<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Mattermost Blog</title><description>Mattermost is a secure collaboration platform built for organizations that need to keep their most critical information safe.</description><link>https://mattermost.com/</link><language>en-us</language><item><title>Mattermost v12 and Arqit: Bringing Quantum-Safe Collaboration to the Deployed Edge</title><link>https://mattermost.com/blog/mattermost-v12-and-arqit-quantum-safe-collaboration-at-the-deployed-edge/</link><guid isPermaLink="true">https://mattermost.com/blog/mattermost-v12-and-arqit-quantum-safe-collaboration-at-the-deployed-edge/</guid><description>Mattermost v12 and the Arqit SKP-Platform pair device-level quantum-safe trust with application-level access control for sovereign, air-gapped defence operations.</description><pubDate>Mon, 09 Nov 2026 12:00:00 GMT</pubDate><category>Platform</category><author>Charlotte Brown</author></item><item><title>Your MFA Isn&apos;t Phishing-Resistant. Here&apos;s What Is, and What the Deployment Decision Actually Involves</title><link>https://mattermost.com/blog/your-mfa-isnt-phishing-resistant-heres-what-is/</link><guid isPermaLink="true">https://mattermost.com/blog/your-mfa-isnt-phishing-resistant-heres-what-is/</guid><description>Federal policy now requires phishing-resistant MFA, and OTP and TOTP do not qualify. Compare CAC/PIV, FIDO2 tokens and passkeys for defense and air-gapped environments.</description><pubDate>Mon, 09 Nov 2026 12:00:00 GMT</pubDate><category>Platform</category><author>Keith Casey</author></item><item><title>Every User, Every Device, Every Channel: How Mattermost v12 Completes the Zero Trust Picture</title><link>https://mattermost.com/blog/every-user-every-device-every-channel/</link><guid isPermaLink="true">https://mattermost.com/blog/every-user-every-device-every-channel/</guid><description>Mattermost v12 gives access policy new attributes to evaluate and new places to attach them, so controls can describe the situation, not just the user.</description><pubDate>Wed, 04 Nov 2026 12:00:00 GMT</pubDate><category>Releases</category><author>Keith Casey</author></item><item><title>Mattermost v12: Your Most Sensitive Information Shouldn’t Travel by Hand</title><link>https://mattermost.com/blog/your-most-sensitive-information-shouldnt-travel-by-hand/</link><guid isPermaLink="true">https://mattermost.com/blog/your-most-sensitive-information-shouldnt-travel-by-hand/</guid><description>When the most valuable information also has the tightest handling rules, teams resort to print-and-walk transfers. Mattermost v12 Cross Guard gives collaboration a managed path across accredited cross-domain boundaries.</description><pubDate>Mon, 26 Oct 2026 12:00:00 GMT</pubDate><category>Releases</category><author>Keith Casey</author></item><item><title>Mattermost v12: Agents Are Doing the Work. Now Control What They Can See.</title><link>https://mattermost.com/blog/agents-are-doing-the-work-now-control-what-they-can-see/</link><guid isPermaLink="true">https://mattermost.com/blog/agents-are-doing-the-work-now-control-what-they-can-see/</guid><description>Agents belong in mission workflows—but a shared service account can turn a fast summary into a data spillage event. Mattermost v12 puts user-scoped access, private models, and auditability in front of every agent action.</description><pubDate>Fri, 23 Oct 2026 12:00:00 GMT</pubDate><category>Releases</category><author>Keith Casey</author></item><item><title>Where the Response Team Talks After the Gateway Falls</title><link>https://mattermost.com/blog/where-the-response-team-talks-after-the-gateway-falls/</link><guid isPermaLink="true">https://mattermost.com/blog/where-the-response-team-talks-after-the-gateway-falls/</guid><description>Attackers were inside Citrix NetScaler gateways for weeks before the flaws were confirmed. The channel a response team trusts has to be chosen before the next zero-day.</description><pubDate>Wed, 14 Oct 2026 06:00:00 GMT</pubDate><category>Collaboration</category><category>security</category><author>AJ Nash</author></item><item><title>Our Newest Top Contributor Is an AI Agent: 4 Months of Matty Code</title><link>https://mattermost.com/blog/our-newest-top-contributor-is-an-ai-agent/</link><guid isPermaLink="true">https://mattermost.com/blog/our-newest-top-contributor-is-an-ai-agent/</guid><description>Matty Code is now a top-three contributor to the Mattermost repository. Here is what worked, what failed, and where the agent goes next.