The Cyber Toolchain — issue 082, September 22, 2026

Adds QA states to Evidence so teams can track review status and gate client-facing deliverables — Excel and Word exports now only include Evidence marked as published.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ In practice, a reviewer opens a piece of Evidence, sets its QA state to Published from the Evidence view, and only published items appear in the subsequent Word or Excel export.

Adds a Roslin agent tab to Content Blocks to draft report sections (executive summaries, methodology, scope notes) from the full project content including Issues and Evidence, without leaving the block. A user opens a Content Block, selects the Roslin tab, and prompts it to draft a section based on the project's findings.

Veracode Integration for Jira Server v5.0.2 adds support for Jira 11, including Java 21 and platform compatibility with Jira 11.3.10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds an opt-in sessionVerification block under app.authentication in stackhawk.yml with pollFrequency (default 15), activeScanPollFrequency (default 5), maxUnauthenticatedRequestPercent (default 5), and disabled fields to actively poll authentication.testPath and re-authenticate sessions mid-scan rather than relying on passive response indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Supports both HTTP testPath and gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. testPath.grpcTestMethod styles, with testPath.type values HEADER and BODY honored, and surfaces a coverage warning at scan completion if too many mid-scan checks fail unauthenticated, catching scans that silently ran as an anonymous user; disabled: true turns off active checks while still requiring an indicator-based check.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

app:
  authentication:
    sessionVerification:
      pollFrequency: 50
      activeScanPollFrequency: 10
      maxUnauthenticatedRequestPercent: 10
      disabled: false

app:
  authentication:
    sessionVerification:
      pollFrequency: 20
      activeScanPollFrequency: 3
      maxUnauthenticatedRequestPercent: 5

app:
  authentication:
    sessionVerification:
      pollFrequency: 20
      activeScanPollFrequency: 3
      maxUnauthenticatedRequestPercent: 5

Adds a one-line installer script, curl -sSf https://download.stackhawk.com/hawk/install.sh | sh, that detects OS and architecture and verifies SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. against the published manifest. Supports HAWK_INSTALL_VERSION to pin the CLI version (recommended for reproducible CI pipelines) and HAWK_INSTALL_DIR to control install location, which defaults to ~/.hawk/bin.

$ HAWK_INSTALL_VERSION=6.5.0 HAWK_INSTALL_DIR=/usr/local/bin curl -sSf https://download.stackhawk.com/hawk/install.sh | sh

$ HAWK_INSTALL_VERSION=6.5.0 HAWK_INSTALL_DIR=/opt/hawk/bin curl -sSf https://download.stackhawk.com/hawk/install.sh | sh

GitHub Enterprise adds a new View enterprise credentials fine-grained permission granting members access to the credential inventory alongside enterprise owners, plus new paginated REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints to programmatically retrieve the complete inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ An Export CSV option in enterprise Settings -> Authentication Security -> Credentials downloads the full inventory, which includes owners, scopes and permissions, creation and expiration dates, last-used dates, and target organizations or repositories; it can be filtered by user, app, credential type, or organization, and covers SSH keys, classic and fine-grained personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it., OAuth App access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions., and GitHub App user-to-server and installation tokens.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

The pull requests page now supports advanced search with AND and OR keywords and nested searches, and bulk actions to close, label, or change milestones on one or more pull requests at once. A collapsible sidebar gives quick access to common filters like Authored by me and Involves me and can be collapsed to expand the list view; a compact presentation mode fits more pull requests on the page. The list now surfaces status check counts, stack indicators, unread-update indicators, milestones, linked issues, and author badges directly, clicking a review status filters the list by that status, and full profile names are shown when enabled for an enterprise.

The Grok 4.7 reasoning model is now available in GitHub Copilot across VS Code, JetBrains, Xcode, Eclipse, CLI, and the cloud agent. Copilot Enterprise and Business administrators manage access via the model policy in Copilot settings, where new models are auto-enabled under the global default unless explicitly disabled.

