diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7cc2548..8d7af45 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.7.0] - 2026-05-13
+
+### Changed
+- **CORE VERSION**: Now downloads `capiscio-core` v2.7.0
+
+### Fixed
+- Download timeout and checksum fail-closed (#41)
+- Add `CAPISCIO_REQUIRE_CHECKSUM` fail-closed mode
+- Binary SHA-256 checksum verification after download
+
 ## [2.6.0] - 2026-03-27
 
 ### Changed
diff --git a/package.json b/package.json
index d83ecf6..49b3b40 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "capiscio",
-  "version": "2.6.0",
+  "version": "2.7.0",
   "description": "The official CapiscIO CLI tool for validating A2A agents",
   "keywords": [
     "a2a",
diff --git a/src/utils/binary-manager.ts b/src/utils/binary-manager.ts
index cf759b9..caccd32 100644
--- a/src/utils/binary-manager.ts
+++ b/src/utils/binary-manager.ts
@@ -15,7 +15,7 @@ const REPO_OWNER = 'capiscio';
 const REPO_NAME = 'capiscio-core';
 
 // Allow version override via env var or package.json
-const DEFAULT_VERSION = 'v2.6.0';
+const DEFAULT_VERSION = 'v2.7.0';
 const VERSION = process.env.CAPISCIO_CORE_VERSION || DEFAULT_VERSION;
 
 export class BinaryManager {