The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Promptfoo is an open-source tool for testing, evaluating, and red-teaming LLM applications to detect vulnerabilities, improve reliability, and compare model outputs.
└──▷ TRY IT
View Promptfoo log output directly from the CLI for debugging provider or scan issues.
$ promptfoo logs
Generate a red team scan with a description and cap test cases per strategy, targeting a telecom AI system.
Adds shell completion command for Bash, Zsh, and Fish via mvt-ios completion and mvt-android completion.
Supports loading custom Python analysis modules with --load-module PATH or the MVT_CUSTOM_MODULES environment variable.
Adds iOS sysdiagnose checking support.
Scans Safari profile databases for browsing history and browser state.
Parallelizes URL indicator checks for faster IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. scanning.
+4 moreshow less
Adds dependency-aware module execution, allowing modules to declare prerequisites and run in stable topological order.
Supports rotated iOS shutdown logs.
Matches Android receiver indicators by package ID.
Handles malformed AndroidQF backups gracefully instead of crashing.
Sublime Security's Advanced Graymail Protection is now GA, with automated remediation, fuzzy detection, and per-user preference learning.
└──▷ HOW TO FIND IT
Enable user preference learning so Sublime automatically tailors graymail routing per sender based on individual user behavior.
📍In the console, go to Admin → Account and enable Graymail User Preferences.
Adds Advanced Graymail Protection (GA) to identify and manage marketing emails, newsletters, and subscription content across Microsoft 365 and Google Workspace.
New Remediate graymail flagged messages Automation routes detected graymail to Promotions automatically.
New Rule Fuzzy Attack Score: Advanced Graymail Detection extends graymail detection coverage, designed to pair with the included Automation.
New Graymail User Preferences feature (Admin → Account) learns from users moving messages into or out of Promotions or Junk/Spam and applies sender-level preferences to future messages.
Sandbox any AI agent in seconds - zero setup, zero latency.
nono v0.70.0 adds SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials./SPIRE workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials., per-route rate limiting, Vault OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. mediation, JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-shaped capture nonces, and profile-declared no_proxy bypass.
└──▷ GET THIS VERSION
$ git clone --branch v0.70.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.70.0
Adds SPIFFE/SPIRE workload identity authentication for upstream proxy routes, enabling zero-trust service-to-service auth without static credentials.
Adds per-route request rate limiting via RouteRateLimiter, letting profiles cap how many requests a sandboxed tool can make to a given upstream.
Adds support for mediating vault login -method=oidc, including a custom inject header and per-command open_port to handle the OIDC browser callback.
Adds a JWT-shaped nonce option (CapturedNonceShape::Jwt) for capture intercepts, producing a <header>.<payload>.nono_<64hex> token for consumers that validate token structure before use.
Adds profile-declared no_proxy bypass support, allowing profiles to specify hosts that skip the nono proxy.
+1 moreshow less
Offers to save denied open-URL origins on session exit, streamlining iterative policy development.
Wiz Defend is a cloud detection and response platform that identifies, investigates, and remediates real-time threats across cloud environments.
Wiz Defend GA's Red Agent AI pentester with Web API Crawler, logic-driven API DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces., and Secrets Blast Radius modules.
Red Agent is now generally available (GA): a continuous, autonomous AI pentester that reasons through business logic to uncover unknown vulnerabilities across custom-built software, vibe-coded applications, and APIs.
New Web API Crawler module: uses client-side code analysis to map API endpoints, extract and analyze API specifications, and surface hidden or forgotten shadow APIs.
New API DAST Attacker module: continuously finds and validates logic-driven exploitable risks — including OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. API Top 10 flaws, authorization bypasses, and logic flaws — adapting its strategy in real time and delivering proofs of execution with reproduction steps.
New Secrets Blast Radius module: validates secrets exposed in public websites, APIs, and code repositories by executing safe checks against third-party SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. provider APIs to confirm exploitability and determine the precise scope of permissions held.
Red Agent automatically ingests context from Wiz sources — API schemas, cloud resources, Runtime Sensor, code repositories, and network layers — without manual setup.
+2 moreshow less
AI Threat Defense launched in partnership with Google, combining Wiz, Mandiant, and Google DeepMind capabilities.
Blue Agent introduced: a SecOpsSecOpsThe practice of merging security and IT operations teams so that threat detection, response, and infrastructure management share the same workflows, giving cyber tools a single pipeline from alert to remediation. AI analyst that automates threat detection, triage, and containment workflows.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Syft v1.50.0 adds a Bun binary classifier for detecting the Bun JavaScript runtime in SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue..
