screenshot capture during scans, and custom scheduled scan names.
└──▷ HOW TO FIND IT
Manually adjust a detected vulnerability's severity to better match your internal risk tolerance.
📍In the vulnerability details view, locate the Severity field and select Override.
Assign a descriptive name to a recurring scan for easier identification in the dashboard.
📍In the Scheduling interface, enter your desired label in the Custom Name field before saving.
overrides now allow users to manually override the severity of vulnerabilities detected in DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. scans.
Screenshot capture is now enabled during DAST scans to improve visibility of the scanning process and authentication failures.
Compliance classification information is included in vulnerability details for regulatory alignment and audit readiness.
AI-powered features are enabled by default for new accounts (configurable at creation).
DAST scans page sorting by status now uses scan date as a secondary sort key.
+1 moreshow less
Scheduled scans can now be assigned custom names via the scheduling interface.
Invicti allows overriding vulnerability severity, captures DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. scan screenshots, includes compliance classification in vuln details, and enables AI features by default.
Adds the ability to override the severity of vulnerabilities detected in DAST scans for individual findings or globally
Captures screenshots during DAST scans to improve visibility of authentication failures and scanning progress
Includes compliance classification information in vulnerability details to support regulatory alignment and audit readiness
Enables AI-powered features by default for new accounts, with an option for account owners to turn them off during creation
wpprobe v0.10.13 adds RSS feed as a stealth plugin discovery source for stealthier WordPress enumeration.
└──▷ GET THIS VERSION
$ git clone --branch v0.10.13 https://github.com/Chocapikk/wpprobe.git
# already have the repo? check out this version:$ git checkout v0.10.13
Adds /feed/ (RSS feed endpoint) as a new plugin discovery source during stealth scans, expanding enumeration coverage without triggering common detection signatures.
Adds FormatSuccess to the logger for consistent success-state output formatting.
GEF 2026.01 adds ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. CI testing, always-visible top chunk in heap output, and a path argument for GotCommand.
└──▷ GET THIS VERSION
$ git clone --branch 2026.01 https://github.com/hugsy/gef.git
# already have the repo? check out this version:$ git checkout 2026.01
└──▷ TRY IT
Inspect all heap chunks including the top chunk in a single pass — useful when hunting for corruption at the top of the heap.
$ heap chunks -a
Adds ARM64 build testing via GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure., expanding verified architecture support.
Always prints the top chunk when running heap chunks -a, giving complete heap visibility.
Adds a path argument to GotCommand's build_line to support extended GOT inspection in gef-extras.
Limits the number of instructions scanned when guessing arguments in the context command, improving performance on large code blocks.
Installer script (gef.sh) now warns when an XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. init file takes precedence over the standard .gdbinit.
Frida 17.7.0 adds eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. SyscallTracer service, droidy remote service support, and macOS 26 dyld compatibility
Adds a new eBPF-powered SyscallTracer service on Linux with groundwork for future activity sampling.
Adds droidy support for consuming remote services and implementing services locally.
jadx v1.5.4 adds CLI config files, .apks support, UI zoom with CJK fonts, and externalized scripting plugin.
└──▷ GET THIS VERSION
$ git clone --branch v1.5.4 https://github.com/skylot/jadx.git
# already have the repo? check out this version:$ git checkout v1.5.4
Adds CLI config file load and save, enabling persistent CLI settings across sessions.
Supports .apks (Android Package Set) files as a new input format.
Adds UI zoom factor option that scales font sizes accordingly, using FlatLaf fonts bundle.
Adds CJK character support in the GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. via FontUtils.getCompositeFont().
Allows .zip files (containing JARs) to be used as plugin artifacts.
+2 moreshow less
Scripting plugin is now external and no longer bundled in the release — install separately via jadx-script-kotlin.
Plugin exceptions are now reported directly to the plugin's GitHub project.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The scripting plugin is no longer included in the release bundle; existing setups relying on it will need to install it separately from jadx-script-kotlin.
Capstone 6.0.0-Alpha7 ships a fully rebuilt RISC-V module via Auto-Sync/LLVM and adds 32-bit architecture build support.
└──▷ GET THIS VERSION
$ git clone --branch 6.0.0-Alpha7 https://github.com/aquynh/capstone.git
# already have the repo? check out this version:$ git checkout 6.0.0-Alpha7
Rebuilt RISC-V disassembly module via Auto-Sync from LLVM, bringing the architecture up to date with active RISC-V development.
Supports building and testing on 32-bit architectures, including i686 Windows.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!x86-64: ES/CS/SS/DS segment overrides are now ignored in x64 mode to match CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. behavior, changing decoding results for instructions that previously decoded those overrides.
Finite State adds AI-powered firmware unpack evaluation and consistent export naming using project name/version
Unpack Evaluation feature provides an AI-generated quality score for firmware extraction results after binary analysis.
Export filenames now include the human-readable project name and version, replacing internal IDs in SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue., component, finding, and dependency exports.
2 details in Everything
1 more release in this issue
· 2026-02-17 → 2026-02-24
Radare2 6.1.0 adds DRCOV trace import, source-line breakpoints, ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. native breakpoints, new string commands, SREC format, and more.
└──▷ GET THIS VERSION
$ git clone --branch 6.1.0 https://github.com/radareorg/radare2.git
# already have the repo? check out this version:$ git checkout 6.1.0
└──▷ TRY IT
List all strings at the current seek address in quiet JSON format.
$ izjq.
Adds plugin to import execution traces from DRCOV logs into the analysis pipeline.
Adds anal.jmptbl.split option to experimentally resolve missing jump table cases.
Adds anal.jmp.pair option to flatten consecutive inverse branch anti-disassembly tricks.
Adds afnq command as a refactored helper for function naming.
Implements asm.pseudo plugin for .NET CIL disassembly pseudo-syntax.
+38 moreshow less
Adds camelcase disassembly syntax support.
Adds ARC pseudo plugin with updated opcode descriptions and updated ARC disassembler from binutils 2026.
Adds izzc and izzzc commands to count raw strings.
Implements izjq and its alias izqj for combined JSON/quiet string output.
Adds iz+ command and extends iz- command to accept length and type arguments.
Adds count and pagination support to iz string listing commands.
Adds support for ARM64 GLOB_DATELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. relocation types.
Supports Apple C4000 Baseband firmware (gns1) format in the binary plugin.
Adds support for records and invokedynamic in the Java binary parser.
Adds support for ACC_HIDDEN Java classes.
Supports non-ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. bflt executables.
Exposes more native relocation types and the reloc type for REL binaries.
Implements native breakpoints support for XNU/ARM64 in the debugger.
Adds source-line breakpoints support in the debugger.
Implements printing of FPU registers for Linux ARM/ARM64.
Adds SREC file format support in the IO layer.
Adds mlx command to list deleted files for FAT filesystems.
Adds sandbox guards for zip:// IO plugin.
Adds wx+ nibble writes that no longer depend on block size.
Extends x86 FPU emulation support in ESIL.
Supports overlapped strings in the disassembly listing.
Supports MDMP RTM revision version information exposure from minidumps.
Adds support for CIL/Mono detection extended to exe/dll.
Imports function signatures and type definitions from DWARF debug info.
Extends iH command to return a string and permit multiple formats.
Supports initial third-party plugin builds.
Replaces bundled libzip+zlib with otezip, reducing codebase by ~55kLOC.
Reduces DEX binary loading memory usage by ten times.
Adds r_io_bank_get_regions to speed up io.unalloc operations.
Adds rahash2 -R sdb output support.
Documents and enforces nibble mask search in rafind2.
Adds rafind2 file filtering by rbin info.
Supports custom text output for RMuta ssdeep/entropy plugins.
Creates unified RMuta.crc plugin covering all 22 supported CRC variants.
Ports sha384 and sha512 into RMuta hash framework.
Supports subtypes in muta plugins, combining rol/ror variants.
Moves p2 and p3 commands into pri2/pri3.
Honors cfg.bigendian in cv commands.
43 details in Everything
└──▷ BREAKING ON UPGRADE
!The r_bin_command function is renamed to r_bin_cmd.
!RAnalCmd now returns a string instead of bool, changing the API contract for callers.
pwndbg 2026.02.18: branch viz in nearpc, decompiler integration, new kernel commands, LLDB core file support, and compact register modes
└──▷ GET THIS VERSION
$ git clone --branch 2026.02.18 https://github.com/pwndbg/pwndbg.git
# already have the repo? check out this version:$ git checkout 2026.02.18
└──▷ TRY IT
Disassemble an entire function at once to review its full control flow with branch visualization.
$ nearpc -f main
Trace kernel heap allocations and frees in real time to investigate SLUBSLUBThe default slab memory allocator in the Linux kernel, managing allocation of fixed-size kernel objects. Cyber tools targeting kernel exploits often interact with or manipulate it to control heap layout. or buddy allocator activity.
$ kmem-trace
Dump a memory region as a C array for use in an exploit or test harness.
$ hexdump -C c 0x7fffffffd000 256
Adds radare2-inspired branch visualization in nearpc disassembly output using Unicode characters; disable with -n/-no-branch
Adds nearpc -f <funcname> to disassemble an entire function at once
Adds nearpc -r and nearpc -t parameters to control the number of previous and total instructions displayed
Adds decompiler integration via decomp2dbg, supporting IDA, Binary Ninja, Ghidra, and angr-management as backends; works with both GDB and LLDB
Adds kmem-trace command to trace SLUB and buddy Linux kernel allocator allocations and frees
+24 moreshow less
Adds kcurrent [pid] [-set] command to display info about the current or a given kernel task
Adds kfile [pid] [-fd [fd]] command to display file descriptors accessible by the current or a given kernel task
Extends pagewalk to walk page tables of different kernel tasks when debug info is present
Adds LLDB support for core file loading and debugging
Adds starti command for LLDB
Adds set show-compact-regs very and set show-compact-regs hardcut modes for condensed register display
Adds stack variable names and offsets in the context display when debug info is present
Adds ctx -a to display all context sections at once
Adds a last-signal context panel showing the last signal received by the debugee
Adds set context-backtrace-hex on to display backtrace offsets in hexadecimal
Adds context-tui-adjust-height on|off for GDB TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. mode to control whether sections fill the full terminal height
Adds set vis-skip-repeating-val on|off to make the vis command collapse repeated lines
Adds hexdump -C py and hexdump -C c flags to dump memory as Python or C code arrays
Adds Intel PKU (Memory Protection Keys for Userspace) violation detection with detailed info messages
Extends the patch command to support more architectures via Zig
Adds syntax highlighting for decompiled code with IDA Pro
Adds CONFIG_SLAB_VIRTUAL and SLUB support for Linux kernel >= 6.18
Adds PowerPC branch resolution and emulation
Adds Sparc branch following support
Adds detection of more MIPSMIPSA RISC processor architecture originally developed at Stanford and commercialized by MIPS Technologies, widely used in embedded and network devices; cyber tools target it to analyze or exploit routers, cameras, and similar hardware. architecture variants
Adds XDG_CONFIG_HOME environment variable lookup for the gdbinit file
Enables debuginfod client by default in portable releases, automatically fetching debug symbols from a hosted server covering Ubuntu, Debian, Fedora, Arch, NixOS, and more
Expands vmmap to show more pages when working with core files
Improves ropgadget integration with color support
29 details in Everything
└──▷ BREAKING ON UPGRADE
!Deprecated underscore command aliases are removed (e.g. heap_config no longer works; use heap-config instead).
!The pwndbg.aglib.regs["x"] bracket access is replaced with pwndbg.aglib.regs.read_reg("x"); existing scripts using bracket access will break.
!The ppc64 big-endian portable release is dropped.
osdfir-infrastructure 2.8.2 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. support headers to the Nginx configuration.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.8.2 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.8.2
2 more releases in this issue
· 2026-02-02 → 2026-02-23
Timesketch Helm chart updates uploads path and OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. snapshots path configuration.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.8.0 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.8.0
OpenRelik chart gains Vertex AI config options, per-pod K8s service account enablement, and custom env variable support.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.7.5 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.7.5
Adds Vertex AI configuration options to the charts/openrelik Helm chart.
Allows Kubernetes service accounts to be enabled for all OpenRelik pods via the charts/openrelik chart.
Supports custom environment variables for OpenRelik pods in the charts/openrelik Helm chart.
Cortex Analyzers 3.7.8 adds SentinelOne SDL PowerQuery and DNS Reverse Lookup, plus Lookyloo public capture listing config.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.8 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.8
Adds SDL PowerQuery support to the SentinelOne analyzer.
Adds DNS Reverse Lookup capability to the SentinelOne analyzer.
Adds the ability to configure capture listing as public in the Lookyloo analyzer.
Improves the EmlParser analyzer.
4 details in Everything
2 more releases in this issue
· 2026-02-05 → 2026-02-27
MSEntraID analyzer gains extended search and support for additional observable datatypes.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.7 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.7
Cortex-Analyzers 3.7.6 adds a new Watcher analyzer, artifact tagging by service, and updates to MS Defender, MSEntraID, and Elasticsearch integrations.
└──▷ GET THIS VERSION
$ git clone --branch 3.7.6 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.7.6
Adds a new Watcher analyzer with updated Watcher responders.
Tags artifacts automatically depending on the service that produced them.
Dissect 3.22 adds certlog and AD plugins, APFSAPFSApple's proprietary filesystem introduced in 2017, replacing HFS+, designed for SSDs with native encryption, snapshots, and space sharing — giving cyber tools reliable forensic primitives on modern Apple devices./AD1 filesystem support, target-inspect tool, and keychain-based FortiGate decryption
└──▷ GET THIS VERSION
$ git clone --branch 3.22 https://github.com/fox-it/dissect.git
# already have the repo? check out this version:$ git checkout 3.22
Adds the certlog plugin for parsing Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Certificate Services with specific tables: certlog.requests, certlog.request_attributes, certlog.crls, certlog.certificates, and certlog.certificate_extensions.
Adds the Windows AD -f ad plugin to parse NTDS.dit databases, exposing sub-tables: ad.users, ad.computers, ad.group_policies, and ad.secretsdump for credential extraction.
Adds support for APFS filesystems (macOS) via the new dissect.apfs module.
Adds support for AD1 encrypted filesystems.
Introduces the NTDS filesystem to allow treating the Active Directory database as a mountable filesystem.
+3 moreshow less
Adds target-inspect, a debugging tool for inspecting different layers of the dissect target hierarchy.
Enhances walkfs plugin with filetype and mimetype detection capabilities.
Adds keychain support for decrypting FortiGate firmware files.
Adds 6 new detectors and modifies logic for 70 detectors in Cortex Analytics content release 2026.02.11.
Adds the AWS Security Service Enumeration detector (Low) to detect AWS security service discovery.
Adds the Machine Account NTLM Relay detector (Low) to identify NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. relay attacks using machine accounts.
Adds the 'Sensitive browser credential files accessed by a rare non browser process' detector (Informational/Low) for file access anomalies.
Adds the A cloud storage configuration was modified detector (Informational) to track cloud storage config changes.
Adds the 'An RDS snapshot was exported to an unknown bucket' detector (Informational/Failed attempt) for unauthorized RDS data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. attempts.
+1 moreshow less
Adds the 'Unusual internal access to network device management interface' detector (Informational) for anomalous network admin access.
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. February 2026 release introduces Broker VM upgrade reliability improvements for version 30.0.63.
Broker VM upgrade process reliability and stability improved in version 30.0.63 to reduce downtime during upgrades.
Cortex Analytics adds detection for kubelet impersonation and uncommon process communication to rare hosts; modifies logic for cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. and email alerts.
Adds Potential kubelet impersonation attempt by an unusual process detector (Medium severity) to detect when a non-standard process attempts to impersonate the kubelet
Adds Suspicious access to Kubernetes API with kubelet credentials from unusual pod detector (Medium severity) for unauthorized API access using kubelet identity
Adds Unrecognized sender domain detector (Informational) to flag emails originating from domains not previously seen in the organization's traffic
Removes Uncommon process communication to a rare external host detection suite including variants for automated penetration testing tools, crypto mining, and exfiltration
Modifies logic for A process is masquerading as a common Microsoft product to include new high-severity case for unsigned actors with uncommon characteristics
+5 moreshow less
Modifies logic for Rare scheduled task created to detect rare tasks created by injected actors and uncommon remote scheduled tasks
Modifies logic for Uncommon driver loaded to detect globally rare and unsigned drivers, and uncommon drivers with rare vendors loaded as services
Modifies logic for An identity attached an administrative policy to an IAM user or role to detect failed attachment attempts and suspicious attachments by unusual identities
Modifies logic for cloud object download detections to identify large volume downloads compared to project's or bucket's usual baseline
Updates Near-empty email from an external sender to add variants for blank emails with inline or attached files from external senders
10 details in Everything
└──▷ BREAKING ON UPGRADE
!The detection coverage for Uncommon process communication to a rare external host and its variants (including LOTTunnels, crypto mining, exfiltration) is removed; alerts relying on these detectors will no longer fire
!Email was received from an unknown sender with an unrecognized domain variant under Unrecognized sender address has been removed
Cortex Cloud Runtime Security adds Azure AI Foundry support, XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform.-based cloud security rules, and Agentix Assistant MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. interoperability.
Adds the Broker VM image running on Debian 13 for new deployments.
Adds native interaction with external environments via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) to Cortex Agentic Assistant.
Enables creation and editing of XQL-based Cloud Security rules in CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps..
Expands Non-Human Identity (NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls.) protection to provide visibility into cloud-managed secrets and their security posture.
Adds an Allow connection to private registries toggle for discovering and scanning Azure Container Registries (ACRs).
+17 moreshow less
Supports onboard Microsoft Azure tenant and management group scope using Terraform.
Adds Code-to-Cloud traceability to Virtual Machines built from VM images in ASPMASPMApplication security posture management, combining findings about applications from multiple tools and relating them to business context. It helps teams decide which fixes matter most..
Integrates with OpenShift Internal Registry for container image scanning in KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them..
KSPM Kubernetes Connector now supports K3s, RKE, and RKE2 clusters (Rancher).
Adds support for deploying the Kubernetes Connector onto AWS EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. Fargate environments.
Enables ingestion of Snyk Software Composition Analysis (SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself.) findings into Cortex Cloud Application Security.
Provides a dedicated KSPM Graph visualization in Beta to map Workload-to-Image relationships.
Allows configuring custom cadence for data classification of on-premise file shares.
Expands Azure Cloud Scan deployment mode to include storage blobs and self-managed databases.
Adds new forwarding destinations (Splunk, Amazon SQS, Amazon S3, Webhook) for cases and issues.
Adds Support for Asset-level rule configuration (Exclusion, Starring, Scoring, Playbook rules) per asset object.
Adds support for Infrastructure-as-Code (IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup.) drift detection in Application Security.
Adds IaC compliance checks as part of the Posture Management Compliance platform.
Integrates with JFrog Artifactory to enhance Software Composition Analysis (SCA).
Expands Asset-level rule configuration support to include asset-based rules.
Adds resolution actions suggested quick actions in Vulnerability Management.
Adds Conflict-free playbook editing with automatic lock release and manual unlock permissions.
22 details in Everything
└──▷ BREAKING ON UPGRADE
!The Broker VM Pathfinder applet is deprecated.
!Marketplace page has moved to Settings > Configurations > Marketplace.
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. 5.x Feb 2026 adds Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., Exposure Management add-on, Agentic Assistant with MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., and macOS USB block
Endpoint Data Loss Prevention now blocks data leakage on endpoints even when offline (requires additional license)
Exposure Management and ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. add-on integrates Cortex Network Scanner and third-party vulnerabilities into Cortex XDR console (requires additional license)
Natural language querying generates and runs XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform. queries via AI prompts without specialized query expertise
AgentiX Platform for XDR introduces Cortex Agentic Assistant with prebuilt agents (Endpoint Investigation, Email Investigation, Network Security) for autonomous triage, enrichment, and containment
New on-write protection automatically scans ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code., PE, and Mach-O files to block malicious binaries from being stored on Linux systems
+24 moreshow less
New detection suite profiles network baselines for Linux and macOS to identify anomalous Command and Control behavior
Enhanced behavioral analytics now highlights and blocks unauthorized attempts to access sensitive files or execute brute-force attacks on Linux/macOS
Cortex Agentic Assistant supports native interaction with external environments via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP)
Automation Engineer Agent builds and refines secure Python scripts through conversational natural language prompts using the Agentix Automation SDK
Administrator restriction setting for Secure, personalized queries streamlines the Query Center for non-admin users by preventing unauthorized access to private data
Standardized Issued by field in query accountability clearly distinguishes between who owns a query and who ran it (person, system, or API key)
New interactive Email Security Command Center assesses and manages security posture for Advanced Email Security add-on users
Malicious Device Prevention module on macOS identifies and blocks tools like the USB Rubber Ducky via USB hardware attacks
Network Shield allows isolation of compromised supervised iOS devices directly from the management console, cutting off all network access instantly
Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping.EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. agent installer provides expanded runtime protection for AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. EC2 workloads using the XDR agent
API capability to permanently remove unused endpoint tags simplifies endpoint tag management
Unified Data Sources & Integrations page merges existing Data Sources and Integrations portals into a single location for managing ingestion and automation
Asset-level rule configuration allows Exclusion, Starring, Scoring, and Playbook rules to be configured for specific asset objects or account groups
Process Anomaly Analytics suite detects malicious processes by monitoring process history on Windows environments
Enhanced RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. Analytics automatically flags unusual remote desktop activity by combining session data with behavior analysis
Webshell Analytics expanded to cover more server types using network protocol inspection for both managed and unmanaged servers
Expanded Child Process Protection supports User Mode on Linux, providing broader coverage without kernel-level access
Conflict-free playbook editing locks playbooks during edits and adds new permission for manual unlocking by designated users
Granular Playbooks and Scripts access control allows administrators to set permissions to None in certain scenarios
Object-based permissions for dashboards allow sharing specific dashboards as Viewer or Editor via the unified Objects approach
New optional SBAC setting configures separate access for cases/issues lacking asset references, with manual admin enablement required to restore prior default visibility
Secure issue exclusion access restricts Issue Exclusions page visibility to authorized users only
Expanded Management Audit Logs now track all changes related to asset-led Scope-Based Access Control (SBAC)
Broker VM image updated to Debian 13 for new deployments, improving security and stability
29 details in Everything
└──▷ BREAKING ON UPGRADE
!The Broker VM Pathfinder applet is deprecated and no longer supported in this release.
!The Marketplace page is relocated to Settings > Configurations > Marketplace; the Automation & Feed Integrations page is replaced by the Data Sources & Integrations page at Settings > Data Sources & Integrations.
!Microsoft Office 365 data collector now uses the Microsoft Graph APIMicrosoft Graph APIA unified REST API maintained by Microsoft that exposes data and actions across Microsoft 365 services, letting cyber tools query users, emails, files, and sign-in logs through a single authenticated endpoint. v2 GA endpoint instead of Legacy Alerts (v1); instances using the Legacy checkbox must switch to Use Microsoft Graph API v2 (Beta) before April 2026 to avoid ingestion failure.
Cortex Cloud Posture Management February 2026 adds Azure AI Foundry, Okta integration, ASPMASPMApplication security posture management, combining findings about applications from multiple tools and relating them to business context. It helps teams decide which fixes matter most. cases, and XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform.-based rules.
Adds Azure AI Foundry support for centralized visibility into all AI assets and supply-chain risks.
Adds new Okta integration to ingest identities and groups for deeper identity risk visibility.
Adds Expanded DSPM coverage for Databricks across AWS, Azure, and GCP to identify unsecured notebooks and risky downloads.
Adds support for forwarding cases and issues to Splunk, Amazon SQS, Amazon S3, and Webhook destinations.
Adds FedRamp/Government Cloud support for tenants on AWS GovCloud, Azure Government, and Google Public Sector.
+39 moreshow less
Adds ability to onboard Microsoft Azure using Terraform via the automated infrastructure provisioning flow.
Adds autodetection of Palo Alto Networks VM-Series firewalls deployed using Gateway Load Balancers (GWLB) in isolated mode on AWS.
Enables a new toggle, Allow connection to private registries, by default for improved discovery and scanning of private Azure Container Registries (ACRs).
Adds support for asset-level rule configuration, allowing Exclusion, Starring, Scoring, and Playbook rules to be configured for specific asset objects.
Adds Strengthen security for open-source AI models capability with dashboard tracking and direct links to reputation databases on the model asset card.
Adds visibility into AI agents collaboration via Graph Search and on each agent's Asset Card.
Adds Infrastructure-as-Code (IaC) drift detection within Application Security to detect configuration changes made directly in runtime.
Adds Compliance support for Infrastructure-as-Code (IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup.) checks as part of the Posture Management Compliance platform.
Adds direct integration with JFrog Artifactory for Software Composition Analysis (SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself.).
Adds ability to ingest Snyk SCA vulnerability findings into Cortex Cloud Application Security.
Expands Code-to-Cloud traceability to Virtual Machines built from VM images in the ASPM module.
Adds a new Broker VM image running on Debian 13 for improved security and system stability.
Adds detailed asset attribution evidence including IP address/domain registration, domain redirects, and ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. records.
Adds a compliance standard filter when constructing Misconfiguration policies in Cloud Workspace Rules (CWP).
Releases newer versions of CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Azure Kubernetes Service (AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations.) Benchmark and CIS Amazon Elastic Kubernetes Service (EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves.) Benchmark.
Adds an Asset card compliance tab displaying overall compliance score and compliance against individual controls.
Improves Compliance Assessment CSV reports to include remediation guidance for failed rules, tags, and cloud account IDs.
Renames the Data Sources page to Data Sources & Integrations.
Adds support for native interaction with external environments via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) in Cortex Agentic Assistant.
Adds an Automation Engineer Agent to build and refine secure Python scripts via conversational chat.
Enables natural language querying to generate and run XQL queries using AI prompts.
Adds support for creating Custom XQL-based cloud security rules with an XQL free form editor in the CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. module.
Allows customization of the cadence for data classification of on-premise file shares.
Expands Azure Cloud Scan deployment to include storage blobs and self-managed databases.
Adds a new Okta data source for deep visibility into identities and permissions.
