PAGES
Subscribe Get it delivered — five to ten releases we picked each morning from the tools you run, with every release in the issue on the web. Compare plans →

The Cyber Toolchain — issue 026, July 26, 2026

THE CYBER TOOLCHAIN NO. 026
Tail
THE DAILY RELEASE FIREHOSE
PUBLISHED JULY 26, 2026 · EVERY DAY
EDITIONS tail grep head ls diff uniq

The daily firehose — everything the toolchain shipped today, already filtered.

We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.

VIEW
ISSUE VIEW scroll
ISSUE WIDTH reading width
Do you prefer scroll?
ADDITIONAL FILTERS
$ tct list   # 6 tools matched
Reverse Engineering, Malware & Forensics
◆  Reverse Engineering

AsmResolver

Sources Release notes → v6.0.1 Notes

A library for creating, reading and editing PE files and .NET modules.

AsmResolver v6.0.1 adds CustomMarshalDescriptor.MarshalTypeName, AOT-compatible attributes, and a virtual ProbeDirectory hook.

└──▷ GET THIS VERSION
$ git clone --branch v6.0.1 https://github.com/Washi1337/AsmResolver.git
# already have the repo? check out this version:
$ git checkout v6.0.1
  • Adds CustomMarshalDescriptor::MarshalTypeName to support and preserve invalid or non-existing marshal type descriptors.
  • Marks assemblies with additional AOT-compatible attributes for better ahead-of-time compilation support.
  • Makes AssemblyResolverBase::ProbeDirectory virtual, enabling subclasses to override directory probing logic.

3 details in Everything

Was this useful?
Network Security
◆  Firewalls & Network Defense

Rspamd

Sources Release notes → 4.1.3 Notes

Rapid spam filtering system.

Rspamd 4.1.3 adds fuzzy diagnostics API, ClickHouse fuzzy exports, per-hash introspection, and a local-network request block for lua_http.

└──▷ GET THIS VERSION
$ git clone --branch 4.1.3 https://github.com/rspamd/rspamd.git
# already have the repo? check out this version:
$ git checkout 4.1.3
└──▷ TRY IT
Inspect a specific fuzzy hash entry in storage to validate hits or debug false positives.
$ rspamadm control fuzzyhash <hash>
Retrieve structured fuzzy match results in a Lua rule to act on probability scores or matched rules.
lua
local results = task:get_fuzzy_results()
for _, r in ipairs(results) do
  rspamd_logger.infox(task, 'fuzzy match: rule=%s prob=%s', r.rule, r.probability)
end
Block lua_http from making outbound requests to internal/local network addresses in a custom redirector or plugin.
lua
# In rspamd lua_http call options:
local ret, code, body = rspamd_http.request({
  url = url,
  task = task,
  forbid_local = true,
})
  • Adds structured fuzzy match results via a diagnostics API and the new task:get_fuzzy_results() Lua method, with a configurable probability weight curve (prob_bias, prob_power) anchored at the match threshold.
  • Exports fuzzy match details to ClickHouse (schema version 11) and annotates the X-Rspamd-Fuzzy milter header with rule, flag, probability, and timestamp.
  • Adds forbid_local option to lua_http to block requests to local networks (enabled by default in url_redirector).
  • Enriches sparse ARF reports in lua_feedback_parsers with headers from the original message.

4 details in Everything

└──▷ BREAKING ON UPGRADE
  • !WebUI: jQuery has been removed entirely; all modules now use native DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime. and XMLHttpRequest. Font Awesome is replaced by a local SVG sprite — any customizations or plugins depending on jQuery or Font Awesome in the WebUI will break.
  • !DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit.: HAVE_ED25519 is now scoped to OpenSSL key parsing only, changing ed25519 verification behavior on OpenSSL builds.
Was this useful?
Identity, Access & Data Protection
◆  Secure Access (VPN / SASE / ZTNA)

Progress ShareFile

Sources Changelog → changelog · Jul 26, 2026 Changelog

Progress ShareFile is a cloud-based file sharing and storage platform enabling businesses to securely send, receive, and manage documents and client communications.

