# #59 - AI Cloud Analysis, Challenge Pentest Severity and Device Protection for WSL2 and Docker

### Features

* [**AI Cloud Analysis: Attack Paths and AutoTriage**](https://help.aikido.dev/cloud-scanning/cloud-scanning-overview) **-** AI reprioritizes your cloud issues after every scan and shows how an attacker could exploit each one, so you fix real risks first
* [**Challenge Pentest Severity**](https://help.aikido.dev/pentests/coverage-and-findings/change-pentest-finding-severity) **-** Disagree with the severity of a pentest finding? Propose a new one and explain why. The AI weighs your argument and updates the severity only if it holds up
* [**Device Protection for WSL2 and Docker**](https://help.aikido.dev/aikido-device-protection/deploying-aikido-endpoint/device-protection-in-wsl2) **-** Block malicious packages wherever your developers install them

### **Aikido Intel & News**

Our research team has discovered over [415 new vulnerabilities](https://intel.aikido.dev/) over the last two weeks!

A busy two weeks for patching: [PHP2Shell](http://php2shell.aikido.io/), [Node2Shell](https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497) and a [9.8-rated Linux kernel TCP flaw](https://www.aikido.dev/blog/linux-kernel-tcp-rce-vulnerability-cve-2026-98432) all allow remote code execution. On the supply chain side, [LiteLLM was compromised again](https://www.aikido.dev/blog/litellm-compromised-infostealer-rat) with an infostealer and RAT on PyPI, and the [Binance hack](https://www.aikido.dev/blog/binance-hack-developer-laptop) shows how much one developer laptop can put at risk.

Not sure where to start? Our [checklist for surviving the rest of 2026](https://www.aikido.dev/blog/cybersecurity-surviving-vulnerabilities-malware-best-practices) shows how to limit what the next compromise can reach.

### Improvements

* Zen - [Playbooks](https://help.aikido.dev/zen-firewall/zen-features/playbooks)
  * [Block attacks and attack waves](https://help.aikido.dev/zen-firewall/zen-features/playbooks#built-in-events)
  * [Stop users from abusing endpoints with custom events](https://help.aikido.dev/zen-firewall/zen-features/playbooks#custom-events)
  * [Learn how to get the most out of Zen and new Playbook feature](https://help.aikido.dev/zen-firewall/protect-your-app-with-zen-firewall)
* Cloud - [Teams can be granularly assigned using Cloud Resource tags](https://help.aikido.dev/getting-started/manage-teams-and-applications/assign-team-responsibilities-by-cloud-resource-tags)
* Deep Review - [Chat with agent on findings in your PR/MR](https://help.aikido.dev/deep-review/how-deep-review-works#feedback-in-your-pull-request)
* Code Quality - [Autofix now supports your custom rules](https://help.aikido.dev/code-quality/add-custom-code-rules)
* Integrations - [ClickUp support for custom fields](https://help.aikido.dev/getting-started/task-management-systems/all-supported-task-trackers/clickup#map-aikido-data-to-custom-fields)
* MCP - [Codex Plugin 1.0.0 released](https://chatgpt.com/plugins/plugins_6abf6f017e3481919e681ac223b8424e?q=aikido)
* Aikido Terraform - [Data source for reading a single repository](https://help.aikido.dev/miscellaneous-integrations/aikido-terraform-provider)
* Zen Firewall - Agent releases for [Dotnet](https://github.com/AikidoSec/firewall-dotnet/releases), [PHP](https://github.com/AikidoSec/firewall-php/releases), and [Golang](https://github.com/AikidoSec/firewall-go/releases)
* IDE - New releases for [VSCode](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido), [Jetbrains](https://plugins.jetbrains.com/plugin/24993-aikido-security/versions/stable), and [Visual Studio](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido-visualstudio)
* API - [Additional webhooks for AI Pentesting](https://apidocs.aikido.dev/reference/webhooks)
* API - [Unlink a Jira task](https://apidocs.aikido.dev/reference/unlinktaskfromissuegroup)
* API - [Add domain now supports attack surface management](https://apidocs.aikido.dev/reference/createdomain)