Adds Secure OpenShift with container image scanning via integration with the OpenShift Internal Registry.
Adds an Interactive KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. Graph (Beta) to visualize Kubernetes security posture.
Adds Container image security scanning capability powered by the lightweight KSPM connector.
Adds KSPM support for AWS EKS Fargate clusters and Rancher-managed Kubernetes clusters (K3s, RKE, RKE2).
Creates a dedicated navigation section for Kubernetes Security under Modules in KSPM.
Exposes consumption details via the Public API for internal financial tracking in Cortex Cloud licensing.
Adds Conflict-free playbook editing with automatic locking during edits and a manual unlock permission.
Enables setting Playbooks or Scripts permissions to None for enhanced access control granularity.
Adds object-based permissions for managing individual instances of dashboards.
Expands Management Audit Logs to include all changes related to asset-led Scope-Based Access Control (SBAC).
Allows restricting access to the Issue Exclusions page when defining user roles.
Adds a new optional setting to configure separate access for cases and issues without inventory assets or endpoints.
Adds Resolution Actions as suggested quick actions in Vulnerability Management, executable via UI, AI, automation, or APIs.
Makes Vulnerability findings accessible via XQL queries.
44 details in Everything
└──▷ BREAKING ON UPGRADE
!The Data Sources page is renamed to Data Sources & Integrations, merging permissions: users with View/Edit access to either original section now have full access to the unified page.
!Administrators must manually enable a new optional setting in user role configuration to restore visibility into cases and issues that lack an asset reference or are not in All Assets/All Endpoints inventories.
Prisma Cloud February 2026 adds Debian 13 and TLS 1.3 runtime support, GCP Gen 2 serverless coverage, nftables for CNNF, and new AWS/GCP API ingestions.
└──▷ USE IT
Configure the security audit role to ingest AWS Service Catalog data.
text
servicecatalog:SearchProvisionedProducts
Adds Debian 13 (Trixie) support to Secure the Runtime.
Adds TLS 1.3 protocol support for Secure the Runtime.
Adds CIS Bottlerocket Benchmark Support covering controls 1.3.1, 1.4.3, and 1.4.4 to Secure the Runtime.
Adds GCP Cloud Function Gen 2 support via Cloud Run Admin API for serverless scanning discovery.
Adds Nftables support for Cloud Native Network Firewall to Defenders for modern Linux systems using NFTables.
+6 moreshow less
Adds API ingestion for aws-servicecatalog-provisioned-product, aws-pinpoint-apns-sandbox-channel, aws-pinpoint-gcm-channel, aws-sagemaker-flow-definition, aws-pinpoint-app, aws-pinpoint-apns-channel, aws-docdb-db-cluster-snapshot, aws-xray-sampling-rule, aws-xray-group, aws-redshift-endpoint-access, aws-code-deploy-application-deployment-group, aws-docdb-subnet-group, aws-guardduty-publishing-destination, and aws-docdb-db-global-cluster.
Adds API ingestion for gcloud-dataform-repository-workspace, gcloud-dataform-repository, gcloud-dataform-configuration, gcloud-conversational-insights-analysis-rule, gcloud-netapp-active-directory, gcloud-netapp-backup, gcloud-netapp-backup-vault, gcloud-netapp-kms-config, gcloud-netapp-storage-pool, gcloud-netapp-volume, and gcloud-dataplex-glossary.
Updates aws-rds-db-subnet-group to convert JSON values SupportedNetworkTypes and tags.TagList.Tag from object to array.
Updates aws-xray-encryption-config to include regionId key:value in ingested resources.
Updates aws-servicecatalog-portfolios API ingestion to capture additional attributes TagOptions and Tags.
Updates multiple existing APIs (aws-glue-dev-endpoint, aws-vpc-nat-gateway, aws-ec2-describe-network-acls, aws-ec2-describe-internet-gateways, aws-ec2-describe-flow-logs, aws-glue-job) to include regionId key:value.
11 details in Everything
└──▷ BREAKING ON UPGRADE
!Resources affected by Azure Storage accounts restricted by a read scope lock can no longer be ingested and are marked as deleted.
Sophos Access Points AP6 adds local UI configuration for DoS protection and admin brute-force login limits in v1.9.2854MR9
└──▷ HOW TO FIND IT
Protect AP6 access points from SYN floods and ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery. attacks via the local interface.
📍In the local UI, go to Management › DoS settings and enable protection for HTTPS/SSH SYN floods, ICMP, and ARP.
Lock out brute-force attempts against the admin account on the access point.
📍In the local UI, configure the maximum failed login attempts and lockout duration in the Brute force protection section.
Adds DoS settings page under Management in the local UI to protect against HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. and SSH SYN floods, ICMP, and ARP attacks.
Adds Brute force protection configuration in the local UI to set failed login attempt limits and account lockout duration for the admin account.
2 details in Everything
1 more release in this issue
· 2026-02-02 → 2026-02-16
AP6 profile management allows creating reusable SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale., Date & time, and Advanced wireless profiles.
└──▷ HOW TO FIND IT
Use the new AP6 profile management feature to configure SNMP and wireless settings for a group of access points via the Central service UI.
📍In the Sophos Central console, navigate to Access Points › Profile Management and create a new AP6 Profile with SNMP and Advanced wireless settings.
Aviatrix CoPilot 4.29.0 adds Auto Right-Sizing for all gateways, maintenance windows, multiple TLS profiles per DCF rule, and enhanced VM/K8s context in Monitor
Auto Right-Sizing is now available for all gateways, allowing proactive resizing without waiting for recommendations.
Any gateway can now be added to a maintenance window to schedule upgrades and minimize impact.
Non-CoPilot rulesets are now locked from modification to protect externally managed configurations.
The Distributed Cloud Firewall (DCF) Monitor UI now displays enriched workload context for VMs (Name, VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules., Region, Cloud Account) and Kubernetes workloads (Cluster Name, Node Name, Pod Name, Namespace/Service).
DCF rules now support associating multiple TLS profiles to a single rule.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Rulesets that are not created by CoPilot can no longer be modified.
Sophos Central now supports ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource./ACE management, RMON settings, and detailed switch statistics.
└──▷ HOW TO FIND IT
Configure access control policies for switches via the UI.
📍Navigate to Sophos Central › Switch management › Security › Access Control Lists
Monitor switch health and traffic patterns using RMON data.
📍Navigate to Sophos Central › Switch management › System details › Remote network monitoring (RMON)
View real-time network statistics for port utilization and security events.
📍Navigate to Sophos Central › Switch management › System details › System statistics
Adds Access Control Lists (ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.) and Access Control Entries (ACEs) management in Sophos Central on Switch management > Security
Adds Remote network monitoring (RMON) settings management in Sophos Central on Switch management > System details
Adds detailed System statistics (L2/L3 traffic, 802.1x security, traffic by port) in Sophos Central on Switch management > System details
Sophos Firewall 21.5 MR2 strengthens Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments.SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. with session re-evaluation to block MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. bypass.
Enhances Microsoft Entra ID SSO session management to re-evaluate Conditional AccessConditional AccessA policy enforcement framework, most commonly Microsoft's in Entra ID, that grants or blocks resource access based on signals like user identity, device state, and location — letting cyber tools trigger step-up auth or deny risky sessions. policies on session reuse, preventing MFA bypass.
Ettercap v0.8.4 adds a new etterfilter random function, libmaxminddb GeoIPGeoIPA database that maps IP addresses to geographic locations; tools use it to attribute traffic or alerts to countries, cities, or ASNs without querying external services. API, GTKGTKA cross-platform widget toolkit maintained by the GNOME project for building graphical user interfaces in C, with bindings for many languages, giving cyber tools a native desktop UI without writing platform-specific rendering code.SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. redirect list refresh, and major dependency updates.
└──▷ GET THIS VERSION
$ git clone --branch v0.8.4 https://github.com/Ettercap/ettercap.git
# already have the repo? check out this version:$ git checkout v0.8.4
└──▷ HOW TO FIND IT
Refresh the SSL redirect list mid-session without restarting Ettercap — useful after adding new HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. targets.
📍In the GTK UI, navigate to the SSL redirect list panel and click the Refresh button to reload the current redirect rules.
Adds a new random function to etterfilter for use in custom filter scripts.
Replaces the legacy GeoIP C API with the libmaxminddb C API for geolocation lookups.
Enables on-demand refresh of the SSL redirect list directly from the GTK UI.
Adds proper XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. hi-color icon support for desktop environments.
Upgrades bundled libnet from 1.2 to 1.3, curl from 7.86 to 8.18, and LuaJIT from 2.0.5 to v2.1-20250826.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The default configuration directory is now /usr/local/etc/ettercap instead of /etc/ettercap on non-Linux operating systems.
Wireshark adds Lua bulk field API, strato exit codes, CAPWAP WTP IP, P4RPC time display, and DLMS/COSEM Green Book parsing
Adds WS_EXIT_ codes to tshark for granular process exit status reporting
Adds Lua functions for bulk field requests via the wireshark.field_requests API
Adds CAPWAP support for WTP Static IP Address Information message element decoding
Adds P4RPC display of haveRec fields and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability.-8601 time strings
Adds DLMS/COSEM address parsing compliance with the Green Book specification
5 details in Everything
1 more release in this issue
· 2026-02-08 → 2026-02-22
PCAPdroid v1.9.0 adds HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. export, zstd support, and background extraction
└──▷ GET THIS VERSION
$ git clone --branch v1.9.0 https://github.com/emanuele-f/PCAPdroid.git
# already have the repo? check out this version:$ git checkout v1.9.0
└──▷ HOW TO FIND IT
Export captured HTTP traffic as a HAR file for inspection in browser DevTools or external analysis tools.
📍Use the Export HTTP data option and select HAR format from the dropdown menu.
Enable the system app visibility toggle to see traffic generated by pre-installed Android components.
📍Go to Settings › App Filter and enable Show system apps.
Export HTTP data in the HAR format allows sharing captured traffic with browser dev tools or other HAR-compatible analyzers.
Support the zstd compression enables decompression of PCAP files compressed with the Zstandard algorithm.
Add toggle to show system apps lets you filter out user-installed apps from the analysis view to focus on specific targets.
Sophos NDR 2.0 moves to Oracle Linux 9 and adds beta Investigation Console pages in Sophos Central.
└──▷ HOW TO FIND IT
Access the new beta Query page to run raw ClickHouse queries against aggregated network data in Sophos Central.
📍In the console, go to Investigation Console › Query and enter your query.
Use the new ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. installer to deploy NDR on certified hardware.
📍Download the 2.0.0 ISO from the Sophos portal and boot your certified hardware appliance.
Upgrades underlying OS from Ubuntu 20.04 to Oracle Linux 9 for both existing and new appliances
Adds beta access to Overview, Reports, and Query pages for the Investigation Console within Sophos Central
Provides a new ISO installer for certified hardware with an updated UI
Adds Post-Delivery Protection for Google to scan and claw back malicious emails in user inboxes.
New Post-Delivery Protection (PDP) capability for Google gateway domains, enabling automatic search and remediation of messages with malicious URLs or attachments after delivery.
Abnormal AI adds Account Takeover Dashboard, Anomaly Log, and Attack Vector Classifications for deeper visibility.
└──▷ HOW TO FIND IT
Review trends in confirmed account takeover cases and investigate related incidents.
📍In the console, go to Account Takeover › Dashboard
Search for suspicious identity or email activity that did not result in a confirmed case.
📍In the console, go to Account Takeover › Anomaly Log
Analyze aggregated attack methods and initial access vectors for detected account takeover incidents.
📍In the console, go to Account Takeover › Attack Vector Classifications
Adds the Account Takeover Dashboard showing identity, email, and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. signal correlation into confirmed ATO cases
Adds the Anomaly Log providing a searchable view of suspicious activity even when no case is created
Adds Attack Vector Classifications identifying initial access vectors and aggregated patterns for ATO cases
Extends RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. to platform integrations for tenant-level and org-wide granular access control.
Enables configuring least-privilege permissions specifically for platform integrations.
New Search & Respond REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints enable programmatic message search and remediation from SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. platforms.
Adds new Search & Respond REST API endpoints for programmatically searching for messages
Adds new Search & Respond REST API endpoints for triggering remediation actions
Malcolm v26.02.0 adds SURICATA_DISABLE_SIDS, skip-threat-intel flags for Zeek, and Redis tuning env vars.
└──▷ GET THIS VERSION
$ git clone --branch v26.02.0 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.02.0
└──▷ USE IT
Silence specific high-volume Suricata rule IDs (e.g. SID 2200074 and 2200075) so they never generate alerts, without touching rule files.
ini
# in ./config/suricata.env
SURICATA_DISABLE_SIDS=2200074,2200075
Skip threat-intel enrichment when processing uploaded PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. files offline, to speed up bulk re-analysis without false positives from stale intel feeds.
ini
# in ./config/zeek-offline.env
ZEEK_DISABLE_INTEL_OFFLINE=true
Cap Redis memory and set an eviction policy to prevent the cache container from consuming unbounded memory in long-running deployments.
ini
# in ./config/redis.env
REDIS_MAXMEMORY=512mb
REDIS_MAXMEMORY_POLICY=allkeys-lru
REDIS_CACHE_MAXMEMORY=256mb
REDIS_CACHE_MAXMEMORY_POLICY=allkeys-lru
REDIS_AUTO_AOF_REWRITE_MIN_SIZE=64mb
Adds SURICATA_DISABLE_SIDS to suricata.env to suppress noisy Suricata rule IDs without editing rule files.
Adds ZEEK_DISABLE_INTEL_LIVE to zeek-live.env and ZEEK_DISABLE_INTEL_OFFLINE to zeek-offline.env so offline PCAP processing (and live capture) can skip threat-intel lookups independently.
Adds REDIS_MAXMEMORY, REDIS_MAXMEMORY_POLICY, REDIS_AUTO_AOF_REWRITE_MIN_SIZE, REDIS_CACHE_MAXMEMORY, and REDIS_CACHE_MAXMEMORY_POLICY to redis.env for fine-grained tuning of the redis and redis-cache containers.
Adds the indices:admin/create permission to the capture_serviceOpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. role.
Snort 3.11.1.0 adds AppID midstream detection, HTTP decoded URI IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. option, SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. inspector, and expanded file/extractor telemetry.
└──▷ GET THIS VERSION
$ git clone --branch 3.11.1.0 https://github.com/snort3/snort3.git
# already have the repo? check out this version:$ git checkout 3.11.1.0
└──▷ TRY IT
Detect decoded HTTP URIs in IPS rules — useful for catching evasion via URL encoding in inspected traffic.
$ alert http any any -> any any (msg:"Decoded URI match"; http_decoded_uri; content:"/etc/passwd"; sid:1000001;)
Enable the KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. failed_login flag to surface brute-force or credential-stuffing events in AppID telemetry.
lua
kerberos = { failed_login = true }
Enable the SOCKS inspector to gain visibility into SOCKS-proxied traffic flows.
lua
socks = {}
Adds AppID SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. service detection during midstream sessions.
Adds AppID server and client port inspection during midstream; adds NFSv4.1 protocol support.
New http_decoded_uri IPS rule option and decoded URI buffer with shared decoded path in http_inspect.
New socks inspector for SOCKS protocol traffic analysis.
Adds Kerberos config option to set the failed_login flag in the Kerberos client detector.
+9 moreshow less
Adds file_api buffer data to perf-monitor output and packet tracer logs; adds extractor field support.
Saves DAQ header flow_id into the Flow object; includes flow_id in dump_flows command output.
New get_content_length method on HttpEvent pub/sub API.
Adds RNA support for deviceinfo fingerprint processing and events.
Adds multi-logging feature in trace to support new Lua configuration.
SSL inspector now alerts on multiple ClientHello certificate records.
Improves MMSMMSMultimedia Messaging Service, a mobile carrier protocol that extends SMS to carry images, audio, and video between handsets; cyber tools use it to analyze or simulate rich-media mobile message delivery. wizard curse against fragmented traffic and enhances MMS presentation context search.
Enhanced shadowtraffic logging to system support trace.
Lockless event ring in mp_dbus for improved multiprocessing throughput.
Minimus adds Helm chart signature verification via Cosign, image descriptions in private galleries, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. role management hints, and official FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. logos.
Add cosign verification support for Minimus Helm charts to ensure artifact integrity.
Add image descriptions field to private gallery images for organization and context capture.
Add helpful hints on user configuration pages to guide SAML role management for multi-group assignments.
3 details in Everything
2 more releases in this issue
· 2026-02-01 → 2026-02-22
Minimus adds session-persistent recent searches and recently added sort to gallery
└──▷ HOW TO FIND IT
Retrieve previous search context instantly in the browser UI
📍In the gallery, type in the search bar and select from Recent searches
Filter the gallery to view only the newest image uploads
📍In the gallery, switch to the recently added sorting option
Gallery Search Enhancement Recent searches at your fingertips Dive back into your recent image searches at any time, even between sessions. Your last 10 searches are available from the search bar so that you can freely explore the Minimus gallery without fear of losing your context.
Gallery Sorting Enhancement Discover when images were first added Easily see when images were first added to the Minimus image gallery. Switch to the recently added sorting option to see the exact date when the image first became available by Minimus.
Minimus adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. group support for Azure, Google, Okta; new FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. CMVP certs
└──▷ HOW TO FIND IT
Enable SAML group-based access control for Azure or Google providers.
📍Navigate to Settings › SAML Configuration in the console, then enable the SAML Groups toggle.
Verify FIPS compliance status for Java and BoringCrypto modules.
📍Check the compliance dashboard to view separate certificate details for FIPS module 5142 (Java) and 5104 (BoringCrypto).
Added support for SAML groups in role-based access controlrole-based access controlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for Azure, Google, and Okta identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
Introduced toggle for enabling SAML groups configuration in the SAML configuration form.
Acquired FIPS CMVP certificate 5142 for Java and certificate 5104 for BoringCrypto modules.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Private images moved to my images category and no longer appear at the top of the general gallery.
Inspektor Gadget v0.49.0 adds OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. profiles export and a new --gadgets-only flag for bpfstats.
└──▷ GET THIS VERSION
$ git clone --branch v0.49.0 https://github.com/inspektor-gadget/inspektor-gadget.git
# already have the repo? check out this version:$ git checkout v0.49.0
└──▷ TRY IT
Filter bpfstats output to only gadget-owned eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. programs, replicating the old default behavior after the breaking change.
$ ig run bpfstats --gadgets-only
Adds OpenTelemetry profiles support to exporters, enabling profiling data to be shipped via the OTelOTelAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. pipeline.
New --gadgets-only flag for the bpfstats gadget filters output to show only Inspektor Gadget eBPF programs instead of all eBPF programs.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The --all flag for the bpfstats gadget has been removed; showing all eBPF programs is now the default behavior. To restore the previous behavior of showing only gadget programs, pass --gadgets-only.
Grype v0.108.0 adds EOL warning suppression, improved VEXVEXA machine-readable statement from a vendor saying whether a CVE in a component actually affects their product. It is how a scanner is told to stop flagging a vulnerability that is not reachable. matching, and more accurate PostmarketOS scanning.
└──▷ GET THIS VERSION
$ git clone --branch v0.108.0 https://github.com/anchore/grype.git
# already have the repo? check out this version:$ git checkout v0.108.0
Adds option to disable end-of-life (EOL) warnings in scan output.
Improves VEX product and subcomponent matching for more precise vulnerability exception handling.
Supports more accurate vulnerability scanning for PostmarketOS distributions.
$ git clone --branch 3.27.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.27.0
└──▷ USE IT
Control how kata-deploy rolls out updates to nodes instead of the default strategy.
config
# In your kata-deploy config (e.g. values.yaml or DaemonSet manifest):
update_strategy: "RollingUpdate" # or "OnDelete"
Generate policy output directly as base64 or raw string instead of YAML for easier parsing in CI.
update_strategy config option in kata-deploy to control DaemonSet update strategy
cri-o.device-coldplug annotation support in shim for device hot-add without restart
network_queues configuration and annotation in runtime-rs for configurable network queue counts
TEE nodeSelectors automatically added by kata-deploy when NFD is detected
--{base64/raw}-out flags in genpolicy to suppress YAML output
+2 moreshow less
allowlist support for multiple NVIDIA GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. resource keys in genpolicy vfio settings
RO and RW sysfs permissions allowed in genpolicy for privileged containers
kube-bench v0.15.0 adds CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. support for EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves.-1.8 and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-1.12 Kubernetes controls.
└──▷ GET THIS VERSION
$ git clone --branch v0.15.0 https://github.com/aquasecurity/kube-bench.git
# already have the repo? check out this version:$ git checkout v0.15.0
Adds CIS Benchmark for EKS-1.8, enabling compliance checks against the latest Amazon EKS hardening standard.
Adds CIS-1.12 benchmark support for Kubernetes clusters.
Sysdig Secure introduces Cloud Response Actions for AWS in Threat Detection, with Terraform provider updates.
Adds Cloud Response Actions for AWS, allowing containment and investigative actions directly from the Events feed.
New Configure Threat Response on AWS setup path is available.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Cloud Detection and Response (CDR) is renamed to Threat Detection across UI and documentation.
!All Sysdig Terraform modules for AWS, GCP, Azure, and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. bumped to a new major version.
2 more releases in this issue
· 2026-02-03 → 2026-02-26
Adds Amazon Kinesis Data Streams and Kinesis Firehose integrations for streaming data out of Sysdig Secure
└──▷ HOW TO FIND IT
Stream security telemetry from your cluster to Kinesis for real-time processing or custom S3 storage.
📍In the Sysdig Secure dashboard, navigate to Integrations › SIEM & Data Platforms and select Forwarding to Amazon Kinesis Data Streams.
Adds support for streaming Sysdig data to Amazon Kinesis Data Streams via the UI under Integrations > SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. & Data Platforms.
Adds support for streaming Sysdig data to Amazon Kinesis Firehose via the UI under Integrations > SIEM & Data Platforms.
Prowler 5.18.0 adds OpenStack provider support, CodeBreach detection, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against. for Azure, and new checks across AWS, M365, and GCP.
└──▷ GET THIS VERSION
$ git clone --branch 5.18.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.18.0
└──▷ TRY IT
Scope a Cloudflare scan to a specific account using the new account-id filter.
Adds OpenStack as a new cloud provider (CLI only) with initial Compute service coverage and first security check, enabling private cloud assessments.
New check codebuild_project_webhook_filters_use_anchored_patterns detects the CodeBreach vulnerability in AWS CodeBuild projects by verifying webhook filter anchor patterns.
New AWS check rds_instance_extended_support detects RDS instances using extended support.
New M365 checks: defender_zap_for_teams_enabled and exchange_shared_mailbox_sign_in_disabled.
New GCP check compute_instance_suspended_without_persistent_disks for suspended instances lacking persistent disks.
+12 moreshow less
Adds HIPAA compliance framework for the Azure provider.
New --account-id filter argument for Cloudflare CLI scans.
Cloudflare provider credentials now accepted as constructor parameters (api_token, api_key, api_email) for SDK usage.
AWS cross-account checks are now configurable via the trusted_account_ids config parameter.
New attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately.privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. queries covering Bedrock Code Interpreter and AttachRolePolicy patterns.
Cartography upgraded to 0.126.1, expanding AWS attack path scans to include SageMaker, CloudFront, and Bedrock.
Neo4j database per-tenant architecture for Attack Paths improves isolation and performance.
New GET /api/v1/resources/{id}/events API endpoint retrieves AWS resource modification history from CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions..
New provider_id and provider_id__in filters added to GET /resources and GET /resources/metadata/latest API endpoints.
Redesigned Resources view with an improved resource detail drawer in the UI.
Launch Scan page now displays all providers without pagination limits.
Azure Key Vault vaults and vault contents retrieval now runs in parallel for faster scans.
eksctl v0.223.0 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. policy support to pod-identity-association create and update commands.
└──▷ GET THIS VERSION
$ git clone --branch v0.223.0 https://github.com/weaveworks/eksctl.git
# already have the repo? check out this version:$ git checkout v0.223.0
Supports specifying IAM policies when creating and updating pod identity associations via eksctl.
1 detail in Everything
1 more release in this issue
· 2026-02-06 → 2026-02-14
eksctl v0.222.0 adds Windows Server 2025 node support, wildcard service account subjects, and bumps default cluster version to Kubernetes v1.34.
└──▷ GET THIS VERSION
$ git clone --branch v0.222.0 https://github.com/weaveworks/eksctl.git
# already have the repo? check out this version:$ git checkout v0.222.0
Supports EKS Windows Server 2025 as a node AMI family.
Allows wildcard matching of service account subjects in IRSAIRSAAn AWS mechanism that lets a Kubernetes pod assume an IAM role via a service account, so tools running in EKS can call AWS APIs without embedding long-lived credentials. configurations.
Updates the default cluster version to Kubernetes v1.34.
OpenSandbox egress v1.0.1 adds DNS-based dynamic IP rules and unified logging
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.1
Adds Egress stage two support for blocking traffic via IP/CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. rules and DoTDoTDNS over TLS: an IETF standard (RFC 7858) that wraps DNS queries in a TLS session on port 853, preventing eavesdropping and tampering that plain UDP DNS allows./DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring.
Adds Egress stage three to perform dynamic IP insertion using DNS answer data
Introduces a unified logger managed by an internal package
Prints build and compile information during startup
4 details in Everything
10 more releases in this issue11 more releases in this issue · 2026-02-04 → 2026-02-27
OpenSandbox v0.1.3 adds multi-ingress, header ingress, informer-based K8s resources, and Docker PVC with subPath.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.3 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.3
OpenSandbox v0.1.4 adds command query support, host/PVC volume types in OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth., server proxy access, command timeout, and execd headers.
└──▷ GET THIS VERSION
$ git clone --branch js/sandbox/v0.1.4 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/sandbox/v0.1.4
command query now supported via the SDKs
host and pvc volume types added to the OpenAPI spec
OpenSandbox v1.0.4 adds command query support, host/PVC volume types in OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec, and server proxy access for sandbox endpoints
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.4 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.4
Adds command query support via SDKs to filter or retrieve commands
Adds host and pvc volume types to the OpenAPI specification for sandbox storage configuration
Enables accessing sandbox endpoints through a server proxy mechanism
OpenSandbox v0.1.5 adds command query, proxy access to endpoints, and host/PVC volume support in OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth.
