The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Strix v1.2.0 adds recon asset-discovery skill, AD/KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. testing, Docker resource limits, shared-network port resolution, and a local run viewer with email reports.
└──▷ GET THIS VERSION
$ git clone --branch v1.2.0 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v1.2.0
Adds a recon asset-discovery skill for automated attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. enumeration.
Adds an Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. / Kerberos domain testing skill for enterprise network assessments.
Adds a Grafana/Prometheus observability pivot skill to identify exposed monitoring infrastructure.
Enables opt-in resource limits (CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware./memory) for Docker sandbox containers to cap agent resource usage.
Introduces a local run viewer with email report delivery, run history, and access to the full platform suite.
Promptfoo is an open-source tool for testing, evaluating, and red-teaming LLM applications to detect vulnerabilities, improve reliability, and compare model outputs.
Promptfoo snapshot-20260722 adds adaptive rate limiting, Transformers.js local inference, telecom red team plugins, and video generation providers.
└──▷ TRY IT
View Promptfoo service logs directly from the CLI without navigating the filesystem.
$ promptfoo logs
Load multiple environment files (e.g., shared secrets plus environment-specific overrides) in a single eval run.
Adds Transformers.js provider to run Hugging Face models locally in Node.js or the browser.
Adds Vercel AI Gateway and Cloudflare AI Gateway providers for request routing.
Adds AWS Bedrock Video (Nova Reel and Luma Ray 2) and Azure AI Foundry Video (Sora) providers for video generation.
Adds native session endpoint support to the HTTP provider for stateful conversations.
Adds apiBaseUrl, websocketUrl override, and function call support to the xAI Voice provider.
+20 moreshow less
New word-count assertion type for validating response word counts.
Adds __count variable for use in derived metrics to compute averages.
New provider config hover in eval results to view provider configuration details.
Surfaces metadata.sessionId as a variable column in tables and exports.
New user-rated filter to show only manually rated eval results.
New promptfoo logs command for viewing log files directly.
Adds adaptive rate limit scheduler that automatically adjusts concurrency based on provider rate limits and response headers.
Enables test-level prompts and providers filtering per individual test case.
Supports per-test structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. configuration at the test case level.
Supports $VAR syntax for environment variables in file paths.
Supports multiple --env-file flags to load multiple environment files.
Adds fork PR support and comment-triggered scans to Code Scanning.
Adds --share and --no-share auto-sharing flags to Model Audit.
New Telecom red team plugin for telecommunications AI systems.
New RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. Source Attribution plugin to test whether RAG systems properly attribute sources.
Red team scans now support multiple input variables for complex input structures.
Adds numTests config to cap test cases generated per strategy.
Adds -d/--description flag to redteam generate commands.
Adds automatic retries for transient 5xx errors in Enterprise.
The -j flag now propagates to Python worker pools for improved concurrency.
StepSecurity is a platform that secures CI/CD pipelines by detecting and preventing supply chain attacks, hardening GitHub Actions workflows, and monitoring runtime behavior.
StepSecurity Workflow Run Policies gain allow-list enforcement, container blocking, bulk-secret detection, and richer per-run evaluation visibility.
└──▷ HOW TO FIND IT
Block bulk secret harvesting (e.g. toJSON(secrets)) across all branches while allowing normal targeted secret access — configure in the Secret Exfiltration Policy.
📍In the StepSecurity console, go to Workflow Run Policies › Secret Exfiltration Policy, enable 'Block only when a workflow accesses all secrets at once' (recommended), then enable Analyze default branch runs to extend coverage to the default branch.
Restrict CI jobs to an approved set of runner labels and RunsOn structured constraints, preventing use of arbitrary or untrusted runner configurations.
📍In the StepSecurity console, go to Workflow Run Policies › Runner Label Policy and switch to Allowed labels & constraints mode. Add the permitted labels and structured runs-on keys (e.g. family, cpu, image) to the allow list; each configured dimension is enforced independently.
Ensure every targeted job sources its runtime policy from the StepSecurity policy store, preventing jobs from bypassing centrally managed policies.
📍In the StepSecurity console, go to Workflow Run Policies › Harden-Runner Policy and enable Require policy store. Targeted jobs must then include use-policy-store: true on their Harden-Runner step or the run will be blocked.
Adds Currently known compromised actions display in the Compromised Actions Policy editor, showing affected versions, with the list snapshotted per evaluation for auditability.
New 'Block only when a workflow accesses all secrets at once' mode in Secret Exfiltration Policy blocks bulk patterns like ${{ toJSON(secrets) }} while allowing targeted references, reducing false positives.
