Implementation notes, threat analysis, and release history. For current supported controls and their prerequisites, use the security guides.
Release Notes ·
1-SEC v0.4.21 hardens profile and parser boundaries, turns vulnerability scans into blocking release gates, fixes Rust engine version reporting, adds a native Windows ARM64 engine, and verifies every published artifact with checksums, Sigstore bundles, and GitHub provenance.
Release Notes ·
Implements 7 action items from the weekly vulnerability intelligence pipeline. Adds Unicode NFKC normalization bypass detection (CVE-2026-25673), management interface RCE signatures, agentic PII exfiltration heuristics, agent goal-action alignment monitoring, delegation chain verification, a 9-phase Unicode folding normalizer, and C2 beacon jitter analysis in the Rust sidecar.
Release Notes ·
9 new detections across 5 Go modules and the Rust sidecar covering CVE-2026-26331 (yt-dlp RCE), CVE-2026-25545 (Astro SSRF), CVE-2026-20127 (auth bypass), indirect prompt injection via zero-width characters, agent lateral movement tracking, PQ curve inventory auditing, and polyglot file magic byte validation.
Release Notes ·
The biggest 1-SEC release yet. Ships an Agent Skill so AI agents can install security on themselves, a multimodal hidden injection scanner for images/PDFs/HTML, 16 new prompt injection patterns, an updated VPS-agent enforcement preset, Telegram webhook support, and a full operations runbook for autonomous agents.