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.5 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.5
server_proxy feature enables accessing sandbox endpoints via the server proxy.
host and pvc volume types added to the OpenAPI spec for volume configuration.
Support for querying commands (command query feature).
OpenSandbox execd v1.0.6 adds timeout support for run_command requests and human-readable logs.
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.6 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.6
Adds a configurable timeout to the run_command request to prevent indefinite hangs
Implements human-readable logs and concise SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. summary log for better observability
OpenSandbox server/v0.1.2 adds local host volume mount and Kubernetes NetworkPolicyNetworkPolicyA Kubernetes API object that defines which pods may send or receive traffic, enforced by the cluster's CNI plugin to give cyber tools namespace-level network segmentation without host firewall rules. support.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.2 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.2
OpenSandbox Ingress v1.0.1 adds proxy mode with URI/header support and new watch capability for agent-sandbox resources
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.1
Introduces proxy mode in ingress, enabling traffic interception via uri or header modes.
Adds the ability to watch agent-sandbox resource from within the ingress component.
OpenSandbox v0.1.1 adds host/PVC volume API definition and built-in proxy support for sandbox endpoints.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.1
[runtime].egress_image config key is no longer accepted; egress configuration has been extracted as an independent module
Adds [preview] API definition for host and PVC volumes to enable mounting persistent storage into sandboxes
Enables accessing sandbox endpoints via the server's built-in proxy
3 details in Everything
└──▷ BREAKING ON UPGRADE
![runtime].egress_image config key is no longer accepted; egress configuration has been extracted as an independent module (refers to [Configuration reference](https://github.com/alibaba/OpenSandbox/blob/main/server/README.md#configuration-reference))
Initial public release of the OpenSandbox python sandbox MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server
└──▷ GET THIS VERSION
$ git clone --branch python/mcp/sandbox/v0.1.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/mcp/sandbox/v0.1.1
OpenSandbox v0.1.0 introduces the first production-grade service for managing containerized sandbox lifecycle.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.0
└──▷ USE IT
Run the new sandbox control plane service locally for testing.
shell
docker run -p 8000:8000 opensandbox/server:v0.1.0
opensandbox-server is now available on PyPI (v0.1.0) and Docker Hub (opensandbox/server:v0.1.0) as the control plane for isolated execution environments.
Provides FastAPI-based endpoints to create, run, monitor, and dispose containerized sandboxes across platforms.
OpenSandbox v0.1.5 adds server proxy access for sandbox endpoints and command query support.
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.5.dev0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.5.dev0
feat(volume): Adds host and pvc volume types to the OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec.
feat(server): Supports accessing sandbox endpoints via a server proxy.
IsMalicious is a threat intelligence platform that checks IPs, domains, URLs, emails, phones and crypto wallets against indexed threat indicators.
Introduces DNS history lookup for A, AAAA, MX, NS, TXT, and CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin. records with 3-year backfill.
Adds DNS history lookup capability supporting full record types (A, AAAA, MX, NS, TXT, CNAME) with timestamps up to 3 years in the past
Provides a new threat-intelligence endpoint for retrieving historical domain resolution data
2 details in Everything
2 more releases in this issue
· 2026-02-01 → 2026-02-20
Adds DNS history lookup showing A, AAAA, MX, NS, TXT, and CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin. records with timestamps going back 3 years.
Adds webhook delivery retry with exponential backoff (up to 5 attempts) for failed deliveries.
$ git clone --branch 7.260227.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260227.0
Adds no_split argument to the Python library's send_stix_bundle function to control SDO/SCO batching
Adds custom right-hand side background image configuration for login pages
2 details in Everything
4 more releases in this issue
· 2026-02-02 → 2026-02-27
OpenCTI 7 adds UI-based SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. auth management, draft workspace capabilities, browser extension, and manual playbook enrollment.
└──▷ GET THIS VERSION
$ git clone --branch 7.260224.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260224.0
└──▷ HOW TO FIND IT
Manually trigger an automated playbook on a specific entity via the UI without writing code or configuring webhooks.
📍In the OpenCTI Enterprise Edition interface, open any entity detail page and click the new Enroll in playbook button to select and run a workflow.
Configure SSO authentication settings directly in the platform interface without restarting the service or editing external files.
📍Navigate to Authentication Strategies in the OpenCTI Enterprise Edition UI to add or modify SSO configurations.
Use the new browser extension to automatically detect IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. on a webpage and create a STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. report in OpenCTI.
📍Install Filigran Threat Management from the Chrome Web Store, open a threat intelligence page, and use the one-click enrichment/ingestion feature provided by the extension sidebar.
Adds Authentication Strategies section in the Enterprise Edition UI to manage SSO configurations without editing config files or reloading the platform
Introduces granular capability controls in Draft Mode for Enterprise Edition users to restrict analysts to creating and updating data only within drafts
Releases a new Filigran Threat Management browser extension for Firefox, Chrome, Edge, and Safari that detects IOCs on web pages, enriches them with platform data, and creates STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.1 reports via one-click ingestion
Adds User visibility policy settings to enforce organization-level segregation of user lists and prevent data leakage across different organizations
Updates API token management to require explicit token generation, supports multiple tokens per user with expiration dates, and tracks last used activity for each token
+2 moreshow less
Enables playbooks in Enterprise Edition to definitively remove specific labels and markings from entities regardless of their origin
Adds a manual Enroll in playbook button in the Enterprise Edition interface to trigger automated workflows on-demand for any compatible entity type
7 details in Everything
└──▷ BREAKING ON UPGRADE
!SSO authentication is now restricted to the Enterprise Edition; Community Edition platforms cannot login using previously configured SSO
Adds PDF upload and AI processing to Feedly with Enable File Upload workspace setting.
└──▷ HOW TO FIND IT
Enable PDF ingestion for your team via the workspace configuration.
📍Workspace Settings › More › Enable File Upload
Adds the Enable File Upload toggle under Workspace Settings > More, allowing team admins to allow members to upload PDFs for automatic metadata extraction and Ask AI access.
Adds a Files Page to centralize tracking of all team-uploaded documents.
2 details in Everything
3 more releases in this issue
· 2026-02-03 → 2026-02-18
Feedly introduces Cyberattack Insights Cards with IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. exportable in STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format., MISP, or CSV.
└──▷ HOW TO FIND IT
Export IoCs from a specific attack card to import into your SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or threat hunting platform.
📍1. Open the relevant Cyberattack Insights Card.
2. Locate the 'IoCs exportable in STIX 2.1, MISP, or CSV' option.
3. Select the desired format (STIX 2.1, MISP, or CSV) to download the IoC data.
Cyberattack Insights Cards provide a dynamic 360° view of cyberattacks, consolidating threat actors, malware, IoCs, and TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. into a single evolving display.
IoCs within Cyberattack Insights Cards can be exported in STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.1, MISP, or CSV formats for integration with external security tools.
Feedly's Vulnerability Intel Agent adds CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. Vector filters for precise CVE prioritization
└──▷ USE IT
Find active, wormable threats requiring no user interaction or privileges.
text
(Privileges Required: None) AND (User Interaction: None) AND (Exploited) OR (Proof of Concept) OR (Weaponized) OR (CISA KEV) AND (Attack Vector: Network) NOT (Patched)
Identify remote vulnerabilities posing high availability impact.
text
(Availability Impact: High) AND (Attack Vector: Network)
Adds CVSS Vector filters to the Vulnerability Intel Agent interface for filtering CVEs by attack vector, complexity, privileges required, user interaction, impact scope, and exploitation status.
Supports Boolean logic (AND/OR/NOT) in CVSS Vector filter configuration to combine multiple vulnerability characteristics.
Enables targeting of specific exploitation contexts including Exploited, Proof of Concept, Weaponized, and CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. statuses alongside technical attributes like Attack Vector and Confidentiality Impact.
World Monitor v2.5.20 adds configurable VITE_WS_API_URL, cloudflare edge caching for API, and a new Security Advisories panel.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.20 https://github.com/koala73/worldmonitor.git
# already have the repo? check out this version:$ git checkout v2.5.20
└──▷ TRY IT
Override the WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. host used by the client before building or running the app.
Adds NHK World/Nikkei Asia RSS feeds, Japanese/Arabic/Chinese locales, and findings badge toggle to World Monitor v2.3.9.
└──▷ GET THIS VERSION
$ git clone --branch v2.3.9 https://github.com/koala73/worldmonitor.git
# already have the repo? check out this version:$ git checkout v2.3.9
Add NHK World and Nikkei Asia RSS feeds for Japan coverage
Add toggle to disable Intelligence Findings badge
Add Japanese (1132 keys), Arabic (RTLRTLRegister Transfer Level, a hardware design abstraction describing how data moves between registers each clock cycle; cyber tools use it to analyze or synthesize digital circuits from HDL source.), and Simplified Chinese locales
World Monitor v1.7.0 adds the tech variant via VITE_VARIANT=tech, new YouTube live stream detection API, and wildcard CORSCORSA browser mechanism that lets a server declare which foreign origins may read its HTTP responses, enforced by the browser to block unauthorized cross-site requests from JavaScript. support.
└──▷ GET THIS VERSION
$ git clone --branch v1.7.0 https://github.com/koala73/worldmonitor.git
# already have the repo? check out this version:$ git checkout v1.7.0
VITE_VARIANT=tech environment variable enables a separate tech/startup-focused dashboard with AI prompts, readiness panels, and Techmeme/RSS event feeds.
New YouTube live stream detection API endpoint added to infrastructure.
Wildcard CORS configuration now permitted for *.worldmonitor.app.
World Monitor v1.2.0 adds military flight tracking, FAA delay integration, ACLED protest data, and OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. for OpenSky.
└──▷ GET THIS VERSION
$ git clone --branch v1.2.0 https://github.com/koala73/worldmonitor.git
# already have the repo? check out this version:$ git checkout v1.2.0
Adds OpenSky OAuth2 authentication
Adds ACLED + GDELT geocoded protest data panel
Adds FAA NASSTATUS integration for global flight delays
Cloudmersive Cloud DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. AI API v1-9-0 adds additional RecognitionModes.
13 more releases in this issue
· 2026-02-07 → 2026-02-28
Adds support for custom DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. policies
Watcher v3.3.0 adds local CertStreamCertStreamA real-time feed of SSL/TLS certificates logged to Certificate Transparency logs, maintained by Calidog Security, giving cyber tools instant visibility into newly issued certificates for domain monitoring or phishing detection. server, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. expiry tracking, and regex keyword matching.
└──▷ GET THIS VERSION
$ git clone --branch v3.3.0 https://github.com/thalesgroup-cert/Watcher.git
# already have the repo? check out this version:$ git checkout v3.3.0
└──▷ HOW TO FIND IT
Enable regex pattern matching for a keyword to detect complex email patterns.
📍# In the Keyword model UI or API, set is_regex to true and use patterns like [a-zA-Z0-9._%+-]+@company\.com
Track SSL certificate expiration dates for monitored domains.
📍# The system now automatically populates LegitimateDomain.ssl_expiry and Site.ssl_expiry
# No new CLI flag is required; ensure periodic checks are enabled in the UI
Adds a CERT_STREAM_URL environment variable to configure the local WS endpoint for certificate transparency monitoring
Introduces the certstream-config.yaml file with webserver, prometheus, and WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. endpoint configuration keys
Adds new LegitimateDomain.ssl_expiry, Site.ssl_expiry, Site.domain_created_at, Alert.new_ssl_expiry, and Alert.old_ssl_expiry database fields for SSL certificate tracking
Adds an is_regex boolean field to the Keyword model to enable regex pattern matching instead of literal string matching
Migrates the search engine service from searx to searxng with corresponding container name and image updates
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The searx service in docker-compose.yml must be renamed to searxng; existing container names and hostnames referencing searx are invalid.
!The SEARX_COMMAND environment variable is no longer used and may cause confusion if left in .env.
Lookyloo v1.37.0 adds domain/TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. indexing, a smarter search interface, optional wait time for instrumentation, GTM identifier indexing, ION/protobuf support, and web extension cookie passing.
└──▷ GET THIS VERSION
$ git clone --branch v1.37.0 https://github.com/Lookyloo/lookyloo.git
# already have the repo? check out this version:$ git checkout v1.37.0
Adds optional wait time after the instrumentation ran (for time-based javascript code)
Index domains, suffix, and TLDs (even the weird ones)
Search interface figures out what the user is looking for (hostname, domain, suffix, or TLD), and returns the captures accordingly
Index GTM- identifiers
Support more types in POST requests: Amazon ION, protobuf (best effort), broken atom.
+1 moreshow less
Support [web extension](https://addons.mozilla.org/en-US/firefox/addon/lookyloo/), and passing cookies.
Shuffle adds AI Agent App support in hybrid mode, on-prem MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. action execution, and Helm-based Kubernetes worker/app deployments.
└──▷ GET THIS VERSION
$ git clone --branch nightly-1771869385 https://github.com/Shuffle/Shuffle.git
# already have the repo? check out this version:$ git checkout nightly-1771869385
Enables AI Agent App support in hybrid mode so on-prem workers can leverage cloud-side AI agent apps.
Adds runMCPAction support on-prem, enabling Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. action execution in self-hosted deployments.
Supports deploying Shuffle worker and app containers via Helm charts for Kubernetes environments.
3 details in Everything
0 more releases in this issue1 more release in this issue · 2026-02-09 → 2026-02-23
Shuffle nightly adds multi-region cloud sync support and smarter Kubernetes worker deployment checks.
└──▷ GET THIS VERSION
$ git clone --branch nightly-1770615681 https://github.com/Shuffle/Shuffle.git
# already have the repo? check out this version:$ git checkout nightly-1770615681
Adds multi-region support for cloud sync, enabling distributed deployments across geographic regions.
Checks for existing worker deployments in Kubernetes before deploying, preventing duplicate rollouts.
Adds agentic_ai_security use case support in Outcomes Navigator
Adds minimumTrainingPeriodInDays field to analytics rule JSON config or builder to delay triggering during baseline establishment
Enables CIM 2.0 fields selection in the analytics rule builder for applicable events
+5 moreshow less
Adds minOrderOfMagnitude field support with range 1–32 for numeric profiled feature rules
Adds suppression toggle under Suppress Length to prevent repeated triggering on specified fields
Adds new correlation rule templates: AWS root account logged in without MFA, Large amount of failed delivery status notifications for this Gmail account, Remote HTA file executed using 'mshta.exe', and Remote MSI file executed using 'msiexec.exe'
Adds dozens of new pre-built analytics rules covering credential dumping, privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., persistence, data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels., lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access., RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. session hijacking, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. attacks, malicious code execution, and AI misuse
Enhances timeline view in search to automatically include source events that did not meet query criteria but triggered a detection
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed option to add rows directly to filtered context tables; must add to parent context tables instead
!Removed Custom Default parser category in Log Stream
Databricks adds GPT-5.3 Codex to Mosaic AI Model Serving via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves..
Adds OpenAI GPT-5.3 Codex as a Databricks-hosted model in Mosaic AI Model Serving.
Enables access to the new model via Foundation Model APIs with pay-per-token pricing.
Power BI Desktop and Service now default to the Arrow Database Connectivity (ADBCADBCArrow Database Connectivity, an Apache standard API for querying databases that returns results directly as Apache Arrow columnar buffers, eliminating per-row copying overhead and making bulk data transfer fast for analytics pipelines.) driver for new Databricks connections.
New Power BI connections automatically use the ADBC driver instead of ODBCODBCA standard API, maintained by Microsoft, for connecting applications to relational databases regardless of vendor. Cyber tools use it to query databases without writing engine-specific code.
Ability to switch back to ODBC drivers for new connections if required
Adds scoped personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. to limit API permissions
Enables selection of a token type when creating personal access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. to apply API scopes
Mosaic AI Model Serving now supports Anthropic Claude Sonnet 4.6 as a Databricks-hosted model via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves.
Mosaic AI Model Serving adds a new Databricks-hosted embedding modelembedding modelLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. available in Public Preview.
Adds Qwen3-Embedding-0.6B to Mosaic AI Model Serving as a Databricks-hosted model accessible via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves. pay-per-token
Release notes for Databricks AI Gateway (Beta) describe a new enterprise control plane for governing LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. endpoints and coding agents.
Provides a rich UI for AI Gateway management and configuration.
Adds improved observability capabilities for monitored LLM endpoints and coding agents.
Expands API coverage for programmatic interaction with AI Gateway governance features.
Default SQL warehouse settings GA: workspace and user-level defaults for SQL authoring surfaces.
Workspace administrators can now set a default SQL warehouse automatically selected in SQL editor, AI/BI dashboards, Genie Agents, Alerts, and Catalog Explorer
Individual users can override the workspace default by setting their own user-level default warehouse
Databricks Assistant in Agent mode now connects to external tools and data sources via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.)
Adds Agent mode support for Databricks Assistant to connect to any MCP servers added to your workspace
Google SecOps adds Preview support for Google Cloud VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Service Controls to restrict data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. via perimeters.
4 more releases in this issue
· 2026-02-03 → 2026-02-25
Google SecOps adds rule replay metadata, Detection Health dashboard, and timing fields to Detections schema
└──▷ TRY IT
Query detection latency via API using new timing fields
$ GET /v1/detections?filter=latencyMetrics.oldestIngestionTime > "2026-01-01T00:00:00Z"
Filter alerts by replay type in the UI
📍In Alerts lister, add facet detectionTimingDetails and select RETROHUNT or REPROCESSING.
Adds detectionTimingDetails enum field to detection and alert objects for tracking run type (REPROCESSING, RETROHUNT, UNSPECIFIED)
Adds latencyMetrics object with oldestIngestionTime, newestIngestionTime, oldestEventTime, and newestEventTime timestamps to detection and alert metadata
Introduces new Detection Health dashboard for visualizing rule performance and replay status
Adds detectionTimingDetails as a filterable facet on the Alerts lister page
Updates Composite Detections table in Case Overview to display consistent iconography from SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. integration
New re.capture_all YARA-LYARA-LA rule language developed by Google for Chronicle that extends YARA syntax to express multi-event, time-windowed detections over log data rather than single-file pattern matching. function for full regex extraction; new parser docs for ForgeRock, Fortinet, Google, IBM and others
└──▷ HOW TO FIND IT
Extract all potential IP addresses or emails from a log message for further analysis instead of just the first occurrence.
Adds re.capture_allYARA-L 2.0YARA-L 2.0A rule language developed by Google for writing detection logic in Chronicle SIEM, extending YARA syntax to match sequences of log events over time rather than static file patterns. function to extract every non-overlapping regex match from a string
New parser documentation added for Collecting logs from ForgeRock OpenIDM, Forseti Open Source, Fortinet (FortiClient, FortiDDoS, FortiEDR, FortiManager, Switch), Fortra Powertech SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. Agent, Google App Engine, Google Cloud DNS Threat Detector, Google Cloud Monitoring alerting activity, Google Cloud Network Connectivity Center, Google Cloud Secure Web Proxy, Gmail, H3C Comware Platform Switch, HackerOne, Hillstone Firewall, Hitachi Content Platform, HYPR MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., and IBM Guardium
Google SecOps adds ability to share custom column sets for the Events table.
└──▷ BREAKING ON UPGRADE
!API calls to IocService and ThreatCollectionService now require global scope; direct CLI/client library calls fail without it
!Emerging threats page no longer shows IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. match counts per campaign for users without global scope
!Entity widget overlay hides the Indicators table or shows it empty for users without global scope
!Threat details page no longer shows related entities, IOC matches, or GTI IOC tables for users without global scope
!Entity summary widget excludes GTI scores for users without global scope
!Indicator Details tab on the IOC details page no longer populates for users without global scope
Sekoia.io adds dashboard sharing between MSSPMSSPA Managed Security Service Provider: a third-party company that operates cyber tooling and monitoring on behalf of clients, letting organizations outsource detection, response, and compliance functions. workspaces and communities, dynamic SOL query filters (?variable_name), and a new Queries page with search and filter capabiliti
Adds ?filter_name syntax to SOL queries to create dynamic input fields (Text, Boolean, Single/Multi selection, Time) for interactive dashboards
Adds ability to share MSSP workspace dashboards to end-user communities via Manage access with auto read-only sync
Introduces a new Queries page with search bar and filters by type, author, and access scope to locate SOL queries
ClickHouse 26.2 adds BigLake catalog integration, ClickStack UI, TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. auth, jemalloc profiling tables, and new dedup/hash functions.
Adds Google BigLake catalog integration as a managed database source
Enables direct access to ClickStack (observability UI) from within ClickHouse for debugging and local development
Supports time-based one-time password (TOTP) as an authentication method
Adds lazy_load_tables database setting to defer table engine materialization until first access
Adds input_format_max_block_wait_ms setting to control HTTP block emission timeout during incomplete uploads
+14 moreshow less
Adds system tables system.tokenizers, system.user_defined_functions, and system.jemalloc_stats for inspecting tokenizers, UDF status, and memory allocator stats respectively
Exposes /jemalloc.html HTTP endpoint for interactive visualization of jemalloc statistics
Adds system table system.jemalloc_profile_text with configurable output format (raw, symbolized, collapsed) via jemalloc_profile_text_output_format setting for heap profiling
Adds default_dictionary_database setting to resolve unqualified external dictionary references without modification
Adds support for auxiliary Zookeeper nodes in DatabaseReplicated setups
Implements new table function primes() and system table system.primes containing ascending prime numbers
Enables parallel quorum replication for async inserts with duplicate detection and synchronization waits
Adds colorOKLABToSRGB and colorSRGBToOKLAB functions for sRGB/OKLAB color space conversion
Adds new deduplicate_insert setting that overrides both insert_deduplicate and async_insert_deduplicate
Introduces insert_deduplication_version server setting for unified deduplication hash migration
Adds xxh3_128 hashing function
Adds OPTIMIZE <table> DRY RUN PARTS <part names> query syntax to simulate merges without committing results
Adds check_named_collection_dependencies setting (enabled by default) to prevent dropping named collections used by tables
Adds system.fail_points system table for inspecting server failpoints to assist in test automation
19 details in Everything
└──▷ BREAKING ON UPGRADE
!Deduplication is now turned ON by default for all inserts; explicitly set deduplicate_insert='backward_compatible_choice' to keep the old behavior if deduplication was disabled.
!Renamed system tables: azure_queue is now azure_queue_metadata_cache and system.s3queue is now s3queue_metadata_cache.
!Applying a function to an incompatible Variant sub-type now throws an exception instead of silently returning NULL.
!The do_not_merge_across_partitions_select_final setting now defaults to 0 with automatic merging enabled only if enable_automatic_decision_for_merging_across_partitions_for_final=1; explicit configuration may be required to restore previous behavior.
!Creating an S3 table with mismatched column names relative to the remote file schema now fails at table creation time instead of working.
!Subqueries in ORDER BY and other table key expressions are now forbidden.
!For optimize_move_to_prewhere_if_final=1, row policies are now applied after FINAL by default; use apply_row_policy_after_final to change this behavior.
!Date columns from PostgreSQL are now inferred as Date32 instead of Date; adjust queries if this overflow prevention affects logic relying on the narrower range.
!Date type serialization in Arrow/ArrowStream formats now uses Arrow's native date32 instead of uint16; restore old behavior with output_format_arrow_date_as_uint16.
RunReveal vFeb2026 adds agentic triage, async queries, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. via WorkOS, BYOS preview, and new data sources.
Adds agent templates including Alert Tuning and Data Volume Anomaly Detection for automated security operations.
Enables streaming AI chat responses in real-time for Anthropic, AWS Bedrock, and OpenAI backends.
Allows creating agents directly from detection rules or existing chat conversations.
Adds an Agent Widget on the homepage to display active agents, recent runs, and errors.
Enables AI Triage for Managed Detections with automatic Investigation creation.
+18 moreshow less
Supports background execution of long-running queries via a dedicated work queue.
Adds the ability to cancel running queries from the query history page.
Displays all past queries, status, and execution times in the new Query History view.
Introduces SCIM Directory Sync via WorkOS for automatic user provisioning and group-based role mapping.
Logs all SCIM sync actions for compliance and troubleshooting.
Provides a Source Creation Wizard for Bring Your Own Source (BYOS) in preview.
Offers data preview with sample extraction to validate log parsing before schema commitment in BYOS.
Adds inline field mapping with AI-powered auto-suggestions for custom sources in BYOS.
Allows cloning managed detections into standalone, editable detections.
Adds PlanetScale as a supported data source for audit logs.
Adds ConductorOne as a supported data source for identity governance audit logs.
Adds Microsoft 365 as a supported data source for unified audit log polling.
Adds Cursor as a supported data source for AI coding environment audit logs.
Updates Salesforce Audit Trail integration with improved event monitoring.
Renders Mermaid diagrams inline within AI chat and investigations.
Buffers high-volume webhook dispatch through S3 for reliable delivery.
Exposes health check results as a system table for direct querying.
Displays pipeline step types inline in the configuration UI.
Trend Vision One FSS v4 adds private VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. support and permission boundary configuration via CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call..
Supports File Security Storage in private VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules.
Supports Permission Boundary for File Security Storage
Enhanced filtering and export for Intrusion Prevention virtual patching recommendations in Trend Vision One.
Enables filtering of virtual patching recommendations across DV status types, performance impacts, and filter types while preserving existing settings.
Exports filtered intrusion prevention recommendations to support sharing and integration with external ticketing systems.
Trend Vision One now shows all discovered devices with risk levels and a network attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. graph
Adds visibility of all devices discovered by network sensors along with their associated risk levels in the Network Overview
Provides asset risk scores based on vulnerabilities and exposure for categorized device types
Introduces a graphical representation of devices within the network structure to identify high-risk devices
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. PA Connector 2.38.0.1388 adds fail-safe mode and extends re-auth duration to 30 days.
