The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Strix v1.4.0 adds self-update, ChatGPT inference, Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead., Bedrock prompt caching, and smarter context management for long scans.
└──▷ GET THIS VERSION
$ git clone --branch v1.4.0 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v1.4.0
└──▷ TRY IT
Keep Strix up to date without reinstalling — run this after any release to pull the latest version in place.
$ strix --update
After a scan finishes (Strix no longer auto-opens the viewer), inspect results in the local dashboard.
$ strix view my-run-name
Adds strix --update command for in-place CLI self-update and automatic update notifications.
Supports signing in with a ChatGPT subscription as an inference provider.
Adds Linux ARM64 standalone release builds.
Enables AWS Bedrock/Anthropic prompt caching for Claude models to reduce latency and cost on repeated context.
Adds a dedicated deduplication model to reduce duplicate findings across scan runs.
+5 moreshow less
Adds list_reports and get_report read-only tools for programmatic report access.
Introduces model-aware conversation compaction to keep long scans within context limits.
Bounds per-tool output before it enters agent history, and spills oversized output to the sandbox workspace instead of dropping it.
Adds graduated wrap-up warnings, a budget reserve, and an interactive budget pause/continue flow during scans.
CLI now exits after a scan completes instead of launching a local viewer — use strix view to open results separately.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Strix now quits after a scan completes instead of hosting a local viewer — workflows that relied on the viewer launching automatically must now run strix view separately.
Multimon-ng decodes and displays digital radio signals including POCSAG, DTMF, and other modes from audio input or SDR receivers.
multimon-ng 1.6.0 adds GSC paging, FLEX/POCSAG generation, macOS audio capture, SDL3 scope, and JSON output for GSC and FLEX_NEXT.
└──▷ GET THIS VERSION
$ git clone --branch 1.6.0 https://github.com/EliasOenal/multimon-ng.git
# already have the repo? check out this version:$ git checkout 1.6.0
└──▷ TRY IT
Decode a live RTLRTLRegister Transfer Level, a hardware design abstraction describing how data moves between registers each clock cycle; cyber tools use it to analyze or synthesize digital circuits from HDL source.-SDR feed for GSC paging traffic alongside FLEX_NEXT, capturing both with JSON-structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. for downstream parsing.
$ rtl_fm -f 929612500 -s 22050 | multimon-ng -t raw -a GSC -a FLEX_NEXT /dev/stdin
Generate a POCSAG test signal and a FLEX test signal using gen-ng to validate your receive chain or feed a decoder under test.
$ gen-ng -P "Test page message" -A 1234567 -B 1200 -t raw - | multimon-ng -t raw -a POCSAG1200 -
Replay a recorded FLAC capture through FLEX_NEXT with automatic input format detection to extract reassembled multi-frame messages with timestamps.
Codacy is an automated code quality and security analysis platform that reviews pull requests, enforces coding standards, and tracks technical debt across repositories.
Codacy adds PHP CS Fixer as a new tool and gains support for Checkov configuration files.
Adds PHP CS Fixer as a supported static analysis tool for PHP code style enforcement.
Adds support for Checkov configuration files, enabling repository-level Checkov settings to be recognized by Codacy.
Promptfoo is an open-source tool for testing, evaluating, and red-teaming LLM applications to detect vulnerabilities, improve reliability, and compare model outputs.
Promptfoo snapshot-20260727 adds adaptive rate limiting, Transformers.js local inference, telecom red team plugins, and video generation providers.
└──▷ TRY IT
Load multiple environment files (e.g., base secrets plus environment-specific overrides) in a single eval run.
View Promptfoo service logs directly from the CLI instead of hunting through log directories.
$ promptfoo logs
Adds Transformers.js provider to run Hugging Face models locally in Node.js or browser.
Adds Vercel AI Gateway and Cloudflare AI Gateway providers for routing requests.
Adds AWS Bedrock Video (Nova Reel, Luma Ray 2) and Azure AI Foundry Video (Sora) for video generation.
Adds native session endpoint support to the HTTP provider for stateful conversations.
Adds xAI Voice provider overrides for apiBaseUrl, websocketUrl, and function call support.
+22 moreshow less
Adds word-count assertion type for validating response word counts.
