The Cyber Toolchain — issue 076, September 16, 2026

NodeZero validated findings and exposure data now flow into CrowdStrike Falcon Next-Gen SIEM, available via the CrowdStrike Marketplace listing at marketplace.crowdstrike.com/listings/horizon3-ai-nodezero/.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ This lets teams correlate validated exposure data with endpoint, identity, cloud, and other security telemetry during SIEM investigations, incorporating it into existing security operations workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

GitHub Copilot now suggests relevant allowed values when admins create custom property definitions (single-select or multi-select) for repositories, speeding up governance taxonomy setup.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ A new Repository custom property suggestions Copilot policy at the enterprise and organization level controls whether this suggestion behavior is enabled, available in public preview for Business and Enterprise plans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds Rapid7 InsightVM (SaaS/cloud) as a new scanner integration, configurable via Integrations > Scanners > Add Scanner Integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Select Rapid7 Platform, then supply a Server URL in the form https://{region}.api.insight.rapid7.com/ (region codes: us, us2, us3, eu, ca, au, ap, aps2, me1), an API Username, and Password for a dedicated API user with MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. disabled, then click Create Scanner to pull vulnerability findings from monitored Sites into Phoenix environments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

⤢ ⤢ ⤢

Adds an enhanced Python scanner with improved taint tracking, cross-file analysis, and pattern recognition covering PySpark, Flask, Django, and FastAPI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Also adds send_from_directory and send_file as taint sinks for CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-73 detection, httplib support for detecting CWE-295 and CWE-297 SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS flaws, os.path propagation in taint analysis, and library support for google-cloud-bigquery, Psycopg 3, PyYAML, AWS Glue, and PySpark/DynamoDB/FastAPI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds .NET Semantic Kernel (SK) InvocationFilter and Filter support, SK KernelContent and Taint Injection support, and SK detection of hardcoded credentials (CWE-798) and configuration control issues (CWE-15). Also adds taint sink coverage for System.Web.UI.Page.Title and System.Web.UI.HtmlControls.HtmlHead.Title for CWE-80 detection in .NET.

Updates Gen IR so the --capture flag now includes diagnostic data in .xcarchive files for iOS troubleshooting.

Adds veracode.json support for excluding specific Java .jar files from static analysis, and adds veracode.json support for excluding specific Java classes from Static Analysis.

OX Cloud launches as a unified CNAPP covering CSPM (continuous detection of cloud misconfigurations and compliance enforcement across all cloud accounts), KSPM (Kubernetes security risk and policy-compliance monitoring), DSPM (discovery, classification and protection of sensitive data across cloud environments), Runtime Vulnerabilities (identifying vulnerabilities actively exposed in running workloads and prioritizing what is truly exploitable), Cloud Inventory (a continuously updated inventory of every workload, identity, data store, Kubernetes cluster and AI agent running in the environment, including shadow AI and unmanaged non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls.), Cloud Graph and Attack Path Mapping (visualizing relationships across cloud assets including lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. paths and blast radius), and Runtime Events (investigating runtime anomalies with full context to accelerate incident detection and triage).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

⤢ ⤢ ⤢

AIDR (AI Detection and Response) detects and governs AI-driven usage, configuration and threats across cloud and runtime environments in real time, covering AI agents calling tools, models accessing data, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers executing autonomously. Alert detail views show who or what acted, what they touched and what else they could have reached.

⤢

Agentic Attack Surface Management (AASM), powered by the OX Agent, discovers AI agents, models, MCP servers and non-human identities and maps what they can reach, uncovering hidden backdoors and reachable exposures through agentic-level inspection.

Dalfox detects the sub-not-gsub angle filter bypass: a doubled <<svg ...>> payload opens a real tag where a one-shot str::replace only consumed the first <.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Scans now run concurrently within a parameter, ramp payload batches instead of jumping straight to a full --workers window, and exit early for endpoints that uniformly escape their echo, significantly cutting scan time.

Cross-origin <form action> targets are no longer probed during parameter discovery, preventing -H headers and --cookies from being sent to page-controlled origins.

DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime.-XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. static analysis now covers Promise combinators, optional chaining, and static bracket paths, with more sinks and sources recognized and fewer false positives reported.

The ExportImage method now accepts a zone parameter (default 'us-central1-a'), letting callers specify the zone used for Cloud Build imaging instances instead of always using the default region.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

image.ExportImage(
    gcs_output_folder='gs://my-forensics-bucket/exports/',
    image_format='qcow2',
    output_name='disk-export',
    zone='europe-west1-b'
)

Additional static-library Components are now identified where there was previously no signature coverage, including picolibc, PCRE2, glib, and LLVM runtimes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Static library archives (.a files) are now treated as a single Component and scanned directly, instead of being unpacked into hundreds of object-file rows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Binary scan SBOMsSBOMsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. now record generation context as after-build, matching the CISA SBOM minimum elements.

