• Feature: New bonus minigame, proxychain.sh - stand up relay hops to route your traffic to a target host before the trace catches up. You place whatever the queue hands you with no skipping, a dead end drops the connection, and a longer route than strictly necessary pays better. Three difficulties with their own leaderboards, in the Games menu (Ctrl+J)
• Feature: New scanner tool, Nuclei Templates - the first tool whose output isn’t flat. Its base rate matches the Python Fuzz Script, but it gains +15% for every distinct vulnerability class you have ever discovered, up to 2.35x with all nine. Going wide across scan modes now makes an owned tool measurably better; grinding a single mode does nothing for it. Includes paired research, the Community Template Feed
• Feature: New Anonymous Tip event - rarely, a chip drops into the findings ticker with a glow that fades through a shifting rainbow, so it stands out from everything else scrolling past. Click it before it scrolls off and you get a chain reaction: a burst of findings over several seconds, each paying its own bounty, and one guaranteed to be a vulnerability class you have never seen before. Claiming it marks the chip CLAIMED rather than making it vanish. The ticker is now something to watch, not just something that reports
• Feature: apt redesign - the package manager’s 34 rows in one long flat scroll became a left sidebar, matching the Store and Challenges windows. Scanners are grouped Web App / Cloud & Infra / AI-Assisted, with Research and Black Market as their own sections, and installed tools now restyle in place instead of jumping to a separate list at the bottom
• Feature: Settings redesign - the Display section had grown to 13 subsections in a single scroll. Split into Theme (background effect, background colour, colour theme, wallpaper), Desktop (ticker, widgets, icons, windows, text size, animations) and Display (window mode, vsync, framerate cap), which also makes it visible which settings are per-mode and which are global
• Feature: Three new music tracks - System Failure, System Sleep and Water in the Wire - each with its own cover art in the player
• Feature: Three new desktop backgrounds - Nightshift, System Sleep and System Failure
• Feature: The Remote Monitor now states the cloud rules up front, and the System Manual says outright that you do not need to own a tool locally before deploying it to the cloud. That was always true and intended (the 5x price premium is what buys you a tool needing no local hardware at all), but nothing said so, and the Tools window hides a tool’s tab until you own it locally, so the same deploy was reachable in one window and not the other
• Fix: Cloud instances are permanent across engagements, but adding to a fleet was still gated on the tool’s reputation requirement - and reputation resets every engagement. You could be looking at a running cloud fleet you owned and be unable to buy one more instance of it. That gate is gone for tools you already have cloud instances of
• Fix: Cloud Deploy and Rush Deploy buttons now say why they are unavailable instead of explaining how to use a button that cannot be clicked, and a couple that were dim-but-clickable, silently doing nothing, are properly disabled
• Fix: The critical bug’s “Lucky Find” RCE reward was never recorded as a find of that vulnerability class, so it never counted toward the Vuln Wiki, never unlocked the RCE entry, and never fed Nuclei Templates’ breadth multiplier
• Fix: Vulnerability classes discovered only through offline cloud progress silently re-locked their wiki entry at the next engagement
• Fix: The tool hover tooltip’s “Each generates $X/sec” figure ignored every research, black-market and broker multiplier you had bought. It now matches what htop and the Tools window report - displayed rates will read higher than before, but nothing about actual income changed
• Fix: The SQL injection wiki entry’s login-bypass example was wrong, caught by a player report. On its own the classic ' OR '1'='1 payload does not bypass a login: AND binds tighter than OR, so the query ends up only matching an empty password. The example now includes the trailing -- comment that removes the password check, and explains why it is needed. The wiki is meant to teach the real thing, so thanks for flagging it
• Fix: The Bank window (ledger.exe) made the whole desktop stutter while it was open, and got worse the longer it stayed open. It was re-reading and re-parsing the ledger from disk ten times a second, rebuilding its entire transaction list on the same tick, and leaking a style registration for every card it built
• Fix: The Report window’s Stats and Summary tabs caused stutter while open
• Fix: The findings ticker scrolled jitterily, and its top row developed a subtle flicker. Lane speeds are now chosen to advance a whole number of pixels per frame, adjusted at runtime to suit your display’s refresh rate, which is what both problems came down to. Per-lane background bands also now fade out rather than blinking off the moment a lane empties
• Fix: Desktop widgets got wider, and drifted down and to the left, after switching between Career and Persistence Mode - previously only “Reset Widget Positions” would put them back

• Feature: Two new vulnerability types, Supply Chain Compromise and Cloud Misconfiguration, with their own wiki entries, terminal scan modes, and browser content
• Feature: Three new late-game tools (SBOM Auditor, Cloud Posture Manager, Autonomous Red Team AI) and their paired upgrades
• Feature: Security Firm - hire and level up Junior Hunters, earn Contract Fees each engagement, and spend them on firm-only upgrades
• Feature: A “brute-force depth” meter in the terminal shows live progress toward a guaranteed find while grinding a vuln type - the longer the dry streak, the bigger the reputation payout once it lands
• Feature: Career mode’s bank ledger now shows a running balance per entry, and interest deposits show what balance they were earned on
• Feature: Challenge rewards now get their own line in the Report window’s income breakdown and their own tile in the Activity Log
• Feature: man <tool> in the terminal now tab-completes and shows info pages for tools, not just vulnerability types
• Fix: The hardest vuln types could take hundreds of clicks before a guaranteed find kicked in - replaced with one flat, predictable cap, and rebalanced odds so a real find usually lands well before it
• Fix: Cloud-deployed tool prices were compounding an extra, unintended cost increase every engagement on top of their already-permanent pricing; local tool pricing is unaffected
• Fix: Auto-clicker fires now update the Browser window the same way manual clicks do
• Fix: The Hack button now glows orange while the Auto-Clicker Throttle upgrade has it paused for heat, instead of silently doing nothing
• Fix: Boot menu number-key shortcuts (1-7, Y/N) didn’t work - an unrelated “skip the intro text” handler was swallowing every keypress before the menu ever saw it
• Fix: DDoS incident notifications now close as soon as the incident is mitigated instead of lingering for their full duration
• Fix: Rival Bounty Hunter challenges could ask for more finds than an engagement had left to give, making them unwinnable
• Fix: “Iron Will” achievement could be earned entirely AFK; now requires at least one real click during the event
• Fix: The in-game achievements list now matches what’s actually live on Steam instead of listing unreleased entries
• Fix: Combo counter could exceed its stated cap via a critical-bug bonus find
• Fix: The Auto-Find toggle in Quick Actions and in Preferences could show different on/off states from each other
• Fix: Greylist minigame’s window showed scrollbars incorrectly at boot and again after winning a round
• Fix: Various window-sizing polish (terminal, htop) to fit the new content added this release

Bug Bounty Hunter —Idle is live! Thanks for checking it out - hack away, and let us know what you think.