Adds fail-safe mode that maintains connectivity when the controller is temporarily unavailable
Extends maximum re-authentication duration from the previous limit to 30 days
Trend Vision One adds public preview for auto-blocking untrusted Windows apps via Cyber Risk Exposure Management
Enables auto-blocking of untrusted Windows applications in Cyber Risk Exposure Management, forwarding executable hashes to Suspicious Object Management.
Requires enabling Advanced Risk Telemetry in Endpoint Security Policies to support auto-blocking.
AWS Cloud Account template v1.0.2089 restricts IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. role permissions for stack lifecycle management.
Adds precise column mapping configuration between TrendVision One cases and ServiceNow tickets for bidirectional sync.
Enables definition of granular mappings between case fields in TrendAI Vision One and ticket fields in ServiceNow for robust bidirectional synchronization.
Trend Vision One ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. Gateway 1.0.78 adds tenancy restrictions for ChatGPT and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server access control.
Adds support for tenancy restriction for ChatGPT in both Internet Access rules and AI Secure Access rules
Adds support for access control for traffic to MCP servers in AI Secure Access rules
Version 2.0.1 release includes a new Terraform template to facilitate the installation of Container Security for Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping..
OSSEC 4.0.0 ships AES encryption by default for agent comms and enables SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. file integrity monitoring out of the box.
└──▷ GET THIS VERSION
$ git clone --branch 4.0.0 https://github.com/ossec/ossec-hids.git
# already have the repo? check out this version:$ git checkout 4.0.0
└──▷ USE IT
Maintain connectivity between a new 4.0.0 agent and a legacy 3.8.0 server while you schedule the server upgrade.
Opt a specific monitored directory out of SHA-256 hashing when a downstream tool only understands MD5/SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications.FIMFIMFile Integrity Monitoring — a technique that tracks cryptographic hashes or metadata of files on disk and alerts when they change unexpectedly, giving cyber tools a way to detect tampering or unauthorized modification. data.
Enables AES encryption by default for all agent-server communication, replacing Blowfish as the default cipher.
Enables SHA-256 checksums by default for all syscheck-monitored directories, modernizing file integrity monitoring.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!AES encryption is now the default for agent-server communication; OSSEC 4.0.0 agents are NOT backwards compatible with OSSEC 3.8.0 and older servers — upgrade servers first, or add <crypto_method>blowfish</crypto_method> inside <client> in the agent's ossec.conf to fall back to Blowfish.
!SHA-256 is now enabled by default for all monitored directories; installations that cannot support this can disable it by setting check_sha256sum="no" on each <directories> entry in <syscheck>.
Splunk Security Content v5.22.0 adds 5 MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. abuse detections, a new MCP TA, and 5 new analytic stories including DynoWiper, ZOVWiper, and SolarWinds WHD RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives..
└──▷ GET THIS VERSION
$ git clone --branch v5.22.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.22.0
New analytic story Suspicious MCP Activities detects abuse of Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server deployments for data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels., privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access., and persistence.
New MCP Technology Add-on (TA) for parsing MCP server telemetry to support MCP-related detections.
New detection: MCP Sensitive System File Search — identifies malicious file searches via MCP filesystem integrations.
New detection: MCP Prompt Injection — detects prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. attacks targeting MCP-connected AI tooling.
New detection: MCP Postgres Suspicious Query — flags abnormal database queries issued through MCP Postgres integrations.
+9 moreshow less
New detection: MCP GitHub Suspicious Operation — surfaces suspicious GitHub API operations invoked via MCP.
New detection: MCP Filesystem Server Suspicious Extension Write — catches suspicious file extension writes through MCP filesystem servers.
New detection: Windows Execution of Microsoft MSC File In Suspicious Path — detects MSC file execution from non-standard locations.
New detection: Windows MMC Loaded Script Engine DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. — identifies script engine DLLs loaded by MMC, associated with XML Runner Loader tradecraft.
New analytic story DynoWiper maps Sandworm destructive wiper behaviors including file-overwrite, drive enumeration, and pre-reboot execution.
New analytic story ZOVWiper expands coverage for the ZOVWiper destructive malware family attributed to Sandworm.
New analytic story SolarWinds WHD RCE Post Exploitation (CVE-2025-26399) tracks post-exploitation activity including process spawning, privilege escalation, and C2 behavior from compromised Web Help Desk services.
New analytic story XML Runner Loader provides detection coverage for this loader technique.
Updated CrowdStrike Falcon Stream Alerts detection with community-contributed improvements.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!The Cobalt Strike Named Pipes detection has been removed; users must transition to Windows Suspicious C2 Named Pipe.
!The HTTP Suspicious Tool User Agent detection has been removed; users must transition to HTTP Scripting Tool User Agent.
!A new set of detections has been deprecated and are scheduled for removal in ESCU v5.24.0; see the List of Detections Scheduled for Removal for details.
1 more release in this issue
· 2026-02-05 → 2026-02-19
Splunk Security Content v5.21.0 adds Finding-Based Detections, CVE-2026-24061 telnet coverage, Chromium hijacking analytics, and VoidLink/Storm-0501/StealC threat actor stories.
└──▷ GET THIS VERSION
$ git clone --branch v5.21.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.21.0
Introduces Finding-Based Detections (requires ES 8.4+) — a new analytic type that automatically groups and correlates high volumes of related findings at the entity level to reduce alert noise and surface high-risk users or hosts.
Adds new analytic story and detection Linux Telnet Authentication Bypass covering CVE-2026-24061, a critical authentication bypass in GNU InetUtils telnetd allowing unauthenticated root sessions via an unsanitized USER environment variable.
Adds new endpoint detections for Windows Chromium browser hijacking, identifying browsers launched with abnormally small window sizes, disabled popup blocking, disabled logging, suppressed extensions, and headless execution — behaviors tied to ad fraud, credential harvesting, and post-exploitation frameworks.
Adds new analytic story VoidLink Cloud-Native Linux Malware covering a modular C2 framework with rootkit functionality targeting containerized and cloud environments.
Adds new analytic story Storm-0501 Ransomware improving visibility into ransomware execution chains and post-compromise persistence.
+1 moreshow less
Adds new analytic story StealC Stealer improving detection of credential theft, downloader behavior, and post-compromise activity.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The 'Process Creating LNK file in Suspicious Location' detection no longer creates notable alerts/findings on upgrade — it will only create risk events (intermediate findings).
Tenzir is a data pipeline engine for security teams that collects, transforms, enriches, and routes telemetry.
Tenzir Ship v1.2.0 adds intro-only releases via --intro and splits workflows into minimal/advanced variants.
reusable-release.yaml now acts as a minimal opinionated wrapper around the new reusable-release-advanced.yaml workflow
Adds optional hooks and release controls in the advanced workflow: pre/post publish scripts, non-main --no-latest publishing, optional copy of release directories to main, latest branch updates, skip-publish dry-run mode, and workflow outputs for version and is_latest
Allows intro-only releases with no changelog entries by using the --intro or --intro-file flags with release create
3 details in Everything
10 more releases in this issue
· 2026-02-06 → 2026-02-28
Adds the experimental hmac function to compute message authentication codes for strings and blobs using SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. (default), SHA-512, SHA-384, SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications., or MD5.
Adds the hmac function that computes HMACs over strings and blobs.
Supports SHA-256 (default), SHA-512, SHA-384, SHA-1, and MD5 algorithms via the algorithm parameter.
Beelzebub v3.6.5 adds IP-based rate limiting for the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. honeypot plugin.
└──▷ GET THIS VERSION
$ git clone --branch v3.6.5 https://github.com/mariocandela/beelzebub.git
# already have the repo? check out this version:$ git checkout v3.6.5
1 more release in this issue
· 2026-02-13 → 2026-02-28
Beelzebub v3.6.4 enables LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-powered prompts on TELNET honeypot connections.
└──▷ GET THIS VERSION
$ git clone --branch v3.6.4 https://github.com/mariocandela/beelzebub.git
# already have the repo? check out this version:$ git checkout v3.6.4
Enables LLM prompt support for TELNET honeypot sessions, allowing AI-generated interactive responses to attackers connecting via Telnet.
New daemon mode with REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., persistent SQLite state, and structured logging
└──▷ GET THIS VERSION
$ git clone --branch v0.5.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.5.0
└──▷ TRY IT
Start the rsigma daemon in real-time mode, pointing to a rules directory and ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. profile, while exposing metrics and controls on localhost.
NodeZero Feb 2026 adds LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext., cross-domain creds, VMH fields, HVT categories, and FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one.MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. access.
Adds MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. access at https://mcp.gov-horizon3ai.com/mcp for FedRAMP HighFedRAMP HighA US federal authorization tier for cloud services, managed by GSA, certifying that a provider meets the strictest NIST 800-53 controls required to handle the most sensitive unclassified government data. customers
Adds LDAPS support to internal attack modules for secure Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. enumeration
Adds new HVT categories and improved pattern matching for business risk identification
Allows injection of cross-domain credentials in Password Audit and internal pentests
Adds optional LLM action log to Pentest report downloads
+4 moreshow less
Expands VMH API with port, protocol, and IP byte count fields plus clarified timestamps
Adds new filtering/sorting options across Pentests, VMH, and Results views (e.g. Kubernetes namespace, Operator version, Weakness ID)
Adds Command History, Credentials injection, and Past Pentests tabs to the Runner detail page
Allows MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. subclients to draw from parent asset pools
Stratus Red Team v2.27.0 adds four new GCP attack techniques covering compute abuse, credential theft, and permission enumeration.
└──▷ GET THIS VERSION
$ git clone --branch v2.27.0 https://github.com/datadog/stratus-red-team.git
# already have the repo? check out this version:$ git checkout v2.27.0
└──▷ TRY IT
Detonate the multi-zone GCEGCEGoogle Compute Engine, Google's infrastructure-as-a-service platform for running virtual machines in the cloud; cyber tools use it for scalable, on-demand compute without managing physical hardware. instance creation technique to test detection of compute resource abuse at scale across regions.
New GCP technique: simulate cryptomining-style impact by creating GCE instances across multiple zones (gcp.impact.create-instances-in-multiple-zones).
New GCP technique: create a GCE GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. virtual machine instance to emulate GPU-hungry workload abuse (gcp.impact.create-gpu-vm).
New GCP technique: steal and replay a GCE default service account token from outside Google Cloud to simulate initial access (gcp.initial-access.use-compute-sa-outside-gcp).
New GCP technique: enumerate all permissions of a GCP service account to simulate post-compromise discovery (gcp.discovery.enumerate-permissions).
4 details in Everything
3 more releases in this issue
· 2026-02-04 → 2026-02-12
Simulate an attacker registering an SSH key to GCP instance metadata to test lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. detections.
New Azure attack technique: simulate Blob Storage ransomware via Encryption Scope using a client-managed Key Vault key (azure.impact.blob-ransomware-client-encryption-scope).
New GCP attack technique: register an SSH public key to instance metadata for lateral movement simulation (gcp.lateral-movement.add-sshkey-instance-metadata).
New attack technique: simulate Azure ransomware via Storage Account Blob deletion (azure.impact.blob-ransomware-individual-file-deletion).
New attack technique: execute commands on an AWS SageMaker Notebook Instance via Lifecycle Configuration (aws.execution.sagemaker-update-lifecycle-config).
Rapid7 Feb 2026: Active Risk prioritization, MDRMDRManaged detection and response, an outsourced service that monitors security signals, investigates threats and helps respond to incidents. It combines specialist analysts with detection tools. for Microsoft, ServiceNow Zurich support, Bot thresholds, and macOS scanning.
Adds Active Risk as the single standardized risk strategy across Vulnerability Management (InsightVM), Cloud Security (InsightCloudSec), and Exposure Command for consistent vulnerability prioritization.
Integrates contextual vulnerability intelligence into Threat Intelligence (Intelligence Hub) via the Response & Remediation > Remediation Hub view to link active exploitation data directly to impacted assets.
Deploys AI-generated risk insights in Remediation Hub that provide concise, single-sentence summaries of affected assets and ownership to accelerate remediation triage.
Extends Managed Detection and Response (MDR) protection across Microsoft environments with purpose-built detection and response capabilities available in the Alerts view.
Upgrades ServiceNow integration to support Zurich (AI) release for both Application Vulnerability Response (AVR) and IT Service Management (ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows.), enabling bidirectional vulnerability data updates from the ServiceNow App Store.
+7 moreshow less
Adds action_threshold_count and threshold_mail_recipients optional fields to the Bot Factory instructions JSON object, allowing Bots to suppress actions when resource counts exceed configured limits and notify specified recipients.
Enables review of historical Bot activity in the new Bot Runs tab within the Bot Factory UI.
Adds support for scanning macOS Sonoma, Sequoia, and Tahoe assets via the Nexpose Scan Assistant with installers for Intel-based and Apple Silicon architectures.
Adds harvesting support for Azure Backup Vault resources (Microsoft.DataProtection/backupVaults) and Azure Recovery Services Vault resources (Microsoft.RecoveryServices/vaults), requiring respective read permissions.
Adds new query filters for App Service Environments allowing TLS 1.0/1.1, VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. integration routing for Function Apps/Slots, and Azure Batch private endpoint connection states.
Updates the Cloud Listing table in Cloud Security to display Oracle and Alibaba Cloud account IDs and role ARNs.
Adds feature to download Software Bill of MaterialsSoftware Bill of MaterialsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. (SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue.) for container images scanned for vulnerabilities in Cloud Security.
12 details in Everything
└──▷ BREAKING ON UPGRADE
!The Plugins tab is deprecated in Cloud Security (InsightCloudSec).
!Database Cluster Without Audit Logging (ID 595) and Database Instance Without Audit Logging (ID 350) insights are removed; customers must use ID 2471 and ID 2472 respectively.
!The Rapid7 Agent (Insight Agent) no longer supports openSUSE LEAP 15.5, Fedora 41, Windows 10 v1507, or Windows 10 v1511.
Asset Repository consolidation, per-host scan timeouts, VPR LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. insights, and Delinea/CyberArk integration enhancements.
Consolidates IPv4, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only., Agent, and Universal repositories into a single Asset repository type that can target any data including agent, network scan, and passive data.
Adds Scan Per-Host Timeout configuration in advanced scan policies to prevent single hosts from increasing overall scan time.
Introduces AI-Driven Insights for VPR using Large Language Model (LLM) explanations of exposure significance, weaponization, and mitigation guidance.
Adds Delinea Secret Server auto-discovery feature that removes the requirement to manually add specific targets to a scan.
Adds Delinea Authentication Method API key support for the Delinea integration.
+2 moreshow less
Enables BeyondTrust Password Safe and Delinea integrations to retrieve database credentials from the safe.
Adds CyberArk Vault options to query credentials with advanced parameters (Get credential by > Parameters) or fetch separate passwords by username, including Get Escalation Credential By for escalation credentials.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Upgrade requires adding an ed25519 key for authorization to successfully sync remote repositories; synchronization will fail without it.
4 more releases in this issue
· 2026-02-02 → 2026-02-18
Tenable One Identity Exposure 3.113 adds IoE detection for dynamic AD objects and a new health check reason in Domain Installation
Adds IoE detection and monitoring of dynamic objects within Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. to identify misconfigurations.
Adds a new Multiple Tenable IoA GPO EVT Subscribe Listener files exist in the SYSVOL reason in the Domain Installation health check to flag duplicate listener configurations.
Tenable Exposure Management 2026 February adds hybrid GCP attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. linking and exploitable CVE-only mapping.
Attack Path now links on-prem JSON credential files to GCP Service Accounts for hybrid lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. detection.
Attack Path maps paths exclusively for verified exploitable CVEs using TVDB V3 intelligence, purging non-exploitable noise.
DefectDojo 2.55.0 adds Cloudflare Insights and enhanced Trivy/Google Cloud parsers, task queue visibility, and a Report Builder submenu.
└──▷ GET THIS VERSION
$ git clone --branch 2.55.0 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.55.0
└──▷ HOW TO FIND IT
Monitor how many async background tasks are queued without leaving DefectDojo — check the queue depth indicator now visible in the UI.
📍In the DefectDojo UI, navigate to the top navigation bar where the async task queue count badge is now displayed next to the background task indicator.
Adds new Cloudflare Insights parser (both JSON and initial implementation) for ingesting Cloudflare security findings.
Adds Trivy misconfiguration fields to the Trivy parser for richer finding detail.
Advances Google Cloud Artifact Scan parser to extract and store vulnerability IDs (vulnid).
Includes TruffleHog verified secret information in generated reports.
Shows the number of tasks waiting in the async queue in the UI for operational visibility.
+8 moreshow less
Adds a Report Builder submenu in the UI with improved form validation error messages.
Adds Permissions-PolicyPermissions-PolicyAn HTTP response header that lets a server declare which browser features—camera, geolocation, microphone—are allowed or blocked for a page and its iframes, replacing the older Feature-Policy header. header settings for improved browser security posture control.
Adds pghistory tracking for tag fields, enabling audit history on tag changes.
Adds additional fields to the AssetSerializer and patches Asset/Organizations API endpoints with improved permission checking.
Enforces readonly name field for Test_Type instances via dynamic serializer selection in the API.
Updates file upload field to accept dynamic file types with validation for supported extensions.
Enables push-to-Jira during Import/Reimport when findings are not grouped.
Enhances risk acceptance authorization checks for tighter access control.
13 details in Everything
└──▷ BREAKING ON UPGRADE
!Product Grade configuration has been removed (database migration included).
Edgescan adds MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. step recording for onboarding workflows.
└──▷ HOW TO FIND IT
Capture MFA interactions for users setting up accounts in the Edgescan portal.
📍In the console, go to Settings › Onboarding and enable Record MFA steps.
Adds the ability to record Multi-Factor Authentication (MFA) steps during the user onboarding workflow.
Vuls v0.38.0 adds dev-dependency flagging, Windows vendor fields, updated CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. Top 25 lists, and lowers VulnCheck confidence.
└──▷ GET THIS VERSION
$ git clone --branch v0.38.0 https://github.com/future-architect/vuls.git
# already have the repo? check out this version:$ git checkout v0.38.0
Adds dev flag to library scanning so development dependencies are tracked and reported separately from production packages.
Adds Dev flag to trivy-to-vuls library conversion, surfacing dev dependencies when importing Trivy results.
Adds vendor field for Windows packages in the scanner, enriching package metadata for Windows targets.
Includes CWE Top 25 lists for 2023, 2024, and 2025, keeping weakness classifications current.
Lowers the confidence level assigned to VulnCheck detections in the detector pipeline.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!VulnCheck detections are now assigned a lower confidence level by the detector; existing workflows that threshold or filter on VulnCheck confidence scores may produce different results after upgrade.
runZero 4.0.260218.0 adds non-default IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. role paths to AWS integration and PAN API data to Layer-2 reports.
Adds support for IAM roles with non-default paths in the AWS integration (IAM Role credential type).
runZero 4.0.260209.0 enhances data extraction from CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure. sources and adds the redact-secrets option for IPMI probes.
runZero v4.0.260208.0 adds UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. protocol reporting, IPMI attribute detection, SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. debug logging, and improved NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. normalization
Adds debug-scope option to the SNMP probe to record full diagnostic logs for a specified IP address or CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network..
Expands scanner output to report additional UDP protocols including echo, daytime, cldap, iec104, llmnr, qotd, stun, time, turn, and zebra.
runZero v4.0.260205.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server version detection and improves NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. OS normalization with security scoping fixes.
Adds detailed version information reporting for exposed MCP servers in scan results
Improves NetBox connector to better normalize free-form operating system values
runZero 4.0.260203.0 enhances MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. agent isolation and credential privacy with scoped access controls.
MCP agents are now restricted to accessing certificate information only within their authorized organization scope
Administrators are restricted to creating and updating users only within their authorized organization scope
Fleet 4.81.0 adds dynamic SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention./Okta cert support, non-atomic Windows MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. profiles, configurable software installer size up to 10 GiB, and gzip API responses.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.81.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.81.0
└──▷ USE IT
Enable gzip compression on Fleet API responses to reduce bandwidth for large payloads from monitoring or automation clients.
yaml
gzip_responses: true
Check whether a specific custom software package already exists before uploading, to avoid duplicates in automation pipelines.
Inspect approximate row counts for all database tables immediately after running a Fleet migration to validate schema changes.
$ fleetctl prepare db --with-table-sizes
Adds support for dynamic SCEP challenges for Okta certificates.
Adds conditional_access.cert_serial_format server option to specify the Okta conditional access certificate serial format.
Adds ability for IT admins to specify non-atomic Windows MDM profiles.
Adds GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. support to apply display_name to software packages in fleet YAML.
Adds enrollment support for iPod touch.
+14 moreshow less
Adds hash_sha256 and package_name query parameters to GET /api/v1/fleet/software/titles to check if a custom software package already exists before uploading (requires team_id).
Adds ability to set a default URL for Fleet Desktop.
Makes maximum software installer size configurable; bumps the default from 3 GB to 10 GiB.
Adds gzip_responses server configuration option to enable gzip compression of API responses when the client sends Accept-Encoding: gzip.
Allows specifying an Apple Connect JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. for interacting directly with Apple APIs when retrieving VPP app metadata.
Redirects users to the device policy page when failing conditional access requirements.
Limits disk encryption key escrowing to when the global or team setting is enabled.
Adds --with-table-sizes option to the prepare command to get approximate row counts of all database tables after a migration completes.
Updates fleetctl generate-gitops to output Fleet-maintained apps in a dedicated fleet_maintained_apps section of YAML files.
Clears user sessions and password reset tokens whenever a user's password is changed.
Adds separate OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. metrics for client vs. server errors (fleet.http.client_errors, fleet.http.server_errors) with error type attribution.
Adds logic to skip setup experience for hosts enrolled more than 1 day ago.
Adds a check to fail pending in-house app installs and cancel upcoming activities when unenrolling a host.
Disallows use of FLEET_DEV_* environment variables unless --dev is passed when serving Fleet.
19 details in Everything
2 more releases in this issue
· 2026-02-03 → 2026-02-20
Fleet 4.80.0 adds NATS logging, iOS/iPadOS VPP auto-update scheduling, automatic MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. unenrollment app removal, and macOS binary hash ingestion.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.80.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.80.0
Adds NATS as a logging destination for Fleet server events.
Adds ability to automatically uninstall managed apps when iOS/iPadOS devices are unenrolled from MDM.
Adds scheduled automated software updates for iOS/iPadOS VPP apps via the Fleet admin UI and API.
Adds API support to get and set auto-update schedules for VPP apps.
Adds custom VPP apps to the available VPP apps listing.
+8 moreshow less
Ingests, persists, and serves the SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. hash and path for CFBundleExecutable binaries of .app bundles on macOS.
Updates NDES SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. proxy to auto-detect response encoding, enabling compatibility with Okta CA and other UTF-8-based CAs.
Adds support for in-house apps to use CloudFront signed URLs in their manifest when CloudFront is configured.
Surfaces Queries within the Details tab on the Host Details page.
Updates software version search to include results matching the software title name in addition to the version name.
Limits software ingestion for manually-enrolled (BYODBYODBring Your Own Device: a policy allowing employees to use personal phones, laptops, or tablets for work, creating a network of unmanaged endpoints that cyber tools must monitor or enforce policy on.) iPhone/iPad devices to Fleet-installed software only.
Omits software last_opened_at in API responses when the data source does not support it.
Script and software installer policy automations now retry up to three times on failure.
Windows Package Manager v1.12.470 adds winget mcp command, Font installer types, and winget-fonts source
└──▷ GET THIS VERSION
$ git clone --branch v1.12.470 https://github.com/microsoft/winget-cli.git
# already have the repo? check out this version:$ git checkout v1.12.470
└──▷ USE IT
Run the new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server to assist with client configuration
shell
winget mcp
Search specifically for fonts using the dedicated source
shell
winget search font -s winget-font
Adds winget mcp subcommand to start an MCP server for client configuration assistance
Adds support for Font as a valid value for InstallerType in the manifest schema v1.12
Adds --details flag to the winget font list command for an alternate view of installed fonts
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The package dependency on WinUI 2 has been replaced by a dependency on the Windows App Runtime 1.8 in App Installer
Automox expands third-party vulnerability severity data to all supported apps using VulnCheck, enabling version-aware CVE mapping.
Enables version-aware CVE mapping in the console to display only CVEs remediated by a specific package installation.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Severity-based policies may behave differently as CVE counts, severity levels, and in-scope items change due to refined and expanded vulnerability data.
2 more releases in this issue
· 2026-02-05 → 2026-02-27
Automox adds webhooks for real-time HTTP POST notifications of policy and device events via API
Adds webhook delivery that pushes real-time HTTP POST notifications to custom endpoints instead of polling the API
Supports subscribing to specific event types including policy evaluations, device status changes, and user updates
Ensures data authenticity with HMAC-SHA256HMAC-SHA256A keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. signature verification on every payload
Provides reliable delivery via exponential backoff retry mechanism and 14-day message replay capability
Handles up to 100 webhook deliveries per minute per endpoint with native queuing for event spikes
Acronis Cyber Protect combines backup, disaster recovery, and endpoint protection in one platform for businesses and managed service providers.
Acronis GenAI Protection for visibility and prompt security; Proxmox/Virtuozzo P2V, ATF widgets; Red Hat 10.1 etc support
Adds Acronis GenAI Protection to provide end customers with visibility over GenAI usage, Shadow AI discovery, data loss prevention for sensitive information in prompts, and prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. protection.
Adds Backup: Convert to VM on Proxmox Virtual Environment to automatically transform Windows and Linux backups into ready-to-run Proxmox VE virtual machines with incremental updates.
Adds Backup: Run as VM on Proxmox Virtual Environment to instantly mount any Windows or Linux backup as a ready-to-use Proxmox VE virtual machine.
Adds Backup: Convert to VM on Virtuozzo Hybrid Infrastructure to automatically transform backups into Virtuozzo Hybrid Infrastructure virtual machines.
Adds Disaster Recovery: Weekly testing of Automated Failover to proactively detect and resolve boot issues via scheduled tests with PDF or Executive Summary report evidence.
+2 moreshow less
Adds DR: Widgets for Automated Test Failover in Executive Summary Reports to embed ATF result widgets in scheduled reports.