└──▷ GET THIS VERSION
$ git clone --branch v1.50.0 https://github.com/anchore/syft.git
# already have the repo? check out this version:$ git checkout v1.50.0
Manage devices and everything they touch. See how security, IT, and compliance get easier when unified around devices with Iru.
Managed OS for Apple gains an embedded delay option (up to 90 days) for Rolling Enforcement target version declarations.
└──▷ HOW TO FIND IT
Slow-roll a new macOS version to your fleet by staggering when devices receive the target version declaration — useful before broad deployment.
📍In the Iru console, open your Managed OS for Apple configuration, enable Rolling Enforcement, and set the embedded delay (up to 90 days) to control when a new target version declaration is sent to devices.
Adds an automatic delay option (up to 90 days) within Rolling Enforcement for Managed OS for Apple, preventing Iru from sending a new target version declaration to devices until the delay elapses.
Enables combining the new embedded delay with Apple software update deferrals configured in a Software Update Library Item for layered update control.
Trend Vision One is a unified cybersecurity platform that integrates extended detection and response (XDR) across endpoints, networks, email, and cloud environments.
Trend Vision One Zero Trust Secure Access adds masked/unmasked display mode for sensitive data in DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. and AI detection logs.
└──▷ HOW TO FIND IT
Control whether sensitive matched content is visible to reviewers of DLP or AI detection events — useful for restricting raw data exposure to only authorized analysts.
📍In the console, go to Zero Trust Secure Access → Internet Access and AI Secure Access Configuration → Global Settings → DLP/AI detection logs, then set the display mode to Masked or Unmasked.
Adds configurable masking for matched content in DLP and AI content detection logs, letting administrators control whether sensitive data (up to 100 bytes) is hidden or visible when reviewing Internet Access and AI Secure Access detection events.
Splunk Security Content v6.3.0 adds a Starland RAT campaign story, 4 new Linux/Windows analytics, and expands 67 existing detections.
└──▷ GET THIS VERSION
$ git clone --branch v6.3.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v6.3.0
New Analytic Story: Starland RAT Campaign (UAT-11795) — tags analytics across PowerShell abuse, ClickFix social engineering, in-memory execution, credential theft, and Telegram-based C2 for end-to-end campaign visibility.
New detection: Linux AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. Bypass Via Aaexec — covers attempts to evade AppArmor confinement using aaexec.
New detection: Linux Auditd Possible Setuid Execve Privesc — identifies local privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. attempts via setuid execve patterns on Linux.
New detection: Linux Pedit Offset Out Of Bounds — detects kernel-level exploitation technique targeting pedit.
New detection: Windows AppCertDLL Modification Via Registry — covers persistence via AppCertDLL registry manipulation.
+1 moreshow less
Expanded coverage across 67 updated analytics spanning Cisco NVM, ransomware extensions/notes, PowerShell abuse, RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. cache forensics, MSI abuse, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application., LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. framework detection, and more.
Google SecOps is a cloud-based security operations platform that helps organizations detect, investigate, and respond to cybersecurity threats using AI-powered analytics and threat intelligence.
Google SecOps lets you inspect prebuilt parser preview content even when a custom parser is active for the same log type.
Elastic Security Labs publishes threat research, vulnerability analysis, and security insights to help organizations understand emerging cyber threats.
Elastic Security 9.5 adds automatic Microsoft Sentinel detection rule migration, translating Scheduled and NRTNRTNear-real-time processing, a design pattern where data is ingested and acted on within seconds to minutes rather than instantly or in batch, giving cyber tools low-latency detection without the cost of true real-time pipelines. analytics rules to Elastic via LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code..
└──▷ HOW TO FIND IT
Start a Sentinel-to-Elastic rule migration to automatically translate your detection rules and plan data onboarding around what those rules actually require.
📍In Elastic Security, go to Security Launchpad › Manage Automatic Migrations, select your AI provider, expand 'Migrate your existing SIEM rules to Elastic', and choose Microsoft Sentinel from the top-right drop-down. Follow the prompts to export rules from your Sentinel workspace and upload them.
Adds automatic migration of Microsoft Sentinel Scheduled and Near Real Time (NRT) analytics rules into Elastic Security using an LLM of your choice.
Supports Watchlists-to-ES|QLES|QLElasticsearch Query Language, maintained by Elastic, a pipe-based query language for filtering, transforming, and aggregating data stored in Elasticsearch, giving cyber tools a concise syntax for log and event analysis. Lookups conversion and Sentinel severity mapping during rule migration.
Identifies required Elastic integrations from exported Sentinel rules, enabling a rules-first migration path to plan data onboarding before moving logs.
Surfaces per-rule translation status (Installed, Translated, Partially translated, Not translated, Failed) in the Manage Automatic Migrations UI.