Hunter Agent is a new AI-driven verification layer that runs structured multi-stage playbooks to detect business-logic, broken access control, and authentication/session vulnerabilities — classes of flaw that static analysis and SCA miss.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Findings surface as standard SonarQube issues (with severity, file, and line) inside the existing triage, assignment, and tracking workflow, and are also summarized on a dedicated Hunter Agent page; it can be run manually or on a daily schedule against long-lived branches.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ It produces a reproducible, auditable evidence trail from detection through remediation, mapped to DORA, NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against., PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. 4.0.1, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., EU CRAEU CRAEU Cyber Resilience Act, a European Union regulation requiring manufacturers and publishers of products with digital elements to meet mandatory cybersecurity standards before selling into the EU market., NYDFS, and FDA 21 CFR Part 11 requirements.

PAT Governance reminders now support CC recipients so additional addresses (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ a security distribution list) are copied on every pre-expiry PAT reminder. Per-token-class reminder schedules add optional classic and fine-grained overrides that replace the shared default schedule (30, 7, 1 days before expiry) for one class. Per-token-class and per-reminder-band subject and body editors are prefilled with the default email and support placeholders for owner, token name, organization, days left, expiry date, and the management URL.

⤢ ⤢

Artifactory adds LuaRocks as a native repository type, supporting local, remote, and virtual repository configurations for Lua packages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Remote repositories proxy and cache the public luarocks.org registry, serving cached rocks on subsequent requests. Local repositories let CI jobs publish .rock files and host private rocks and Kong plugins so Kong nodes can install versioned plugins from a single internal endpoint, while a virtual repository unifies private and cached public rocks behind a single URL for the luarocks client.

⤢

The Scaleway Token detector now catches SCW_SECRET_KEY and SCALEWAY_SECRET_KEY assignments, including documents where the word scaleway is absent.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ The Splunk Authentication Token detector now also matches an optional Splunk host alongside the token. The Salesforce OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Keys detector now captures the Salesforce instance host and validates against that instance's OAuth token endpoint (production or sandbox), returning failed_to_check when no host is found. The Username Password detector now also matches Spanish, Portuguese, French, and Turkish username/password assignment keywords. The generic_high_entropy_secret and generic_encryption_key detectors now report secrets/keys located near a localhost mention. The generic_database_assignment_attached_port detector has been merged into the generic_database_assignment detector. The Google API Key detector now catches keys containing only one digit.

Adds detectors for Brightcove OAuth credentials, Infor ION API Gateway OAuth client credentials (capturing the authorization host and token endpoint when present), generic Sanctum tokens, Telnyx API keys, Bifrost virtual keys (matched alone or together with the Bifrost deployment URL), Bitbucket HTTP access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with the BBDC- prefix, Jira Data Center personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it., MetaApi cloud tokens, Appwrite instance encryption keys, and APIclub API keys.

Adds CS_MODE_X86_AMD and CS_MODE_X86_INTEL mode flags for x86 to enable vendor-specific disassembly behavior, currently affecting JO/JNO operand size and notation in 64-bit mode; default x86 behavior is unchanged.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

csh = Cs(CS_ARCH_X86, CS_MODE_64 | CS_MODE_X86_INTEL)
for insn in csh.disasm(code, 0x1000):
    print('0x%x:\t%s\t%s' % (insn.address, insn.mnemonic, insn.op_str))

cs = Cs(CS_ARCH_X86, CS_MODE_64 | CS_MODE_X86_AMD)
for i in cs.disasm(code, 0x1000):
    print(i.mnemonic, i.op_str)

Gates Xtensa ESP32-S3 and HIFI3 instructions behind the new CS_MODE_XTENSA_ESP32S3 mode flag to avoid unintended decode on other Xtensa targets.

csh = Cs(CS_ARCH_XTENSA, CS_MODE_XTENSA_ESP32S3)
for insn in csh.disasm(firmware_bytes, 0x40000000):
    print('0x%x:\t%s\t%s' % (insn.address, insn.mnemonic, insn.op_str))

cs = Cs(CS_ARCH_XTENSA, CS_MODE_XTENSA_ESP32S3)
for i in cs.disasm(firmware_bytes, 0x40000000):
    print(i.mnemonic, i.op_str)

The local connector endpoint is now configurable, a change introduced via PR #2069, and MIN_TCP_SERV has been moved to defaults where it can be adjusted via scanning profiles.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds bootloader-level full file system and decrypted keychain extraction for Apple TV 4K 2nd Gen (A12 Bionic) via the usbliter8 SecureROM exploit, recovering accounts, authentication tokens, paired device records, network history, and Siri-related artifacts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ This is the first time iOS Forensic Toolkit's low-level extraction has been extended past the A11 generation of Apple silicon.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