Adds __count variable for use in derived metrics to compute averages.
Adds provider config hover in eval results UI to view configuration details inline.
Surfaces metadata.sessionId as a variable column in tables and exports.
Adds user-rated filter to show only manually rated results in the UI.
Adds promptfoo logs command for viewing log files directly.
Adds adaptive rate limit scheduler that automatically adjusts concurrency based on provider rate limits and response headers.
Adds test-level prompts filter to filter prompts at the individual test case level.
Adds providers filter at the test case level.
Adds per-test structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. configuration at the test case level.
Supports $VAR syntax for environment variables in file paths.
Adds support for multiple --env-file flags to load multiple environment files.
Adds fork PR support and comment-triggered scans to Code Scanning.
Adds --share and --no-share auto-sharing flags to Model Audit.
Adds Telecom industry-specific red team plugins for telecommunications AI systems.
Adds RAGRAGRetrieval-augmented generation: looking up relevant documents and adding them to the prompt before the model answers. It grounds responses in private or current data without retraining. Source Attribution plugin to test whether RAG systems properly attribute sources.
Adds support for multiple input variables in red team scans for complex input structures.
Adds numTests config to cap the number of test cases generated per red team strategy.
Adds -d/--description flag to redteam generate commands.
Adds early scan stop when plugins fail to generate test cases.
Adds automatic retries for transient 5xx errors.
Propagates -j concurrency flag to Python worker pools.
Veracode is a cloud-based application security platform that helps developers identify and remediate vulnerabilities in their code through static, dynamic, and software composition analysis.
Veracode Package Firewall launches with automatic blocking of untrusted packages, now available in the European region.
New Package Firewall service automatically blocks untrusted packages that don't comply with policies across artifact repositories and package managers.
Package Firewall mitigates risks from malware, typosquattingtyposquattingUsing a name close to a trusted domain or software package to catch spelling mistakes. Attackers use it to lure people or installers to a malicious lookalike., and license violations by enforcing verified, compliant dependencies.
Package Firewall is now available in the European region.
Wapiti 3.3.1 adds stacktrace disclosure detection, stronger SQL boolean-based detection, improved CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. analysis, and per-host passive reporting.
└──▷ GET THIS VERSION
$ git clone --branch 3.3.1 https://github.com/wapiti-scanner/wapiti.git
# already have the repo? check out this version:$ git checkout 3.3.1
└──▷ TRY IT
Run passive modules (including the new stacktrace and CSP checks) against a target to surface disclosure issues without active fuzzing.
Run boolean-based SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. detection (now robust to dynamic pages) alongside time-based SQL for comprehensive coverage.
$ wapiti -u https://example.com -m sql,timesql
Adds passive detection of server-side stacktrace disclosures in HTTP responses.
Improves boolean-based SQL injection detection to remain robust against dynamic/randomized pages.
Enhances the passive CSP module to flag unknown directives and missing frame-ancestors and form-action directives.
Reports distinct passive security postures per host, enabling per-target analysis across multi-host scans.
Surfaces previously suppressed passive alerts in scan reports so no passive finding is silently dropped.
+3 moreshow less
Improves passive report readability with a colored suppression summary and per-page deduplication of cleartext-password findings.
Reports timeout and HTTP 500 anomalies detected by the SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. module.
Adds 60+ new Biome artifact streams covering device power/lock state, location visit, app location activity, camera AutoFocus ROI, energy mode, boot session, emergency voice calls, emoji engagement, Device.Timezone, Wallet transactions, Siri Remembers Message/Audio History, Discoverability Signals, Siri UI, Siri suggestions, and a full Apple Intelligence family including Safety Overrides.
New Signal for iOS support: full message and contact parsing, conversation view with attachments, and detection of Signal's timestamped GRDB directories.
Expanded keychain handling: accepts examiner-supplied keychain input, adds a lookup helper, includes a pure-Python SQLCipher reader, supports UFED encrypted keychain dumps, and can reuse a keychain already present in the extraction.
Notifications overhaul: attachments now checked in as media, images embedded in notification payloads recovered, and payload fields split into dedicated columns.
Adds Notes – Password Protected artifact for password hint and recoverability triage.
