Public updates from vendor feeds, with related items from the same catalog.
Release AC-140.0.0
Added support for Create Calendar activity detection in Salesforce when a new calendar is created for an Account object.
Microsoft Viva Engage: Added content inspection support for creating Poll type post event.
For Desktop, browser and native app, we will display enterprise name for logins and enterprise ID for other navigations. For iOS it will be enterprise ID all navigations.
Added Native and CLI support for GitHub Copilot dedicated connector. These activities can now be leveraged by AI Guardrails, & content inspect services.
Activity: Post and Response with DLP and AI Security support enabled.
Netskope now provides broader activity detection for GitHub, covering REST API calls and GitHub CLI (gh) commands across repositories, organizations, and CI/CD workflows.
REST API Coverage
Actions: secrets, variables, workflow dispatch, enable/disable, run cancel/rerun/delete
Releases: create, edit, delete, upload/download assets
Deploy keys, webhooks, repository import, secret scanning alerts
Org membership, runner tokens, PAT management, immutable releases
Dependabot secrets, Codespace secrets, environment secrets/variables
Tarball and zipball archive downloads
GitHub CLI (gh) Coverage
GitHub CLI traffic is detected via GraphQL mutations (POST /graphql) and REST calls:
gh repo: create, delete, archive, unarchive, rename, edit, fork
gh issue: create, edit, close, delete, reopen, lock, unlock, pin, unpin, transfer, comment
gh pr: create, edit, close, reopen, merge, ready, lock, unlock, review, comment
gh project: create, delete, edit, close, field-create/delete, item-add/create/edit/delete/archive
gh release: create, delete, edit, upload, download (REST)
gh secret/variable: set, delete
gh workflow: run, enable, disable
gh run: cancel, rerun, delete
gh label: create, edit, delete
Activity Types
Activities detected: Create, Delete, Edit, Upload, Download, Share — applicable to CASB policies, SWG inline controls, and DLP inspection rules.
Added DLP support for following fields (version,correlation_id,attributes,asset_tag) when creating/editing incident in CMDB navigations.
Introduced Chunk-and-Inspect for content inspection during Google Gemini Response activities. Instead of waiting for the complete AI response to be generated, Netskope continuously inspects streamed content in smaller chunks and releases approved content incrementally. This significantly improves the end-user experience by reducing response latency while maintaining inline security inspection.
Expanded API activity coverage for the following applications: Amazon EC2, Amazon IAM, Amazon S3, Google Cloud KMS, Google Cloud Resource Manager, Google Compute Engine, Google Kubernetes Engine (GKE), Google Cloud IAM, Google Secret Manager, Google Gmail. Additional API endpoints and user activities for these applications are now detected and classified in policy enforcement and reporting.
Added support for the following new activities on OpenAI API endpoints with DLP support:
Chat Completions (/v1/chat/completions): newly supported View (List, Retrieve), Post (Update), and Delete activities. (Create/Post via /v1/chat/completion was already supported)
Files (/v1/files): newly supported View (List, Retrieve), Upload (Create), Delete, and Download (Retrieve content) activities.
Uploads (/v1/uploads): newly supported Upload (Create, Complete, Create parts) and Delete (Cancel) activities.
Containers (/containers/{container_id}/files): newly supported Upload activity.
Enhancements to Copilot Activity support in Windows Native Apps:
We are introducing activity detection support for Copilot access from Windows native apps like Word, Teams, Outlook and Powerpoint.
MS Word – Post, Response and Edit.
MS Powerpoint – Post, Response, AI Post, AI Response.
MS Teams – Post, Response, AI Post, AI Response.
MS Outlook – Post, Response and Edit.
Enhancements to Copilot activity support for Browser events:
Also the following are now supported for browser-based activities for Copilot:
MS Word (Browser): Edit (No DLP)
MS Outlook: Post, AI Post (DLP, AI Security)
Added support for OpenAI Codex, covering Post, Response, and Login Attempt activities across Browser, native app, and CLI clients — enabling DLP, alert, and category-based policy enforcement on Codex usage. Since Codex shares the same domain as ChatGPT, its activity is detected under the ChatGPT application. Support for AI Guardrails is not available in this fix.
Adding support for DLP inspection on the DeepResearch crawling data in ChatGPT.
Added activity coverage for MSI file download with DLP support.
Added support for downloading Cisco Webex installers across all supported platforms.
Added Upload activity detection support in marketing and preparation module navigation with DLP support.
Added Post activity detection support with DLP support for video generation request.
Added support for Download activity detection when a file is downloaded using the “Preview File” option under Edit for Wetransfer.
Adding activity support to detect profile picture changes in Zoom.
Added Create, Edit activity detection support along with DLP in CMDB workspace in Servicenow.
Added activity detection coverage along with DLP support in Service Operations Workspace for editing Details section.
Adding shell.cloud.google.com under this application GCP Shell. This domain category will be Development Tools.
For Google NotebookLM app, added new domain notebook.google.com.
Google NotebookLM application name will be changed to Gemini Notebook.