New Analyze default branch runs option in Secret Exfiltration Policy extends coverage to the default branch.
Secret Exfiltration violation details now include the specific secret reference and its line number in the workflow file.
New Allowed labels & constraints allow-list mode in Runner Label Policy enforces that only configured labels and constraint values may be used, with each dimension enforced independently.
+7 moreshow less
Runner Label Policy now supports structured runs-on keys (family, cpu, image, ami, volume, etc.) for third-party runner providers such as RunsOn.
New Require policy store option in Harden-Runner Policy enforces that targeted jobs set use-policy-store: true on their Harden-Runner step.
New Block jobs running in a container option in Harden-Runner Policy blocks jobs with a job-level container: on GitHub-hosted standard runners where outbound monitoring is unavailable.
Adds customizable PR Comment Template per policy with placeholders including {{policy_name}}, {{policy_details}}, {{remediation}}, and {{docs_url}}.
Policy Evaluations page now shows evaluation status (Allowed, DryRunBlocked, or Blocked), per-policy violation breakdown, related PR link, and run policy timing metrics from webhook receipt through cancellation.
Workflow run insights now include a Workflow Run Policy Evaluation section on the Summary tab covering blocked, allowed, and no-policy states, including for cancelled runs.
Network Events tab in Harden-Runner insights now shows the number of suppression rules applied per job and a View suppression rules link for auditing missed detections.
12 details in Everything
1 more release in this issue
· 2026-07-17 → 2026-07-21
Dev Machine Guard adds fleet-wide AI agent skills inventory with executable content flagging and provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. tracking.
└──▷ HOW TO FIND IT
Review which AI agent skills on your fleet ship executable content or lifecycle hooks before they run on a developer's machine.
📍In the Dev Machine Guard console, go to Agent Skills, then filter by Flags → hooks or shell to see every skill that registers lifecycle hooks or injects shell commands, and drill into per-device installation details.
Spot developer machines running locally edited or outdated skill copies that differ from the rest of the fleet.
📍In the Dev Machine Guard console, go to Agent Skills and look for skills highlighted under version drift detection (SKILL.md content hash mismatch), then use Export CSV to capture the full list for remediation tracking.
New Agent Skills page in the Dev Machine Guard dashboard inventories every AI agent skill (Claude Code, Codex, GitHub Copilot) detected across your fleet, with per-device installation details and scope (Global, Project, or System).
Flags skills that contain executable script files, declare lifecycle hooks, or inject shell commands that run with developer privileges — surfacing supply chain risk from AI coding agent skill folders.
Traces provenance of skills installed via the skills.sh CLI back to their source GitHub repository, plugin, and upstream folder hash; standalone skills are marked as authored on device.
Detects version drift by comparing SKILL.md content hashes across devices and highlights skills that differ between machines.
Supports filtering by source (skills.sh managed or local), agent, scope, and executable-content flags, plus full inventory export as CSV.
Veracode is a cloud-based application security platform that helps developers identify and remediate vulnerabilities in their code through static, dynamic, and software composition analysis.
Veracode Static Analysis July 2026 engine adds Android 17, .NET 10 enhancements, Python httplib SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. detection, and pnpm module support.
Adds support for Android 17 in the static analysis engine.
Enhances support for .NET 10, including improved analysis of applications using Saturn.dll.
Adds support for Python httplib to detect CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-295 and CWE-297 (SSL/TLS certificate validation) flaws.
Expands pnpm module support to improve JavaScript dependency resolution.
Improves detection of CWE-80 flaws in React Native (JavaScript) applications.
+3 moreshow less
Expands third-party library detection for Java to include Fluxnova.
Improves JSP and JSF Expression Language modeling using more complete POJO data, potentially surfacing additional valid findings.
Improves scan accuracy for code generated by Project Lombok (Java).
GitGuardian Detection Engine scans code repositories and developer environments to automatically detect secrets, credentials, and sensitive data exposures in real time.
GitGuardian v2.167 adds 11 new secret detectors spanning Azure, AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. platforms, and developer tools, plus expanded validity checking.
New detector for LiteLLM API Key (without host capture).
New detector for Azure SQL Credentials (Assignment).
New detector for Azure Machine Learning keys.
New detector for Azure Video Indexer keys.
New detector for Apify Proxy Token.
+11 moreshow less
New detector for Alibaba Cloud Model Studio / DashScope (Qwen) signed workspace API keys.
New detector for Authress Service Client Access Key.
New detectors for Gemfury Deploy/Push Token and Full Access Token (both without username).
New detector for Azure Health Insights keys.
New detector for Azure Fluid Relay keys.
New validity checker for LiteLLM API Key Without Host, with custom host support.