A new opt-in setting under Admin > Account > Abuse Mailbox lets Sublime ingest Outlook Junk reports as user reports for Microsoft 365 message sources, capturing phishing signal without requiring end-users to use the Report Phishing button.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

⤢

Fastly added the arc_requests metric to the Historical Stats and Real-Time Analytics APIs to track requests received by AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds accept-arp option under firewall.policies in suricata.yaml to control whether ARP traffic is accepted by the firewall policy engine, and adds default-policy setting to specify a fallback action when no explicit policy matches any rule.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

firewall:
  policies:
    accept-arp: true
    default-policy: drop

Adds match subdomain option to the dataset keyword, enabling rules to match subdomains of entries in a dataset, such as detecting connections to any subdomain of a blocklisted domain.

$ alert dns any any -> any any (msg:"Blocklisted domain hit"; dns.query; dataset:isset,bad-domains,type string,match subdomain; sid:1000002; rev:1;)

Extends the app-layer-protocol keyword to accept a pipe-separated list of protocol values in a single rule, allowing one rule to match multiple protocols (e.g. app-layer-protocol:dns|http).

$ alert tcp any any -> any any (msg:"DNS or HTTP detected"; app-layer-protocol:dns|http; sid:1000001; rev:1;)

CLI Scanner v1.30.0 adds per-package license data (including license category) to the JSON scan result under the v1 schema, available via --output json, in Technical Preview.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ It also adds --show-licenses to print the ten most frequent licenses and their occurrence counts in console output, and --full-licenses-table to show every license found, both in Technical Preview.

⤢ ⤢ ⤢

$ sysdig-cli-scanner --output json <image>

$ sysdig-cli-scanner --show-licenses <image>

Sysdig CLI Scanner v1.30.0 adds standalone binary scanning via --detect-unknown-executables to identify and report vulnerabilities in applications not installed by a package manager, including executables the scanner does not recognize.

$ sysdig-cli-scanner --detect-unknown-executables <image>

Terraform onboarding now supports all three workload scanning deployment models, including a service account you own and Plerion operates, keeping scanning inside your organization without appliances in scanned accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Two Terraform templates provision this setup: one grants Plerion the required access, and one deploys per-region resources (appliance network, auto-scaling scan pool, and snapshot encryption key); both register with Plerion automatically during terraform apply with no manual console steps.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Upwind Code adds an Azure DevOps integration that connects at the organization level through Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. to discover repositories and surface findings on pull requests without modifying existing CI/CD pipelines, and a Bitbucket Cloud integration that connects at the workspace level to automatically include new repositories and surface findings within pull request review workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Together with existing GitHub and GitLab support, this completes coverage across all four major version control providers.

⤢

Adds an Organizations & Repositories page in the Upwind console to centrally manage which organizations and repositories are scanned, keeping access and scan scope separate.

⤢

Effective 2026-10-12, the sonar-scanner-cli image default user changes from root (UID 0) to nonroot (UID 65532), and the scanner scratch directory moves from <project>/.scannerwork to /tmp/.scannerwork, which breaks pipelines that read report-task.txt from the old location and derived images that write to system paths as root.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ To restore previous behavior, run with --user 0 (Docker), USER root (Dockerfile), or runAsUser: 0 (Kubernetes), or set -Dsonar.working.directory=<project>/.scannerwork and ensure the workspace is writable by the container user.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Chainguard added new container images: clamav-prometheus-exporter (application + FIPS), crossplane-azure-marketplaceordering (application), kserve-sklearnserver (ai), commercial-spilo-fips (FIPS), graphql-hive-gateway (application), jupyterhub-k8s-singleuser-sample (application + FIPS), nuxeo-2025 (application), chainguard-server-hypervisor-aws (base), mongodb-kubernetes (application + FIPS), opentelemetry-python-instrumentation-fips (FIPS), strimzi-kafka-fips (FIPS), crossplane-aws-emrcontainers (application + FIPS), kro (application + FIPS), pyrra (application + FIPS), starboard-exporter (application + FIPS), krakend (application + FIPS), and mongodb-search (application + FIPS).

Adds an Endpoint Self Help command-line tool for administrators to view product health and collect diagnostic information from a Linux server.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Expands the account_activity_linux data lake event to include account creation, deletion, and modifications to group membership. Adds DNS activity and Server Name Indication (SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address.) hostname events to the Sophos Data Lake for expanded network visibility, and adds container information to supported detection events in the Sophos Data Lake.