Adds support for backup and recovery on operating systems Red Hat 9.7, 10.1, Ubuntu 25.10, Fedora 43, Rocky Linux 9.7, 10, 10.1, AlmaLinux 9.7, 10, 10.1, CloudLinux 10, and Oracle Linux 9.6, 9.7, 10, 10.1.
Commvault Cloud is a backup, recovery, and cyber-resilience platform for hybrid, multi-cloud, and SaaS workloads.
Commvault Cloud February 2026 adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. backup copies across regions, Azure Key Vault restore via Cloud Rewind, new object storage targets, and unified Azure DB visibility.
Enables creation of additional SaaS backup copies across regions and cloud platforms
Adds Google Cloud Storage, Alibaba Cloud OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees., S3-Compatible, and IBM Object Storage as supported object storage types in SaaS
Expands SaaS workload coverage to include IBMi, OpenVMS, GPFS, and GlusterFS file servers
Allows IntelliSnap backups of SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./CIFS shares on NetApp, Isilon, or Amazon FSx using Linux access nodes instead of Windows machines
Adds native backup and recovery support for Apache CloudStack virtual machines with full hypervisor awareness
+6 moreshow less
Enables management of Nutanix AHVAHVAcropolis Hypervisor, Nutanix's built-in bare-metal hypervisor for running VMs on their hyper-converged infrastructure, giving cyber tools a tightly integrated compute and storage layer without a separate hypervisor license. VM protection through Prism Central (replacing Prism Element), unlocking Categories and vTPM awareness
Leverages Prism Central Categories to automatically create and manage backup groups for Nutanix AHV VMs
Adds Azure Table Storage rule-based content selection for automatic inclusion/exclusion of tables from backups
Enables Backup and Restore actions directly from the Discovery page resource actions section
Implements proactive subscription usage and overage alerts delivered via Command Center and email
Provides MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. Usage Report in Global Command Center with multi-tenant filtering and export for Aggregator and Direct MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs.
Druva adds RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9.5+ DR, Azure SQL Isolated Copy backups, Cross-Tenant Restore for Azure services, and Multi-Cloud GovCloud support.
Adds disaster recovery support for virtual machines on Red Hat Enterprise Linux (RHEL) versions 9.5, 9.6, and 9.7.
Introduces agentless Isolated Copy Protection backups for Azure SQL Databases to eliminate production impact and support Basic/Standard tiers where CDC is restricted.
Enables Cross-Tenant Restore for Azure SQL, Azure Files, and Azure Blob storage to recover data into a different Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. tenant.
New Isolated Copy protection for Azure SQL and Cross-Tenant Restore for Azure SQL, Files, and Blob Storage
Adds Isolated Copy backup method for Azure SQL Databases to replace CDC-based backups for Basic/Standard tiers and specialized table types.
Enables Cross-Tenant Restore capability for Azure SQL databases, allowing recovery to a different Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. tenant.
Extends Cross-Tenant Restore support to Azure Files workloads for tenant-agnostic recovery workflows.
Adds Cross-Tenant Restore support for Azure Blob Storage to restore data to an entirely different Microsoft Entra ID tenant.
Druva adds Recovery Intelligence with pre-recovery threat hunting, snapshot health visibility, and integrated AV/IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. scans for AWS EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware./EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. restores.
Cyber Recovery tab added to the AWS Workloads (EC2 and EBS Volume) Recovery Point restore workflow for real-time visibility.
Pre-Recovery Threat Hunt capability introduced to identify non-impacted snapshots before restoring.
Adds Recovery Intelligence with threat hunting, IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. scanning, and AV scanning for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware.EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. restores
Adds the ability to perform a pre-recovery threat hunt on restore points to identify clean snapshots before restoring EC2 instances.
Adds Recovery Intelligence for Azure VMs with pre-recovery threat hunting and cloud-based IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself./AV scans on restore points.
Introduces the Cyber Recovery tab in the Azure VM Recovery Point interface to provide real-time visibility into snapshot health during the restore workflow.
Adds a Pre-Recovery Threat Hunt option that allows users to identify clean snapshots before initiating a restore.
Enables Restore Scans including Cloud-based IOC (Indicator of Compromise) scans and AV (Antivirus) scans on selected restore points prior to commitment.
Druva AWS Workloads adds Rollback Actions for S3 backups and Data Anomaly detection for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware./EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives.
Adds Rollback Actions to protect S3 backup sets from accidental or malicious deletion within a configurable window
Introduces Data Anomalies capability with real-time alerting for suspicious activity on EC2 and EBS resources
Druva adds automated Azure SQL network readiness checks, cross-cloud GovCloud backup, Recovery Intelligence for Azure VMs, and Cloud-based Data Anomaly detection
Adds automated Network Readiness checks for Azure SQL Managed Instance to verify NSG Port 1433 inbound and Azure Key Vault Port 443 outbound connectivity before backup operations.
Enables protection of Azure Government workloads in AWS GovCloud (US) as a secondary site, supporting source regions US Gov Virginia and US Gov Texas, and target regions US-East and US-West.
Adds Recovery Intelligence for Azure virtual machines, integrating pre-recovery threat hunting, automated snapshot health insights, and optional Cloud-based IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. and AV scans on restore points via the Cyber Resiliency tab.
Adds Cloud-based Data Anomaly detection for Azure virtual machines with customizable thresholds, exposing alerts and settings in the Data Anomalies tab under Cyber Resiliency.
Kasten K10 8.5.2 adds Veeam Data Cloud Vault AWS location profile support and enriches the VM dashboard with last backup time.
└──▷ HOW TO FIND IT
When setting up an offsite backup target, configure a new VDC Vault AWS location profile so K10 can export data to Veeam Data Cloud.
📍In the K10 dashboard, go to Settings › Location Profiles › New Profile, select Veeam Data Cloud (VDC) Vault as the profile type, and complete the AWS credentials and bucket details.
Updates the Virtual Machines dashboard page to include Last Backup time.
Virtual machine snapshots now capture additional metadata related to snapshot consistency.
Netskope Adapter 215.254.18.1 adds AD invocationID verification and 0x4 flag for stale membership correction
Adds verification of the invocationID in the Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. importer with logging on failure to ensure correct incremental sync state
Introduces the 0x4 flag to remove stale group references from datastore_v2.json detected during AD V2 incremental queries
Changes default log level for a subset of ADImporterV2 logs to WARNING, reducing verbosity without requiring Debug mode
Netskope R134 adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Discover & Risk Score for 3rd-party apps, deferred policy actions, and a threat hunting module.
└──▷ HOW TO FIND IT
Use SSPM to identify risky third-party applications connected to GitHub repositories.
📍In the Netskope portal, navigate to SaaS Security Posture Management (SSPM) › Discover and review the Risk Score for 3rd-Party Apps in GitHub.
Allow users to continue work while policy enforcement for sensitive data is evaluated asynchronously.
📍Configure a policy rule with the Deferred Policy Action option to enable Next Generation API Data Protection without immediate blocking.
Proactively search for malicious activity patterns across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. environments.
📍Access the new Threat Hunting Module in Netskope's Threat Protection dashboard to run queries against SaaS user activity logs.
Adds SSPM Discover with Risk Score capability to evaluate third-party apps in GitHub
Introduces Deferred Policy Action feature within Next Generation API Data Protection for Enterprise Browser
Includes new Threat Hunting Module for SaaS Threat Protection
Version 132.0.1 of Netskope Virtual Appliance introduces a new CLI command for DNS cache configuration and deprecates EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. support while fixing several upgrade and status reporting issues.
Netskope 134.0.0 adds API v2, RBI Cloud Storage APIs, CFW Service Objects, SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. rules, and more
Adds x-netskope-generate-incidents and x-netskope-generate-alerts request headers to /inspections/jobs and /inspections APIs to control incident generation for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. On Demand.
Adds GET /cloudstorage, PATCH /cloudstorage, POST /cloudstorage/default, and POST /cloudstorage/invalidate REST endpoints for programmatic management of RBI Cloud Storage.
Introduces Service Objects and Destination Profiles as the new model for Cloud Firewall policy configuration, decoupling protocols/ports from destinations.
Adds 41 new SSPM predefined rules covering AzureAD, GitHub, Microsoft 365, Salesforce, MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior., and Security Domains categories.
Adds {{cs-host}} and {{x-cs-uri-path}} dynamic variables for constructing native HTTP 307 redirect destination URLs in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions. policies.
+3 moreshow less
Enables Owner attribute support in Next Generation API Data Protection policy definitions for Microsoft 365 OneDrive files.
Adds --azure-log-level CLI option to Cloud TAP Stitcher for controlling Azure SDK log verbosity.
Enables discovery and risk scoring of 3rd Party Apps in monitored GitHub instances within SSPM.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!Existing API v1 endpoints for Custom Categories are blocked for new tenants and existing tenants that completed the migration, returning an error instead.
AI Gateway v1.1 drops mandatory tenant ID header, adds custom rate limit responses via MP API and hides advanced TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. options post-enrollment.
Removes the mandatory x-ns-tenant-id HTTP header requirement; requests now only need x-ns-aig-apikey
Adds customizable rate-limited response status codes and messages via the AI Gateway Management Plane (MP) API
Dynamically hides advanced configuration sections in the AIG-CLI TUI until enrollment is complete
Varonis adds IPYNB and ChatGPT classification, Netskope/E DR integrations, and DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. rules API.
Classify sensitive data in Jupyter Notebook (IPYNB) files
Customize global access groups for automated remediation by adding or removing CIFS Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. groups
Automate user disablement and endpoint quarantine via EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. integrations when threat detection policies trigger alerts
Classify ChatGPT conversation text based on active data classification policies
Use one Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. app to monitor all Azure Files storage accounts
+11 moreshow less
Integrate Netskope Secure Web Gateway via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to send web proxy events for monitoring
Monitor VAST Data as a new data source, including SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./NFS views and real-time classification
Find NFS shares in the Management Console by automatically searching by share path when the name is missing
Automatically apply classification labels to files based on Varonis flags
Replace deleted files with stub text files containing key details in Data Lifecycle Automation workflows
Bulk upload governance metadata for resources and groups via a dedicated BulkOps UI
Retrieve full configuration of authorization rules on governed resources and groups via the DAG authorization rules API
Filter Account analytics by Token issuer and Password policies to detect malicious sign-ins and verify password compliance
Use a new Informational severity level for detections that do not require action
View cloud system health alerts in the System Health page of the Varonis Web Interface
Protect sensitive content in Confluence environments by applying Varonis data protection
16 details in Everything
2 more releases in this issue
· 2026-02-02 → 2026-02-15
Varonis adds classification support for JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. and NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory. files used in AI training sets.
Adds classification coverage for JSON Lines (JSONL) and Newline-Delimited JSON (NDJSON) file formats.
Varonis 2026-02-02 adds Google Cloud integration user configuration, dedicated exposure column, and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. coverage in Sensitive items widget
Adds Change Integration User option during Google Cloud account setup to update the integration account from Configuration > Connected Services.
Moves exposure tags (public, private, org-wide) into a dedicated Exposure column to enable direct filtering and insight management.
Extends the Sensitive items widget to fully cover sensitive items containing PII.
fhEVM v0.11.0 adds GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. acceleration for ZK proofs, host-listener poller mode, Confidential Tokens Registry with ERC7984, and Operator Staking system.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.0 https://github.com/zama-ai/fhevm.git
# already have the repo? check out this version:$ git checkout v0.11.0
gpu acceleration is available for ZK proof verification, Switch-and-Squash (SnS), and re-randomisation in the coprocessor.
New host-listener poller mode provides an alternative to WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output.-based event listening for the coprocessor scheduler.
Introduces Confidential Tokens Registry and ERC7984 upgradeable wrapper contracts for token management.
Adds a new Operator Staking system using ERC4626-based contracts, including reward distribution logic.
Cyera adds ServiceNow ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. discovery and classification to cover tickets and attachments.
Adds ServiceNow ITSM coverage including scanning of tickets, incident records, attachments, and free text fields for sensitive data.
Cyera introduces Identity Visibility for On-prem, mapping AD access across SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments., NetApp, and Dell PowerScale file shares.
Adds identity visibility capabilities to on-prem file shares by mapping access directly from Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments.
Extends support to SMB File Shares, NetApp, and Dell PowerScale platforms
Bytebase 3.15 introduces project-level service accounts, workload identitiesworkload identitiesAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials., and MongoDB statement-type access control in SQL Editor
└──▷ GET THIS VERSION
$ git clone --branch 3.15.0 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.15.0
└──▷ TRY IT
Create a project-scoped service account using the new dedicated API endpoint
Adds ServiceAccountService and WorkloadIdentityService APIs for managing machine identities at the project level
Adds workloadIdentity:{email}IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. member prefix for project-scoped Workload Identities
Updates Service Account endpoint from /v1/serviceAccounts to /v1/workspaces/-/serviceAccounts for workspace-level creation and listing
Adds statement-type access control in SQL Editor for MongoDB and Elasticsearch data sources
Moves gh-ost configuration into SQL directive syntax (-- gh-ost = { ... }) within sheet content
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Machine identities must now use ServiceAccountService or WorkloadIdentityService APIs instead of the User API
!IAM member prefix changed from user:{email} to serviceAccount:{email} or workloadIdentity:{email} for machine identities
!Workspace-level Service Account and Workload Identity APIs now require explicit parent workspaces/- in the path (e.g. /v1/workspaces/-/serviceAccounts) instead of an empty string
AI Guard 2.10 adds Splunk log export, Google Gemini Workspace provider, enhanced PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. viz, and audit diff details.
Splunk Integration allows exporting AI Guard logs to Splunk for centralized monitoring and analysis
Google Gemini Workspace Support (Initial Release) enables Google Gemini as a new User Mode Provider for policy enforcement in Google Docs
Enhanced PII Detection Visualizations add graphical elements on the Insights page for PII detections, categories, and variations
3 details in Everything
38 more releases in this issue
· 2026-02-01 → 2026-02-27
Client Connector 4.7.0.223 adds strict enforcement with PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. exclusions and hardware offloading controls.
Supports blocking all traffic and allowing only PAC file exclusions when in strict enforcement mode.
Supports controlling how Zscaler Client Connector interacts with hardware offloading on network adapters to resolve compatibility issues.
ZIA adds ruleLabelId API filter, recipient email profile endpoints, SSpm Salesforce controls, bandwidth latency fields, and cert auth for MS connectors.
Adds ruleLabelId query parameter to GET /firewallFilteringRules and GET /firewallFilteringRules/count endpoints to filter by rule label ID
Adds REST endpoints for recipient email profiles: POST /emailRecipientProfile, PUT /emailRecipientProfile/{profileId}, DELETE /emailRecipientProfile/{profileId}, and count/list variants
Adds three new SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls for Salesforce via the Advanced SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management feature
Adds latency columns (Request Latency Due to Bandwidth Control (ms), Response Latency Due to Bandwidth Control (ms), Total Latency Due to Bandwidth Control (ms)) and NSS feed fields %d{txn_delay_req} and %d{txn_delay_resp} for bandwidth control visibility
Adds certificate-based authentication option (private key) for custom Zscaler connectors with Microsoft applications
Zscaler Client Connector 4.8.0.140 adds strict traffic blocking mode and hardware offloading controls for Windows
Supports blocking all traffic and allowing only PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. file exclusions when in strict enforcement mode.
Adds configuration control for hardware offloading interaction with network adapters.
UVM adds Remediation Copilot, an AI-guided in-ticket chat assistant for fix paths and mitigations
Adds Remediation Copilot, an AI-guided remediation assistant available directly in UVM tickets, providing context-aware fix paths based on findings, affected assets, and environment.
Enables users to save a summary of Remediation Copilot steps to the ticket's Fixes tab for traceability.
ZPA adds support for VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. tunnels connected from Private Service Edges to public VPN Service Edges
Workflow Automation adds granular custom date ranges, new incident columns for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and integration name mappings.
Adds hour, minute, and second fields to the Custom Date Range filter on the Incidents page, Incident Summary page, and Incident Analytics dashboard
Adds Component, Content Location, Workspace, and Domains columns to the Incidents page incident table and export file for Source DLP type SaaS Security incidents
Adds Component, Content Location, Domains, and Workspace as filter options in the Filters window for Source DLP type SaaS Security incidents
Adds Component, Content Location, Domains, and Workspace as merge tags to Email, Slack, and Microsoft Teams notification templates
Adds Component, Content Location, Domains, and Workspace as mapping properties on the Incident Group Mapping page and Workflow Mappings page for Source DLP type SaaS Security incidents
+2 moreshow less
Adds Integration Name property to Incident Group Mapping page and Workflow Mappings page for incidents of Source DLP types Inline, Email, Endpoint, and SaaS Security
Adds a Refresh button to the top of the Incidents page and Incident Details page to reload incident data
ZIA adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints for DNS application groups CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. on zscaler.net and zscloud.net
Adds GET /dnsApplicationGroups, POST /dnsApplicationGroups, GET /dnsApplicationGroups/{groupId}, PUT /dnsApplicationGroups/{groupId}, DELETE /dnsApplicationGroups/{groupId}, and GET /dnsApplicationGroups/lite endpoints to the ZIA API on zscaler.net.
ZIA adds onPremNss and ruleLabelId API query params, REST CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. for emailRecipientProfile, granular admin role separation, and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. Read-only connector option.
Adds onPremNss Boolean query parameter to /nssFeeds endpoints (GET, POST, PUT, DELETE) to request on-premises Nanolog Streaming Service feeds
Adds ruleLabelId query parameter to GET /firewallFilteringRules and GET /firewallFilteringRules/count to filter firewall rules by label ID
Adds REST endpoints (GET, POST, PUT, DELETE, GET /count) for creating and managing recipient email profiles via /emailRecipientProfile
Splits Admin Role permissions for URL Filtering and Cloud App Control in the Policy & Components > Access Control tab for more granular access control
Introduces Read-only connector option for SSPM scans on GitHub, Jira, Okta, Confluence, Trello, Webex Teams, and Google Workspace to enable least-privilege posture assessments
ZIA adds flexible permission selection (Read-only vs Read/Write) for SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. connector onboarding to support least-privilege access.
Adds Read-only connector role option for GitHub, Jira, Okta, Confluence, Trello, Webex Teams, and Google Workspace SSPM tenants to avoid default Read/Write (full access) permissions
Zero Trust Branch 8.1.1 adds ZPA Microtenant support, Active-Active HA, BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. advertisement and a new ztb-console CLI.
Adds ZPA Microtenant registration during site provisioning to access application segments
Adds BGP Advertisement for Private Access synthetic IP addresses into the LAN-side network
Enables Active-Active high availability deployment mode for WAN appliances and App Connectors
Supports Static Mapping of FQDN app segments to synthetic IP addresses from the 100.70.0.0/16 range
Introduces ztb-console as the new primary CLI command to access the console (renamed from airgap-console)
+1 moreshow less
Updates UI terminology: renames Airgap VLAN to VLAN, Airgap-Lite to Network Segmentation, and Airgap Gateway Configuration to Zero Trust Branch Appliance Configuration
ZPA adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. enrollment for App Connectors and new UI elements in App Connector Groups management.
Enables OAuth 2.0 enrollment for App Connectors as the recommended method alongside provisioning key enrollment
Adds a new column in the App Connector Groups table displaying the number of associated App Connectors
Introduces an App Connectors tab on the App Connector Groups details page
Allows signing certificates to be selected and associated directly with an App Connector Group via the Details tab
Adds an Update Settings tab in App Connector Groups for configuring version profiles and update frequency
ZIA adds granular Read-only vs Read/Write permission selection for SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. connector onboarding
Zscaler UVM adds SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. calculation based on active findings to focus remediation timelines.
Cloud & Branch Connector gains AWS endpoint ID in logs, ZPA pattern matching, VDIVDIVirtual Desktop Infrastructure: a model where desktop operating systems run as VMs on a central server and stream to thin clients, giving cyber tools a single managed environment to monitor or scan. username visibility, and GCP MIG autoscaling.
Adds Endpoint/Interface filter and column to Session Insights Logs for AWS VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. endpoint IDs
Supports ZPA policy evaluation with hostname patterns instead of exact FQDNs in application segments
Enables username visibility in multisession VDI environments via the Zscaler Client Connector for VDI application
Releases VM version zs-cc-ga-02042026 to support Managed Instance Group (MIG) autoscaling on Google Cloud Platform
ZIA adds DNS application group REST endpoints and macOS Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. capabilities including print blocking, clipboard/file access controls, and new dictionary support
Adds API endpoints for managing DNS application groups on zscalerone.net: GET /dnsApplicationGroups, POST /dnsApplicationGroups, GET/PUT/DELETE /dnsApplicationGroups/{groupId}, and GET /dnsApplicationGroups/lite
Adds Endpoint DLP Block Action for printing on macOS devices within content inspection rules
Adds Endpoint DLP support for monitoring and blocking sensitive data via Clipboard channel and Application File Access channel on macOS
Adds Removable Storage rule capability to map multiple removable storage devices to specific users or endpoints, with CSV import support
Adds configurable End User Reports for Endpoint Data Scan to show local sensitive data locations and best practices
+5 moreshow less
Adds granular Endpoint DLP configuration controls including End User report visibility/scheduling/exclusions, classification file size/timeout fallbacks, Protect action hiding, and Application Inventory Scan controls
Adds Sensitive Information Index Document Match (IDM) for endpoint-based document indexing and exfiltration detection on ZIA
Adds new predefined DLP dictionaries: CNPJ Number (Brazil), IBAN, National Economic Registry Number (Poland), Passport Number (Asia)
Adds 15-byte prefix and suffix context to Endpoint DLP triggers visible in Incident Receiver, Workflow Automation, and Email Notifications
Adds Proximity Length field support for applicable predefined DLP dictionaries in Endpoint DLP engines
Zscaler Client Connector 4.5.1 adds KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. ticket clearing, strict enforcement blocking, and process-based macOS bypasses.
Adds an option to clear the Kerberos ticket after Zscaler Private Access (ZPA) reauthentication to force a Kerberos ticket refresh
Adds an option to check for specific software versions for device postures on Windows: Process Check, Detect Carbon Black, Detect CrowdStrike, Detect SentinelOne, and Detect Microsoft Defender
Adds the ability to enter process-based applications for macOS and select them in the Global Bypasses section of the macOS app profile
Adds an option to block all traffic and allow only PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. file exclusions when in strict enforcement mode
Updates the Zscaler Client Connector Portal to always use the V8 JavaScript based PAC Parser regardless of the setting in a user’s app profile
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Devices with Zscaler Client Connector versions 1.x and 2.x (Windows, macOS, iOS, Android) or version 1.5 and earlier (Linux) can no longer enroll.
ZIA adds Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. for JumpCloud and async Insights Logs with CSV export
Adds support for configuring Advanced SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) for JumpCloud tenants
Adds asynchronous log retrieval for Insights Logs via the Export in Background option
Allows exporting up to 1 million records to a CSV file with a custom filename
Renames the Apply Filters button to Run Query in the Insights Logs interface
ZPA Private Access introduces Access Policies for VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. (for Legacy Apps) with rules management and Address Book
Adds Access Policies for VPN (for Legacy Apps) capability allowing allow/block traffic on VPN Service Edges
Introduces Address Book page to manage reusable IP addresses and CIDRs for policy rules
Enables rule ordering via the Rule Order column and filtering/search on the Rules page
Adds GCP cloud deception support with service account, Cloud Storage, Cloud SQL, Secret Manager, Artifact Registry, Gen AI MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server decoys
Adds GCP as a supported platform for cloud deception, enabling deployment of GCP-specific resources as decoys from the Zscaler Deception Admin Portal.
Adds support for Service Account, Cloud Storage, Cloud SQL, Secret Manager, and Artifact Registry as configurable decoy types in GCP.
Introduces Cloud Lures feature to deploy GCP service account decoys in endpoints via landmine policies to detect adversarial interactions with other GCP decoys.
Adds new Gen AI MCP server decoy capability, allowing deployment of a decoy that mimics a standard Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) server for AI applications or LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. chatbots.
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds AI model scanning, Azure Cosmos DB support, OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. scans, action rules and CLI init command.
Adds Action Rules to automatically apply Microsoft Information Protection sensitivity labels based on data type criteria for Azure File Shares.
Adds new threat categories AI Governance and AI Safety for assessing AI governance and safety posture.
Adds scanning of AI Models to identify vulnerabilities like malicious code injection, backdoors, embedded secrets, and data leakage via the AI Model Security Scan Findings page.
Adds support for scanning AWS ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. images for vulnerabilities with visibility into model usage, licensing, versions, and security.
Adds visibility into deployed Azure AI Agents and the sensitive data they access.
+8 moreshow less
Adds discovery of GCP Vertex AI, its access to sensitive data, entitlement, and posture.
Adds a new CLI command to initialize the on-premises scanner VM, simplifying network configuration and component installation.
Adds new data posture policies for AWS, Azure, GCP, and Snowflake, including specific checks for Azure Databricks, Azure Storage, Azure AI Foundry, Azure OpenAI, Azure Unmanaged MongoDB, GCP BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., and Snowflake.
Adds support for discovering and classifying sensitive data in Azure Cosmos DB accounts.
Adds Optical Character Recognition (OCR) scanning for images containing sensitive data like credit card numbers.
Adds discovery and classification of sensitive data stored in the Data Files Storage of the Azure OpenAI service.
Adds Has Data predicate to investigation and policy queries for metadata analysis of resources within Azure AI Foundry.
Adds new posture labels for resource types including Public Exposure, Encryption, Logging, Backup, Exposed to AI Services, Guardrails, and more across Azure Cosmos DB, AWS ECR, GCP Vertex AI, MongoDB, and Microsoft Foundry.
UVM adds Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. device owner stream and Wiz Assets connector with network exposure enrichment.
Adds Entra ID - Devices stream to retrieve registered owners for each device alongside inventory data
Adds Wiz Assets Connector to retrieve detailed cloud resource information from the Wiz platform with optional network exposure enrichment
Adds registered owner data to the Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. - Devices stream in Asset Exposure Management.
The Entra ID - Devices stream now retrieves registered owners for each device alongside existing inventory fields (device ID, name, OS, compliance, and management fields).