New validity checker for Llama Cloud API Key.
New validity checker for New Relic APMAPMApplication Performance Monitoring — a category of software that collects metrics, traces, and logs from running applications so developers can detect slowdowns and diagnose their root cause. License Key.
New validity checkers for npm Token and npm Token (prefixed variant).
Improved recall for Datadog API Key and Snyk Key detectors.
Precision improvement for Okta Token with Host: generic Okta domains (e.g. login.okta.com) are now excluded from host capture.
Capstone 6.0.0-Alpha10 adds AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. explicit wide-immediate printing, RISC-V FP rounding mode details, and a RISC-V v5 compat macro.
└──▷ GET THIS VERSION
$ git clone --branch 6.0.0-Alpha10 https://github.com/capstone-engine/capstone.git
# already have the repo? check out this version:$ git checkout 6.0.0-Alpha10
└──▷ USE IT
Maintain a single codebase that builds against both Capstone v5 and v6 RISC-V headers without renaming CS_MODE_RISCVC.
c
#define CAPSTONE_RISCV_COMPAT_HEADER
#include <capstone/capstone.h>
// CS_MODE_RISCVC now works as an alias for CS_MODE_RISCV_C
cs_open(CS_ARCH_RISCV, CS_MODE_RISCV32 | CS_MODE_RISCVC, &handle);
Adds CS_OPT_SYNTAX_AARCH64_EXPLICIT_WIDE_IMM flag to print MOVN/MOVZ instructions in explicit shifted form instead of MOV aliases.
RISC-V instruction details now expose the FP rounding mode via cs_riscv.rounding_mode.
New CAPSTONE_RISCV_COMPAT_HEADER define restores the CS_MODE_RISCVC alias for codebases targeting the v5 API.
Adds ColdFire EMAC_B dual-accumulator MAC support to the M68K module.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Alpha architecture enum names are renamed from Alpha_-prefixed mixed-case to ALPHA_-prefixed uppercase (e.g., Alpha_REG_Foo → ALPHA_REG_FOO); any code referencing the old names will fail to compile.
!CS_MODE_RISCVC was renamed to CS_MODE_RISCV_C; builds not using the new CAPSTONE_RISCV_COMPAT_HEADER workaround will break.
!aarch64_op_mem.disp changed from int32_t to int64_t; code that stores or passes this field as a 32-bit integer may break.
Vectra AI is a cybersecurity platform that uses AI-driven threat detection and response to identify and prioritize attacks across hybrid cloud, network, and identity environments.
Vectra AI v9.13 expands detections for Windows post-exploitation, HTTP attack tools, covert tunneling, and credential/data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. techniques.
New detections for SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments.-based lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access., malicious named pipe activity, and Cobalt Strike SMB beaconing across Windows environments.
Expanded HTTP-based behavioral signatures covering malicious file downloads/uploads, certificate abuse, and offensive framework activity using trusted Windows utilities.
New detection coverage for web-based tunnels, public tunneling services, and custom BackConnect protocols used to bypass perimeter controls.
New detections for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Certificate Services abuse, suspicious AD database file transfers, and cloud storage exfiltration via sync tools.
Vectra AI v9.13 expands ERSPANERSPANA Cisco-originated GRE-based tunneling protocol that encapsulates mirrored network traffic and ships it across Layer 3 to a remote capture point, letting cyber tools analyze traffic from distant segments without local tap hardware. support to 8-core+ virtual Sensors and 16 IPs per capture interface.
Supports 8-core and higher virtual Sensors for ERSPAN-based monitoring deployments.
Supports up to 16 IPs per capture interface in ERSPAN environments.
Increases processing efficiency for encapsulated traffic workloads in ERSPAN deployments.
Rspamd 4.1.2 adds per-symbol Lua composites, a static embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. Neural provider, new Settings policies, and external Rspamadm command discovery.
└──▷ GET THIS VERSION
$ git clone --branch 4.1.2 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:$ git checkout 4.1.2
└──▷ USE IT
Prevent automatic Neural network updates while still allowing manual forced-learn during a model evaluation period.
ini
neural {
train {
frozen = true;
}
}
Load Rspamadm command modules from a custom directory to deploy organisation-specific admin tooling without modifying core config.
Adds per-symbol Lua conditions and explicit dependencies in Composites rules.
Adds static_embed Neural provider with a WordPiece subword tokenizer over a static embedding matrix and per-token vector access.
Adds Neural train.frozen control to halt automatic training and a forced-learn minimal-scan fast path.
Adds implicit_allow policy option in Settings apply with additive symbols_enabled, plus strict explicit_enable gating.
