Jun 23, 2026 · intuitem · News · 1 min read

What's New in CISO Assistant — Week 26, 2026 (v3.18.3)

A focused patch release that surfaces evidence at the domain level, centralizes folder/domain field rendering, and hardens IAM checks while retiring the fallback login endpoint.

A single, tightly-scoped release this week — v3.18.3 on June 22 — pairing a security hardening pass with a few quality-of-life improvements ahead of the larger v3.19.0 minor.

Security

Hardened IAM checks & retired fallback login — Integration IAM checks were tightened and the fallback login endpoint decommissioned, closing off a legacy authentication path (PR #4383). This is a breaking change — review any automation that relied on the old endpoint. Thanks to @ab-smith.

New Features

Evidence at the domain level — Evidence is now visible directly within a domain, making it easier to see supporting documents in context (PR #4369). Thanks to @eric-intuitem.

UX

Centralized folder/domain field rendering — Folder and domain field rendering is now centralized in ModelForm.svelte, giving consistent behavior across forms (PR #4373). Thanks to @eric-intuitem.
Reusable add-journey modal — The add-journey modal is now reused and supports other objects, reducing duplication across the UI (PR #4390). Thanks to @ab-smith.

Bug Fixes

Library import ref_id limit — Raised the limit on ref_id during library imports to accommodate larger references (PR #4291). Thanks to @melinoix.

For full details, check out the v3.18.3 release notes on GitHub.

Back to Blog

View All Posts »

What's New in CISO Assistant — Week 48, 2026 (v4.2.3 – v4.3.0)

v4.3.0 lets AI apps connect to the MCP server with an OAuth sign-in, adds an evidence review queue with a four-eyes option, a briefing-style home page, a richer framework report with evidence zips, scenario selection across risk assessments and their exports, a denser control plan, federated service accounts, a dedicated space for third parties and optional memcached, plus ITSP.10.033, ISO 14001:2015, LYSS and a Hungarian NIS2 preset.

What's New in CISO Assistant — Week 47, 2026 (v4.2.2)

v4.2.2 adds NIS2 and GDPR incident follow-up with deadline reminders and CCB/APD notification worksheets, cumulative maturity levels and weakest-link scoring for Essential Eight and ASD Essentials, asset lifecycle stages, simpler metrics, per-role field access in audits, EBIOS RM study duplication, a report time zone, and new libraries: ASD ISM September 2026, Swift CSCF 2026 and 2027, SAMA BCM and the German NIS-2 Implementation Act.

What's New in CISO Assistant — Week 46, 2026 (v4.2.0 – v4.2.1)

v4.2.0 moves the frontend to SvelteKit 3, adds notifications for assignments, approvals and reviews, Typst templates for PDF audit reports, vendor posture views by tier, required evidence in questionnaires, a portals editor that links documents, EBIOS RM workshop 5 in Excel export, order-independent mapping inference, Norwegian Bokmål and Turkish, and new libraries: SOC-CMM, PIPEDA, Czech Decree 409/2025, NCA DCC and CSCC, OWASP Top 10 2025 and MonServiceSécurisé.

What's New in CISO Assistant — Week 45, 2026 (v4.1.3 – v4.1.5)

v4.1.3 to v4.1.5 bring tiering to solutions with propagation to their vendors, an experimental spreadsheet import wizard with column mapping, labels on assessments and studies with a label management view, DPIA import from CNIL PIA exports, a Microsoft Graph mail transport, questionnaire compliance on entity assessments, a rebuilt n8n node, SAML account-linking fixes and the Brotli fix.