Cloud & Branch Connector adds AWS Endpoint ID filtering to Session Insights Logs, ZPA pattern matching for application segments, and GCP MIG autoscaling.
Adds Endpoint/Interface filter and column to Session Insights Logs for AWS VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. endpoint IDs
Enables ZPA hostname pattern matching within Application Segments instead of exact FQDNs
Supports Managed Instance Group (MIG) autoscaling for Cloud Connector on Google Cloud Platform via VM version zs-cc-ga-02042026
Zscaler Client Connector 4.5.1 adds ZPA KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. ticket refresh, strict enforcement blocking, and macOS process-based bypasses
Adds option to force a Kerberos ticket refresh after ZPA reauthentication by clearing the ticket.
Adds Force ZPA authentication to expire option to immediately reauthenticate ZPA instead of waiting for next access attempt.
Updates Portal to always use the V8 JavaScript based PAC Parser in app profiles.
Adds option to delay pop-up notifications for device posture failures after tunnel establishment.
Adds macOS device posture check for specific Zscaler Client Connector versions.
+4 moreshow less
Adds ability to configure process-based applications for macOS and select them in the Global Bypasses section of the macOS app profile.
Adds option to block all traffic and allow only PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. file exclusions when in strict enforcement mode.
Adds Windows device posture checks for specific software versions: Process Check, Detect Carbon Black, Detect CrowdStrike, Detect SentinelOne, and Detect Microsoft Defender.
Adds support to block enrollment of devices running very old versions of Zscaler Client Connector (versions 1.x/2.x on Windows/macOS/iOS/Android; 1.5 and earlier on Linux).
ZPA adds agent age-out timers, Kubernetes resource visibility, and tag management for microsegmentation
Adds Agent Age-Out timer to configure automatic expiration of disconnected agents in individual agent groups by days, hours, or minutes
Adds visibility into Kubernetes resources (deployments, statefulsets, replicasets, daemonsets) for microsegmentation network flow viewing in the ZPA Admin Portal
Adds tag management capabilities allowing creation of namespaces, tag keys, and tag groups to annotate resources for resource group membership criteria
ZIA adds Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. for JumpCloud, Sandbox Verdict logging to NSS, and async Insights Log exports with CSV naming
Adds support for Advanced SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) scan of JumpCloud tenants via the SSPM Scan checkbox during tenant onboarding
Adds Export in Background option and custom CSV filename support to Insights Logs, allowing export of up to 1 million records asynchronously
Adds Sandbox Verdict log type for Nanolog Streaming Service (NSS) feeds to stream behavioral analysis logs to SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point.
Adds usersAndGroupsSet, groupsAndDepartmentsSet, groups2, and groups3 fields to the UrlFilteringRule model in the /urlFilteringRules APIs
Increases AWS tenant profile limit to 512 account IDs per profile and 4,096 across all profiles
Zscaler Workflow Automation adds incident summaries, policy exceptions for inline DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., email release quarantine, and notification reminders.
Adds Aggregate incident counts view on the Incident Summary page with selectable attributes and filters
Logs audit events when generating presigned links from the Violation Content section of an Incident Details page
Adds Create Policy Exception action to Inline Source DLP incidents via the Actions menu or a new Policy Exception tile in the custom workflow builder
Adds Notification Reminders for unresponded user and escalation notifications, configurable on the Account Settings page
Enables releasing quarantined Microsoft emails to selected recipients from Incident Details or via enhanced notification sections (contact support to enable)
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds Action Rules for auto-labeling, CLI scanner init, AI model scanning, and broad new resource support.
Adds Action Rules feature to define criteria for identifying specific data types and automatically apply Microsoft Information Protection sensitivity labels to files (initially supports Azure File Shares).
Introduces AI Governance and AI Safety threat categories for assessing AI governance and safety.
Enables scanning of AI models for vulnerabilities such as malicious code injection, backdoors, embedded secrets, and data leakage via the AI Model Security Scan Findings page.
Adds support for scanning AWS ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. images for vulnerabilities, with visibility into model usage, licensing, versions, and security vulnerabilities across containerized machine learning workloads.
Provides visibility into deployed Azure AI Agents and the sensitive data they have access to.
+8 moreshow less
Supports discovery of Google Cloud Vertex AI resources and their access to sensitive data, including entitlement and posture determination.
Adds a new CLI command to initialize the on-premises scanner, simplifying network configuration, component installation, and initial connectivity/health checks.
Introduces 43 new data posture policies covering AWS (Databricks), Azure (Storage, AI Foundry, OpenAI, Databricks, MongoDB), GCP (BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data.), and Snowflake.
Adds scan support for Azure Cosmos DB NoSQL Data Stores to discover and classify sensitive data.
Supports Optical Character Recognition (OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels.) scanning for sensitive data in images, including credit card numbers and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations..
Adds discovery and classification of sensitive data stored in the Data Files Storage of the Azure OpenAI service.
Enhances investigation and policy queries with the Has Data predicate to query for sensitive data in resources within Azure AI Foundry.
Appplies posture labels (e.g., Public Exposure, Encryption, Logging) to new resource types including Azure Cosmos DB NoSQL, Microsoft Foundry Hubs/Agents, AWS ECR, GCP Vertex AI components, MongoDB, and others.
Adds UI columns and fields to manage automated software updates for ZPA Private Service Edges and Controllers
Adds Version Profile, Software Update, and Manager Update columns in the table to display version profiles and update status with hover details for target versions and upgrade windows.
Adds Last Manager Update time field when viewing details for a ZPA Private Service Edge or Private Cloud Controller.
Enables automated software updates for ZPA Manager, Private Service Edges, and Private Cloud Controllers (requires version 25.46.3 or later).
DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. adds AI model scanning, Azure Cosmos DB and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. support, new CLI scanner init command, and Action Rules for sensitivity labels.
Adds Action Rules to automatically apply Microsoft Information Protection sensitivity labels based on criteria in Azure File Shares
Adds a new CLI command to initialize the on-premises scanner VM, configuring network settings and running health checks
Adds AI Security capabilities including scanning AI models for vulnerabilities and scanning AWS ECR images for ML workload risks
Adds visibility into deployed Azure AI Agents and sensitive data access
Adds discovery of GCP Vertex AI resources, their data access, entitlements, and posture
+6 moreshow less
Adds new Data Posture Policies for AWS Databricks, Azure Storage/AI/Databricks/MongoDB, GCP BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data., and Snowflake
Adds support for discovering sensitive data in Azure Cosmos DB NoSQL stores
Adds OCR Scan capabilities to detect sensitive data within images
Adds sensitive data discovery in the Data Files Storage of Azure OpenAI
Enables using the Has Data predicate in investigation queries to check for sensitive data in Azure AI Foundry resources
Applies new Posture Labels (Public Exposure, Encryption, Logging, etc.) to resource types like Azure Cosmos DB, AWS ECR, and GCP Vertex AI
ZIA adds MSIX file type support in DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest./File Type Control and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. transaction logs.
Adds MSIX file type support to File Type Control and DLP policies for the Executable category
Adds application activity MCP entries to Web Insights Logs to log Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. transactions
Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. connector adds Applications stream to retrieve registered apps and owners
ZIA adds Airtable, Bitwarden, Sentry, and OneLogin integrations to Advanced SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications..
Advanced SSPM adds Airtable as a supported platform for onboarding tenants via the 3rd-Party App Governance Admin Portal.
Advanced SSPM adds Bitwarden as a supported platform for onboarding tenants via the 3rd-Party App Governance Admin Portal.
Advanced SSPM adds Sentry as a supported platform for onboarding tenants via the 3rd-Party App Governance Admin Portal.
Advanced SSPM adds OneLogin support as an API-based platform for onboarding tenants via the 3rd-Party App Governance Admin Portal.
Termius 9.37 adds ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. key support and customizable workspace shortcuts via Settings > Shortcuts
└──▷ HOW TO FIND IT
Customize the workspace shortcut keys for saving, toggling panels, and switching terminals.
📍In Termius › Settings › Shortcuts
Added support for ML-DSA key generation and authentication (requires server-side ML-DSA support).
Improved hotkey support for workspaces: Cmd+S/Ctrl+S to save changes, Cmd+/Ctrl+. to toggle terminal side panel, Cmd+Shift+M/Ctrl+Shift+M to switch Focus/Split modes, and Cmd+Option+arrows/Ctrl+Alt+arrows to switch terminals in the workspace.
VNS3 7.0.1 adds in-place route editing, pre-license HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. cert upload via UI, and container address binding
└──▷ HOW TO FIND IT
Use the new UI panel to modify an existing static route without deleting and recreating it.
📍In the VNS3 Controller UI, navigate to Routes › User-Managed, select the target route, and click Edit to update its parameters.
Upload server certificates to the controller before activating the license key.
📍In the VNS3 Controller UI, go to Settings › HTTPS Certificates and use the Upload button to import your .crt and .key files.
Configure a plugin or container instance to bind to an IP address that hasn't been assigned to any physical interface yet.
📍When creating a new plugin/container instance in the VNS3 UI, specify bind_address: <target_ip> in the network settings, even if <target_ip> is not currently up on any interface.
Adds ability to edit user-managed route entries directly via a new UI panel without requiring delete-and-recreate
Allows uploading HTTPS certificates through the controller's UI before the product is licensed
Enables plugins or containers to bind to a network address even when no corresponding interface exists on the host
3 details in Everything
└──▷ BREAKING ON UPGRADE
!OpenVPN clientpack connectivity may break after upgrading to OpenVPN Server 2.6+; some host modifications might be needed for proper reconnection
Adds multi-socket server support, allowing a single server process to handle multiple addresses, ports, and protocols simultaneously.
New client-side DNS implementations for Linux/BSD/macOS and Windows, adding split DNS and DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit. support on Windows.
Supports the new PUSH_UPDATE control-channel message, enabling servers to push routing and DNS config changes to clients without forcing a reconnect.
New management interface commands push-update-broad and push-update-cid for server-side delivery of PUSH_UPDATE option updates.
Introduces Epoch data keys and packet format for improved data channel security, including enforcement of AES-GCMAES-GCMAES encryption in Galois/Counter Mode, which encrypts data and detects tampering in one pass. It is the default cipher for TLS and most disk and cloud encryption. usage limits.
+9 moreshow less
Supports the new ovpn DCO Linux kernel module (with backports available via ovpn-backports) for next-generation kernel-level data channel offload.
Enforces block-local flag using WFP filters on Windows for stronger local traffic blocking.
Windows network adapters are now generated on demand, reducing resource usage at startup.
Windows automatic service now runs as an unprivileged user, reducing attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
Adds server mode support in the win-dco Windows driver.
Supports Epoch data channel on Windows via the win-dco driver.
Adds TLS 1.3 support with bleeding-edge mbedTLS versions, including support for mbedTLS version 4.
Introduces two new environment variables to communicate desired default gateway redirection to plugins such as Network Manager.
Makes the Recursive Routing check more granular, dropping in-tunnel packets only when destination IP, protocol, and port all match the VPN server's reach parameters.
14 details in Everything
└──▷ BREAKING ON UPGRADE
!Support for the wintun driver has been removed; win-dco is now the default Windows driver, with tap-windows6 as the fallback.
Initial release of Warden v0.1.0: identity-aware egress gateway with JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth and provider integrations
└──▷ GET THIS VERSION
$ git clone --branch v0.1.0 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.1.0
Adds warden server, operator, login, providers, auth, audit, namespaces, policies, and cred CLI subcommands for core operations
Adds HCL configuration file support for defining providers, policies, and storage backends
Adds PostgreSQL as a production-ready persistent storage backend
Adds AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves., GCP KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves., Azure Key Vault, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. KMS, PKCS11PKCS11The standard programming interface software uses to ask an HSM, smart card or token to sign or decrypt with a key it holds. Supporting it lets a tool keep its keys in hardware., KMIP, Shamir, and Transit seal types for envelope encryptionenvelope encryptionEncrypting data with a fresh data key, then encrypting that key with a master key held in a KMS. Rotating the master key never means re-encrypting the data.
Aembit adds Oracle Database support in Limited Beta and process-based Client Workload identifiers for Linux VM deployments.
Adds Oracle Database application protocol support (Limited Beta) to Agent Proxy, enabling transparent credential injection for client workloads connecting via the TNS wire protocol.
Adds Process Command Line and Process Path Client Workload identifiers for Linux VM deployments, with wildcard matching for command lines and exact executable-path matching.
2 details in Everything
1 more release in this issue
· 2026-02-24 → 2026-02-26
Aembit adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Identity Gateway beta, MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. for log querying, per-user OAuth Credential Provider, and component copying.
Adds MCP Identity Gateway (Beta) for proxying MCP traffic with identity-aware policy enforcement and fail-closed behavior
Adds MCP Server to enable AI agents and users to query Aembit event logs using structured commands via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
Adds MCP User-Based Access Token Credential Provider type supporting OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. Authorization Code flow with PKCEPKCEProof Key for Code Exchange, an OAuth safeguard that binds an authorization code to the client that requested it. An intercepted code cannot be redeemed without the client's matching verifier. support for per-user credential scoping
Adds component copying capability between Resource Sets, allowing replication of Access Policy components and entire Access Policies
Adds 'See how data flows from source SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps to AI conversation tools' card in the AI Usage Dashboard
Adds an interactive chart in the AI Usage Dashboard that maps file uploads and copy/paste actions from SaaS applications to AI conversation tools.
Allows ranking AI data flows by data volume, file count, or user count to identify which AI tools consume the most corporate data.
Enables spotting high-volume data movements and potential risks in the new AI Usage Dashboard card.
Nudge Security extends OAuth risk insights to cover remote Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) connections.
JumpCloud adds DDM-based Patch Management for macOS and iOS with Automatic Updates and Software Update Enforcement policies.
└──▷ HOW TO FIND IT
Deploy automatic OS updates to macOS devices with a grace period.
📍In the console, go to Devices › Policies and create a new DDM-based macOS Patch Policy. Configure Automatic Updates and set your deferral and grace period settings.
Force an iOS device to update to a specific OS version immediately.
📍In the console, go to Devices › Policies and create a new DDM-based iOS Patch Policy. Select Software Update Enforcement and specify the target OS version.
Adds iOS support to Patch Management via Declarative Device Management (DDM)
Adds DDM-based Automatic Updates policy that enforces the latest OS version using deferral and grace period settings
Adds DDM-based Software Update Enforcement policy for manually enforcing a specific target OS version
JumpCloud adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. AuthnContext MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. claim configuration and AI Search for Asset Management.
Adds a new MFA Configuration section to SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties. integrations with selectable AuthContext sub-sections, flexible mapping modes, and a Custom Factor Mapping Table
Exposes API support for configuring MFA claims in SAML SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. integrations
Adds AI Search and AI Filtering capabilities to the Asset Management module
18 Feb 20263 releases · 2026-02-06 → 2026-02-18Stable
Ping Identity is an identity and access management platform providing authentication, single sign-on, multi-factor authentication, and identity governance services.
Adds esv-global-saml-error-page-http-binding ESV variable and device management options in hosted pages.
└──▷ HOW TO FIND IT
Users can now manage their registered devices directly from the hosted account interface, including renaming or removing them.
📍In the hosted account pages, navigate to the Devices section for each device to view metadata and manage it.
Adds the esv-global-saml-error-page-http-binding environment variable to override the HTTP binding (HTTP-POST or HTTP-Redirect) used for SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. error page redirects
Adds new device management capabilities in hosted account pages, allowing users to view last sign-on time, add date, edit device name, and delete devices
2 details in Everything
2 more releases in this issue
· 2026-02-06 → 2026-02-18
Next-gen scripting engine for OAuth/SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. scripts; new REST actions and nodes for Identity Cloud
└──▷ TRY IT
Verify connectivity from Advanced Identity Cloud to PingOne using the new REST action
$ curl -X POST 'https://<aic-host>/idp/rest/realm-config/services/pingOneWorkerService/workers/<pingone-worker-service-name>?action=testConnection' -H 'Authorization: Bearer <token>'
Retrieve the latest node definitions for all authentication tree nodes in a single call
$ curl -X GET 'https://<aic-host>/idp/rest/realm-config/authentication/authenticationtrees/nodes?action=listLatestNodeDefinitions' -H 'Authorization: Bearer <token>'
Include a custom device ID and browser cookie in PingOne Protect evaluations via configuration properties
OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. AME scripts (OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. claims, Scripted JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. validator, Scope validation, Authorize endpoint data provider, Scope evaluation, May act) can now use the next-generation scripting engine with utils and openidm bindings
SAML 2.0SAML 2.0A standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. SP adapter, IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. adapter, and IDP attribute mapper scripts can now use the next-generation scripting engine with utils and openidm bindings
Adds application context configuration to hosted IdP or remote SP entity config to make samlApplication binding available for all SAML flows
Backchannel Initialize node gains an Allow Retry option for end users to retry failed backchannel authentication journeys
Pushed consent requests can now include remote consent agent credentials in a Basic Authentication header
+11 moreshow less
New testConnection action on /realm-config/services/pingOneWorkerService/workers/<pingone-worker-service-name> endpoint tests connectivity from Advanced Identity Cloud to PingOne
New listLatestNodeDefinitions action on /realm-config/authentication/authenticationtrees/nodes returns combined node definitions for the latest version of each node
RADIUSRADIUSA networking protocol for centralised authentication, authorisation, and accounting of users connecting to a network, maintained under IETF standards. Cyber tools use it to integrate with existing enterprise identity infrastructure. Decision node captures Vendor-Specific Attributes (VSA) returned by the RADIUS server during authentication
PingOne Protect Evaluation node adds configuration properties to specify a custom session ID, custom browser cookie, and external deviceId
PingOne Verify Evaluation node gains a property to enable automatic redirection after verification in Redirect delivery mode
New RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. SecurID node replaces the deprecated Marketplace RSA SecurID node
New JWT Password Replay node secures the user’s password within an encrypted JWT for PingGateway
Device Binding and Device Signing Verifier nodes allow specifying clock skew between client device and AIC
Set Success Details, Set Failure Details, and Set Error Details nodes now support setting custom headers on journey outcomes
New locales binding returns localized strings from a translation map in Configuration Provider, Journey Decision, and Device Match node scripts
Added identity.exists() method to next-generation objects returned by idRepository.getIdentity()
PingOne adds support for canceling clustered reconciliation via unavailable routes and restores PingOne Protect Username Node State setting
Adds ability to cancel a clustered reconciliation even when a route associated with the source or target system is unavailable (OPENIDM-21493)
Switches Advanced Identity Cloud identity management service to use synchronous HTTP client requests for external connections, preventing connection closure exceptions from terminating reconciliation
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The pageSize can no longer be configured outside the range of 10 to 100 (defaults remain 100, but values > maxQueueSize / 10 are automatically adjusted).
New Terraform provider for Ory Network and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. cert expiry in config; pagination token breaking changes in Hydra/Kratos/Keto.
saml_certificate_expiry added to Terraform provider config for proactive certificate rotation monitoring
Official Terraform provider for Ory Network (Beta) enables IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. management of identities, OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. clients, social providers, project config, organizations, permissions, email templates, and webhooks
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Upgrading Ory Hydra directly to any version above 26.1.7 breaks active pagination sessions for listOAuth2Clients, listOAuth2ConsentSessions, and listTrustedOAuth2JwtGrantIssuers endpoints because tokens expire after 1 hour
!Upgrading Ory Kratos directly to any version above 26.1.7 breaks active pagination sessions for the listCourierMessages endpoint because tokens expire after 1 hour
!Upgrading Ory Keto directly to any version above 26.1.7 breaks active pagination sessions for the GET /relation-tuples endpoint because tokens expire after 1 hour
2 more releases in this issue
· 2026-02-09 → 2026-02-24
Ory Hydra adds PostgreSQL serialization retries; Ory Polis adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. tokens in SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. assertions and removes Turso support.
Adds automatic retry logic for serialization failures in PostgreSQL transactions for Ory Enterprise License users
Enables including OIDC tokens in SAML assertions via the new includeOidcTokensInAssertion config attribute in Identity Federation apps
Removes support for Turso, requiring migration away from that SQLite backend
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Ory Polis no longer supports Turso after replacing sqlite3 with better-sqlite3.
Adds authorization prompts from the 1Password app as an authentication method for SDKs
Enables full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. operations (create, read, update, delete) and listing for 1Password vaults via the SDK
Introduces grantGroupPermissions, updateGroupPermissions, and revokeGroupPermissions functions to manage group access to vaults
Adds batch retrieve, create, and delete capabilities for items to enable scalable item management
4 details in Everything
3 more releases in this issue9 more releases in this issue · 2026-02-10 → 2026-02-25
Adds logout+jwtOIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. logout token type for RP-initiated single logout in authentik 2025.10.4
└──▷ GET THIS VERSION
$ git clone --branch version/2025.10.4 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2025.10.4
└──▷ HOW TO FIND IT
Configure your OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider to accept the new JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-formatted logout token, enabling RP-initiated single logout.
📍# In your OAuth2/OIDC provider configuration, add or set the supported logout token types:
# supported_logout_token_types: [jwt, logout+jwt]
# When initiating a logout request from an application, ensure the id_token_hint is signed and
# the token_type_hint is omitted or set to id_token, as the provider will now expect the new type.
Teleport v18.7.1 adds UpsertScopedToken RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. and platform info for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. discovery.
└──▷ GET THIS VERSION
$ git clone --branch v18.7.1 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.7.1
server side secret obfuscating is enabled for GetScopedTokens RPC
New UpsertScopedToken RPC is available
ssm.run events now include platform information when auto discovering EC2 instances
3 details in Everything
6 more releases in this issue
· 2026-02-03 → 2026-02-25
Teleport v18.7.0 adds inventory UI, tctl recordings download, AWS org-level EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. auto-discovery, and more.
└──▷ GET THIS VERSION
$ git clone --branch v18.7.0 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.7.0
└──▷ USE IT
Download session recordings locally without needing direct S3 or GCS backend access.
shell
tctl recordings download <recording-id>
Run tsh status in environments where the Teleport server is unreachable or to save API calls.
shell
tsh status --client
Configure static labels for Windows desktops discovered via LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory..
config
# In your teleport.yaml
autodiscovery:
windows_desktop:
discovery_config:
static_labels:
- key: "team"
value: "windows-ops"
tsh status gains a --client flag to skip server-side operations in client-only mode
Adds the tctl recordings download subcommand to download session recordings without backend access
AWS EC2 auto-discovery now supports organization-level enrollment from all or subset of accounts
New discovery_config.static_labels field allows static labels for LDAP-discovered Windows desktops
tsh kubectl tracing enabled via the --trace flag
+4 moreshow less
tbot start supports the new no-op subcommand to start no services
Inventory UI shows complete inventory of all connected instances and bots
Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. integration status page available in the web UI
Managed Updates dashboard added to the WebUI for configuration and rollout monitoring
CertCentral retires legacy ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction. service and enforces stricter certificate validity periods per CA/Browser Forum ballots.
Adds warning icon to identify legacy ACME credentials in the CertCentral UI on the Automation > ACME Directory URLs page
Retires the legacy CertCentral ACME service, requiring new credential creation for automation workflows
Enforces 199-day maximum validity for public TLS certificates issued on or after February 24, 2026
Shortens domain validation reuse period to 199 days for all existing and new validations
Shortens organization validation reuse period for public OV TLS certificates to 397 days
+2 moreshow less
Enforces 459-day maximum validity for public code signing certificates issued on or after February 24, 2026
Validates DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit. during domain control verification and CAA checks
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Requests to legacy ACME URLs will fail to issue a certificate starting February 24, 2026
!All public TLS certificates issued on or after February 24, 2026 can't exceed the new 199-day maximum validity
!All public code signing certificates issued on or after February 24, 2026 can't exceed the new 459-day maximum validity
Mondoo adds resource-level cloud findings and a massive MQLMQLA query language created by Microsoft for hunting across telemetry in Microsoft 365 Defender, letting cyber tools express complex behavioral detections in a structured, readable syntax. expansion with new policy checks and vulnerability detections
└──▷ TRY IT
Investigate specific cloud resource configurations via the API to automate remediation workflows.
$ GET /api/v2/resources/{resource_id}/findings
Adds resource-level cloud findings to provide granular visibility into infrastructure issues
Expands MQL (Mondoo Query Language) capabilities with the largest-ever set of new queries
Vanta adds SSPSSPA System Security Plan — a formal document required by NIST SP 800-18 that describes how a federal system meets its security controls, giving cyber tools a structured artifact to parse or generate for compliance workflows. generation, Calendly deprovisioning, bulk Trust Center imports, multi-resource custom tests
GenerateSystemSecurityPlan integration now supports FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. R5, NIST 800-53NIST 800-53A catalog of security and privacy controls for U.S. federal information systems, published by NIST. Cyber tools cite it to map their findings or features to a recognized compliance framework., NIST 800-171, CMMC with DOCX/PDF output stored in Vanta Documents
[Open beta] Calendly.deprovision action enabled during offboarding workflows
Trust Center UI show_failing_control_indicators toggle added to display non-passing controls
QAuto team_assignment capability allows assigning teams as approvers with RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. support
Custom Tests now support join logic across two resource types with enum value dropdowns in test authoring
5 details in Everything
2 more releases in this issue
· 2026-02-01 → 2026-02-28
Vanta QAuto adds bulk questionnaire actions, CTM conflict detection, granular Trust Center access controls, and improved evidence/audit UX
Adds ability to identify and manage conflicting and duplicate content within the Customer Trust Management (CTM) knowledge base
Enables bulk actions across multiple questionnaire questions in QAuto to reduce manual clicks during review
Allows configuration of more granular access settings for Trust Center documents
Improves evidence upload workflow in TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. reviews with clearer status indicators
Enhances audit issue status visibility within audit workflows
Drata adds internal audit creation, management and evidence upload via a new Internal Auditor role in the New Drata Experience.
Adds an Internal Auditor role with dedicated RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permissions for creating and managing audit requests.
Organizations can create, manage, and complete internal audits end-to-end in Drata without third-party tools.
Drata's new interface emphasizes AI workflows and enterprise-scale GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. with accessible UI components.
TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. Enhancements in New Drata Experience add custom questionnaire subjects, expanded field limits, security owner filters, and source-linked tables.
Adds the ability to customize assessment email subject lines in the TPRM workflow
Increases the character limit for SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. report fields (findings, controls, services) and initial outreach emails to support more detailed content
Adds a Security Owner filter to the vendor list to streamline workflow management
Enables viewing the originating source of a security review directly within document tables via Source-Linked Tables
Allows defining more granular vendor access requirements through expanded Password Policy Options
+1 moreshow less
Increases the risk description character limit to 30,000 characters for comprehensive risk scenario entry
CAT test now evaluates environment separation across compute, containers, databases, storage, VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules., serverless, and monitoring assets
Expands the Separate Environments Exist for Development, Test, and Production CAT test to evaluate environment separation across all relevant cloud asset categories—not just compute instances.
CAT test now supports six additional asset categories: Container platforms, Databases, Storage, Virtual networks, Serverless functions, and Monitoring and logging resources.
Evidence task and policy review dates now align with recurrence periods regardless of upload timing.
Evidence Tasks and Policies now transition to Needs Review at the start of each new recurrence period (monthly, quarterly, bi-annually, or annually) regardless of when evidence for the prior period was uploaded.
Access Deprovision and User Association tests now redirect to filtered Access Overview pages
Adds clickable resources in Access Deprovision Test and User Association Test findings that redirect to the Access Overview page with pre-applied filters for the specific user or access involved
Expands test descriptions and remediation steps for Access Deprovision Test and User Association Test with more detailed, practical guidance
Scrut adds PDF report generation for DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. findings via Vulnerabilities or Reports modules
Adds the ability to generate comprehensive professional PDF reports for DAST findings directly from the platform
Adds CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. scores and treatment plans to third-party scan findings; the enhanced experience requires enablement through the CSM.
With Scrut Teammates enabled, Evidence Checker expands AI quality assessment to all manually uploaded evidence.
With Scrut Teammates enabled, adds a Check with Scrut Teammates option to every manually uploaded evidence for AI-powered quality assessment.
With Scrut Teammates enabled, generates quality reports covering strengths, gaps, and improvement suggestions for all manual evidence instead of a limited subset.
The Questionnaire Automation add-on adds one-click Chrome Extension export into questionnaire webpages.
As part of the Questionnaire Automation add-on, adds a one-click Export button in the Chrome Extension to push generated answers into live questionnaire form fields.
Within the Questionnaire Automation add-on, tags autofilled responses and user-edited content distinctly.
New Partner Portal in Scrut adds workspace-based multi-customer management and role assignment via the console interface.
Adds a new Partner Portal at console.scrut.io for managing multiple customer accounts using workspaces instead of impersonation.
Adds Add workspace workflow to onboard customers by entering workspace name, legal organization name, and hosting region (e.g., US).
Adds Users tab within a workspace to assign workspace-specific roles (Admin, Contributor) and customize module-level access.
Adds Request framework action inside a workspace to request HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., etc., notifying the CSM automatically.
Scrut adds FedRAMP ModerateFedRAMP ModerateA US government authorization tier requiring cloud services to meet a defined set of NIST 800-53 controls before federal agencies can use them, giving cyber tools a pre-vetted compliance baseline for government contracts. framework support with 300+ NIST SP 800-53 controls and pre-configured policies.
Adds FedRAMP Moderate framework option in the Frameworks module
Provides pre-configured policy templates aligned to NIST SP 800-53 for the Moderate baseline
Scrut adds ISO/IEC 27018:2025ISO/IEC 27018:2025An ISO/IEC standard specifying privacy controls for public cloud providers that process personal data, giving cyber tools a recognized compliance baseline for handling PII in cloud environments. framework support for PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. compliance.
Adds ISO/IEC 27018:2025 to the Frameworks module, enabling automated Statement of Applicability (SOA) generation with in-scope control suggestions and pre-filled justifications for out-of-scope controls.
Kovr adds continuous monitoring for Azure and Google Workspace with configurable frequency
Adds native Azure integration with more than 80 comprehensive security and compliance checks covering identity, network, data protection, logging, and resource configuration.
Expands Google Workspace monitoring to include Drive sharing policies, Admin Console configurations, authentication and session controls, and organizational unit policies with automatic discovery.
Introduces configurable monitoring frequency (hourly, daily, or weekly) for Azure connections via the Connection Centre.
Adds a Sync Checks button in the UI to instantly adopt latest compliance checks from Kovr.ai's check library without re-authentication.
CISO Assistant v3.12.6 adds M2M visibility checks and expands validation coverage to processings, exceptions, accreditations, and contracts.
└──▷ GET THIS VERSION
$ git clone --branch v3.12.6 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.6
Adds M2M visibility check in BaseModelSerializer to enforce multi-model access controls
Expands validations to cover processings, exceptions, accreditations and contracts
2 details in Everything
11 more releases in this issue
· 2026-02-02 → 2026-02-26
CISO Assistant v3.12.5 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. group creation flag, applied_controls in evidences table, ITIL 4 library, chart annotations, and more wizard fields
└──▷ GET THIS VERSION
$ git clone --branch v3.12.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.5
Adds --create-iam-groups flag to the CLI for creating IAM groups
Includes applied_controls field in the evidences data table
Adds new ITIL 4 Management Practices library to the framework catalog
Adds optional ServiceAccount support with annotations in chart configuration
Expands available fields on the data wizard interface
CISO Assistant v3.12.4 adds campaign feature flag, risk scenario filters, and data wizard conflict strategy improvements.
└──▷ GET THIS VERSION
$ git clone --branch v3.12.4 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.4
feature_flags.campaigns (and associated UI/behavior) added as a feature flag to control campaign functionality
Adds labels and qualifications filter options on risk scenarios in the Data Wizard / risk management workflow
Improves conflict management strategy on data wizard for Pro users, generalizing how conflicts are handled
Improved context management for the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration when handling many audits.
└──▷ GET THIS VERSION
$ git clone --branch v3.12.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.3
CISO Assistant v3.12.2 adds respondent mode lock cases and requirement node implementation groups updates
└──▷ GET THIS VERSION
$ git clone --branch v3.12.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.2
Adds feat: allow requirement node implementation groups update to enable updating implementation groups on requirement nodes.
CISO Assistant v3.12.1 adds incident labels, findings assessment progress, Moroccan Law mapping, and findings-threats linking.
└──▷ GET THIS VERSION
$ git clone --branch v3.12.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.1
Adds labels field on incidents to categorize and filter security events
Adds progress tracking for findings assessments in the UI
Adds bidirectional mapping between Moroccan Law 05-20 and ISO 27001:2022
Adds many-to-many relationship between findings and threats
Generalizes the pick existing pattern across UI components
$ git clone --branch v3.12.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.12.0
└──▷ HOW TO FIND IT
Perform bulk operations on multiple items at once via the table interface.
📍Select multiple rows in any table and use the new Batch actions dropdown menu to apply changes simultaneously.
Assign a specific requirement to only one team member within a group.
📍Edit a requirement and use the Partial assignment option to select a single user or team instead of the entire group.
Adds batch actions on tables for bulk operations
Enables partial assignment of requirements to a specific user or team instead of whole assignments
Implements serializer-level access control enforcement for finer-grained data visibility
Adds ISO/IEC 27001:2022 to DNSSI 2023 mapping library and license parameters in make_config.py
└──▷ GET THIS VERSION
$ git clone --branch v3.11.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.11.5
Adds save-and-next workflow for requirement assessments, a new mapping library for Moroccan Law 05-20, and task template links in notifications.
└──▷ GET THIS VERSION
$ git clone --branch v3.11.4 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.11.4
└──▷ HOW TO FIND IT
Navigate through a long set of requirements without losing progress at each step.
📍In the Requirement Assessment view, click the new Save and Next button to persist your answer and advance to the next control.
Map existing ISO 27001 controls to Moroccan regulatory requirements automatically.
📍Use the new mapping library feature during framework alignment to apply ISO/IEC 27001:2022 → Moroccan Law 05-20 mappings.
Ensure assignees can immediately access the required documentation from their email.
📍Check task template assignment mail notification emails; they now contain direct links to the relevant task templates.
Adds feat: save and next button on a requirement assessment to streamline multi-step compliance reviews
Adds ISO/IEC 27001:2022 → Moroccan Law 05-20 mapping library for automated control alignment in regional assessments
Adds links to task templates in task template assignment mail notification for faster onboarding
Adds reference controls for CyFun2025 and support for the Moroccan cybersecurity law framework.
└──▷ GET THIS VERSION
$ git clone --branch v3.11.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.11.3
└──▷ HOW TO FIND IT
Select the new Moroccan framework for a new assessment in the CISO Assistant service.
📍1. In the console, go to Frameworks.
2. Click Create new framework.
3. Select Moroccan cybersecurity law from the list of available frameworks.
Adds reference controls to the CyFun2025 standard via the new pull #3389
Adds Moroccan cybersecurity law framework as a supported compliance framework
CISO Assistant v3.11.0 adds the RBI framework and improves library loading UX
└──▷ GET THIS VERSION
$ git clone --branch v3.11.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.11.0
Adds RBI framework to supported compliance frameworks for risk assessment
Adds a user-facing spinner message indicating that demo data is currently loading
$ git clone --branch v3.10.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.10.5
Adds Excel (.xlsx.xlsxThe file format used by Microsoft Excel for spreadsheets, based on the Open XML standard. Cyber tools use it to ingest or export structured tabular data in a format analysts already work with.) file support to the library import wizard in the UI
Adds risk_scenario, residual_risk and implementation_status fields to the issue management API endpoints
Zanshin adds a Third-Party Follows Dashboard, AI-powered SAQSAQSelf-Assessment Questionnaire: a PCI DSS compliance form that merchants and service providers complete to validate how they handle cardholder data, with different variants scoping different payment environments. summaries, Okta/Sophos scans, PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. v4.0.1 support, and public third-party scores.
Adds Seguidas > Painel dashboard for strategic third-party risk overview including Business Impact matrix, Score distribution, Sankey evolution diagram, and Active Assessments summary
Adds Resumir with IA button in Avaliações > pendente de revisão to generate AI summaries of attached evidence files (PDF only) during SAQ review
Adds support for Okta Workforce Identity and Sophos Endpoint scan targets via the Scan Targets Dashboard under Identity and Access Management (IAM) and Security Tools sections respectively
Adds support for PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. DSS v4.0.1 compliance reporting in Minha Organização and Seguidas > Compliance
Adds public third-party score view on the Organization Details > Painel tab showing historical scores based solely on public scan targets
Trust Center Agent now answers from company philosophy, subprocessors, and certifications
Trust Center Agent now draws from What We Offer, Our Philosophy, Coming Soon, Announcements, Subprocessors, Quick Summary, and Badges/Certifications sections.
Visitors can now get answers about company philosophy and security certifications directly from the agent instead of seeing blank responses.
Conveyor adds in-app visitor feedback collection and expands Trust Center Agent knowledge sources.
Enables Visitor Feedback collection via Trust Center → Designer → Visitor Feedback
Expands Trust Center Agent knowledge sources to include What We Offer, Our Philosophy, Coming Soon, Announcements, Subprocessors, Quick Summary, and Badges/Certifications
Runlayer is an MCP gateway that enforces identity-mapped permissions and detects threats across the agents and MCP servers employees use.
Runlayer 1.27 adds Tool Intent Guard, org API keys, configurable PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. scanning, and a Security Scanning API endpoint.
Adds Tool Intent Guard runtime model that detects intent drift, output poisoning, data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels., and prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. by analyzing tool inputs and outputs together.
Provides /score/tool_guard_io API endpoint for programmatic security scanning of tools via CI workflows or custom integrations.
Introduces organization-level API keys scoped by role (Detect Scan, Security Scan) with auto-provisioning via enrollment keys.
Enables configurable PII scanning per connector, allowing users to enable/disable built-in types and add custom regex rules.
Adds Just-in-Time (JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility.) Auth which prompts for credentials only on the first tool call, utilizing a three-tier cache.
+2 moreshow less
Releases 25+ new catalog connectors including Lemlist, Webflow, Google Analytics, Neon, Pylon, DX, official Slack MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., Deepwiki, CircleCI, Ashby, Figma Desktop, Miro, Jamf, Cloudflare (16 servers), Datadog, Vanta, Granola, and LaunchDarkly.
Moves BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. and Slack connectors out of beta status.
mcp-security secops-v0.6.0 adds curated rules management, retrohunt, alert search, investigation management, and watchlist management tools for Chronicle.
└──▷ GET THIS VERSION
$ git clone --branch secops-v0.6.0 https://github.com/google/mcp-security.git
# already have the repo? check out this version:$ git checkout secops-v0.6.0
Adds service account (SA) authentication option.
1 detail in Everything
1 more release in this issue
· 2026-02-26 → 2026-02-27
Adds curated rules management, retrohunt, alert search, and investigation management tools to the Chronicle SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. MCP server.
└──▷ GET THIS VERSION
$ git clone --branch secops-v0.5.3 https://github.com/google/mcp-security.git
# already have the repo? check out this version:$ git checkout secops-v0.5.3
Adds remote/local selection for MCP server skill execution.
Portkey Backend 1.11.2 adds grouped analytics endpoints, archived workspace filtering, and API enhancements for integrations, prompts, and gateway config.
Added GET /v1/analytics/groups/:groupBy and GET /v1/logs/groups/:groupBy generic grouped analytics endpoints with configurable columns
Added status query parameter to the workspace list API (GET /workspaces) to filter by active or archived status
Added create_default_provider and default_provider_slug fields to the integration creation API for workspace integrations
Added patch flag to PUT /prompts/{promptId} to enable partial version field updates
Added azure_entra_scope option to the gateway config schema for specifying custom Azure Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. authentication scopes at the config level
5 details in Everything
14 more releases in this issue
· 2026-02-04 → 2026-02-27
Enterprise Gateway 2.2.5 adds secondary Redis for workers and configurable Prometheus metrics.
Adds REDIS_WORKERS_URL, REDIS_WORKERS_HOST, REDIS_WORKERS_PORT, REDIS_WORKERS_USERNAME, REDIS_WORKERS_PASSWORD, REDIS_WORKERS_TLS_ENABLED, and REDIS_WORKERS_AUTH_MODE environment variables to route BullMQ workers to a dedicated Redis instance.
Adds PROMETHEUS_INCLUDE_MODEL_LABEL, PROMETHEUS_INCLUDE_METADATA_LABELS, and PROMETHEUS_LABELS_METADATA_ALLOWED_KEYS environment variables to configure Prometheus metric cardinality.
Adds native Responses API support for the Perplexity provider.
Adds embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. endpoint support for the OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. provider.
Portkey Backend 1.11.1 introduces configuration capabilities for airgapped environments, specifically allowing custom OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. scopes via a new environment variable.
Adds OIDC_CUSTOM_SCOPES environment variable to configure additional custom OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. scopes (comma-separated) for airgapped deployments
Portkey Enterprise Gateway 2.2.4 adds Anthropic Bedrock citations, Zscaler AI Guard integration, SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. streaming for TTS, and ZhipuAI image generation support.
Adds stream_format: "sse" to OpenAI and Azure OpenAI text-to-speech requests for Server-Sent Events audio streaming with usage logging
Adds Zscaler AI Guard as a new guardrails partner for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. and prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. protection on inbound prompts and outbound responses
Adds Anthropic’s citations feature support on Bedrock for chat completions API
Adds ZhipuAI image generation support through the CogView model family (e.g., cogview-4-250304) with parameters prompt, model, n, size, response_format, and user
Adds x-portkey-vertex-auth-type provider option for Vertex AI to configure authentication type (e.g., workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials.)
+1 moreshow less
Automatically records user_id in analytics from the API key’s associated user
Backend 1.10.0 adds prompt access control settings, custom budget reset intervals via new API fields, and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. group management for AirGapped environments.
membersViewPrompts and membersWritePrompts config keys to control workspace member prompt permissions
managersViewPrompts and managersWritePrompts config keys to control workspace manager prompt permissions
Custom periodic reset intervals for workspace budget limits via the periodic_reset_days field (1–365 days)
The next_usage_reset_at field (ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 8601) to specify the first custom reset date for budgets
SCIM User-Based Group Management in AirGapped mode using the SCIM /Users endpoint when SCIM_MEMBERSHIP_USER_MODE=ON is set
+2 moreshow less
groups attribute included in user SCIM responses to expose current group memberships
New authentication type Workload Identity Federation for Vertex AI integrations
7 details in Everything
└──▷ BREAKING ON UPGRADE
!periodic_reset_days is mutually exclusive with the existing periodic_reset (weekly / monthly) option
Portkey Backend 1.9.0 adds per-role analytics access control, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. metadata APIs, and self-hosted feature flags.
Added managersViewAnalytics config setting to control workspace manager analytics visibility
Added membersViewAnalytics config setting to control workspace member analytics visibility
Added GET /mcp-servers/:id/metadata endpoint for fetching detailed MCP server metadata
Enterprise Gateway 2.2.3 adds Databricks provider, Together AI reasoning models, and native Responses API for Groq/OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code./xAI
Adds Databricks as a new provider for chat completions, completions, and embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG..
Enables Together AI reasoning/thinking model support via the reasoning_effort parameter and content_blocks in responses when strictOpenAiCompliance is set to false.
Routes Groq, OpenRouter, and xAI Responses API requests to their native /responses endpoints.
Portkey Enterprise Gateway 2.2.2 adds Claude 4.6 support, native Responses API providers, and reasoning controls
Adds thinking: { type: 'adaptive' } with reasoning_effort for Claude 4.6
Adds output_config.format passthrough for structured outputsstructured outputsForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. in Anthropic/Bedrock/Azure
Adds cache_control preservation on content items and tools in the Responses API adapter
Adds native provider support for x-ai (Grok), Groq, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code., and Azure AI Foundry in Responses API
Portkey Backend 1.8.0 introduces Gateway Deployments with RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., new CrowdStrike integration, and workspace manager API key creation.
Adds production and non-production deployment types with separate limits
Adds deployment slugs for human-readable identifiers in the Gateway Deployments system
Adds support for filtering deployments by type in the list endpoint
Adds CrowdStrike AIDR partner integration for scanning LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. inputs and outputs
+4 moreshow less
Enhances Usage & Rate Limit Policies with new conditions (refer to Documentation)
Routes alert emails to workspace admins and managers in addition to organization admins
Enables Workspace managers to create API keys on behalf of other users by specifying a user_id
Adds optional skipPtuCostAttribution field for Vertex AI integrations and virtual keys
Frontend 1.6.1 adds multi-org SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., workspace-level MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. access control, and saved filter search.
Adds SSO login support for multiple SSO enabled Organisations in the security settings UI
Adds Policy management UI Updates to support Organisation level multiple guardrails
Adds MCP capabilities support for the MCP Gateway and MCP access control support at Workspace level
The nono runtime runs AI agents in isolated environments with policy-controlled filesystem, network, and credential access.
nono v0.6.0 adds a network filtering proxy with credential injection, network activity tracking in learn mode, and multi-subject artifact attestation.
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.6.0
Adds a network filtering proxy with host-level filtering and credential injection for sandboxed processes.
Adds network activity tracking to nono learn, enabling discovery of outbound connections made during a learning session.
Supports custom credential definitions in user profiles, with multiple injection modes (e.g. header, environment variable).
Allows the sandboxed process to bind and listen on a TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port.
Supports a static proxy port for deterministic proxy configuration.
+1 moreshow less
Adds multi-subject file attestation for companion artifact signing.
6 details in Everything
1 more release in this issue3 more releases in this issue · 2026-02-01 → 2026-02-27
nono v0.6.0-alpha.2 adds Sigstore verification for instruction files, decoupled rollback, and flexible profile loading.
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0-alpha.2 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.6.0-alpha.2
└──▷ TRY IT
Use rollback independently of supervised mode to revert the last nono action.
$ nono --rollback
Implements Sigstore cryptographic verification for instruction files, enabling trust validation of nono instruction sources.
Renames undo to rollback and decouples --rollback from --supervised, allowing rollback to be used independently.
Supports loading profiles from outside XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. Home, enabling flexible configuration paths.
Denies access to the .nono XDG directory when a user shares the HOME path, hardening the sandbox boundary.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The undo subcommand/flag is renamed to rollback; any scripts or workflows using undo will break.
!--rollback is decoupled from --supervised; previously coupled behavior may change for setups that relied on their interaction.
nono v0.6.0-alpha.1 adds human-readable timestamps to undo session listings.
└──▷ GET THIS VERSION
$ git clone --branch v0.6.0-alpha.1 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.6.0-alpha.1
ToolHive v0.10.0 adds vector embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. and hybrid searchhybrid searchCombining keyword search with semantic or vector search. The results use both exact term matches and similarity in meaning. to ToolStore, extensible container runtime registry, skill installer/extractor, and embeddable Server Handler
└──▷ GET THIS VERSION
$ git clone --branch v0.10.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.10.0
Add Handler(ctx) method to vmcp Server for embeddable use
Add skills to upstream registry types and schema
Add skill installer and extractor for OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. artifact extraction
Migrate pkg/logger from zap to slog via toolhive-core/logging
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Replace non-functional webhooks with hybrid validation approach; existing webhook configurations are no longer used.
4 more releases in this issue
· 2026-02-02 → 2026-02-18
Adds AWS STSAWS STSAWS Security Token Service, an Amazon Web service that issues short-lived credentials for IAM roles, letting tools authenticate to AWS APIs without storing long-term secrets.token exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user. via OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., Redis storage backend for auth server, and SQLite ToolStore.
└──▷ GET THIS VERSION
$ git clone --branch v0.9.4 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.9.4
UseLegacyAttributes flag in telemetry config
SQLite foundation with connection, PRAGMAs, and goose migrations
AWS STSSTSAWS Security Token Service, an Amazon Web Services API that issues short-lived credentials for IAM roles, letting cyber tools authenticate to AWS without storing long-term secrets. token exchange for OIDC-to-AWS credential conversion
Add client skill metadata for skill path resolution
ToolHive v0.9.3 adds SigV4SigV4AWS's request-signing protocol that authenticates HTTP calls by hashing the request body, headers, and credentials into a signature; cyber tools use it to talk to AWS APIs without embedding long-lived secrets. auth, HTTP PDP authorizer, SKILL.md parser, and configurable protocol build images
└──▷ GET THIS VERSION
$ git clone --branch v0.9.3 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.9.3
Accept ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. signing keys in JWKSJWKSA JSON Web Key Set, a published collection of cryptographic keys. Applications use it to find the public key needed to verify a token's signature. token validation
Add structured status conditions for ToolConfigRef and ExternalAuthConfigRef validation
Exclude unhealthy backends from vMCP capability aggregation
ToolHive v0.9.1 adds Google Gemini CLI support and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider upstream for the embedded auth server.
└──▷ GET THIS VERSION
$ git clone --branch v0.9.1 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.9.1
Adds Google Gemini CLI client support with dynamic URL field mapping
Adds inspector auto-cleanup on interrupt to prevent zombie processes
HackMyAgent v0.4.1 ships 11 new checks for CVE-2026-25253 OpenClaw WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. hijacking, reaching 145+ total checks.
└──▷ GET THIS VERSION
$ git clone --branch v0.4.1 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.4.1
└──▷ TRY IT
Run all OpenClaw-specific checks against a local project to catch CVE-2026-25253 exposure and ClawHavoc IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. in one pass.
$ npx hackmyagent@latest secure-openclaw
Adds IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. detection for the ClawHavoc campaign — C2 IPs, malware filenames, and ClickFix patterns — via checks SUPPLY-005 through SUPPLY-008.
Adds config hardening checks GATEWAY-007–GATEWAY-008 and CONFIG-007–CONFIG-009 covering open DM wildcards, disabled sandbox, and weak tokens.
Ai-Safe2-Framework provides governance, risk, and compliance controls for securing agentic AI systems and non-human identities.
v2.0 introduces 11 new governance files for OpenClaw agent workspaces including IDENTITY.md and HEARTBEAT.md
└──▷ GET THIS VERSION
$ git clone --branch 2026-02-25-OpenClaw-Core-File-Standard https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-02-25-OpenClaw-Core-File-Standard
└──▷ HOW TO FIND IT
Enforce a permanent identity anchor that cannot be overwritten by adversarial prompts.
📍Place IDENTITY.md in the agent's root workspace directory; it loads automatically on every request.
Monitor for credential leaks and model cost overruns using scheduled checks.
📍Place HEARTBEAT.md in the workspace to enable per-cycle, daily, and weekly health check protocols.
Govern sub-agent spawn behavior and isolate their context to prevent injection.
📍Apply SUBAGENT-POLICY.md to define tiered trust levels and output injection detection rules.
Adds IDENTITY.md to provide a minimal 5-line identity anchor that loads on every request
Adds SOUL.md to implement alignment via the Love Equation dynamical system
Adds HEARTBEAT.md to operationalize scheduled health checks for monitoring drift and credential leaks
Adds USER.md to define human identity contracts with three-tier data classification
Adds TOOLS.md to separate environment configuration values from skill instructions
+6 moreshow less
Adds SUBAGENT-POLICY.md to enforce tiered trust levels and injection detection for worker agents
Adds MODEL-ROUTER.md to define multi-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. routing policies, cost controls, and data residency rules
Adds OPENCLAW-WORKSPACE-POLICY.md to bind agents to shared accountability and cross-agent trust hierarchy
Adds OPENCLAW-AGENT-TEMPLATE.md as an eight-step onboarding checklist with mandatory smoke tests
Adds AGENTS.md as a complete operating manual covering security, data classification, and UX patterns
Updates openclaw_memory.md to v2.0 with a new prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. block list superseding the previous pattern list
11 details in Everything
2 more releases in this issue
· 2026-02-10 → 2026-02-25
Introduces executable runtime components: AI SAFE² Gateway proxy, Audit Scanner CLI, and associated config/Docker assets.
Adds the ai-safe2-framework as an executable control plane with new tooling to enforce AI safety policies at runtime
New gateway/ directory provides the AI SAFE² Gateway proxy implementation to enforce policy decisions between orchestration layers and downstream tools
New scanner/ directory provides the AI SAFE² Audit Scanner CLI supporting deeper scan modes for risk domains like Agentic Swarms, NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls., Memory/RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining., Supply Chain, and Universal GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically.