Enables discovery of Rspamadm command modules from external directories via rspamadm.d or RSPAMADM_COMMAND_PATH.
+3 moreshow less
Allows the Rspamd controller password to be read from the environment for automation use cases.
Adds symcache flag display to configdump --symbol-details.
Migrates all WebUI tables from FooTable to Tabulator, enabling per-column filters and global history/scan search.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!In lua_task, the orig address flavour now returns only the wire (transmitted) addresses when a rewrite preserved the originals — code expecting rewritten addresses under orig will receive different values.
!WebUI: FooTable has been removed and all tables are now Tabulator-based; any customizations or integrations targeting FooTable will break.
!Maps: glob map patterns are now anchored to match the whole subject; entries relying on substring matching must be updated to use explicit wildcards or they will stop matching.
Fastly is a cloud edge platform that accelerates, secures, and delivers websites, apps, and APIs by caching content closer to users globally.
Fastly adds virtual patch for WordPress RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. chain CVE-2026-63030/CVE-2026-60137 (wp2shell) in WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. and control panel.
└──▷ HOW TO FIND IT
Enable the wp2shell virtual patch via the Fastly control panel to immediately protect WordPress services from the RCE chain.
📍In the Fastly control panel, go to Virtual Patches › search for CVE-2026-63030 › click the pencil icon › set Status to Enabled › (optional) choose Block requests or Log requests › click Update virtual patch.
Enable the wp2shell templated rule in the Next-Gen WAF control panel to block and alert on CVE-2026-63030 signals.
📍In the Next-Gen WAF control panel, go to Rules › Templated Rules › search CVE-2026-63030 › click View › Configure › Add trigger › select 'Block requests from an IP immediately if the CVE-2026-63030 signal is observed' › Update rule. Then go to the Signals tab › search CVE-2026-63030 › View › Detections tab › Add detection (Enabled) › Create detection. Then go to the Alerts tab › Add alert › set Status to Enabled › Save alert.
Wiz Defend is a cloud detection and response platform that identifies, investigates, and remediates real-time threats across cloud environments.
Wiz Agentless Workload Detection gains EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device.-like visibility into FortiGate appliances, Redis, npm supply chain, and more virtual appliance threats.
└──▷ HOW TO FIND IT
Hunt for rogue admin account creation on FortiGate devices during active CVE-2026-24858 exploitation — search the Cloud Event page for admin accounts named helpdesk.
📍In the Wiz console, go to Cloud Events and run the pre-built query to search for creation of an admin named helpdesk on FortiGate devices.
Detect dangerously permissive FortiGate admin accounts (trusthost 0.0.0.0/0) that allow management access from any IP — a key persistence indicator in documented FortiGate campaigns.
📍In the Wiz console, go to Cloud Events and run the pre-built event query to search for creation of admin accounts with trusthost set to 0.0.0.0/0 on FortiGate devices.
Extends Agentless Workload Detection to FortiGate firewalls, collecting and parsing local FortiOS logs not typically streamed to expose attacker activity including super-user account creation and configuration theft.
Adds Cloud Event page visibility for FortiGate authentication logs, enabling real-time monitoring of login activity and admin account changes for agentless EDR customers.
Adds built-in threat detection rules for Redis replication abuse: Redis suspicious replication target configured, Redis module loaded from unusual path, and Attack Detected and Prevented by Redis.
Enables agentless monitoring of npm package installation logs to detect supply chain compromises such as malicious versions of @asyncapi/specs in real time.
Provides agentless visibility into HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. access logs (Nginx, Apache, IIS) to detect webshell deployments, unusual executable access, and exploitation of hosted applications such as WordPress via wp2shell.
+4 moreshow less
Adds detection coverage for PAN-OS CVE-2026-0257 and CVE-2026-0300 exploitation patterns observed in the wild via agentless log ingestion.
Adds detection for BeyondTrust Remote Support CVE-2026-1731 (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 9.9 pre-auth RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives.) observed in active exploitation.
Adds detection for MongoBleed (CVE-2025-14847), an unauthenticated MongoDB memory leak exploited in the wild, with real-time customer alerting via agentless visibility.
Correlates Agentless Workload events with Wiz ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. findings to surface threats like Zabbix instances running from unusual paths with default credentials.
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
Watcher v3.5.2 adds a Connectors dashboard for centralizing integrations, Fernet-encrypted credentials, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. auto-provisioning control.
└──▷ GET THIS VERSION
$ git clone --branch v3.5.2 https://github.com/thalesgroup-cert/Watcher.git
# already have the repo? check out this version:$ git checkout v3.5.2
└──▷ TRY IT
Prevent SSO from auto-creating accounts for unknown users — only pre-approved admin-created accounts can log in via OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user..