Version Control Policies gains pattern update schedule configuration, reachable via Endpoint Security → Endpoint Security Configuration → Version Control Policies, for agents on version 202609 and later.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Engine updates now follow agent software update settings when managed through Version Control Policies, consolidating previously separate controls, and enrollment into Version Control Policies now automatically enrolls all unenrolled Protection Manager instances in a single operation. Agents older than version 202609 continue to follow pattern update settings from Protection Manager rather than Version Control Policies, splitting the management path for mixed fleets.

Trend Vision One adds a Report Phishing button via the Outlook Add-in so users can report suspicious or simulated phishing emails directly from Microsoft Outlook. Reports feed simulation analytics through a new response option added to the phishing results filter, a new user status in simulation profiles records the method used to report a phishing email, and risk scores are reduced for users who demonstrate consistent, proactive phishing reporting behavior over time.

Service Gateway firmware 3.0.34 adds CLI commands to enable and disable MicroK8s debug logging, adds package signature verification before firmware upgrade and service installation, adds Brazil (BR) site FQDN support, extends custom CA support to the sg-apl service and Node.js-based services, upgrades the appliance OS to Rocky Linux 9.8, and enhances diagnostics collection with MicroK8s inspection reports and container image checks.

Google SecOps adds Cloud Detection, Investigation, and Response (CDIR) via Security Command Center Enterprise (SCC-E) integration, covering Google Cloud, AWS, and Azure within a single converged platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Cloud Asset Inventory collection flows into the Google SecOps Entity Graph, enriching alerts with multi-cloud asset context (region, owner, metadata tags); ingestion of AWS CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. and GuardDuty events and Azure AD activity logs enables multi-cloud SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. log searching using natural language, Yara-L, or raw log syntax; and CDIR Curated Detections for Cloud Threat scenarios include enhanced privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. alerts that automatically map to Google SecOps cases.

Google SecOps adds Chrome Enterprise Premium (CEP) integration with curated detections enriched with Safe Browsing and Google Threat Intelligence (GTI) for browser-based threats such as malicious extensions, credential theft, and data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels.. It also adds dedicated dashboards for Chrome security events covering managed and BYODBYODBring Your Own Device: a policy allowing employees to use personal phones, laptops, or tablets for work, creating a network of unmanaged endpoints that cyber tools must monitor or enforce policy on. devices, and automated response playbooks for Chrome Enterprise actions including blocking malicious URLs, blocking extensions, and quarantining devices.

Effective January 25, 2027, write permissions will be removed from the chronicle.readonly OAuth scope; any workflow performing write operations must be updated to use the chronicle OAuth scope instead.

The MANDIANT_ACTIVE_BREACH_IOC, MANDIANT_FUSION_IOC, and OPEN_SOURCE_INTEL_IOC feeds will be removed after March 18, 2027; affected feeds must be migrated to Google Threat Intelligence (GTI) before that date.

Google SecOps adds AI Protection within Security Command Center Enterprise, providing discovery and cataloging of AI assets (models, datasets, applications), virtual red-teaming to surface toxic attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately., and detection and response for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. hijacking, data poisoning, and AI-targeted threats, with response workflows integrated into Google SecOps. Model Armor protects AI workloads against data loss, brand damage, and offensive content across models and cloud environments.

Google SecOps parser syntax adds a match_all option to the Grok filter, letting parsers extract all non-overlapping pattern occurrences within a field instead of only the first match.

Lakeflow pipelines now support creating managed tables and writing to them via one or more append flows using append_flow (Beta).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ import_checkpoint on append_flow migrates existing Structured Streaming workloads into a Lakeflow pipeline without reprocessing the source, and create_table plus CREATE TABLE ...⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ FLOW syntax define managed tables and flows within pipelines.

The READ METADATA privilege will be available by default for workspaces with the compliance security profile enabled, granting read-only visibility into security-sensitive metadata — including privilege grants, row filters, column masks, and ABAC policies — that is not exposed by BROWSE.

⤢ ⤢ ⤢

OpenSharing now generally available for sharing foreign Delta tables from OneLakeOneLakeMicrosoft's unified data lake built into Microsoft Fabric that gives every workspace a single, tenant-wide storage layer, letting cyber tools read and write data without managing separate storage accounts., Hive metastoreHive metastoreA central metadata repository, part of the Apache Hive project, that stores schema and location information for distributed data sets so query engines can discover and read structured data without hardcoding paths., or AWS Glue without copying data into Databricks.