Adds config/default.yaml containing baseline security configuration and control thresholds as a starting point for enterprise customization
Adds root-level Dockerfile and docker-compose.yml to enable containerized deployment of the Gateway
+1 moreshow less
Adds skill.md as the canonical context file for AI assistants and IDEs like Claude Projects, Cursor, and Windsurf
pipelock v0.3.0 adds finding suppression, kill switch, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. refactor, chain detection, event emission, port isolation and DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. tuning.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.3.0
finding suppression rules to hide specific alerts without disabling scans.
MCP refactor restructuring the underlying model protocol for better extensibility.
chain detection engine tracking multi-step attack sequences across events.
event emission subsystem exposing real-time lifecycle signals for integration.
port isolation flag to restrict network access to specific ports per scan target.
+1 moreshow less
DLP pattern tuning options including include_defaults merge logic.
6 details in Everything
9 more releases in this issue
· 2026-02-09 → 2026-02-27
pipelock v0.2.9 adds a WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. proxy with bidirectional frame scanning
└──▷ GET THIS VERSION
$ git clone --branch v0.2.9 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.2.9
pipelock v0.2.7 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. HTTP reverse proxy with bidirectional scanning and CI integration fixes.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.7 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.2.7
pipelock v0.2.4 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. streamable HTTP transport, test command, pre-execution policies, and secrets_file scanning
└──▷ GET THIS VERSION
$ git clone --branch v0.2.4 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.2.4
Adds test subcommand to run config validation against pipelock configurations.
Adds Streamable HTTPStreamable HTTPAn MCP transport protocol that lets a client send JSON-RPC requests over HTTP POST while the server streams responses back using Server-Sent Events, replacing the older stdio and SSE transports for remote tool communication. transport support for the MCP proxy via a new protocol handler.
Adds pre-execution tool call policy enforcement for the MCP proxy.
Adds secrets_file configuration key to enable scanning of known secret values.
pipelock v0.2.3 introduces MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. proxy transport abstraction, strict-mode API allowlist enforcement, CrewAI/LangGraph guides, and enhanced demo CLI.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.3 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.2.3
Add transport abstraction for MCP proxy to resolve no-params DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. bypass issues
Enforce strict-mode API allowlist for tighter security controls
Upgrade demo command with 7 scenarios, color output, and interactive mode
pipelock v0.2.2 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool scanning and cosign signing capabilities
└──▷ GET THIS VERSION
$ git clone --branch v0.2.2 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.2.2
Adds MCP tool scanning to detect potential issues in Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integrations
Adds cosign signing for release artifacts to verify software supply chainsoftware supply chainThe dependencies, tools and processes used to build and deliver software. Compromising one part can affect the products or organizations that rely on it. integrity
pipelock v0.1.3 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. response scanning for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. detection and Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. signing.
└──▷ GET THIS VERSION
$ git clone --branch v0.1.3 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v0.1.3
Add Ed25519 signing for file and manifest verification
crust v2.5.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./ACP proxy gateways, crypto wallet DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., and hybrid shell extraction
└──▷ GET THIS VERSION
$ git clone --branch v2.5.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v2.5.0
crust mcp-gateway subcommand as a stdio proxy for MCP servers with rule engine evaluation
crust wrap auto-detect proxy supporting both MCP and ACP protocols
Response DLP scanning intercepts secrets in MCP/ACP server and agent responses before they reach the client
DLP detection of JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. error response fields
Crypto wallet DLP covering BIP39 mnemonics, xprv/yprv/zprv/tprv private keys (base58check), and WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys. keys (checksum+version)
+3 moreshow less
Hardcoded wallet path blocking for 16 chains including Bitcoin, Ethereum, and Solana
DLP token patterns expanded from 19 to 34 with support for HuggingFace, Groq, Vercel, Supabase, DigitalOcean, Vault, Linear, Postman, Replicate, Twilio, Doppler, Firebase, and more
Hybrid interpreter+ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. shell extraction mode for higher path coverage in mixed shell scripts
8 details in Everything
4 more releases in this issue
· 2026-02-20 → 2026-02-28
crust v2.4.0 introduces ACP stdio proxy wrapper and doctor diagnostic command
└──▷ GET THIS VERSION
$ git clone --branch v2.4.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v2.4.0
└──▷ USE IT
Wrap a local agent to intercept file system and terminal actions before the IDE executes them.
shell
crust acp-wrap --agent goose
Check connectivity to your provider endpoints and generate a sanitized report for bug filing.
shell
crust doctor --report
crust acp-wrap wraps any ACP-compatible agent as a transparent security proxy, intercepting fs/read_text_file, fs/write_text_file, and terminal/create before IDE execution.
crust doctor command diagnoses provider endpoint connectivity with concurrent checks, proxy support, and --report flag for sanitized GitHub issue reports.
Adds hardcoded content-based DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. token detection with optional gitleaks integration
└──▷ GET THIS VERSION
$ git clone --branch v2.3.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v2.3.0
Adds dlp.go and dlp_scanner.go implementing Tier 2 scanning with hardcoded content-based patterns for AWS, GitHub, Stripe, OpenAI, Anthropic, etc.
Crust v2.2.0 adds env-var expansion for provider API keys and remote TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. via management API
└──▷ GET THIS VERSION
$ git clone --branch v2.2.0 https://github.com/BakeLens/crust.git
# already have the repo? check out this version:$ git checkout v2.2.0
api_key in config.yaml now supports $VAR/${VAR} expansion for per-provider secrets
Remote dashboard access via the management API exposed on the proxy port
Monitor live blocked/allowed events in the split-pane UI.
$ crust status --live
Adds PowerShell evasion detection: recursively parses -Command "..." and pwsh -c "..." inner commands; decodes -EncodedCommand base64 UTF-16LE payloads and flags them as evasive
Adds new management API endpoints: GET /api/telemetry/sessions and /api/telemetry/sessions/:id/events for per-session stats and event logs
Adds concurrent sessions dashboard accessible via crust status --live, replacing the previous single-overview view with a split-pane session list and event log
Adds formal Windows support: native Windows daemon, named pipe management API, PowerShell command extraction, LOLBASLOLBASLiving Off the Land Binaries and Scripts — legitimate Windows executables and scripts that attackers abuse to run malicious code, letting cyber tools detect or emulate attacker behavior without custom malware. entries, and backslash path normalization
Adds formal FreeBSD support with Unix socket management API and flock-based liveness checks
+1 moreshow less
Replaces TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. management API with Unix domain sockets at ~/.crust/crust-api-{port}.sock for kernel-enforced access control
6 details in Everything
└──▷ BREAKING ON UPGRADE
!The management API is no longer available over TCP; it is now only exposed via Unix domain sockets (~/.crust/crust-api-{port}.sock) or Windows named pipes
!Clients must now support the new MessageRole enum and named API protocol constants instead of raw strings
Mend AI adds model metadata workflows, AI findings violations management with SLAs, and System Prompt violation tracking.
Enables sophisticated workflow automation based on AI model metadata (risk factors, licensing, inference providers, authorship) for granular governance rules
Provides comprehensive violations management for AI security findings with governance workflows, SLAs, and status tracking
Adds support for violations in System Prompts including a dedicated column in the risk table, side panel tab, and new workflow conditions
3 details in Everything
1 more release in this issue
· 2026-02-04 → 2026-02-09
Garak scans language models and applications for vulnerabilities including prompt injection and data leakage.
garak v0.14.0 adds JSON config support and new reporting features with breaking changes to report format
└──▷ GET THIS VERSION
$ git clone --branch v0.14.0 https://github.com/NVIDIA/garak.git
# already have the repo? check out this version:$ git checkout v0.14.0
└──▷ USE IT
Run a scan using a standard JSON configuration file instead of the default YAML.
shell
garak --config config.json <model_probe>
Supports JSON configuration files alongside existing YAML formats for the cyber tooling
Adds tier biased security aggregate data to evaluation reports
Expands the content of entry_type:eval items in output reports
Removes --generate_autodan CLI option from garak
4 details in Everything
└──▷ BREAKING ON UPGRADE
!The format of eval and digest entries in JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. reports has been modified; compatibility expectations changed.
Giskard tests and evaluates LLM applications for performance, bias, and security issues.
Giskard v2.19.0 adds custom embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. support
└──▷ GET THIS VERSION
$ git clone --branch v2.19.0 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout v2.19.0
CalypsoAI tests AI systems for security, safety, and compliance risks before deployment.
v9.159.5 adds live project flag and CASI leaderboard data for AI Red Team
Adds the ability to mark projects as live in the platform, with filtering support in table and card views to distinguish test/dev from production apps.
Exposes Comprehensive AI Security Index (CASI) leaderboard and trend data within the AI Red-Team product for comparing model family security scores.
The code-oss project is an open-source code editor combining editing, debugging, and extensibility for developers across Windows, macOS, and Linux.
VS Code 1.109.0 adds multi-agent orchestration, Claude/Anthropic support, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Apps, Copilot Memory, terminal sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls., and an integrated browser.
└──▷ GET THIS VERSION
$ git clone --branch 1.109.0 https://github.com/microsoft/vscode.git
# already have the repo? check out this version:$ git checkout 1.109.0
Adds Claude agent support and new Anthropic model capabilities in chat.
Introduces MCP Apps for rich, structured chat interactions.
Adds Copilot Memory so agents retain context across sessions.
Supports external indexing for faster code search in agent workflows.
Introduces Agent Skills and organization-wide agent customizations for consistent results.
+5 moreshow less
Enables agent orchestration so users can build custom multi-agent workflows.
Adds background and cloud agent session management with the ability to delegate and resume tasks.
Adds terminal command sandboxing and auto-approval rules for safer agent-driven terminal use.
Introduces an integrated browser for testing web apps without leaving the editor.
Revamps editor inline chat with faster streaming and improved reasoning result display.
Obsidian Desktop v1.11.7 updates UI styling for help and vault chooser windows to align with app settings, removes icons from Community plugin sidebar, and fixes several UI focus and link insertion behaviors.
The help window and the vault chooser window have been updated to match the new design used in app settings.
Bases: Table cell menu now shows Copy and Paste menu items.
Settings: The sidebar no longer shows icons next to Community plugins.
CTFd 3.8.2 adds ratelimit submission tracking, new plugin APIs, Norwegian/Turkish/Croatian translations, and a rootless Docker Compose default.
└──▷ GET THIS VERSION
$ git clone --branch 3.8.2 https://github.com/isislab/CTFd.git
# already have the repo? check out this version:$ git checkout 3.8.2
Adds ratelimit submission type so rate-limited attempts are tracked separately from incorrect submissions.
Adds Ratelimiteds submission class and BaseChallenge.ratelimited() method for plugin developers to create rate-limited submission records.
Adds force_all parameter to CTFd.plugins.migrations.upgrade() enabling plugins to force-run all migrations.
Adds app.overridden_functions global allowing plugins to override supported platform functions.
Raises ChallengeSolveException in BaseChallenge.solve() when a duplicate solve is encountered, giving plugins a consistent signal to handle.
+4 moreshow less
Adds PUT method to IP address tracking endpoint.
Required fields in registration, login, and custom field forms are now marked with a red asterisk.
Adds Norwegian, Turkish, and Croatian translations.
Docker Compose deployment now runs as the ctfd user instead of root.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The provided Docker Compose file no longer uses the root user and instead uses the ctfd user — file permission mappings tied to root in existing deployments may break on upgrade.
ZoomIt v10 adds video clip editor and system sound recording; Sysmon for Linux adds eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. monitoring.
Adds a video clip editor in ZoomIt to trim recordings before saving them
Enables recording system sounds in ZoomIt video clips
SysReptor 2026.12 adds Jira export, ZAP scan import, per-section PDF rendering, and configurable report filenames.
└──▷ GET THIS VERSION
$ git clone --branch 2026.12 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.12
└──▷ HOW TO FIND IT
Export findings from a completed pentest report directly into Jira issues for remediation tracking.
📍In the report, open the Jira plugin panel and trigger Export findings to Jira issues — see https://github.com/Syslifters/sysreptor/tree/main/plugins/jira#readme for configuration.
Render only a single section (e.g. executive summary) to PDF mid-engagement without producing the full report.
📍In the report, open the rendersections plugin and select the target section to render — see https://github.com/Syslifters/sysreptor/tree/main/plugins/rendersections#readme for setup.
Automatically populate findings from an OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ZAP scan instead of entering them manually.
📍In the report findings view, use the scanimport plugin to import an OWASP ZAP scan output as findings.
Adds configurable filenames for generated PDF reports.
New jira plugin: export findings directly to Jira issues.
New rendersections plugin: render individual report sections to PDF without generating a full report.
New scanimport plugin: import OWASP ZAP scan results as findings.
Adds built-in design for HTB CWPE certification reports.
+2 moreshow less
Enables virtual scrolling in the notes tree for improved performance with large note collections.
Disables the browsable API by default to reduce attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The browsable API is now disabled by default; any workflow or tooling that relied on browser-based API exploration will stop working unless it is explicitly re-enabled.
Cloudflare is a connectivity cloud platform delivering internet security, performance, and developer infrastructure services.
Cloudflare Gateway Protocol Detection (Beta) adds IMAP, POP3, SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure., MYSQL, RSYNC-DAEMON, LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., and NTP support.
Adds IMAP detection for Gateway Protocol Detection to identify email retrieval traffic
Adds POP3 detection for Gateway Protocol Detection to identify email retrieval traffic
Adds SMTP detection for Gateway Protocol Detection to identify email sending traffic
Adds MYSQL detection for Gateway Protocol Detection to identify database wire protocol traffic
Adds RSYNC-DAEMON detection for Gateway Protocol Detection to identify rsync daemon protocol traffic
+2 moreshow less
Adds LDAP detection for Gateway Protocol Detection to identify Lightweight Directory Access Protocol traffic
Adds NTP detection for Gateway Protocol Detection to identify Network Time Protocol traffic
7 details in Everything
50 more releases in this issue51 more releases in this issue · 2026-02-02 → 2026-02-27
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server portals now support exporting activity logs to SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. via Logpush
Adds Logpush integration for MCP server portal activity logs
Cloudflare Radar adds Post-QuantumPost-QuantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. API endpoints and Key Transparency dashboard for monitoring encrypted messaging logs.
Adds GET /post_quantum/tls/support endpoint to test host post-quantum TLS key exchange support
Adds GET /post_quantum/origin/summary/{dimension} endpoint to return origin PQ data by key agreement algorithm
Adds GET /post_quantum/origin/timeseries_groups/{dimension} endpoint to return PQ timeseries data grouped by algorithm
Adds Key Transparency section and Key Transparency Auditor API for monitoring WhatsApp and Facebook Messenger Transport logs
Wrangler 4.68.0 GA autoconfig allows wrangler deploy without a pre-existing config file
wrangler deploy now automatically detects the framework from package.json, installs required adapters, and generates a wrangler.jsonc file when none exists
Cloudflare Workers Observability gains a new structured query language enabling precise filtering of logs and traces via both text-based queries and a visual Query Builder.
New RPKI ASPA deployment insights and API on Cloudflare Radar.
Adds /bgp/rpki/aspa/snapshot, /bgp/rpki/aspa/changes, and /bgp/rpki/aspa/timeseries API endpoints to retrieve ASPA objects, changes, and counts.
Adds ASPA deployment trend widget on the global routing page counting daily ASPA objects.
Adds searchable recent ASPA objects by ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. or AS name on the global routing page.
Adds ASPA deployment rate widget for countries/regions on country and region routing pages.
Adds checkmarks for ASPA-verified upstreams, a dedicated upstream table, and daily timeline on AS routing pages.
Cloudflare Agents SDK v0.6.0 adds RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. transport for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., optional OAuth, and schema converter hardening
Adds addMcpServer support for passing a Durable Object namespace as the second parameter to connect an Agent to an McpAgent over RPC
Makes OAuth optional for MCP connections by allowing addMcpServer to work without a callbackHost when authentication is not required
Hardens the schema converter used by generateTypes() and getAITools() with support for tuple types, $ref resolution, and per-tool error isolation
Cloudflare Pipelines adds typed bindings via wrangler types, dropped event metrics dashboard/GraphQL API, and simplified setup command.
└──▷ TRY IT
Generate TypeScript types for your stream to catch schema mismatches before deployment.
$ wrangler types
wrangler pipelines setup command with Simple mode automatically creates the R2 bucket, enables R2 Data Catalog, and applies recommended defaults for stream ingestion.
wrangler types generates schema-specific TypeScript types for Pipeline bindings, allowing compile-time validation of fields like user_id or amount via interfaces such as EcommerceStreamRecord.
New pipelinesUserErrorsAdaptiveGroups GraphQL dataset and queryable metrics surface dropped events with error types (missing_field, type_mismatch, etc.) to identify root causes.
WARP for Windows GA with NetBIOS control and multi-user registration fixes
Adds support for managing NetBIOS over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./IP functionality on the Windows client via device profile settings
@cloudflare/codemode v0.1.0 introduces a modular SDK with createCodeTool(), Executor interface, and DynamicWorkerExecutor for runtime-agnostic code execution.
Exports createCodeTool() from the new import path @cloudflare/codemode/ai to return a standard AI SDK Tool for use in agents.
Adds the Executor interface with an execute(code, fns) contract, allowing implementation of any code sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. primitive.
Introduces DynamicWorkerExecutor to run generated code in a Dynamic Worker Loader, defaulting to network isolation where fetch() and connect() are blocked (globalOutbound: null).
Configures execution timeout via the timeout option on DynamicWorkerExecutor, with a default of 30s.
Captures console output by returning console.log/warn/error data in ExecuteResult.logs.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes the experimental_codemode() function and CodeModeProxy class, as the package no longer manages LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. calls or model choice.
!Changes the import path for createCodeTool(), which must now be imported from @cloudflare/codemode/ai instead of the previous location.
Adds AI-generated Cloudy Summaries to CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. Posture Findings for instant risk context and remediation guidance
Integrates Cloudflare's Cloudy AI into CASB Posture Findings to generate plain-language summaries of security misconfigurations, third-party app risks, and data exposures
Adds cfWorker metric to Server-Timing header for precise Worker execution time debugging
Server-Timing header now includes a cfWorker metric that measures time spent executing Cloudflare Workers (including subrequests), excluding origin fetch time
cfWorker metric is enabled by default when Real User Monitoring (RUMRUMReal User Monitoring — a technique that collects performance and behaviour data from actual users' browsers or clients in production, giving cyber tools visibility into real-world latency and errors rather than synthetic test results.) is enabled
Agents SDK v0.5.0 adds this.retry() with per-task config, shouldSendProtocolMessages hook, and @cloudflare/ai-chat v0.1.0
Adds this.retry() method for async operations with exponential backoff, jitter, and optional shouldRetry predicate to control retry logic.
Enables per-task retry configuration via the retry option in schedule(), scheduleEvery(), and addMcpServer() calls, persisted in SQLite alongside the task.
Introduces class-level retry defaults via static options = { retry: { maxAttempts: N } } on Agent subclasses.
Adds shouldSendProtocolMessages(connection, ctx) hook to suppress JSON protocol frames for specific WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. subprotocols (e.g., MQTT clients).
Provides isConnectionProtocolEnabled(connection) utility to check if protocol messages are active for a given connection, persisting across Durable Object hibernation.
+5 moreshow less
Releases @cloudflare/ai-chat v0.1.0 with support for typed JSON data parts (data-*) on messages alongside text content.
Adds tool approval persistence in @cloudflare/ai-chat, surviving page refresh and DO hibernation by streaming to SQLite when a tool enters approval-requested state.
Introduces maxPersistedMessages option in @cloudflare/ai-chat to cap SQLite message storage with automatic oldest-message deletion.
Adds body option on the useAgentChat hook to send custom static or dynamic data with every request.
Synchronizes getQueue(), getQueues(), getSchedule(), dequeue(), dequeueAll(), and dequeueAllByCallback() to return values directly instead of Promises, while remaining backward compatible with existing await calls.
Assign Access policies to bookmark applications to control App Launcher visibility
Adds Access policy support to bookmark applications, allowing visibility control in the App Launcher based on identity and device posture.
Bookmarks now respect standard Access policy configurations for filtering user access, excluding purpose justification, temporary authentication, and application isolation.
Workers VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. now supports Cloudflare Origin CA certificates for private service connections
Workers AI adds GLM-4.7-Flash model, @cloudflare/tanstack-ai package for TanStack AI adapters, and transcription/speech/rerankingrerankingA model that re-scores a first batch of search results against the query and reorders them, more accurately than the fast first-stage search. to workers-ai-provider v3.1.1.
Adds GLM-4.7-Flash (model ID @cf/zai-org/glm-4.7-flash) with 131,072 token context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. and multi-turn tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. to Workers AI
Introduces new @cloudflare/tanstack-ai npm package for TanStack AI adapters supporting Workers AI and AI Gateway
Adds transcription (provider.transcription), text-to-speech (provider.speech), and reranking (provider.reranking) capabilities to workers-ai-provider v3.1.1
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Deprecated createAutoRAG is replaced by createAISearch as the canonical export in workers-ai-provider v3.1.1 (though still functional with warning)
Cloudflare WAN dashboard now displays Anycast IPs for IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications./GREGREA tunneling protocol that wraps one network packet inside another, letting tools carry arbitrary traffic across IP networks without modifying the payload, useful for traffic capture and network emulation. tunnels
Anycast IP addresses are displayed directly in the Cloudflare WAN dashboard tunnel configuration form
Cloudflare One Appliance v2026.2.0 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. encryption support using hybrid ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake.
Adds post-quantum encryption support for Cloudflare One Appliance connections to the Cloudflare edge.
Enables hybrid ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism) in TLS 1.3 handshakes between appliance and edge.
Sandbox SDK adds sandbox.terminal() and @cloudflare/sandbox/xterm for interactive browser-based terminals with PTY support.
Adds the sandbox.terminal(request) method to proxy a WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. upgrade to the container's PTY endpoint, supporting cols and rows configuration for terminal dimensions.
Agents SDK v0.4.0 adds readonly connection hooks, custom MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. providers, and x402x402A proposed HTTP payment protocol revival using status code 402, enabling machine-to-machine micropayments over HTTP so cyber tools can gate API access or resources behind automated, per-request cryptocurrency payments. v2 support.
Adds shouldConnectionBeReadonly, setConnectionReadonly, and isConnectionReadonly hooks to restrict WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. clients to read-only access
Adds createMcpOAuthProvider method on the Agent class to enable custom OAuth providers for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections
Adds callbackPath option to addMcpServer to prevent instance name leakage in MCP OAuth callback URLs
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Deprecates onStateUpdate in favor of onStateChanged (drop-in rename)
!Migration from x402 package to @x402/core and @x402/evm v2 packages
!Updates PaymentRequirements type fields (e.g., maxAmountRequired to amount)
!Changes X402ClientConfig.account type from viem.Account to ClientEvmSigner
New Cloudflare Workers reference docs for AI Crawl Control with GraphQL API, Bot reference, and x402x402A proposed HTTP payment protocol revival using status code 402, enabling machine-to-machine micropayments over HTTP so cyber tools can gate API access or resources behind automated, per-request cryptocurrency payments. Payment-Gated Proxy template.
Adds GraphQL API reference for querying crawler requests, top paths, referral traffic, and data transfer with filters for detection IDs, user agents, and referrer domains
Adds Bot reference listing detection IDs and user agents for major AI crawlers from OpenAI, Anthropic, Google, Meta, and others
Cloudflare Agents SDK v0.3.7 adds Workflows integration via AgentWorkflow class, synchronous state hooks, and scheduleEvery()
Adds AgentWorkflow class for first-class Cloudflare Workflows integration with durable execution steps
Introduces validateStateChange() hook for synchronous state management in agents
Adds scheduleEvery() method for fixed-interval recurring tasks with overlap prevention
Adds runWorkflow(), getWorkflow(), getWorkflows(), approveWorkflow(), rejectWorkflow(), pauseWorkflow(), resumeWorkflow(), and terminateWorkflow() methods to the Agent class
Exposes getCallableMethods() introspection API to discover callable methods
+3 moreshow less
Adds streamingResponse.error() method for graceful stream error signaling
Enables HMAC-SHA256HMAC-SHA256A keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. signed headers for secure email reply routing
Adds basePath option to bypass default URL construction in agent client configuration
Cloudflare Python SDK v5.0.0-beta.1 adds AI search, fraud detection, Radar data, R2 Data Catalog, and new CloudForce One endpoints.
Adds ai.tomarkdown resource for AI-powered markdown conversion
Adds aisearch, aisearch.instances, and aisearch.tokens resources for AI-powered search functionality and instance management
Adds fraud resource for fraud detection and prevention
Adds radar.bots, radar.ct, and radar.geolocations resources for Radar bot analytics, certificate transparency data, and geolocation data
Adds r2datacatalog, r2datacatalog.credentials, r2datacatalog.maintenanceconfigs, and r2datacatalog.namespaces resources for R2 Data Catalog integration
+4 moreshow less
Adds cloudforceone.threatevents resource with new contentscanning() method
Adds dns.records resource methods scan_list(), scan_review(), and scan_trigger()
Adds radar.ai resource with summary(), timeseries(), and timeseries_groups() methods
Adds organizations.organizationprofile resource for organization profile settings
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The abusereports, acm.totaltls, apigateway.configurations, cloudforceone.threatevents, d1.database, intel.indicatorfeeds, logpush.edge, origintlsclientauth.hostnames, queues.consumers, radar.bgp, rulesets.rules, schemavalidation.schemas, snippets, and zerotrust.dlp resources have breaking changes
!The zerotrust.networks resource has breaking changes
DockSec v2026.2.23 adds multi-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider support including OpenAI, Anthropic, Google, and Ollama
└──▷ GET THIS VERSION
$ git clone --branch v2026.2.23 https://github.com/OWASP/DockSec.git
# already have the repo? check out this version:$ git checkout v2026.2.23
THE CYBER TOOLCHAIN