$ OIDC_CREATE_USER=False
Verify all external integrations are reachable after a network change, without waiting for the Monday scheduled job.
📍Navigate to /connectors (as superuser), then click Test next to each connector to see Healthy / Unhealthy status in real time.
New /connectors dashboard (superuser only) centralizes configuration, live overrides, and health-check testing for all external integrations (SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure., Slack, TheHive, MISP, LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., OIDC, MISP, CertStreamCertStreamA real-time feed of SSL/TLS certificates logged to Certificate Transparency logs, maintained by Calidog Security, giving cyber tools instant visibility into newly issued certificates for domain monitoring or phishing detection., SearxNG, CyberWatch, WIPO UDRP, MySQL).
Per-connector live connectivity tests report Healthy / Unhealthy / Not tested yet status alongside Configured / Incomplete / Disabled state.
Scheduled job automatically tests every connector each Monday at 06:00 and raises a Pending Action alert only for configured connectors that fail, without duplicating alerts on repeated failures.
Sensitive connector fields (passwords, tokens, API keys) are now encrypted at rest with Fernet; existing stored values are re-encrypted automatically on migration.
New OIDC_CREATE_USER setting lets admins restrict SSO login to pre-existing accounts, disabling auto-provisioning of new users on first login.
+3 moreshow less
Added Server banner / X-Powered-By monitoring as a connector-backed check.
Added connectors/contrib/_template scaffold to accelerate building new connectors.
Quick-pick shortcut buttons (1 month / 3 months / 6 months / 1 year) added to Expiry Date, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. Expiry Date, and End of Monitoring date pickers.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!This release includes database schema changes — run python manage.py migrate after updating or connector credential storage and new settings will not function correctly.
OpenCTI 7.260722.0 adds a faceted connector marketplace, workflow reset, webhook deny-lists, admin-forced password changes, and auto-reloading public dashboards.
└──▷ GET THIS VERSION
$ git clone --branch 7.260722.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260722.0
└──▷ HOW TO FIND IT
Block webhooks from calling internal or sensitive URIs by configuring a deny-list at the platform level.
📍In the console, go to Settings › Customization › Webhook and add URIs to the deny list to prevent outbound webhook calls to those destinations.
Force a specific user to reset their password on next login — useful after an account compromise or routine credential rotation.
📍In the console, go to Settings › Security › Users, select the target user, and use the Force password change action.
Enable auto-reload on a public dashboard so external stakeholders always see up-to-date intelligence without manually refreshing.
📍In the console, open a dashboard, go to its settings, and set a refresh_interval value to enable auto-reload for the public link.
Redesigns the connector catalog into a faceted marketplace experience for easier discovery and filtering.
Adds ability to fully reset a workflow to its initial state.
Adds a configurable deny-list of URIs for webhooks to block outbound calls to restricted endpoints.
Enables admins to force a password change for any user account.
Adds auto-reload support for public dashboards so shared views stay current without manual refresh.
+3 moreshow less
Improves CSV export with selectable visible columns, filtering the export to only those columns.
Adds light mode support in the GraphQL playground.
Replaces the legacy HTML editor with the current editor, removing associated feature flags.
Feedly Threat Intelligence is a security tool that aggregates and analyzes threat feeds, helping security teams track emerging threats, vulnerabilities, and adversary activity in real time.
Feedly's Vulnerability Intel Agent now ingests Apple security releases within minutes, with enrichment and filtering by exploitation, product, and patch policy.
└──▷ HOW TO FIND IT
Focus remediation efforts on only the Apple CVEs in your macOS fleet that are already being exploited or have a published PoC.
📍In the Vulnerability Intel Agent, select Latest Apple Security Release as the filter and set the date range. Add filters for exploited and proof of concept. Hide iOS and iPadOS rows using the product-level filter to scope results to macOS only.
Automatically flag Apple CVEs that breach your patch-now SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. thresholds (e.g., CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. ≥ 8 and EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. ≥ 80%) so they can be routed to immediate remediation.
📍In the Vulnerability Intel Agent, select the target Apple security release, then set CVSS threshold filter to ≥ 8 and EPSS threshold filter to ≥ 80%. Deploy the Intel Agent as an alert to get notified when new CVEs matching these thresholds appear in future releases.
Adds Apple security release ingestion to the Vulnerability Intel Agent, with each CVE appearing in the output table within minutes of publication.
Supports filtering CVEs by exploitation activity (exploited, PoC, weaponized, CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal.) to surface the highest-priority items from a release.