ABAC row filters and column masks now extend to views in addition to tables (Beta, DBR 19+), letting existing Unity Catalog policies automatically apply to views once the ABAC on Views preview is enabled from the account console's Previews page. Data Classification separately gains the ability to scan Unity Catalog views (Beta), classifying columns for sensitive data using the same detection engine used for tables.

TruRisk Eliminate can now automatically isolate hosts natively through the Qualys Cloud Agent when a user-defined QQL policy is met, with no EDR integration required; the host is quarantined within seconds and a timestamped audit record captures which rule, host, and deadline triggered the action.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ A built-in CISA KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. isolation use case applies the QQL vulnerabilities.status:[ACTIVE,NEW,REOPENED] AND vulnerabilities.riskFactor.cisaKEVDueDate < "now-1s" AND vulnerabilities.riskFactor.cisaKnownExploits:TRUE to isolate hosts where a KEV remediation deadline has passed and the vulnerability remains open.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

⤢ ⤢

$ vulnerabilities.status:[ACTIVE,NEW,REOPENED] AND vulnerabilities.riskFactor.cisaKEVDueDate < "now-1s" AND vulnerabilities.riskFactor.cisaKnownExploits:TRUE

TruRisk Eliminate adds AI-Powered Patch Reliability Scoring that combines LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-analyzed public sentiment with Qualys telemetry on patch rollback and vulnerability reopen rates to produce a pre-deployment reliability score (Low / High) for each patch. A new patch.kb QQL filter in the Patch Management app (Patches > Windows) surfaces these assessments for specific KBs; clicking Patch Reliability: Low on a result opens an AI Assessment window showing known issues and source links via Detailed Report.

⤢ ⤢

Duo Desktop now prompts users at startup to opt in to error and usage data collection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ This can be changed at any time in app preferences, or administrators can set it system-wide to bypass the per-user prompt entirely.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds the Unblock Requests page to the dashboard, providing a full request queue with Allow or Deny actions, threat-category warnings on risky domains, an Investigate Mode row action that scopes directly to that domain in the Query Log, and CSV export of active and historical requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Three MDM configuration keys got behavior fixes in iOS Roaming Client v1.4.5: dns_over_tls_enabled now accepts false from first device registration and persists the setting across DNS extension restarts; changes to dhcp_dns_search_domains now take effect within one configuration refresh with no DNS extension restart required; and the userName MDM field now populates the Last Logged in User field immediately on initial device registration.

dns_over_tls_enabled: false
userName: jane.doe@example.com
dhcp_dns_search_domains:
  - example.com
  - corp.example.com

GA launch of the DNSFilter MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. under Integrations → AI Connectors, connecting AI assistants (Claude, ChatGPT, Codex) to DNS activity, threat data, policy management, and allow/block lists via the Model Context Protocol. Users copy the server URL from the AI Connectors card and paste it into their AI client as the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server endpoint to complete authentication.

Redesigns the Whitelabel settings page as a dedicated Branding page, exposing Logo, Favicon, Dashboard Name, and Subdomain URL as individual, first-class branding objects. New MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. provisioned after September 15 get a branded subdomain (yourdomain.dnsfilter.com) configured with current branding defaults.

The .mobileconfig file now bundles DNSFilter root certificates alongside the iOS Roaming Client configuration so a single MDM profile push installs both; reinstalling the client now reuses the existing device record instead of creating a duplicate registration entry; and registered devices now sync with the DNSFilter dashboard only on device state changes instead of every 60 seconds.

Adds Agent Identities (Public Preview) under Identity Management > Agents for managing non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. such as AI agents: OAuth client credentials are generated on the agent's Authentication tab for the JumpCloud AI Gateway, group-based SSO application access is granted via Identity Management > Agent Groups, and MCP server authorization is configured from the agent's Applications tab via Manage connections.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Deprecates GET api/systemusers/reactivate/{id}, which now returns a 404, in favor of POST https://console.jumpcloud.com/systemusers/reactivate/{id} accepting { activation_email: {email_address} } in the request body; any script or integration using the old endpoint must be updated.

$ curl -s -X POST 'https://console.jumpcloud.com/api/systemusers/reactivate/{id}' -H 'x-api-key: <api_key>' -H 'Content-Type: application/json' -d '{"activation_email": "user@example.com"}'

Dynamic Groups API memberQuery filters now use $lte and $gte operators, replacing the deprecated $le and $ge syntax, aligning filter syntax across all API list endpoints; requests using the old operators must be updated.

Enable Access Risk Detection to monitor risk factors such as impossible travel, dormant accounts, and unfamiliar devices, tune detection thresholds, and route high-severity alerts to a configured Slack webhook based on minimum severity level.