Available in Tech Preview in Elastic Security 9.5 across multiple cloud providers and regions.
OpenCTI 7.260728.0 ships a full draft approval workflow engine, XTM Hub integration, TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services. error visibility, OAuth SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. dynamic tokens, and audit log session tracking.
└──▷ GET THIS VERSION
$ git clone --branch 7.260728.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260728.0
└──▷ HOW TO FIND IT
Enable XTM Hub connection so integrations can be pushed directly from the Hub into your OpenCTI instance.
📍In the console, go to Settings › Filigran Experience and click the XTM Hub card to connect your OpenCTI instance to the Hub.
Introduces a complete draft approval workflow engine: define, visualize, and apply workflows via a ReactFlow graph UI, with filter-based conditions, async task actions, schema validation on save, auto-save/publish, and synchronous/asynchronous transition reactions.
Adds draft workspace metadata (participants, assignees, description, creator) and the ability to filter, edit, and visualize draft details directly in the drafts list.
Connects OpenCTI to XTM Hub, enabling integrations to be discovered and connected directly from the Hub into OpenCTI.
Reworks the integrations UI with a pipeline ribbon, aligned lines view, config import, facets, sorting, and next-run visibility.
Reworks the Filigran Experience settings screen with hero-style Enterprise Edition and XTM Hub cards.
+9 moreshow less
Surfaces TAXII Client ingestion errors directly in the UI so operators can diagnose feed failures without inspecting backend logs.
Records user session IDs in user_metadata within audit logs for improved session-level traceability.
Adds ability to read audit and log entities via the Python client (pycti).
Supports dynamic token refresh for OAuth-based SMTP authentication.
Enables SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. IdPs to use a hybrid Group and Organization mapping strategy.
Restricts workflow restrictions and actions to Enterprise Edition.
Allows administrators to define a default template for Fintel exports.
Adds info logs to support packages for richer diagnostics.
Cribl is an observability pipeline platform that helps organizations collect, process, route, and transform machine data from any source to any destination.
Cribl Search 4.19 makes full-text inverted-index search on _raw the default for Lakehouse engines, with backfill for existing engines.
└──▷ TRY IT
During incident response, search a dataset for a raw token (e.g., an error code or hostname fragment) across the full event message without specifying a field.
$ dataset="flowlogs" 123456 | ...
Use the where … has form to explicitly invoke the full-text index when the token search follows a pipeline operator.
$ dataset="flowlogs" | where _raw has 123456 | ...
Enables full-text search (FTS) via an inverted index on _raw as the default experience in Cribl Search's Lakehouse Engine, allowing token-based searches without targeting a specific field.
Delivers 150×–350× query acceleration on token-based 'needle in the haystack' searches (tested on 1 billion row datasets) by skipping irrelevant storage blocks.
Supports FTS activation via the simple string predicate in the leftmost implied cribl operator, or via the where operator with the has string operator.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Vuls v0.40.0-rc.1 migrates NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization., Cisco, JVN, VulnCheck, Fortinet, Palo Alto, and CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. detection to the vuls2 engine, adds ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences.EUVDEUVDThe European Vulnerability Database, operated by ENISA, is the EU's official registry of disclosed software vulnerabilities, giving cyber tools a regional authoritative source for CVE-equivalent advisories. and Seal Security coverage.
└──▷ GET THIS VERSION
$ git clone --branch v0.40.0-rc.1 https://github.com/future-architect/vuls.git
# already have the repo? check out this version:$ git checkout v0.40.0-rc.1
Routes NVD CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. detection and enrichment through the vuls2 engine with cpematch-expanded criteria, replacing go-cve-dictionary's version-range-only matching.
Routes Cisco, Fortinet, Palo Alto, VulnCheck, and JVN data sources through vuls2 for detection and enrichment.
Adds ENISA EUVD (European Union Vulnerability Database) as a vuls2 enrich data source.
Replaces go-cti with vuls2 attack/CAPEC/CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. datasources; adds ScanResult-level CWEDict, CAPECDict, and ATTACKDict catalog maps and a per-VulnInfo CTIs reference list.
Enriches MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. CVE v5 data via the vuls2 pipeline.
+4 moreshow less
Ignores rejected and withdrawn CPE vulnerabilities to reduce false positives.
Surfaces evaluation warnings from the vuls2 detector for improved scan transparency.
Uses JPCERT-AT reference_titles as JVN alert titles for more descriptive reporting.
Shares a single vuls2 DB session across detect and enrich phases per server, reducing I/O overhead.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The [cti] config section is removed; CTI data is now sourced from vuls2 rather than go-cti.