Enables product-level filtering so practitioners can scope a release to only the Apple products they actually run (e.g., macOS only).
Supports threshold-based patch policy filters on CVSS score and EPSS probability to automatically surface CVEs that breach SLA triggers.
Adds a Latest Apple Security Release filter option that always points to the most recent Apple advisory.
+1 moreshow less
Supports alert deployment on the Intel Agent to notify when new CVEs from a release match configured filters.
Cribl is an observability pipeline platform that helps organizations collect, process, route, and transform machine data from any source to any destination.
Cribl 4.19 embeds an MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. natively in the Leader, letting AI clients like Claude Code, Cursor, and OpenAI Codex CLI query configs, metrics, and Search Notebooks directly.
└──▷ HOW TO FIND IT
Enable the embedded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server and connect an AI client to your Cribl Leader for the first time.
📍In the Cribl UI, go to Settings › AI Settings and enable MCP Server. Copy the generated bearer token, then add the Cribl MCP endpoint and token to your client configuration (e.g., Claude Code, Cursor, or OpenAI Codex CLI). Restart the client and confirm the Cribl tools appear and the server shows as connected.
Adds a native, embedded MCP Server in the Cribl Leader — no separate container or service required to connect MCP-compatible AI clients.
Supports MCP-compatible clients including Claude Code, Cursor, and the OpenAI Codex CLI via remote HTTP, with no additional proxy to install.
Enables AI clients to retrieve Sources, Destinations, Worker Groups, Pipelines, metrics, and alerts directly from the Cribl environment.
Allows AI clients to connect to Cribl Search to generate and refine queries, retrieve results, and create or update Search Notebooks.
Supports building AI-powered runbooks and security playbooks as Notebooks that combine queries, Markdown summaries, findings, and next steps.
+3 moreshow less
Enables custom agent workflows that can query Cribl, enrich results from other systems, notify teams, and trigger approved actions — combinable with the Cribl SDK.
Enforces existing Cribl RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. and bearer-token authentication for every MCP tool call, with no separate MCP permission model to configure.
Supports Cribl.Cloud, on-premises, and hybrid deployments.
Sumo Logic is a cloud-native platform that collects, analyzes, and visualizes machine data and logs for security, observability, and operational intelligence.
Sumo Logic Monitors now support Searchable Time, letting alerts evaluate logs based on when they became searchable.
Tines is a no-code automation platform that helps security and operations teams build workflows to automate repetitive tasks and incident response processes.
Tines Records now supports a JSON field type for storing structured data alongside other record fields.
Adds a JSON field type to Records, enabling structured data to be stored directly within a record.
Tenzir is an open-source security data pipeline platform that helps teams collect, route, shape, and analyze large-scale security telemetry efficiently.
Tenzir v6.8.0 adds a Splunk search input operator and improves ClickHouse throughput with JSON column support.
New from_splunk operator lets nodes run bounded searches against a Splunk Search Head and emit results as events.
Upgraded to_clickhouse operator re-batches events before insert for higher throughput.
Adds support in to_clickhouse for writing directly into JSON columns.
Nodes now quarantine corrupt or truncated partitions instead of crashing repeatedly, improving resilience.
Trend Vision One is a unified cybersecurity platform that integrates extended detection and response (XDR) across endpoints, networks, email, and cloud environments.
Trend Vision One AI Secure Access can now chain with third-party secure web gateways (e.g., Zscaler, Netskope) for AI-specific inspection.
CrowdStrike is a cybersecurity platform that provides cloud-native endpoint protection, threat intelligence, and real-time detection to defend organizations against cyberattacks and breaches.
CrowdStrike adds detections for SANDWORM_MODE, a multi-stage npm supply chain worm targeting AI coding assistants and LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. toolchains.
Adds indicators-of-attack (IOA) coverage for SANDWORM_MODE, detecting a multi-stage npm supply chain worm that targets AI-augmented CI/CD pipelines including GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure., Cursor, Claude Code, and Windsurf.
Deploys process-tree-ancestry-based detections for Node.js runtime behaviors characteristic of SANDWORM_MODE, including obfuscated loader execution, in-memory payload staging via /dev/shm, and rogue MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server registration.
Extends detection coverage to AI toolchain compromise behaviors: rogue MCP server injection into Claude Desktop, Cursor, VSCode, and Windsurf configuration files, and LLM API key harvesting from environment variables and .env files.
Adds detection for SANDWORM_MODE persistence mechanisms, including malicious git hook injection via ~/.git-templates/hooks/ and manipulation of git config --globalinit.templateDir.
Introduces detection for multi-channel exfiltration behaviors including HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. POST to attacker infrastructure, GitHub private repository mirroring, and DNS tunneling with Base32 encoding and domain generation algorithm fallback.
