The last 30 days
What's shipping, what's moving, what to watch — across vDefend, Avi, and the lateral-security ecosystem.
Pinned
v32.1.1 · GA
May 12, 2026
Feature release adding native VCF 9.1 integration, MCP load balancing with session persistence and OAuth 2.0, NSX Security Groups support in Virtual Service security policies, and 65 resolved issues. Licensing shifts to digitally signed subscription files — 25-character keys are deprecated.
v5.1.2 · GA
May 12, 2026
Maintenance release introducing License Hub for vDefend and Avi Load Balancer — centralized license management across up to 120 NSX Manager 9.1 instances, with a new subscription-file format replacing 25-character license keys.
v5.1.1 · GA
April 15, 2026
Maintenance release with FIPS 140-2 and 140-3 cryptographic module updates across the SSP Installer and NDR Sensor, plus a fix for stale ARP entries on datacenter switches during SSP Installer upgrades.
Threat & CVE
Disclosures, exploitation-in-the-wild, and KEV additions worth tracking.
Second-largest Microsoft release on record, driven in part by a tripling of incoming vulnerability reports from AI-assisted tooling. CVE-2026-32201 (SharePoint spoofing) is under active attack; CVE-2026-33825 (BlueHammer, a Windows Defender privilege-escalation bug) is publicly known. Eight criticals, seven of them RCE.
Zero Day Initiative
Ecosystem
Notable posts from VMware Security, Broadcom, and the lateral-security community.
Barracuda Managed XDR's monthly read on what's hitting SOCs right now. Between January and March, confirmed brute-force auth attempts against SonicWall and FortiGate devices made up 56% of all SOC incidents, with about 88% of that traffic originating from the Middle East. Also: Qilin ransomware moving fast post-intrusion, and ClickFix phishing on the rise.
Barracuda