!The per-VulnInfo field previously named Ctis is renamed to CTIs; consumers of scan result JSON will need to update field references.
!EUVD content is no longer sourced from go-cve-dictionary; it is now provided solely through the vuls2 enrich path.
Progress ShareFile is a cloud-based file sharing and storage platform enabling businesses to securely send, receive, and manage documents and client communications.
ShareFile adds Tasks workspace, AI document validation, Security Insights dashboard, session management, and a wave of new integrations across Mac, Windows, and Outlook.
Adds export of Request Lists to Excel (.xlsx.xlsxThe file format used by Microsoft Excel for spreadsheets, based on the Open XML standard. Cyber tools use it to ingest or export structured tabular data in a format analysts already work with.) or CSV (.csv) for offline use or custom analysis, accessible from the three-dot menu on the Request List page.
Adds Projects, Client Hub, and Solutions access in ShareFile for Mac for all Premium plan users.
Adds Folders in ShareFile for Clients app, enabling browse, view, download, upload, and delete of shared folders from a service provider.
Adds Projects, Client Hub & Solutions access in ShareFile for Windows for all Premium plan users (version 26.03.12.0 and later).
Adds ShareFile one-time code authentication for client users, configurable by administrators.
+5 moreshow less
Adds Microsoft social sign-in, allowing client contacts to authenticate to ShareFile using their Microsoft account.
Adds Closed Project Behaviour, allowing project owners to close projects and make all content read-only with all cases marked closed.
Adds payment request creation within Engagements in the Income Tax Return solution, enabling service providers to send payment requests directly from ShareFile.
Adds in-app Security Notifications in addition to email for faster awareness of security events.
Adds ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. processor support for ShareFile for Windows (version 25.7.4.0).
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Upgrading to ShareFile for Mac 26.04.20 requires all users to re-authenticate.
!Upgrading to ShareFile for Windows 26.3.12.0 requires users to re-authenticate.
!ShareFile for Windows 25.6.5.0 is signed with Progress Software Corporation's digital certificate; environments that restrict software by publisher may block this update until Progress Software Corporation is added to the trusted publishers list.
Cisco Duo Desktop is an endpoint security application that verifies device health and security posture before granting users access to protected corporate resources.
Duo Desktop adds Microsoft Defender for Endpoint detection on Linux, Ubuntu 26.04 LTS support, and user-level preference persistence on macOS.
Adds detection for Microsoft Defender for Endpoint on Linux (v4.6.0).
Adds support for Ubuntu 26.04 LTS on Linux (v4.6.0).
Adds fallback to /etc/machine-id for Trusted Endpoints identifier when the primary identifier is unavailable on Linux (v4.7.0).
Removes the requirement for the dmidecode utility on Linux (v4.7.0).
User-level preferences now persist across uninstall on macOS (Public Beta v7.19.3.0).
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Support for Ubuntu 23.04 and 20.04 LTS has been dropped in Linux v4.6.0.
DNSFilter is a cloud-based DNS security platform that blocks malicious websites, filters unwanted content, and protects networks from cyber threats in real time.
DNSFilter Windows Roaming Client v3.6.10 Beta adds DNS PreCheck v2 with hijack-resistant policy enforcement and automatic tray process recovery.
└──▷ HOW TO FIND IT
Confirm DNS PreCheck v2 is active for your organization after it has been enabled — the system tray will display DNS PreCheck v2 instead of the previous label.
📍In the DNSFilter dashboard, go to Deployments → Roaming Clients → Beta Channel, download and install the v3.6.10 beta installer, then check the system tray on enrolled Windows endpoints for the DNS PreCheck v2 indicator once your organization's rollout is enabled.
Adds DNS PreCheck v2, which maintains policy enforcement on networks that hijack or redirect DNS traffic, closing a gap where certain network conditions could allow content through that should have been blocked.
Adds automatic tray process recovery so the system tray process self-restarts if it stops unexpectedly, keeping tray status and controls available without manual intervention.
Nudge Security discovers and secures all SaaS apps used across an organization, helping IT teams manage shadow IT and enforce security policies through automated nudges.
Nudge Security now lets admins enforce SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-only login, disabling Google/Microsoft sign-in and routing all auth through your IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
└──▷ HOW TO FIND IT
Enforce SSO-only login for your organization to ensure all users authenticate via your IdP and inherit its MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. and deprovisioning policies.
📍In the console, go to Settings › Organization and enable login restrictions.
Adds SSO login enforcement that disables alternative sign-in methods (Sign in with Google, Sign in with Microsoft) org-wide, routing all logins through your configured IdP (e.g., Okta) to inherit its MFA, conditional access, and deprovisioning controls.