CrowdStrike Falcon Insight XDR is an extended detection and response platform that unifies endpoint and cross-domain telemetry to detect, investigate, and stop advanced threats.
Falcon Insight XDR adds SANDWORM_MODE detection surfaced in the Endpoint Detections UI.
Qualys VMDR is a cloud-based vulnerability management platform that continuously discovers, assesses, prioritizes, and remediates security vulnerabilities across IT assets.
Qualys VMDR adds QID coverage for Oracle's July 2026 Critical Patch Update across 10+ Oracle products.
Adds QID detections for Oracle July 2026 Critical Patch Update (CPUJUL2026) covering JDeveloper, Java SE, Coherence, VirtualBox, HTTP Server, Solaris 11.4, WebLogic Server, E-Business Suite, and MySQL Server.
Nudge Security discovers and secures all SaaS apps used across an organization, helping IT teams manage shadow IT and enforce security policies through automated nudges.
Nudge Security adds exportable admin audit log capturing OAuth revocations, role changes, and app connect/disconnect events.
└──▷ HOW TO FIND IT
Pull a CSV of all admin actions for a SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. audit or incident investigation.
📍In the console, go to Settings › Audit event, review the log of administrative actions, then click Export to download as CSV.
Nudge Security adds continuously updated inherent and residual risk scores for every SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI vendor, now in open beta.
└──▷ HOW TO FIND IT
Review the full risk breakdown and recommended remediations for a specific app to decide what to fix next.
📍In the Nudge Security console, open your App Inventory, select any SaaS or AI app, then click the Risk tab to view its inherent and residual risk scores, contributing risk factors, and recommended actions ranked by projected residual risk reduction.
Filter your entire app inventory by risk level to quickly surface Critical or High residual-risk vendors across the organization.
📍In the Nudge Security console, go to App Inventory and use the risk score filter to narrow the view to Critical or High residual risk apps.
Adds inherent and residual risk scores for every SaaS and AI vendor, mapped to Low/Medium/High/Critical levels and recalculated automatically as risk factors change.
Surfaces a transparent breakdown of risk drivers: vendor security posture, internal deployment/usage factors (e.g., critical downstream connections, AI agents), and compensating controls.
Provides recommended actions ranked by projected residual risk reduction so teams know what to remediate first.
Scores every discovered app on Day One without requiring vendor cooperation, covering the long tail of shadow IT and AI apps.
Continuously monitors for new risk signals — including new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections and vendor breach disclosures — and updates scores in real time.
+1 moreshow less
Integrates risk scores into the app inventory with filtering support and a dedicated Risk tab on each app overview.
Nudge Security adds automatic business criticality tiers and 27 data-type filters for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI inventory, now in open beta.
└──▷ HOW TO FIND IT
Customize which data types are considered high-sensitivity to align automatic criticality tiers with your organization's governance model.
📍In the console, go to Settings › Risk and adjust the data sensitivity tier assignments to match your organization's data governance model.
Automatically assigns each app a business criticality tier (Low, Medium, High, or Critical) based on inferred data types the vendor typically handles.
Filters SaaS and AI inventory across 27 distinct data types with no manual research required.
Enables customization of data sensitivity tiers to match your organization's data governance model via Settings > Risk.
Surfaces security posture findings selectively for Critical and High tier apps, reducing noise for lower-risk apps.
Displays business criticality tiers and data types within the app inventory view and individual app overviews.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Previously tagged data types are moved to a Data Types (Legacy) field, separate from the new automatically populated Data Types field.
Auth0 is a cloud-based identity platform that provides authentication and authorization services, enabling developers to securely add login and access control to applications.
Auth0 Self-Service Enterprise Configuration lets customer admins control third-party app SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. access during their own setup wizard.
└──▷ HOW TO FIND IT
When creating a Self-Service Enterprise Configuration ticket, delegate the third-party access decision to the customer admin instead of setting it yourself — useful when you want customers to self-govern whether third-party apps can use their SSO connection.
📍In the Auth0 console, go to Authentication › Enterprise › Self-Service Enterprise Configuration, create or edit a ticket, and enable third-party access delegation on the ticket instead of setting domain connection access directly.
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
CISO Assistant v3.20.0 adds technical posture management, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. single logout, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. maturity scores, domain export, and a library builder.
└──▷ GET THIS VERSION
$ git clone --branch v3.20.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.20.0
New technical posture management capability for tracking and assessing technical security posture.
Implements Single Logout (SLOSLOA Service Level Objective is a target threshold for a system's reliability or performance, such as 99.9% uptime or sub-200ms latency, giving cyber tools a measurable contract to enforce or report against.) for both OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. authentication providers.