Feedly Threat Intelligence is a security tool that aggregates and analyzes threat feeds, helping security teams track emerging threats, vulnerabilities, and adversary activity in real time.
Feedly Ask AI gains SPL query generation and an improved threat actor campaign detection model alongside KQLKQLKusto Query Language, Microsoft's read-only query language for Azure Data Explorer and Microsoft Sentinel, used by cyber tools to filter, aggregate, and correlate large volumes of log and telemetry data quickly. support.
└──▷ HOW TO FIND IT
Generate a Splunk SPL hunting query for a specific threat actor campaign directly from Ask AI instead of switching to an external query builder.
📍In the Feedly console, open Ask AI and prompt: "Generate an SPL hunting query for [threat actor] campaigns targeting [industry]."
New Ask AI model tuned specifically for threat actor campaign detection.
Improves MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tagging accuracy in Ask AI results.
Tines is a no-code automation platform that helps security and operations teams build workflows to automate repetitive tasks and incident response processes.
Tines 42.2.0 adds API key creation restrictions and template-based case creation via API.
Adds the ability to restrict which users can create API keys.
Enables creating cases from a template via the API.
Trend Vision One is a unified cybersecurity platform that integrates extended detection and response (XDR) across endpoints, networks, email, and cloud environments.
Endpoint Event Viewer gains Event name and Event ID filtering in the System events view.
└──▷ HOW TO FIND IT
Narrow down System events to a specific Windows Event ID during an investigation without manually scrolling through all events.
📍In the console, go to Endpoint Security → Endpoint Event Viewer, select the System events view, and use the Event name or Event ID filter to scope results.
2 more releases in this issue
· 2026-07-22 → 2026-07-27
Zero Trust Secure Access On-premises Gateway 1.0.89 adds Microsoft Tenant Restriction v1 support in AI Secure Access rules.
Supports Microsoft Tenant Restriction v1 in AI Secure Access rules, enabling organizations to restrict AI service access to approved Microsoft tenants.
Upgrades Falco to 0.43.0, Falco libs to 0.23.1, and plugins to v0.7.1 with updated falco.yaml plugin configuration.
Adds openshift.enabled field in values.yaml to explicitly override OpenShift platform auto-detection in unreliable environments.
Skips the api-server-modifier DaemonSet and its ClusterRole on OpenShift, where the kube-apiserver is operator-managed.
Reduces Scan Manager to least-privilege RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. on non-OpenShift clusters by removing OpenShift-specific permissions.
Intruder is a cloud-based vulnerability scanner that continuously monitors and identifies security weaknesses in internet-exposed systems, APIs, and web applications.
Intruder extends Azure cloud scans to cover Microsoft 365 configuration risks across Entra, Exchange, SharePoint, and Teams.
└──▷ HOW TO FIND IT
Unlock full Microsoft 365 configuration checks — beyond the automatic subset — by updating your Azure integration's permissions in Intruder.
📍In the Intruder console, go to your Azure integration settings and update the integration's permissions following the steps outlined in the integration guide to enable the full set of M365 checks.
Adds Microsoft 365 configuration risk scanning (Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., Exchange Online, SharePoint, Teams) as part of existing Azure cloud security scans.
Surfaces M365 identity, email, and collaboration configuration risks automatically for existing Azure integration users.
Enables full M365 check coverage by updating the Azure integration's permissions.
DefectDojo 3.1.300 adds a Fortify parser v2, tighter API permission controls, and a case-insensitive index on Vulnerability ID.
└──▷ GET THIS VERSION
$ git clone --branch 3.1.300 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 3.1.300
New Fortify parser v2 prefers true source line numbers for more accurate finding location reporting.
Adds case-insensitive expression index on Vulnerability_Id.vulnerability_id for faster, case-insensitive vulnerability lookups.
Restricts configuration permission assignment to superusers only in the user API, tightening privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. controls.
Scopes location and endpoint reference writes to authorized products, enforcing product-level authorization on those API writes.
Extends user serializer validation to identity and permission fields for stricter input validation.
+1 moreshow less
Makes notes read-only on the test create serializer, preventing unintended note mutations at creation time.
Castle is a security platform that helps developers detect and block account takeover, fraud, and bot attacks in real time.