</description><pubDate>Tue, 06 Oct 2026 06:00:00 GMT</pubDate><category>Engineering</category><category>ai</category><category>open-source</category><author>Nick Misasi</author></item><item><title>The Conversation Is the Operation: Defending Collaboration Infrastructure Like an Intelligence Asset</title><link>https://mattermost.com/blog/the-conversation-is-the-operation/</link><guid isPermaLink="true">https://mattermost.com/blog/the-conversation-is-the-operation/</guid><description>Adversaries treat enterprise collaboration channels as collection targets. Defend that infrastructure the way the intelligence community defends a secure circuit.</description><pubDate>Tue, 06 Oct 2026 06:00:00 GMT</pubDate><category>Collaboration</category><category>security</category><category>government</category><author>AJ Nash</author></item><item><title>Two Outages, One Vendor, One Lesson in Resilience Planning</title><link>https://mattermost.com/blog/two-outages-one-vendor-one-lesson/</link><guid isPermaLink="true">https://mattermost.com/blog/two-outages-one-vendor-one-lesson/</guid><description>Two unrelated failures at one cloud vendor took down email, chat, and admin tools weeks apart. The lesson is shared dependency, not either incident on its own.</description><pubDate>Tue, 06 Oct 2026 06:00:00 GMT</pubDate><category>Collaboration</category><category>security</category><author>AJ Nash</author></item><item><title>Operational Resilience: Building Trust From Devices to Decisions</title><link>https://mattermost.com/blog/operational-resilience-building-trust-from-devices-to-decisions/</link><guid isPermaLink="true">https://mattermost.com/blog/operational-resilience-building-trust-from-devices-to-decisions/</guid><description>Explore how trusted devices, secure connections and governed workflows help organisations maintain operational resilience from daily operations through disruption.</description><pubDate>Sat, 26 Sep 2026 10:00:00 GMT</pubDate><category>uncategorized</category><author>James Mullins (Mattermost) &amp; Seán Carnew (Arqit)</author></item><item><title>Zero Trust in Practice: Identity, Part 3 — The Roadmap to Optimal</title><link>https://mattermost.com/blog/zero-trust-in-practice-identity-part-3-the-roadmap-to-optimal/</link><guid isPermaLink="true">https://mattermost.com/blog/zero-trust-in-practice-identity-part-3-the-roadmap-to-optimal/</guid><description>This is the third part in the Identity series. Part 1 covered Foundation-stage controls: federated identity, MFA, directory sync, and audit logging. Part 2 covered Advanced identity: ABAC, dynamic policy evaluation, and continuous access en</description><pubDate>Thu, 17 Sep 2026 06:16:12 GMT</pubDate><category>Platform</category><author>Justin Reynolds</author></item><item><title>Mattermost v11.11: Data Spillage Exposure Radius Report</title><link>https://mattermost.com/blog/mattermost-v11-11-is-now-available/</link><guid isPermaLink="true">https://mattermost.com/blog/mattermost-v11-11-is-now-available/</guid><description>Mattermost v11.11 gives content reviewers a fast, transparent way to understand who may have seen a flagged post with the new post exposure radius report feature. The team is heads-down on Mattermost v12.0, shipping in October 2026 with a l</description><pubDate>Wed, 16 Sep 2026 06:00:00 GMT</pubDate><category>Platform</category><author>Mattermost</author></item><item><title>Operational Resilience: Why It Must Be a Daily Practice</title><link>https://mattermost.com/blog/operational-resilience-why-it-must-be-a-daily-practice/</link><guid isPermaLink="true">https://mattermost.com/blog/operational-resilience-why-it-must-be-a-daily-practice/</guid><description>Operational resilience is often discussed at the point where disruption has already begun. A system has gone down. Communications are unavailable. An incident response team has been activated. Leaders need answers quickly, while regulators,</description><pubDate>Tue, 15 Sep 2026 10:01:44 GMT</pubDate><category>uncategorized</category><author>Steve Berichon</author></item><item><title>Zero Trust in Practice: Identity, Part 2 — Advanced Identity, from Static Roles to Dynamic Access</title><link>https://mattermost.com/blog/zero-trust-in-practice-identity-part-2-advanced-identity-from-static-roles-to-dynamic-access/</link><guid isPermaLink="true">https://mattermost.com/blog/zero-trust-in-practice-identity-part-2-advanced-identity-from-static-roles-to-dynamic-access/</guid><description>This is the second part in an