Added domain contribution-qw.usercontent.google.com to application Google Gemini.
Added new domain under this application:
ecp.yusercontent.com.
Added following domains under Yahoo Japan App Suite:
paypaygourmet.yahoo.co.jp
account.edit.yahoo.co.jp
Adding following domains under given applications.
[apigee.clients6.google.com] : GCP Apigee
[appengine.clients6.google.com] : GCP Engine Admin
[asia-southeast1-cloudbuild.clients6.google.com] : GCP Build
[europe-west1-cloudbuild.clients6.google.com] : GCP Build
[europe-west2-cloudbuild.clients6.google.com] : GCP Build
[us-central1-cloudbuild.clients6.google.com] : GCP Build
[us-east4-cloudbuild.clients6.google.com] : GCP Build
[us-west2-cloudbuild.clients6.google.com] : GCP Build
[beyondcorp.clients6.google.com] : GCP BeyondCorp
[bigquerydatatransfer.clients6.google.com] : GCP BigQuery Data Transfer
[billingbudgets.clients6.google.com] : GCP Billing Budget
[binaryauthorization.clients6.google.com] : GCP Binary Authorization
[cloudasset.clients6.google.com] : GCP Asset
[cloudbilling.clients6.google.com] : GCP Billing
[cloudchannel-pa.clients6.google.com] : GCP Channel
[cloudfunctions.clients6.google.com] : GCP Functions
[cloudidentity.clients6.google.com] : GCP Identity
[cloudscheduler.clients6.google.com] : GCP Scheduler
[cloudsearch.clients6.google.com] : GCP Search
[cloudshell.googleusercontent.com] : GCP Shell
[composer.byoid.googleusercontent.com] : GCP Composer
[composer.googleusercontent.com] : GCP Composer
[containeranalysis.clients6.google.com] : GCP Container Analysis
[datacatalog.clients6.google.com] : GCP Cloud Data Catalog
[dataflow.clients6.google.com] : GCP Dataflow
[datafusion.googleusercontent.com] : GCP Data Fusion
[datamigration.clients6.google.com] : GCP Database Migration
[dataproc.googleusercontent.com] : GCP Dataproc
[datastream.clients6.google.com] : GCP Datastream
[dlp.clients6.google.com] : GCP Data Loss Prevention (DLP)
[essentialcontacts.clients6.google.com] : GCP Essential Contacts
[iap.clients6.google.com] : GCP Identity-Aware Proxy
[lookerstudio.googleusercontent.com] : Google Looker Studio
[managedidentities.clients6.google.com] : GCP Managed Service for Microsoft Active Directory
[notebooks.byoid.googleusercontent.com] : GCP Notebooks
[orgpolicy.clients6.google.com] : GCP Organization Policy
[oslogin.clients6.google.com] : GCP OS Login
[policysimulator.clients6.google.com] : GCP Policy Simulator
[policytroubleshooter.clients6.google.com] : GCP Policy Troubleshooter
[recaptchaenterprise.clients6.google.com] : GCP reCAPTCHA Enterprise
[servicemanagement.clients6.google.com] : GCP Service Management
[serviceusage.clients6.google.com] : GCP Service Usage
[sourcerepo.clients6.google.com] : GCP Source Repositories
[texttospeech.clients6.google.com] : GCP Text-to-Speech
[toolresults.clients6.google.com] : GCP Tool Results
[vmmigration.clients6.google.com] : GCP VM Migration
New domains are getting added to Amazon Direct Connect:
directconnect.ap-east-2.amazonaws.com
directconnect.ap-southeast-6.amazonaws.com
directconnect.us-northeast-1.amazonaws.com
directconnect.ap-southeast-5.amazonaws.com
directconnect.ap-southeast-7.amazonaws.com
directconnect.mx-central-1.amazonaws.com
directconnect.ca-west-1.amazonaws.com
New domains are getting added to Amazon Security Token Service:
sts.ap-east-2.amazonaws.com
sts.ap-southeast-5.amazonaws.com
sts.ca-west-1.amazonaws.com
sts.ap-southeast-6.amazonaws.com
sts.ap-southeast-7.amazonaws.com
sts.mx-central-1.amazonaws.com
New domains are getting added to Amazon DynamoDB:
dynamodb.ap-east-2.amazonaws.com
dynamodb.mx-central-1.amazonaws.com
dynamodb.ca-west-1.amazonaws.com
dynamodb.ap-southeast-7.amazonaws.com
dynamodb.ap-southeast-6.amazonaws.com
dynamodb.ap-southeast-5.amazonaws.com
New domains are getting added to Amazon Elastic Container Registry:
ecr.us-east-1.amazonaws.com
ecr.eu-west-1.amazonaws.com
New steering domain “claudemcpcontent.com“ is getting added to Anthropic Claude.
Added support for the “status.webex.com ” and “admin.webex.com ” domains under the Cisco Webex application to ensure traffic to these domains is correctly identified and associated with the Cisco Webex application.
More recent public updates for Netskope.