Castle adds VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. traffic detection via new IP intelligence signals.
Detects VPN traffic using new IP intelligence, extending existing tunnel and residential proxy detection capabilities.
Castle adds Residential Proxy IP signal and richer IP tunnel intelligence to its IP risk detection.
New Residential Proxy IP signal detects traffic routed through real consumer ISPs, catching proxies invisible to traditional datacenter-based detection.
Expanded IP tunnel intelligence provides richer context alongside existing Proxy IP and Tor IP signals.
Castle lets you export your team members list to CSV from Team Settings for access reviews and compliance audits.
└──▷ HOW TO FIND IT
Pull an offline team roster for a periodic access review or compliance audit.
📍In the Castle console, go to Settings › Team, then click the Export to CSV button to download all visible columns (name, email, user role, 2FA status, member since).
Export team members list to CSV from the Team Settings page, including name, email, user role, 2FA status, and member-since date.
Castle adds email.registered_domain field to collapse subdomain variants for better fraud detection.
Adds email.registered_domain event field that strips subdomains down to the registered domain using the public suffix list, making it easier to detect fraud patterns that rotate across subdomains.
Auth0 is a cloud-based identity platform that provides authentication and authorization services, enabling developers to securely add login and access control to applications.
Auth0 launches Cross App Access (XAA) for Resource Applications in Open Early Access, enabling secure agent-to-app and app-to-app authorization.
Adds Cross App Access (XAA), a new open standard for passing authorization across domains, enabling AI agents and enterprise apps to securely access MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers and APIs without per-user consent prompts.
Centralizes IT control over cross-application data-sharing connections, improving governance and visibility into which agents and apps access which resources.
Supports SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. enterprise IdPs — including specific support for Okta — with no code changes required on the resource application side.
Available in production at no additional cost for Enterprise, B2B Pro, and B2B Essential customers via Auth0 Enterprise Connections; Free tenants can test it during the trial period.
Lightweight coding agent that runs in your terminal
Codex CLI alpha.13 adds cached MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool exposure before server startup and model-owned token budget defaults.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.146.0-alpha.13 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.146.0-alpha.13
Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing latency at session start.
Supports model-owned token budget defaults from the model catalog, applied automatically when no explicit token-budget configuration is set.
Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.
CrewAI 1.15.7 adds runtime skill usage event emission for observability.
└──▷ GET THIS VERSION
$ git clone --branch 1.15.7 https://github.com/crewAIInc/crewAI.git
# already have the repo? check out this version:$ git checkout 1.15.7
Emits skill usage events at runtime, enabling observability pipelines to trace which skills agents invoke during execution.
1 detail in Everything
0 more releases in this issue1 more release in this issue · 2026-07-26
vMLX 1.6.16 ships KaTeX-backed Electron renderer for chat and reasoning surfaces and hardens bundled engine provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..
└──▷ GET THIS VERSION
$ git clone --branch v1.6.16 https://github.com/jjang-ai/vmlx.git
# already have the repo? check out this version:$ git checkout v1.6.16
Adds KaTeX-backed Electron renderer path for chat and reasoning surfaces.
Hardens packaged engine provenance so signed app sessions use bundled Python/vmlx_engine instead of stale development or system virtualenvs.
A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
AI-Infra-Guard v4.5.0 adds standalone CLI modules for Agent/MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./Skill scanning, new AI agent detection skills, SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output, and open-source frontend.
└──▷ GET THIS VERSION
$ git clone --branch v4.5.0 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.5.0
Modularizes Agent-Scan as a standalone CLI with AIG integration support, adding 4 new AI agent security detection skills.
Modularizes MCP-Scan with dual-mode support (CLI + AIG Web) and adds a standalone mcp-scan-lite module.
Adds 2 new MCP security detection rules plus ATR-derived MCP detection rules covering additional attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
Adds Agent Skill security auditing (Skill-Scan) repackaged as the standalone PyPI package aig-skill-scan.
Adds SARIF 2.1.0SARIF 2.1.0A JSON-based file format, standardized by OASIS, for expressing static analysis results so that cyber tools from different vendors can share findings through a single, machine-readable schema. output format for Skill-Scan results alongside single-stage optimization.
THE CYBER TOOLCHAIN