MCP integration now exposes maturity scores, enabling AI-driven access to assessment data.
New CLI domain export capability for extracting domain data.
New in-product library builder with requirement weight support, enabling custom framework authoring.
+4 moreshow less
Allows changing the domain of an EBIOS-RM study.
Domain managers can now change group members directly.
Kiro is an AI-powered IDE by AWS that uses "specs" to translate requirements into structured plans, then automatically generates and implements code.
Kiro adds global hooks, searchable session history, proxy reliability, and dynamic MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool refresh.
Adds user-level global hooks that apply across all projects without per-project configuration.
New searchable session history panel lets practitioners quickly locate and revisit past agent sessions.
Agent now recovers automatically from interrupted responses in corporate proxy environments.
MCP tools refresh dynamically without requiring a restart.
Lightweight coding agent that runs in your terminal
Codex CLI v0.145.0 adds paginated thread history, Amazon Bedrock support, audio inputs, multi-agent V2 GA, and /import for Cursor/Claude settings.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.145.0 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.145.0
Adds experimental paginated thread history with resume, search, persisted thread names, sub-agent support, and memories.
Expands /import to migrate settings, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, plugins, sessions, commands, and project-scoped memories from Cursor and Claude Code.
Adds experimental Amazon Bedrock login with custom endpoint and authentication support; sets GPT-5.6 Sol as the default Bedrock model.
Supports audio inputs and tool outputs (common local audio formats) and introduces streaming realtime V3 conversations.
Adds secure, clickable inline visualization links in the terminal UI.
5 details in Everything
0 more releases in this issue3 more releases in this issue · 2026-07-21 → 2026-07-22
Codex CLI adds Codex Auto Review model metadata, session headers for realtime conversations, and routes LM Studio traffic through the shared HTTP client.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.146.0-alpha.2 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.146.0-alpha.2
Configures Codex Auto Review with an action-risk review prompt template, default generic security policy, approval rules, and permission messages for danger_full_access, workspace_write, and read_only modes.
Includes session-id and thread-id headers when starting realtime conversations over WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. or WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate..
Routes LM Studio server requests through the shared route-aware HTTP client pool, adding connection-timeout support scoped to connection establishment.
$ git clone --branch rust-v0.146.0-alpha.1 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.146.0-alpha.1
Adds app/read app-server API endpoint for fetching metadata for up to 100 app IDs with optional tool summaries, deduplication, and caching.
Adds audio input support forwarded to the Responses API, gated by model input modalities.
Codex CLI alpha.30 adds Esc-key session interruption and parallel stdin writes across unified-exec sessions.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.145.0-alpha.30 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.145.0-alpha.30
Runs write_stdin in parallel across unified-exec sessions for faster multi-session I/O.
Updates bundled model catalog with GPT-5.6 context windowscontext windowsThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. set to 272,000 tokens and new personality instruction variables.
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
Claude Code v2.1.217 adds emoji autocomplete, subagent concurrency controls, and AWS gateway deployment assets.
└──▷ GET THIS VERSION
$ git clone --branch v2.1.217 https://github.com/anthropics/claude-code.git
# already have the repo? check out this version:$ git checkout v2.1.217
└──▷ TRY IT
Cap parallel subagents to a lower value in resource-constrained CI environments to prevent runaway agent fan-out.
$ CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS=5 claude
Allow nested subagent spawning up to two levels deep for multi-stage agentic workflows that require it.
$ CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=2 claude
Adds emoji shortcode autocomplete in the prompt input (type :heart: to insert or :hea for suggestions); disable with the emojiCompletionEnabled setting.
Adds visible warnings when transcript writes are failing (e.g. disk full) or when session saving is disabled via an inherited environment variable, preventing silent transcript loss.
Adds a cap on concurrently-running subagents (default 20), overridable with CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS, preventing unbounded agent fan-out from a single message.
Adds CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH to control nested subagent depth; nested spawning is now disabled by default.
Makes footer PR badge links clickable hyperlinks in environments where terminal support can't be detected (e.g. over SSH/tmux); opt out with FORCE_HYPERLINK=0.
+1 moreshow less
Adds AWS reference deployment assets for Claude apps gateway on Bedrock under examples/gateway/aws/, including setup.sh, a distroless Dockerfile, gateway.yaml.example (Bedrock/Okta template), and a Terraform module.
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Subagents no longer spawn nested subagents by default; existing workflows that relied on nested subagent spawning will stop working unless CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH is set to permit deeper nesting.
THE CYBER TOOLCHAIN