1Password for Mac beta adds Claude AI agent sign-in support via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., letting Claude fill logins with user approval.
Adds 1Password for Claude integration: Claude can sign in to websites on your behalf, with per-request approval before credentials are filled — credentials are never shared with Claude.
Shows a clear error message when attempting to move or duplicate an item with a custom icon while file storage is disabled by an admin policy.
Item date fields now respect the date format chosen in system settings, or the language set in 1Password when it differs from the system language.
1Password iOS beta adds cellular-data warnings for large file uploads and smarter multi-account Home screen switching.
Warns users before uploading large files over cellular or metered connections when drag-and-dropping into a Document item.
Home screen automatically switches to All Accounts when a second account is unlocked, and returns to single-account view when only one account is active.
Updated buttons throughout the app to use the iOS 26 Liquid Glass style.
Diagnostic Report sending is now split into separate Email Diagnostic Report to Support and Export Diagnostic Report file actions.
1Password adds Claude AI agent sign-in support, Secret Key paste blocking, and reorganized phishing/security settings.
└──▷ HOW TO FIND IT
Control whether 1Password prompts to save credentials captured by shell plugins like the 1Password CLI.
📍In the 1Password browser extension, go to Settings › Autofill & save and toggle the option to offer saving API credentials for shell plugins.
Adds 1Password for Claude integration, letting Claude sign in to websites on your behalf — filling logins and one-time codes after your explicit approval, without sharing credentials with Claude.
New setting in Settings > Autofill & save lets you choose whether 1Password offers to save API credentials for shell plugins.
Shell plugin credential saves now use the same autosave notification as standard logins for a consistent experience.
Phishing warning settings relocated to Settings > Security & privacy > Phishing prevention, with a new separate toggle for the popup phishing warning.
Selecting Hide on this page now suppresses all 1Password notifications on that page (except Device Trust notifications).
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Phishing warning settings have moved from their previous location to Settings > Security & privacy > Phishing prevention; any workflow or documentation referencing the old location will need updating.
1Password for Linux adds a local MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server so AI assistants can access Developer tools directly from the app.
New local MCP server in the Developer tab lets AI assistants access 1Password Developer tools.
Watchtower descriptions now surface plaintext secrets scanning coverage, including .env files and SSH keys, on the Developer homepage and in Watchtower.
1Password for Mac adds a local MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server for AI assistant access to Developer tools and expands Watchtower secret-scanning descriptions.
Adds a local MCP server launchable from the Developer tab, enabling AI assistants to access 1Password Developer tools.
Watchtower descriptions now surface plaintext secret scanningsecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. coverage, including .env files and SSH keys, on the Developer homepage and in Watchtower.
1Password for Windows adds a local MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server so AI assistants can access Developer tools directly from the app.
Adds a local MCP server launchable from the Developer tab, enabling AI assistants to access 1Password Developer tools.
Watchtower descriptions now explicitly mention scanning for plaintext secrets, including .env files and SSH keys.
Auth0 is a cloud-based identity platform that provides authentication and authorization services, enabling developers to securely add login and access control to applications.
Auth0 Dashboard gains real-time search for Organization members by name, email, ID, and blocked status (Public Beta).
└──▷ HOW TO FIND IT
Quickly locate a specific organization member without scrolling through paginated lists.
📍In the Dashboard, go to Organizations › [your organization] › Members, then use the search bar to enter a name, email address, or user ID. Use the Blocked filter to narrow results to blocked members only.
Search Organization members in real time by name, email, or ID directly from the Auth0 Dashboard — no more paginating through full member lists.
Filter Organization members by blocked status from the Dashboard member search interface.
Auth0 adds organization-scoped roles in Early Access, enabling per-org RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. without tenant-wide role sharing or custom workarounds.
Adds organization-scoped roles so each Auth0 Organization can have its own independent role definitions and permission assignments.
Supports creating, updating, and deleting org-scoped roles via the Management API or Dashboard.
Enables assigning org-scoped roles to users and enterprise groups within a specific organization.
Supports pre-assigning an org-scoped role when sending a user invitation to an organization.
Auth0 adds native Organization-to-Application Entitlement, letting you restrict which apps org members can access without custom code.
Adds Organization-to-Application Entitlement (Early Access): natively enforce which applications members of an organization can access, with automatic denial on unauthorized login attempts — no Actions, metadata checks, or custom logic required.
Supports per-org, opt-in enforcement so entitlements can be configured and tested before going live, with no risk of disrupting existing login flows.
SailPoint is an identity security platform that helps organizations manage and govern user access to applications, data, and systems across the enterprise.
SailPoint Workflows now auto-trims HTTP POST response payloads inside loops, matching existing GET behavior.
