The Cyber Toolchain — issue 025, July 25, 2026

Cloudsmith is a cloud-native, universal package management platform that enables teams to securely host, manage, and distribute software artifacts across multiple formats.

Cloudsmith CLI gains automatic OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. auth and Docker credential discovery; cooldown policies expand to Maven packages.

2 details in Everything

trufflehog discovers, classifies, and validates leaked credentials

TruffleHog v3.96.0 adds HashiCorp Vault token, Duo API Secret Key, and SonarQube Cloud scoped token detectors plus updated Cloudflare credential format support.

$ git clone --branch v3.96.0 https://github.com/trufflesecurity/trufflehog.git
# already have the repo? check out this version:
$ git checkout v3.96.0

6 details in Everything

Android Logs Events And Protobuf Parser

ALEAPP v2026.2.0 adds C2PA AI provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. parsing, Mister Skinnylegs browser artifact integration, and enhanced Samsung clipboard/CMH extraction.

$ git clone --branch v2026.2.0 https://github.com/abrignoni/ALEAPP.git
# already have the repo? check out this version:
$ git checkout v2026.2.0

4 details in Everything

Finite State Platform provides software supply chain security and firmware analysis tools to identify vulnerabilities and risks in IoT and embedded devices.

Finite State adds match evidence to findings CSV exports, carry-forward component exclusions, and modernized Bamboo/Jenkins CI/CD plugins.

8 details in Everything

Manage devices and everything they touch. See how security, IT, and compliance get easier when unified around devices with Iru.

Iru adds Windows Auto App deployment for Access and token-based search on the activity page.

▶ ⤢

1 detail in Everything

Tines is a no-code automation platform that helps security and operations teams build workflows to automate repetitive tasks and incident response processes.

Tines AI Agent actions and Workbench can now search the web, powered by Parallel.ai.

ProjectDiscovery Cloud is a platform providing cloud-based security scanning and reconnaissance tools for identifying vulnerabilities and assets in applications.

ProjectDiscovery Cloud adds Internal Network Scanning to expose reachable internal assets the way an attacker inside the network would.

1 detail in Everything

ConductorOne is an identity governance platform that automates access management, provisioning, and compliance across enterprise applications and infrastructure.

ConductorOne adds AI agent policy steps, access-graph search, group/role reviews, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. per-user auth, and scoped API keys.

17 details in Everything

SailPoint is an identity security platform that helps organizations manage and govern user access to applications, data, and systems across the enterprise.

SailPoint ISC gets a centered navigation bar for admins, end users, and Data Access Security.

4 details in Everything

1 more release in this issue · 2026-07-24

New Capability: Forms for Access Request (2026-07-24) Blog ↗ Stable

SailPoint ISC adds custom Forms for Access Request, collecting contextual data from requesters before submission.

⤢ ⤢

• Enables admins to define custom forms and attach them to Roles, Access Profiles, or Entitlements, prompting requesters for supplementary data before submitting an access request.
• Passes submitted form data to approvers as name-value pairs, giving decision-makers full context at approval time.
• Makes form data accessible throughout the request flow, including before-provisioning rules, enabling custom provisioning logic driven by requester-supplied data.
• Automatically copies form data across multiple form instances when a requester asks for several items that each require the same form.
• Supports external access request portals (e.g., SailPoint ServiceNow Catalog Integration) by allowing supplementary form data to be passed into the request flow independent of the native UI.

5 details in Everything

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

CISO Assistant v3.20.3 adds TISAXTISAXA vehicle-industry information-security assessment standard, maintained by the ENX Association, that lets automotive suppliers prove their data-handling practices to OEMs without each OEM running its own separate audit. v2027, ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. Cyber Resiliency frameworks, a Power BI native connector, Slovenian UI, and custom fields on security exceptions.

$ git clone --branch v3.20.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:
$ git checkout v3.20.3

5 details in Everything

Kiro is an AI-powered IDE by AWS that uses "specs" to translate requirements into structured plans, then automatically generates and implements code.

Claude Opus 5 is now available in Kiro IDE, CLI, and Web with a 1M context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. and improved agentic coding performance.

4 details in Everything

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

Pi v0.82.1 adds Claude Opus 5 support, bearer auth for Anthropic-compatible gateways, and faster model catalog revalidation.

$ git clone --branch v0.82.1 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.82.1

$ export ANTHROPIC_AUTH_TOKEN=<your-bearer-token>

4 details in Everything

Lightweight coding agent that runs in your terminal

Adds configurable code-mode host fallback control and code-mode tool names in Responses Lite metadata.

$ git clone --branch rust-v0.146.0-alpha.10 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.146.0-alpha.10

# In your Codex config file:
[features.code_mode_host]
disable_in_process_fallback = true

3 details in Everything

$ git clone --branch rust-v0.146.0-alpha.8 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.146.0-alpha.8

$ git clone --branch rust-v0.146.0-alpha.7 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.146.0-alpha.7

Glamourous agentic coding for all

Crush v0.87.0 adds MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. 2.1, Claude Channels MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. extension, and a system-wide config at /etc/crush/crush.json

$ git clone --branch v0.87.0 https://github.com/charmbracelet/crush.git
# already have the repo? check out this version:
$ git checkout v0.87.0

5 details in Everything

Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

Cline v4.0.11 adds Claude Opus 5 across six providers and Moonshot Kimi K3 support.

$ git clone --branch v4.0.11 https://github.com/cline/cline.git
# already have the repo? check out this version:
$ git checkout v4.0.11

3 details in Everything

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Claude Opus 5 lands as the new default Opus model, with 1M context, strict sandbox networking, and depth-3 nested subagents.

$ git clone --branch v2.1.219 https://github.com/anthropics/claude-code.git
# already have the repo? check out this version:
$ git checkout v2.1.219

# In your Claude Code settings file (e.g. ~/.claude/settings.json)
{
  "sandbox": {
    "network": {
      "strictAllowlist": true
    }
  }
}

$ CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1 claude -p "refactor the auth module"

# In a shared settings file
{
  "workflowSizeGuideline": "medium"
}

9 details in Everything

Daytona is a self-hosted development environment manager that automates provisioning, configuration, and management of standardized, secure dev environments across any infrastructure.

Daytona adds sandbox metrics visibility and configurable auto-pause intervals for sandboxes.

2 details in Everything