ShareFile adds a Tasks Workspace for centralized management of Request Lists and Forms across all projects.

└──▷ HOW TO FIND IT
Access the new Tasks Workspace to view and act on all outstanding Request Lists and Forms across every project without navigating folder by folder.
📍In ShareFile, navigate to Tasks in the main navigation to access standalone Request Lists and Forms across all projects.
  • New Tasks Workspace provides a centralized location to view and manage work items — including standalone Request Lists and Forms — across all projects in a single interface.
  • AI-powered Request List generation (Beta) enables users to create Request Lists using AI assistance.

2 details in Everything

Was this useful?

vopono

Sources Release notes → 0.10.19 Notes

Run applications through VPN tunnels with temporary network namespaces

vopono 0.10.19 adds SSH dynamic proxy tunneling with killswitch and improves WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer./AmneziaWG custom config compatibility.

└──▷ GET THIS VERSION
$ git clone --branch 0.10.19 https://github.com/jamesmcm/vopono.git
# already have the repo? check out this version:
$ git checkout 0.10.19
  • Adds SSH dynamic proxy support via --protocol ssh and redsocks, transparently routing IPv4 TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. and DNS traffic through an OpenSSH SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy with killswitch protection, SSH config aliases, keys, and agent support.
  • Improves custom WireGuard and AmneziaWG configuration compatibility: split-tunnel AllowedIPs, independent IPv4/IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. routing, hostname endpoints, endpoint bypass routes, and safe handling of wg-quick-specific options.
  • Improves vopono-gui handling of custom VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. configurations: missing files are clearly marked, stale launch configurations can be deleted, and the selected protocol is passed explicitly when launching.
  • Improves Debian and RPM packaging by installing the systemd service, reloading systemd after installation, and displaying daemon enablement instructions.

4 details in Everything

Was this useful?
Governance, Risk & Compliance
◆  Continuous Control Monitoring (CCM)

RegScale

Sources Blog / feed → RegScale 6.32.3.0 (2026-07-25) Blog

RegScale is a compliance operations platform that automates and continuously monitors regulatory compliance, security controls, and risk management for organizations.

RegScale 6.32.3.0 adds an Asset Scanning Tool De-Duplication option for administrators to control duplicate finding consolidation.

Was this useful?
Deploy
◆  Local LLM Runtimes

Ollama

Sources Release notes →Source code → v0.32.4 Notes Code

Get up and running with Kimi-K2.6, GLM-5.2, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

Ollama v0.32.4 adds Laguna MLXMLXApple's machine-learning framework for Apple silicon, which uses the unified memory shared by CPU and GPU to run and fine-tune models on a Mac. support with memory-resident models, agent skill permissions, and better speculative-decoding quantizationquantizationStoring a model's weights at lower numeric precision, such as 8 or 4 bits instead of 16, so it needs less memory and runs faster. It trades a small amount of accuracy for fitting on smaller hardware..

└──▷ GET THIS VERSION
$ git clone --branch v0.32.4 https://github.com/ollama/ollama.git
# already have the repo? check out this version:
$ git checkout v0.32.4
  • Adds support for the Laguna model family on Apple Silicon via the MLX engine, with Metal memory residency for significantly improved prompt and generation performance on qualifying hardware.
  • Adds permission/approval flow for model-initiated agent skill loading, while preserving direct user slash-skill activation without prompts.
  • Adds /system prompt inspection and on/off toggle commands to the agent TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., with cache-impact warnings and completion support.
  • Quantizes draft-model output heads at the requested quantization type when creating speculative-decoding drafts.
  • Supports per-expert quantization format decoding for Qwen3 MoEMoEA model design that splits its layers into many expert sub-networks and routes each token to only a few. The model holds many parameters but spends the compute of a much smaller one per token. models, with a packed gate/up projection optimization yielding ~4–9% throughput improvement on M5 Max.

5 details in Everything

Was this useful?
browse all tools → score card for your toolchain →