ongoing series on Zero Trust maturity for the Identity pillar. Part 1 covered the Foundation stage: federated identity, MFA, directory sync, and audit logging. This post covers the Advanced maturity stage. The </description><pubDate>Thu, 10 Sep 2026 06:19:59 GMT</pubDate><category>Platform</category><author>Justin Reynolds</author></item><item><title>AI Audit Trails: The Missing Piece of Enterprise AI Adoption</title><link>https://mattermost.com/blog/ai-audit-trails-the-missing-piece-of-enterprise-ai-adoption/</link><guid isPermaLink="true">https://mattermost.com/blog/ai-audit-trails-the-missing-piece-of-enterprise-ai-adoption/</guid><description>Key Takeaways AI is no longer a pilot project sitting off to the side of enterprise workflows. It drafts responses, triages tickets, and increasingly takes actions inside operational systems.  As AI moves closer to real decisions, regulator</description><pubDate>Tue, 08 Sep 2026 07:52:43 GMT</pubDate><category>Platform</category><author>Justin Reynolds</author></item><item><title>Zero Trust in Practice: Identity, Part 1 — Building the Identity Foundation</title><link>https://mattermost.com/blog/zero-trust-in-practice-identity-part-1-building-the-identity-foundation/</link><guid isPermaLink="true">https://mattermost.com/blog/zero-trust-in-practice-identity-part-1-building-the-identity-foundation/</guid><description>Why “never trust, always verify” starts with your collaboration platform This is the first part in a three-part series on moving from Foundation to Advanced Zero Trust for the identity pillar. Each post maps to a maturity stage in the CISA </description><pubDate>Tue, 01 Sep 2026 06:00:00 GMT</pubDate><category>Platform</category><author>Justin Reynolds</author></item><item><title>What will be deprecated in Mattermost v12.0? (October 2026)</title><link>https://mattermost.com/blog/what-will-be-deprecated-in-mattermost-v12-0-october-2026/</link><guid isPermaLink="true">https://mattermost.com/blog/what-will-be-deprecated-in-mattermost-v12-0-october-2026/</guid><description>Mattermost v12.0 will ship in October 2026 with several deprecations, plus a handful of smaller breaking changes, that self-hosted admins, integration authors, and plugin developers should plan for. RHEL 7 and RHEL 8 will no longer be suppo</description><pubDate>Thu, 27 Aug 2026 06:00:00 GMT</pubDate><category>Platform</category><author>Amy Blais</author></item><item><title>Sovereign AI vs. Public AI: Choosing the Right Architecture for Regulated Organizations</title><link>https://mattermost.com/blog/sovereign-ai-vs-public-ai-choosing-the-right-architecture-for-regulated-organizations/</link><guid isPermaLink="true">https://mattermost.com/blog/sovereign-ai-vs-public-ai-choosing-the-right-architecture-for-regulated-organizations/</guid><description>Key Takeaways AI adoption is now a baseline requirement for defense, government, and critical infrastructure organizations. The deployment model behind that adoption determines whether an organization controls its own data or hands that con</description><pubDate>Mon, 24 Aug 2026 08:34:11 GMT</pubDate><category>Platform</category><author>Justin Reynolds</author></item><item><title>Can Agentic AI Work in Air-Gapped Environments?</title><link>https://mattermost.com/blog/can-agentic-ai-work-in-air-gapped-environments/</link><guid isPermaLink="true">https://mattermost.com/blog/can-agentic-ai-work-in-air-gapped-environments/</guid><description>Key Takeaways Agentic AI conversations tend to assume a live internet connection. The AI model calls a cloud API for every response, the agent pulls from a hosted vector database, and the model itself receives patches and version updates au</description><pubDate>Tue, 18 Aug 2026 05:49:15 GMT</pubDate><category>Collaboration</category><author>Justin Reynolds</author></item><item><title>Mattermost v11.10: Team ABAC Membership, Native User Attributes in ABAC, AI Agent Enhancements &amp; More</title><link>https://mattermost.com/blog/mattermost-v11-10-is-now-available/</link><guid isPermaLink="true">https://mattermost.com/blog/mattermost-v11-10-is-now-available/</guid><description>Mattermost v11.10 gives security admins tighter, faster control over who accesses what. ABAC governance now reaches team-level membership and native user attributes let admins write policies without any extra integration work. AI agents get</description><pubDate>Fri, 14 Aug 2026 06:00:00 GMT</pubDate><category>Platform</category><author>Mattermost</author></item></channel></rss>