Extends automatic payload trimming to HTTP Request (POST) steps — loop inputs now retain only the fields referenced in downstream steps, reducing data stored and transferred per run.
Full POST response remains accessible during test/build mode so practitioners can inspect all fields while authoring workflows.
Clerk is a user authentication and identity management platform that provides developers with pre-built UI components, APIs, and SDKs for sign-up, sign-in, and user management.
Clerk now supports hosted authentication via Account Portal for Expo, iOS, and Android apps.
Varonis is a data security platform that detects and stops insider threats, data breaches, and ransomware attacks across cloud and on-premises environments.
Varonis Atlas can now classify tools by functional capability for improved policy evaluation and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. risk visibility.
Varonis Inventory adds dedicated views for AI agents, tools, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. resources.
Varonis DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. now ingests Microsoft Copilot and ChatGPT Enterprise prompt activity for correlation with sensitive data context.
Syncs Microsoft Copilot prompt activity with Varonis DSPM to correlate AI interactions with sensitive data context and policy enforcement.
Syncs ChatGPT Enterprise prompt activity with Varonis DSPM to improve investigation workflows and sensitive data visibility.
Varonis AI Investigation Sessions gain an Intent Timeline for chronological tracing of user intent and agent activity.
Adds Intent Timeline to AI Investigation Sessions, giving investigators a chronological view of user intent, agent behavior, and tool activity throughout a session.
Enables tracing of activity leading up to and following a runtime policy trigger to understand causation in AI agent workflows.
DigiCert CertCentral is a centralized platform for managing SSL/TLS certificates, automating issuance, renewal, and deployment across organizational infrastructure.
CertCentral adds DCVDCVDomain Control Validation, a certificate-authority process that proves an applicant controls a domain before issuing a TLS certificate; cyber tools use it to automate certificate provisioning workflows. polling status to APIs, ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction. URL delegation to Service Users, and API key ownership transfers.
└──▷ TRY IT
Check whether automatic DCV polling is still active for a domain, so you know if a manual validation check is needed.
$ curl -X GET 'https://www.digicert.com/services/v2/domain/<domain_id>' \
-H 'X-DC-DEVKEY: <api_key>' \
-H 'Content-Type: application/json'
# Look for dcv_polling_status and dcv_polling_last_checked in the response
Transfer an ACME Directory URL to a Service User before offboarding an employee, so automations keep running without re-issuing credentials.
📍In CertCentral, go to Automation › ACME Directory URLs. Find the URL, open its Actions menu, and select Update ACME Directory URL. In the Update ACME Directory URL restrictions window, use the User menu to select the target Service User, then select Update ACME Directory URL.
Transfer an API key to a Service User before deleting a user whose key is embedded in active integrations.
📍In CertCentral, go to Automation › API Keys. Find the API key and select its link. In the Update API Key window, use the User menu to select the CertCentral user or Service User to transfer ownership to, then save.
Adds dcv_polling_status and dcv_polling_last_checked fields to the Domain info and Order validation status API endpoints, exposing whether automatic DCV polling is active and when it last ran.
Enables creating ACME Directory URLs on behalf of another CertCentral user, Service User, or new Service User — no longer limited to self-service only.
Enables transferring ACME Directory URL ownership to another CertCentral user or Service User, decoupling credentials from individual accounts.
Enables transferring API key ownership to another CertCentral user or Service User, allowing integrations to survive user departures without credential rotation.
Conveyor is a security tool that automates vendor security reviews by enabling companies to share and manage security documentation and questionnaire responses efficiently.
Conveyor adds a new API endpoint to download signed NDAs as PDFs with a temporary link.
└──▷ TRY IT
Pull a signed NDA PDF download link into your system after an authorization is completed — requires enabling the Signed Documents permission under Settings > Integrations > API Keys > Edit permissions first.
$ curl -X GET 'https://app.conveyor.com/api/v2/exchange/gate_document_signatures/<gate_document_signature_id>' \
-H 'Authorization: Bearer <api_token>'
Enable the required API permission before making calls to the new endpoint.
📍In the console, go to Settings › Integrations › API Keys › Edit permissions and enable Signed Documents.
New GET /api/v2/knowledge_base/search endpoint enables keyword search across curated Q&As and past questionnaire answers, letting agents pull from existing approved language.
New GET /api/v2/vendor_subscriptions endpoint exposes the full list of subscribers receiving Trust Center subprocessor change notifications.
Both endpoints are also available as MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, allowing agents connected via the Conveyor AI Connector to call them directly.
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
CISO Assistant v3.20.4 adds full TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. domain export/import, evidence on exceptions, batch asset BIA, AI file uploads, and posture management enhancements.
