The Cyber Toolchain — issue 012, July 11, 2026

Dex to Java decompiler

jadx v1.5.6 adds graph views with code pane sync, a call graph library, and resource tree improvements.

$ git clone --branch v1.5.6 https://github.com/skylot/jadx.git
# already have the repo? check out this version:
$ git checkout v1.5.6

6 details in Everything

Cloudflare Blog is an official publication sharing updates, technical insights, and announcements about Cloudflare's internet security, performance, and networking products and services.

Cloudflare Smart Tiered Cache now supports cloud region hints for AWS, GCP, Azure, and Oracle Cloud anycast origins.

⤢ ⤢ ⤢ ⤢

5 details in Everything

Define and run multi-container applications with Docker

Docker Compose v5.3.0 adds native support for pre-start init containers.

$ git clone --branch v5.3.0 https://github.com/docker/compose.git
# already have the repo? check out this version:
$ git checkout v5.3.0

services:
  app:
    image: myapp:latest
    depends_on:
      init-migrate:
        condition: service_completed_successfully
  init-migrate:
    image: myapp:latest
    command: ["python", "manage.py", "migrate"]
    x-init: true

1 detail in Everything

$ git clone --branch v5.2.0 https://github.com/docker/compose.git
# already have the repo? check out this version:
$ git checkout v5.2.0

Docker Sandboxes v0.35.0 adds SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, policy inspection/check commands, secret import, and a daemon management CLI.

$ git clone --branch v0.35.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:
$ git checkout v0.35.0

$ sbx policy check network --host api.example.com --port 443

$ DOCKER_SANDBOXES_PROXY=socks5://proxyuser:proxypass@proxy.corp.example.com:1080 DOCKER_SANDBOXES_NO_PROXY=localhost,127.0.0.1 sbx run

$ sbx secret import

15 details in Everything

$ git clone --branch v0.34.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:
$ git checkout v0.34.0

$ sbx settings set feature.ssh true

$ ssh <sandbox-name>@127.0.0.1 -p 2222

$ sbx settings set kit.allowedSources ghcr.io/myorg/

$ git clone --branch v0.33.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:
$ git checkout v0.33.0

$ sbx run --name feature-a claude && sbx run --name feature-b claude

$ sbx run --name feature-a

$ sbx secret set-custom --host '*.internal.corp' --host '**.api.internal.corp' MY_API_TOKEN

Microsoft Sysinternals is a suite of advanced Windows system utilities for troubleshooting, monitoring, and diagnosing operating system internals, processes, and security issues.

LiveKd 5.65 restricts dump file access to admins; ZoomIt 11.11 adds JPEG and WEBP snip format support.

2 details in Everything

Granular, Actionable Adversary Emulation for the Cloud

Stratus Red Team v2.34.0 adds Azure App Service credential harvesting, a controllable logger API, and a threat-intel coverage mapping skill.

$ git clone --branch v2.34.0 https://github.com/DataDog/stratus-red-team.git
# already have the repo? check out this version:
$ git checkout v2.34.0

import (
    "log/slog"
    stratuslog "github.com/datadog/stratus-red-team/v2/pkg/stratus/log"
    "go.uber.org/zap"
    "go.uber.org/zap/exp/zapslog"
)

func init() {
    zapLogger, _ := zap.NewProduction()
    handler := zapslog.NewHandler(zapLogger.Core(), zapslog.WithCaller(false))
    stratuslog.SetLogger(slog.New(handler))
}

3 details in Everything

Vanta June 2026 adds audit commenting, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. expansion, AIUC-1 pilot, CrowdStrike CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps., Twilio integration, and 20 new privacy MCP tools.

12 details in Everything

LogicGate Spring 2026 introduces seven AI Workflow Agents, AI Governance module, expanded Spark AI, and enterprise-wide search across GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. use cases.

8 details in Everything

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Auto mode goes GA on Bedrock/Vertex/Foundry, Opus 4.8 becomes the default, and plugin config scoping tightens.

$ git clone --branch v2.1.207 https://github.com/anthropics/claude-code.git
# already have the repo? check out this version:
$ git checkout v2.1.207

# In ~/.claude/settings.json
{
  "disableAutoMode": true
}

# Move autoMode from .claude/settings.local.json to ~/.claude/settings.json
{
  "autoMode": "auto"
}

# Before (now rejected):
# command: "my-hook --token ${user_config.api_token}"

# After — exec form with env var:
{
  "args": ["my-hook", "--token"],
  "env": { "TOKEN": "$CLAUDE_PLUGIN_OPTION_API_TOKEN" }
}

7 details in Everything

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

Pi v0.80.6 adds a max thinking level for GPT-5.6/Claude and input-token pricing tiers for long-context cost accounting.

$ git clone --branch v0.80.6 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.6

$ pi --thinking max 'Audit this codebase for insecure deserialization patterns and propose fixes'

3 details in Everything

$ git clone --branch v0.80.3 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.3

// In settings.json
{ "externalEditor": "vim" }

// In settings.json
{ "outputPad": 4 }

$ git clone --branch v0.80.0 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.0

$ git clone --branch v0.79.10 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.79.10

// In your extension handler:
extension.on('session_before_compact', ({ reason, willRetry }) => {
  if (reason === 'overflow' && willRetry) {
    // overflow retry: use a lighter summary to reduce token cost
  } else if (reason === 'manual') {
    // user-initiated /compact: run full archival summary
  }
});

$ git clone --branch v0.79.9 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.79.9

$ git clone --branch v0.79.8 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.79.8

$ git clone --branch v0.79.7 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.79.7

$ pi update --all

Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

GCP Vertex provider gains new Claude models and a free-form model ID entry field.

$ git clone --branch v4.0.8 https://github.com/cline/cline.git
# already have the repo? check out this version:
$ git checkout v4.0.8

2 details in Everything

OpenHands: AI-Driven Development

OpenHands 1.46 adds configurable BYOR key alias patterns and enriched final archive manifests.

$ git clone --branch cloud-1.46.0 https://github.com/OpenHands/OpenHands.git
# already have the repo? check out this version:
$ git checkout cloud-1.46.0

2 details in Everything

Cursor is an AI-powered code editor that helps developers write, edit, and debug code faster using integrated large language model assistance.

Cursor adds side chats, agent transcript search, new cloud agent hooks, and redesigned project/repo pickers.

⤢

9 details in Everything

Windsurf is an AI-powered code editor that helps developers write, edit, and navigate code faster using intelligent autocomplete and agentic AI assistance.

{
  "sandbox": {
    "excluded": {
      "deny": ["run-secret-scan.sh"],
      "allow": ["git", "make test"]
    }
  }
}

$ /usage

{
  "attribution": false
}

Build resilient agents.

LangGraph CLI now supports prebuild images for langgraph deploy.

$ git clone --branch cli==0.4.31 https://github.com/langchain-ai/langgraph.git
# already have the repo? check out this version:
$ git checkout cli==0.4.31