A free demo server at demo.flowcarp.com supports identifying 600+ known C2 protocols without a local FlowCarp install; a PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. can be submitted directly via curl --data-binary @dump.pcap https://demo.flowcarp.com.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

$ curl --data-binary @dump.pcap https://demo.flowcarp.com | jq

Adds dissection of the MPTCP MP_TCPRST sub-option (subtype 0x8), including the U/V/W/T flags and reset reasons such as Middlebox interference.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Also parses the data_len field in the MPTCP MP_CAPABLE option and prints all eight capability flags (A through H).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds the ALLOWED_HOSTS environment variable (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ -e ALLOWED_HOSTS='*.killercoda.com') to support serving SO-CRATES behind a reverse proxy or cloud hostname.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Browsing via IP or localhost requires no change, but deployments behind a proxy or cloud hostname must now set this variable or they will error out.

$ docker run -e ALLOWED_HOSTS='*.killercoda.com' so-crates

Docker/Podman compose files now publish the port on localhost only by default; to allow other hosts on the network to reach SO-CRATES, change the port mapping to "8000:8000".

Aviatrix adds post-quantum key exchangepost-quantum key exchangeA cryptographic handshake algorithm designed to resist attacks from quantum computers, using math problems like lattices that quantum algorithms cannot efficiently solve, letting tools stay secure against future quantum-capable adversaries. using the ML-KEM standard on the control plane across Aviatrix-encrypted paths, making intercepted traffic unreadable to future quantum computers without a hardware refresh or network redesign.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ The post-quantum algorithm is exposed as a configuration setting — crypto agility — so it can be swapped via a configuration push rather than a hardware refresh cycle.

A self-service Containment Assessment tool tests five properties of the cloud estate and returns a provisional Blast Radius and harvest exposure read in approximately five minutes. Containment Assessment level 2 extends this with a read-only, agentless engagement against live runtime flows that quantifies exposure as Reachable Value at Risk in dollars, before any policy is written.

Performs a full-estate baseline scan followed by always-on testing as an organization's environment changes, covering web apps, APIs, cloud infrastructure, source code repositories, and network assets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Routes offensive security tasks to the model best suited for each job, addressing the finding that no single model catches more than 40% of vulnerabilities and that leading models share less than 10% overlap in identified exposures.

Adds a GET /reload webserver endpoint reporting process identity, reload generation, and readiness so integrations can verify a completed reload, plus a new reload_control configuration key that opens a Unix socket accepting POST /reload for local reload requests (disabled by default).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds an engine_timeout option to the container plugin (defaults to 10 seconds) to prevent an unresponsive runtime socket from blocking Falco startup indefinitely; set to 0 to disable.

Adds \xHH byte escape syntax in rule conditions for matching filenames or process arguments containing arbitrary bytes not representable as valid UTF-8, and now preserves raw bytes when extracting field values for rule matching rather than sanitized replacements. Both text and JSON alert output now escape control characters and replace invalid UTF-8 sequences for printable output; rule conditions and output consumers that relied on the old UTF-8 sanitization behavior will behave differently and should be reviewed after upgrading.

- rule: Suspicious Raw Byte Argument
  desc: Detects a process argument containing a specific non-UTF-8 byte
  condition: proc.args contains \xc0\xae
  output: 'Suspicious raw byte in argument (proc=%proc.name args=%proc.args)'
  priority: WARNING

Adds two sandbox rules — Container Accessing GPU Device and GPU Management Tool Run in Container — for detecting GPU resource hijacking inside containers; both are disabled by default and require tuning the user_known_gpu_workloads list before enabling.

Supports FALCO_DRIVER_CHOICE=none to skip driver setup and FALCOCTL_DRIVER_VERSION to specify an explicit driver version during DEB/RPM package upgrade transactions. DEB/RPM upgrades now also start the selected Falco service and install the driver automatically, so unattended upgrade scripts and custom driver pins must be reviewed to avoid unintended changes.