└──▷ GET THIS VERSION
$ git clone --branch v3.20.4 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.20.4
Includes the full Third-Party Risk ManagementThird-Party Risk ManagementAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. (TPRM) ecosystem in domain export/import operations.
Enriches the ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. Cyber Resilience Assessment framework with recommended controls.
Enables batch-adding assets to Business Impact Analyses (BIA).
Supports attaching evidence files directly to security exceptions.
Adds more capabilities to posture management.
+2 moreshow less
Enables file uploads in the AI chat for framework import and points to templates in the wizard.
Delivers multiple findings assessment and assets UX improvements.
Kiro is an AI-powered IDE by AWS that uses "specs" to translate requirements into structured plans, then automatically generates and implements code.
Kiro adds editor context menu actions, guided hook creation, and Code OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. v1.108.2 upgrade with IDE language replies.
└──▷ HOW TO FIND IT
Quickly invoke Kiro assistance on a specific error or warning without leaving your editor.
📍In the editor, hover over a red/yellow underline → click the lightbulb or press the quick fix shortcut → select Ask Kiro to Fix.
Adds a Kiro submenu to the editor context menu for quick access to Kiro actions directly from right-click.
Adds an Ask Kiro to Fix quick fix option surfaced inline on errors and warnings in the editor.
Upgrades the underlying IDE to Code OSS v1.108.2.
Kiro now replies in the user's configured IDE display language.
Chat history now persists across workspace folder changes.
Kiro adds guided spec creation and automatic plan execution after approval in Plan mode.
Adds a guided description step to /spec new so the agent uses your provided description as ground truth when drafting requirements, rather than inferring from the spec name alone.
Plan mode now automatically begins executing an approved plan immediately after approval, eliminating the manual mode-switch step.
Lightweight coding agent that runs in your terminal
Codex CLI v0.146.0 adds named/pinned sessions, thread forking, Agent Plugins, WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Code Mode, and standalone web search for custom providers.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.146.0 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.146.0
Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them.
Fork threads with paginated history, including temporary forks that do not appear in thread listings.
Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code.
Connect the app-server to remote Code Mode hosts over WebSocket.
Enable standalone web search for compatible custom model providers.
+1 moreshow less
Discover executor-provided skills and securely read their associated resources, including explicitly selected skills.
6 details in Everything
0 more releases in this issue1 more release in this issue · 2026-07-29
Codex CLI exec servers gain stdin-close exit control, plugin eligibility metadata, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. legacy-server fallback improvements.
└──▷ GET THIS VERSION
$ git clone --branch rust-v0.147.0-alpha.1 https://github.com/openai/codex.git
# already have the repo? check out this version:$ git checkout rust-v0.147.0-alpha.1
└──▷ TRY IT
Keep a remote exec server's lifetime tied to the spawning process — useful in CI or orchestration where you want the server to exit cleanly when the parent dies rather than becoming an orphan.
$ codex exec-server --remote--exit-on-stdin-close
Adds --exit-on-stdin-close flag (and CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE env var) to remote exec servers, enabling graceful shutdown with telemetry flush when the parent process closes stdin.
Exposes plugin eligibility metadata (disabledReason, eligiblePlanTypes) in app-server plugin summaries, surfacing plan-gating and admin-disabled status.
Adds parent_turn_id tracking across nested Codex agent spawns, delegated sessions, and follow-up tasks for improved request provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..
$ git clone --branch sdk/sdk/v0.0.66 https://github.com/cline/cline.git
# already have the repo? check out this version:$ git checkout sdk/sdk/v0.0.66
Adds support for cline-free models, labeled (free) and priced at zero, with a dedicated rate-limit error that includes the free-tier reset time.
Makes agentic compaction the default context-compaction strategy.
Persists plan/act mode, tool auto-approve, and compaction mode to global settings with cross-process-safe writes, so CLI TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. toggles survive restarts.
Connector sessions now persist and automatically reconnect after a daemon or hub restart.
Generates the built-in provider list from models.dev, broadening out-of-the-box provider coverage.
+3 moreshow less
Headless scheduled routines now default to auto-approve, removing interactive prompts in unattended runs.
Adds telemetry for task lifecycle events, auth event metadata, request IDs, and correct host identity (host_plugin_version, platform) on SDK-pipeline events.
Adds host-safe theme contract and Markdown exports to @cline/ui.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The onRetryAttempt callback is removed from ApiHandlerOptions and provider config.
An open-source AI agent that brings the power of Gemini directly into your terminal.
gemini-cli v0.53.0 adds an eval coverage report command and an LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. triage orchestrator.
