BlueTeam.News v1.0.3

• Resolves stale-evidence and briefing-generation failure handling.
• Refines the Briefing reader, Print Edition, PDF/print layout, and Wall presentation.
• Polishes the README and GitHub Pages landing page, including clearer Anthropic API requirements and platform-neutral setup language.
• Adds stronger metadata, accessibility, asset-budget, and landing-page regression checks.

BlueTeam.News v1.0.2

BlueTeam.News v1.0.2 adds Node 26 support and another defense-in-depth pass while preserving the same source installation on macOS, Windows, and Linux:

git clone → npm install → npm start

There is no standalone installer or bundled runtime.

Runtime compatibility

• Test Node 22, 24, and 26, including Node 26 on Windows, Linux, Apple Silicon macOS, and Intel macOS.
• Upgrade better-sqlite3 for Node 26 native binaries.
• Bridge legacy and Node 26 fetch-dispatcher handlers, including request bodies, aborts, and backpressure.

Security hardening

• Block loopback DNS rebinding and mismatched browser origins.
• Require configured API secrets to be at least 32 characters and limit unauthenticated health diagnostics.
• Bound untrusted feed and cache input, reject credential-bearing URLs, and strengthen SSRF handling.
• Sanitize terminal-control and secret-bearing log content.
• Harden exported Briefing CSP, local POSIX file permissions, and Express fingerprinting.
• Refresh vulnerable dependency resolutions, explicitly allow reviewed native install scripts, and expand CI audits.

Documentation

• Refine the README and split operations, configuration, architecture, API, and development material into focused guides.
• Clarify the cross-platform source workflow, remote-proxy requirements, and optional outbound data.

Upgrade note

Existing API_SECRET values shorter than 32 characters or resembling placeholders must be replaced before startup. Run npm install on the target machine; do not copy node_modules between operating systems, CPU architectures, or Node versions. npm 11.18+ is recommended so the install-script allowlist is enforced locally.

Verification

• 38 test suites: 771 passed, 2 platform-specific permission assertions skipped locally and exercised in Linux CI.
• Secret, Git-history secret, contrast, placeholder, CTI-scope, asset, and scoring checks passed.
• Dependency tree, native SQLite smoke test, and source-package dry run passed.

BlueTeam.News v1.0.1

BlueTeam.News v1.0.1 is a correctness, reliability, and artifact-quality patch for the initial public release.

Highlights

• Grounds briefing CVEs, KEV status, due dates, and citation URLs against current server evidence before publication; unresolved trust failures cannot publish.
• Prevents prior-edition timing and watchlist details from silently becoming new facts, while keeping internal recommended targets distinct from external mandates.
• Distinguishes provider/server generation failures from a genuinely lost stream and reports a Settings-stored Anthropic key accurately without exposing it.
• Reworks the Edition and PDF into a stable warm-paper reading artifact with semantic field normalization, safer pagination, unbroken CVE identifiers, and font-ready export.
• Refines the Wall executive summary into a balanced situation-and-owner view, removes the redundant heading block, and shows shared deadlines once.
• Removes the misleading question-mark cursor from passive Wire evidence labels.
• Documents the PowerShell npm.cmd fallback while preserving the standard clone, install, and start path.

Verification

• 719 automated tests passed.
• Cross-platform CI passed on Linux Node 22/24, Windows Node 22, and macOS Node 24.
• Secret, reachable-history, CTI-scope, contrast, placeholder, asset, score-model, and package-manifest checks passed.
• Production dependency audit found 0 vulnerabilities.

See CHANGELOG.md for the complete patch notes.

BlueTeam.News v1.0.0

BlueTeam.News is a self-hosted threat-intelligence desk for cyber defense teams. It turns open threat reporting into an operations wall, a filterable evidence-ranked wire, and an optional AI-assisted daily briefing.

Explore the release page · Read the documentation

Included in 1.0.0

• The Wall — an unattended, status-aware operations display.
• The Wire — searchable, filterable threat signals with visible score evidence, KEV, CVSS, EPSS, attribution, and alert context.
• The Briefing — optional Anthropic-powered daily synthesis with BLUF, calibrated judgments, actions, source links, local history, and export.
• 41 configured public threat feeds, local SQLite state, and Markdown briefing archives.
• Cross-platform CI on Node 22 and 24 for Linux, Windows, and macOS.
• Release hardening for SSRF, untrusted content, authentication, rate limits, secret handling, storage bounds, and last-good data behavior.

Get started

git clone https://github.com/ryanshrier/blueteam.git
cd blueteam
npm install
npm start

Node.js 22 or later is required. The Wall and Wire work without API keys. The optional Briefing requires an Anthropic API key.

Project policy

BlueTeam.News is MIT licensed and maintainer-led. Forks and self-hosted modifications are welcome. Unsolicited pull requests and feature requests are not accepted. The project is provided as-is, with no support, response-time, maintenance, roadmap, or update guarantee.

Security vulnerabilities should be reported privately through GitHub Private Vulnerability Reporting. For operational details, see SECURITY.md and SUPPORT.md.

Full details: CHANGELOG.md