Security Changelogs

Renovate Releases

Renovate security updates

security

about 1 hour ago

44.155.6about 1 hour ago

44.155.5about 2 hours ago

44.155.4about 3 hours ago

Checkov Releases

Checkov IAC Scanning Policy Updates

security

about 6 hours ago

3.3.29about 6 hours ago

3.3.281 day ago

3.3.272 days ago

Dependabot Updates

Security updates for dependencies

security

about 23 hours ago

v0.400.0about 23 hours ago

v0.399.08 days ago

v0.398.016 days ago

Burp Suite Updates

PortSwigger Burp Suite security testing updates

security

1 day ago

Professional / Community 2026.101 day ago

Professional / Community 2026.9.24 days ago

DAST 2026.105 days ago

1Password CLI Changelog

1Password CLI updates

security

1 day ago

2.41.0  (build #2410001 ) – released 2026-10-121 day ago

2.40.0  (build #2400001 ) – released 2026-10-0113 days ago

2.39.0  (build #2390001 ) – released 2026-08-142 months ago

Cloudflare Product Updates

Cloudflare CDN security updates

cdnsecurity

4 days ago

Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash4 days ago

Everything we launched during Birthday Week 20268 days ago

Protected Quick Tunnels: simple accountless authentication for your next dev project11 days ago

Cloudflare Updates

Cloudflare CDN security edge updates

cdnsecurity

4 days ago

Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash4 days ago

Everything we launched during Birthday Week 20268 days ago

Updates on our pledge to make Cloudflare features accessible to everyone11 days ago

Metasploit Framework Releases

Pentesting framework updates

securityframework

5 days ago

6.5.65 days ago

6.5.522 days ago

6.5.4about 1 month ago

TruffleHog Releases

TruffleHog security updates for DevSecOps and secret scanning

security

5 days ago

v3.99.25 days ago

v3.99.15 days ago

v3.99.07 days ago

OWASP ZAP Releases

OWASP ZAP security vulnerability scanner updates

security

5 days ago

w2026-10-085 days ago

w2026-09-3013 days ago

w2026-09-2320 days ago

Vault Releases

HashiCorp Vault security updates

security

6 days ago

v2.2.0-rc16 days ago

v2.1.26 days ago

sdk/v0.26.019 days ago

Vault Releases

HashiCorp Vault security updates

security

6 days ago

v2.2.0-rc16 days ago

v2.1.26 days ago

sdk/v0.26.019 days ago

Vault Changelog

HashiCorp Vault security and secrets changelog

securitysecrets

6 days ago

v2.2.0-rc16 days ago

v2.1.26 days ago

sdk/v0.26.019 days ago

Lets Encrypt Updates

SSL certificate updates for secure web applications

encryptionsecurity

7 days ago

64-Day Certificate Lifetimes Coming Feb 20277 days ago

How We Built a Data Warehouse Using ClickHouse27 days ago

Going Back to Our Roots: A Little Piece of Let's Encrypt History2 months ago

Snyk Updates

Snyk DevSecOps updates

security

7 days ago

Container: Go standard library vulnerability reporting General availability Snyk Container will begin reporting vulnerabilities from the Go standard library for all customers. Scans of container images built from Go binaries identify the standard library version the binary was compiled with and report known vulnerabilities against it. Affected images gain a new stdlib dependency in the dependency graph, versioned to the Go release used for the build, for example stdlib@1.25.10. Detection works for standard, stripped, and CGo builds. No configuration is required, and reporting is enabled automatically for all organizations. Standard library reporting in the Snyk CLI requires v1.1303.2 or later. This change is scheduled to take effect on October 7, 2026. Snyk Container reported vulnerabilities in third-party Go dependencies, but not in the Go standard library itself, the HTTP, TLS, JSON, and other libraries that ship with the Go toolchain rather than being installed as dependencies. Those vulnerabilities were visible only indirectly, through distro advisories, so teams shipping Go binaries in containers had no reliable way to see them. That left two gaps: one between what Snyk Container reported and what Snyk Open Source already reported for the same code, and one in real coverage for any Go application running in a container - this change closes both. If you scan container images built from Go binaries, your vulnerability counts will increase. Each affected project gains a fixed number of new findings, determined by the Go version the binary was built with. Older Go releases carry more. Building with a current Go patch release substantially reduces or eliminates these findings. Images built with Go 1.25.13 or later, or Go 1.26.6 or later, report no new vulnerabilities from this change. We recommend reviewing the Go versions used in your build pipelines ahead of the release date. Considerations and known limitations: Snyk does not perform reachability analysis on standard library packages. Snyk reports all known vulnerabilities for the standard library version in your binary, rather than only those in packages your code imports. This is consistent with the approach taken by other container scanners. Findings that are not relevant to your application can be ignored in Snyk as usual For more information, see Application vulnerabilities in Snyk Container and Snyk Open Source in the Snyk user documentation: https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-container/how-snyk-container-works/application-vulnerabilities-in-snyk-container-and-snyk-open-source Tags: container cli scm-import September 16, 2026 Custom CA Certificate Support7 days ago

ADS installer now available as a packaged binary Improved The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page. The installer registers a scheduled job on the machine, so Agent Supply Chain Security scans run on their own schedule without needing MDM. What The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page in Evo. Why Deployment no longer means wrapping a downloaded file in your own script, you now get a standard signed installer for macOS or Windows. The installer now stays on the machine in a predictable location. Scan timing is no longer tied to your MDM policy. How In Evo, open Settings, choose your products and select Save & Publish. Choose your operating system and architecture, select Download ADS Installer, install the package, then run the installer with your Tenant ID and push key. Your onboarding workflow, MDM policies, tenant and push key are all unchanged. Downloading the installer directly from the CDN remains available. Things to know Linux is unchanged. The command line install remains supported and is documented alongside the package flow. For more information, see the documentation: https://docs.snyk.io/agent-security/evo-by-snyk/agentic-development-security-ads Nina Kanti | Senior Product Manager Tags: snyk-studio September 23, 2026 Announcing Snyk CLI v1.1307.421 days ago

Evo MCP Server now available General availability You can connect any MCP client, such as Claude, Codex or Cursor, to Evo and ask about your AI estate from the agent you already work in. What's new. You can now: Ask what AI assets Evo has discovered across your code, your developer machines, and your pentest targets See how those assets connect, for example which MCP servers an agent uses or which findings came from a target Read your policies and the violations open against them Create and update policies without leaving your agent To get started, check out our documentation Nina Kanti | Senior Product Manager Tags: mcp September 18, 2026 Announcing Snyk CLI v1.1307.326 days ago