The modern eBPF probe now uses two auxiliary buffers per CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. to protect event construction on preemptible kernels, with graceful fallback and a warning on kernels lacking required BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. atomic operations — this doubles auxiliary map memory usage per CPU, so capacity should be reviewed before upgrading. New eBPF counters expose drops caused by reentrancy and exhausted auxiliary buffers, and CPU migrations, to help distinguish preemption-related capture pressure from other drop causes.

The container_engines.* configuration keys have been removed from the configuration schema; migrate to the container plugin configuration (e.g. engines.cri.sockets) instead.

Falco 0.45.0 refuses to load kernel modules or probes not compatible with driver API 11.0.0 — updated drivers must be deployed before upgrading.

A new -Ddebug_logging=true Meson build option enables verbose debug logging in bubblewrap, gated at runtime by the DEBUG_INVOCATION environment variable so builds can ship with the capability without enabling it by default.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

$ meson setup _builddir -Ddebug_logging=true
meson compile -C _builddir
DEBUG_INVOCATION=1 _builddir/bwrap --ro-bind /usr /usr --proc /proc --dev /dev --unshare-pid bash

Adds harvesting of the disableLocalAuth property and firewall IP rules (including 0.0.0.0 datacenter-access detection) for Azure Distributed Table (Cosmos DB) resources, plus three new Query Filters — Distributed Table Local Authentication Configuration (default: enabled), Distributed Table Encryption Configuration (default: provider-managed), and Distributed Table Without Network Traffic Restrictions — and three matching Insights: Distributed Table With Local Authentication Enabled, Distributed Table Encrypted With Provider Managed Key, and Distributed Table Without Network Traffic Restrictions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds harvesting of private endpoint connection counts for Azure Database for MySQL and PostgreSQL Flexible Servers, plus three new Query Filters — Database Instance Microsoft Entra-Only Authentication (default: not configured), Database Instance Flexible Private Endpoint Connections (configurable by engine type, default: MySQL Flexible Servers without private endpoints), and Database Instance Firewall Allows Public Ingress (flags a rule with start IP 0.0.0.0 and end IP other than 0.0.0.0, excluding the Azure services-only 0.0.0.0–0.0.0.0 rule) — and five new Insights: Database Instance Without Microsoft Entra-Only Authentication (MySQL), Database Instance Without Private Endpoint (MySQL Flexible Server), PostgreSQL Database Instance With Public Network Access Enabled, PostgreSQL Database Instance Without Private Endpoint Connection, and Database Instance Firewall Allows Public Ingress (SQL Server).

Updates the Database Instance Log Retention Below Threshold (PostgreSQL) Insight to detect Azure PostgreSQL Flexible Servers where logfiles.retention_days is set to 3 days or fewer, and updates the Database Instance With Setting Below Threshold log_retention_days (PostgreSQL) Insight to match both the legacy log_retention_days and updated logfiles.retention_days parameter names using an OR condition.

Adds inspector2_coverage_scan_status_active, inspector2_coverage_recently_scanned (configurable via inspector2_max_days_since_last_scan, default 3), inspector2_active_findings_no_known_exploited_vulnerabilities, inspector2_active_findings_kev_within_due_date, inspector2_active_findings_within_max_age (configurable via inspector2_active_finding_max_age_days, default 192), elbv2_listener_fips_tls_enabled, and transfer_server_fips_security_policy_enabled.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Also adds inspector2:BatchGetFindingDetails to the Prowler additions policy and CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. scan role so the KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. checks can pull CISA Known Exploited Vulnerability data directly from Inspector without an external feed; a missing permission now reports MANUAL instead of a false FAIL.

Adds fedramp_20x_ksi_2026, a universal compliance framework covering the 46 FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. Key Security Indicators across AWS, Azure, GCP, Kubernetes, and M365 from a single definition, and fedramp_20x_frr_class_c_2026, covering 158 FedRAMP Class C provider rules across the same providers. These replace the pilot per-provider frameworks fedramp_20x_ksi_low_aws, fedramp_20x_ksi_low_azure, and fedramp_20x_ksi_low_gcp; any automation or stored results referencing the pilot IDs must be updated.

Adds UI_SELF_REGISTRATION_ENABLED environment variable for Prowler Private Cloud deployments; set to false to make sign-up invitation-only, hiding the Sign up link and Create organization option.