└──▷ GET THIS VERSION
$ git clone --branch v0.53.0 https://github.com/google-gemini/gemini-cli.git
# already have the repo? check out this version:$ git checkout v0.53.0
Adds eval coverage report command to surface evaluation coverage metrics.
Implements an LLM triage orchestrator for automated issue triage workflows.
OpenCode v1.18.9 adds an opt-in v2 desktop sidecar and collapsible model provider sections in settings.
└──▷ GET THIS VERSION
$ git clone --branch v1.18.9 https://github.com/anomalyco/opencode.git
# already have the repo? check out this version:$ git checkout v1.18.9
Adds opt-in v2 desktop sidecar: set OPENCODE_SIDECAR_V2=1 to initialize the desktop app from the v2 background daemon instead of the v1 utility sidecar.
Adds collapsible model provider sections in the V2 settings page, with collapse state persisted per server and search expanding matching sections dynamically.
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
ToolHive v0.41.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026-07-28 support, reproducible skill lock files, RFC 8693RFC 8693An IETF standard defining the OAuth 2.0 Token Exchange flow, letting a service swap one token for another with different scopes, audience, or type — enabling delegation and impersonation without re-authenticating the user.token exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user., and an Envoy network-isolation backend.
└──▷ GET THIS VERSION
$ git clone --branch v0.41.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.41.0
└──▷ TRY IT
Restore and verify a project's pinned MCP skills on a CI machine from the lock file.
$ thv skill sync
Re-resolve all pinned skills to newer content and update the lock file without silent drift.
$ thv skill upgrade
Supports the MCP 2026-07-28 stateless (Modern) spec across all proxies and Virtual MCP, bridging era-mismatched client×backend combinations automatically.
Virtual MCP is now fully MCP-conformant: completions, resource templates, subscriptions, and mid-call server→client forwarding (progress, sampling, elicitation) all work.
Adds thv skill sync to restore a project's pinned skill set on any machine and verify on-disk content in CI.
Adds thv skill upgrade to re-resolve pinned skills to newer content without silent lock drift.
Project-scoped skill installs are now pinned in a toolhive.lock.yaml lock file for reproducibility.
+10 moreshow less
Sigstore signing groundwork for skill OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. artifacts: provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. fields in the lock schema, a signer package, and commit-signature plumbing with bundle storage.
RFC 8693 token exchange is wired into the embedded authorization server's token endpoint, with delegated token audience bounded by the subject token.
Subject tokens from trusted external OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. issuers (Keycloak, Entra, Okta) can be validated for token exchange.
Audit logs capture the RFC 8693 act claim and full delegation chain, making 'agent X acting for Alice' distinguishable from Alice.
Multi-valued JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. claims can be normalized to canonical space-delimited form for Cedar policies.
W3C trace context propagates through outbound MCP _meta, joining backend spans to the client→proxy→server trace.
Backend list_changed notifications are propagated to clients for tools, resources, and prompts.
Opt-in strict MCP-Protocol-Version header validation for the streamable proxy.
Sync and upgrade commands gain typed exit codes and a pre-install confirmation gate for scriptable CI use.
15 details in Everything
└──▷ BREAKING ON UPGRADE
!Namespace-scoped operator installs (operator.rbac.scope=namespace) now fail helm upgrade at render time unless operator.features.storageVersionMigrator: false is explicitly set, because the StorageVersionMigrator controller is enabled by default.
!JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. batch requests (top-level arrays) are now rejected with HTTP 400 / error code -32600 instead of being executed; send individual requests.
!The rate-limit JSON-RPC error code changed from -32029 to 429; clients branching on error.code == -32029 must match 429 instead.
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
SysReptor 2026.61 adds Prowler/ScoutSuite import, stdin AES key support, and granular API token permissions.
└──▷ GET THIS VERSION
$ git clone --branch 2026.61 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.61
Adds Prowler and ScoutSuite importers to the scanimport plugin for ingesting cloud security scan results.
Allows creating API tokens with or without superuser permissions for finer-grained access control.
Adds automatic user lockout after multiple failed MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. login attempts.
Enables backup/restorebackup commands to read AES encryption keys from stdin for safer secret handling.
Validates initial status transitions at report/finding creation time.
+4 moreshow less
Restricts mention and assignee notifications to project members only.
Generates random Postgres and Redis passwords automatically during installation via install.sh.
Switches Django cache backend to Redis.
Hardens PDF rendering pipeline.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!PDF compression is removed and the COMPRESS_PDFS setting no longer exists; any configuration referencing COMPRESS_PDFS will need to be cleaned up.
!Plugin loading is reworked so that the source code directory is now read-only in the Docker image; plugins or workflows that write to that directory will break.
THE CYBER TOOLCHAIN