Adds an Update Version action on an application's Details tab in the Private Repository, letting admins upload a new binary for an existing custom app without creating a new application, reassigning devices, or rebinding device groups; Windows EXE updates require entering an install success exit code before deployment.

Enforces modern TLS cipher suites for all LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. connections, limiting to TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, and TLS_RSA_WITH_AES_128_GCM_SHA256, removing CBC-mode and SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications./SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. suites.

New software management policy lets admins delay or block macOS Ventura upgrades fleet-wide until app compatibility is validated, configured via Device Management > Policies > New Policy > macOS > Software Update > Delay or Block macOS Ventura with a configurable deferral period bound to a target device group.

New policy under Device Management > Policies > macOS > Managed Login Items lets admins add the JumpCloud Agent (or other persistent management software) to a managed items list, preventing macOS 13 Ventura end users from disabling it via System Settings.

API list-endpoint filters now support a backslash escape for literal pipe characters inside in filter values, e.g. filter=department:$in:Finance \| Accounting|IT, previously impossible.

$ curl -s -H 'x-api-key: <api_key>' 'https://console.jumpcloud.com/api/systemusers?filter=department:$in:Finance \| Accounting|IT'

Adds a dedicated mapping UI for prebuilt and custom SCIM apps supporting name overrides, extended schema mapping, and side-by-side object transformation previews; custom activation validation now supports selecting custom group names and representative test users and groups instead of hard-coded defaults, with all sync rules and activities logged to Directory Insights.

Adds Push Bombing Mitigation settings under Security > MFA Configurations (JumpCloud Protect), including a sixty-second lockout window and configurable maximum concurrent push attempts, to counter fraudulent MFA push floods.

Multi-Tenant Portal adds a Global MFA Requirement toggle under Account > Settings to enforce MFA for all MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. admins in a tenant.

New Multi-Tenant Portal Homepage widget shows MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies., SSO, and AzureAD certificate/token expiry status across all managed tenant organizations from a single dashboard.

Access Requests now support configuring a webhook (e.g. pointing to a JIRA instance) under Access Requests > Settings so each new request submission automatically creates a ticket and notifies the team in real time.

Adds a User Group Exclusion option under MFA > JumpCloud Protect > Unified MFA settings, letting admins exclude a group from Push MFA enforcement so those users authenticate with TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. only while remaining in the unified JumpCloud Protect experience.

Aembit adds Content Security as a new capability type on Aembit Access Policy objects, letting administrators attach a CrowdStrike AIDR content-security configuration to the same enforcement path that governs MCP access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ It covers three MCP inspection checkpoints per policy — tool listings, tool inputs, and tool outputs — with AIDR returning an allow, block, or transform verdict that Aembit enforces inline.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Every CrowdStrike AIDR finding is correlated with Aembit's identity and policy context (agent, target MCP server, applicable policy, Content Security decision) in a single workload event, and the integration is configurable through the Aembit UI, API, or Terraform with no changes required to existing AIDR console configuration.

Remote Support can now automatically install version upgrades during a configured maintenance window via the Automatic Updates Channel setting, which offers Fast Track, Standard Track, or Enterprise Track (a setting first introduced in 25.3.1).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Rollout is staggered by channel: Fast Track sites begin upgrading to 26.3.x in mid-November 2026, Standard Track after 27.1 GA, and Enterprise Track after 27.2 GA, and no deployment is ever moved to a version older than 26.3.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Admins can opt out and keep manual updates by clearing Automatically install the latest updates during maintenance day(s) and time in the /appliance interface under Updates > Maintenance Window.

Adds the Allow audience members to introspect tokens setting on the OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..0 provider, permitting any client whose client_id appears in a token's aud claim to introspect that token without needing a dedicated scope.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Enable it in the admin console via Native Consoles > Access Management > Realms > <realm> > Services > OAuth2 Provider > Advanced (Services > OAuth 2.0 Provider in Advanced Identity Cloud), toggling Allow audience members to introspect tokens.

Adds the Store Software Statement setting on the OAuth 2.0 provider to persist the software statement provided during dynamic client registration (DCR) in the client configuration and return it in DCR read responses, useful for auditing which software statement a dynamically registered client used. Enable it via Native Consoles > Access Management > Services > OAuth 2.0 Provider > Dynamic Registration > Store Software Statement in OAuth2 Client.

Adds an Authentication Request Storage option on the hosted IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. to configure where SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. authentication requests are stored, enabling concurrent SAML SSOSAML SSOAn authentication protocol that lets a user log in once with an identity provider and access multiple services without re-entering credentials, by passing signed XML assertions between parties. attempts across multiple browser tabs or browsers to complete independently.