When PROWLER_AWS_PARTITION is set, bootstrap STSSTSAWS Security Token Service, an Amazon Web Services API that issues short-lived credentials for IAM roles, letting cyber tools authenticate to AWS without storing long-term secrets. calls now try up to two additional regions in the partition on connection errors or timeouts, so GovCloud scans succeed on networks that route only to one regional endpoint.

Adds DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL environment variable to sign report download URLs against a browser-reachable storage host, enabling downloads on deployments where object storage is only reachable inside the container network.

Expired invitations are now re-invitable: a pending invitation past its expiry is marked expired and a new invitation is created for the same email rather than returning a generic error; filter[state__in] on the invitations endpoint no longer returns a server error.

Wiz added a GA WIN (Wiz Integration Network) partners endpoint in the Wiz MCP, letting partner AI agents — Claude Code, Cursor, GitHub Copilot, or any remote-MCP-capable agent — search WIN documentation, retrieve API operations and required scopes, and query demo environment data without manual API calls.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ This introduces MCP-based agent integrations in WIN that let partner agents pull live Wiz context — Issues, Findings, affected resources, attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately., and blast radius — directly from customer tenants on demand during investigations.

An October 12 default-user change in the sonar-scanner-cli image alters where the tool resolves its working directory, requiring pipelines to explicitly pass -Dsonar.working.directory=/usr/src/.scannerwork -Dsonar.projectBaseDir=/usr/src (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ docker run --rm -v "$(pwd):/usr/src" cgr.dev/chainguard/sonar-scanner-cli -Dsonar.working.directory=/usr/src/.scannerwork -Dsonar.projectBaseDir=/usr/src) to preserve existing behavior.

$ docker run --rm -v "$(pwd):/usr/src" cgr.dev/chainguard/sonar-scanner-cli -Dsonar.working.directory=/usr/src/.scannerwork -Dsonar.projectBaseDir=/usr/src

Chainguard launched a Sovereign Artifacts beta that stores and serves Chainguard Containers and Chainguard Libraries artifact bytes in an EU region for enrolled customers, with automatic backfill of existing artifacts and approximately 30% faster pulls from Europe.

Policies now support VEX annotations, automatically factoring in VEX status values such as not_affected or fixed to suppress false positives and prevent unnecessary build breaks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

A new lightweight container image, the Anchore Enterprise MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server, gives AI agents and tools direct, structured access to vulnerability findings, policy evaluation results, and SBOM catalog data without custom API integration scripts.

Anchore now natively inspects container images for AI/ML model artifacts, including GGUFGGUFThe single-file model format used by llama.cpp and Ollama, holding the weights, usually quantized, together with the tokenizer and settings needed to run the model locally. files and Docker Model structures, indexing them as packages in the central SBOM catalog alongside traditional software components.

Cloud SIEM adds Dynamic Severity rules that adjust the severity of security signals based on the assets they affect, with customizable severity levels, custom tags, and rule-scoped isolation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Access to these rules can be restricted with role-, team-, and user-level controls, requiring at least one editor role the current user belongs to before saving — done from the rule list's vertical three-dot menu via Restrict access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Threshold detection rules now support below-threshold detection cases (a < N and a <= 0) alongside the existing above-threshold case (a > N).

Databricks Runtime 19 adds the truncate function to SQL, Scala DataFrame, and Python DataFrame APIs to truncate a number to a specified scale without rounding, and trim_array to remove elements from the end (positive count) or beginning (negative count) of an array.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ It also adds the spark.pythonWorkerEnv.<variable-name> configuration prefix to set session-scoped environment variables for Python UDF scalar worker processes, and enables auto-optimized shuffle v2 by default for workloads that do not set a fixed shuffle partition count.

spark.conf.set("spark.pythonWorkerEnv.MY_SECRET_PATH", "/dbfs/secrets/my_secret.txt")

$ SELECT truncate(price, 2) AS truncated_price FROM transactions;

$ SELECT trim_array(tags, 2) AS trimmed_tags FROM events;

The system.query.history system table is now GA, providing account-wide records of SQL warehouse and serverless compute executions, including execution status, duration metrics, and query source.

VARIANT cast support in ABAC column masks now extends to ARRAY and MAP column types, in addition to previously supported STRUCT and other types, requiring Databricks Runtime 19 or above.