Jun 23, 2026 · intuitem · News · 1 min read

What's New in CISO Assistant — Week 26, 2026 (v3.18.3)

A focused patch release that surfaces evidence at the domain level, centralizes folder/domain field rendering, and hardens IAM checks while retiring the fallback login endpoint.

A single, tightly-scoped release this week — v3.18.3 on June 22 — pairing a security hardening pass with a few quality-of-life improvements ahead of the larger v3.19.0 minor.

Security

Hardened IAM checks & retired fallback login — Integration IAM checks were tightened and the fallback login endpoint decommissioned, closing off a legacy authentication path (PR #4383). This is a breaking change — review any automation that relied on the old endpoint. Thanks to @ab-smith.

New Features

Evidence at the domain level — Evidence is now visible directly within a domain, making it easier to see supporting documents in context (PR #4369). Thanks to @eric-intuitem.

UX

Centralized folder/domain field rendering — Folder and domain field rendering is now centralized in ModelForm.svelte, giving consistent behavior across forms (PR #4373). Thanks to @eric-intuitem.
Reusable add-journey modal — The add-journey modal is now reused and supports other objects, reducing duplication across the UI (PR #4390). Thanks to @ab-smith.

Bug Fixes

Library import ref_id limit — Raised the limit on ref_id during library imports to accommodate larger references (PR #4291). Thanks to @melinoix.

For full details, check out the v3.18.3 release notes on GitHub.

Back to Blog

View All Posts »

What's New in CISO Assistant — Week 44, 2026 (v4.1.2)

v4.1.2 brings DPIA screening and assessment for GDPR, a processor register, computed metrics built from metric instances, a dependency analysis for business impact analyses, a single mail service with failover, OAuth for audit-log forwarding to Microsoft Sentinel, Plumber imports into technical postures, MCP tools for incidents and evidence, and new libraries: Hungarian NIS2, Costa Rica BCCR-SINPE NT-RCS and a question-based NCSC CAF.

What's New in CISO Assistant — Week 43, 2026 (v4.1.1)

v4.1.1 adds vendor tiering backed by scored criticality forms, outcome rules on frameworks that check the CyFun 2025 conformity criteria, an export to the official CCB CyFun tools, paginated external APIs and bulk writes in workflows, an experimental domain compliance tree, more MCP coverage (advanced EBIOS RM, assets, teams), and new libraries: China PIPL, OWASP SAMM v2.2, ISO 27001 ↔ HDS and IEC 62443 ↔ ANSSI mappings.

What's New in CISO Assistant — Week 42, 2026 (v4.1.0)

v4.1.0 brings a large rework of the EBIOS RM module (study framing, RO/TO radar, standard and advanced likelihood methods on kill-chain steps), arithmetic in workflows with a CEL compute action, MCP write tools for a full risk review, a delegated user-creator role, entity-assessment exports, the BSI C5:2026 framework, German email templates, and a breaking change to the current-user API.

What's New in CISO Assistant — Week 41, 2026 (v4.0.8 – v4.0.9)

v4.0.8 and v4.0.9 let you set a custom score scale on an audit without cloning its framework, bring the SCF 2026.3 framework and a proper ASD Essential Eight (November 2023) model, make every linked-object tab on applied controls able to link existing objects, load long autocomplete lists in batches, and fix a seat-count regression that made readers count as editors.