New view for Broad Contect Detections<\/h3>\n
We are in the process of introducing a new Broad Context Detection (BCD)<\/strong> view that will help improve viewing, navigating and filtering the data whilst investigating detections. Please see the Endpoint Detection and Response<\/a> section below for more information.<\/p>\n Profile Assignment rules allow multiple values<\/strong><\/p>\n Currently, when a device changes its AD group, IP, DNS or WINS, it is possible to automatically assign a profile and labels based on the rules to that device<\/p>\n The profile assignment rules now support multiple values in a single rule. This means it is possible to match multiple IP segments, DNS\/WINS patterns or Active Directory groups with a single rule.<\/p>\n Vulnerability Management Risk Score visible in Device listing<\/strong><\/p>\n The Risk Score from Elements Vulnerability Management is now visible in the device listing. We have also added a new default view „Vulnerability management“.<\/p>\n Device list now contains the last scanning status<\/strong><\/p>\n We have now added the last scanning status columns into devices list<\/p>\n Top 10 most applied Application Control Rules are now visible in reports<\/strong><\/p>\n Administrators visiting the \u201cReports \u2192 Security Events\u201d tab can now see a list of the top 10 rules triggered.<\/p>\n New Software Updates views released<\/strong><\/p>\n These new views provide improvements, new features and changes compared to old ones:<\/p>\n Ability to search in filter rules in the Device View<\/strong><\/p>\n The Administrator can now use search in filter values in device view. This will help them quickly find relevant rules for updating.<\/p>\n Additional items added to Audit Logging<\/strong><\/p>\n A new version of the endpoint clients is now available. This release makes the Elements Agent version 23.1 available (internal version 23.1.433).<\/p>\n The endpoints automatically upgrade, without a reboot.<\/p>\n Support „Terminate running applications“ toggle in Software Updater Automated Tasks.<\/strong><\/p>\n Added a remote action to turn off Tamper Protection temporarily.<\/strong><\/p>\n Added an alert to portal when user disables Tamper Protection locally.<\/strong><\/p>\n Remote Operations can temporarily disable locked Security features<\/strong><\/p>\n You can now use remote operations to temporarily disable locked security features, no need to unlock them in profile. That way you don’t need to weaken your security posture to be able to temporarily disable features.<\/p>\n New Installer Filenames<\/strong><\/p>\n With this release we are changing file names for installers<\/strong>, to properly represent the brand of the product. <\/strong>These are now ElementsAgentInstaller.exe <\/strong>and ElementsAgentOfflineInstaller.msi.<\/strong>\u00a0The old file names are still available to download but will not be published in future.<\/p>\n Preview of new Broad Context Detection view now available<\/strong><\/p>\n We are in the process of introducing a new Broad Context Detection (BCD) view that will help improve viewing, navigating and filtering the data whilst investigating detections.\u00a0You can view the new BCD version by clicking on the link at the top right of the BCD page.<\/p>\n The new BCD view combines the summary process tree and the process details so they are visible together on the same page with no need to switch between the two tabs.\u00a0Also, the process details are visible on whichever tab you are viewing making it easier to view the process data, for example, when writing up your findings.<\/p>\n It is still a work-in-progress and there is continued focus on improving useability – such as, selecting\/de-selecting multiple data points – and the \u2018Elevate\u2019 service.\u00a0Please do check it out and give us your feedback to help us shape the final version for you.\u00a0This can be done via our Elements Ideas portal – ideas.withsecure.com.<\/p>\n Improvements for Mailbox Protection Management<\/strong><\/p>\n The filter feature is introduced for mailbox management in Exchange tab under Cloud Services. This enhances management of mailboxes protection, in particular for large tenants. The mailbox list can be pre filtered before changing a protection status by protection status or mailbox type or by a user name or domain.<\/p>\n Detections new filter<\/strong><\/p>\n The detections with Exchange origin can now be filtered by type of email security threat: suspicious URL, suspicious attachment, harmful URL or harmful attachment.<\/p>\n Other \u00a0improvements<\/strong><\/p>\n Added a direct link from a single vulnerability instance in the asset details view to the Activity log tab.<\/strong><\/p>\n With this connection, we have made it easier for admin to realize from which scan the individual vulnerability is originating. It is especially important in case when vulnerability list is developed from various sources, including network and agent-based scans.<\/p>\n AlmaLinux joined the list of Linux distributions supported by Elements VM Authenticated Scan<\/strong><\/p>\n By popular request, we have now added support for AlmaLinux to the platforms supported by Authenticated Scan<\/p>\n Eliminate bogus hosts in Discovery Scan<\/strong><\/p>\n The option of ignoring false positives on the Discovery scan configuration user interface has been added. By filtering out false or unreliable hosts based on their TTL (Time to Live) value, it helps to ensure that only accurate and trustworthy information is utilized within the network.<\/p>\n \u00a0For more information, please refer to Elements VM changelog in WithSecure Community:\u00a0<\/p>\n Reminder about upcoming change to take CVSSv3 into use<\/strong><\/p>\n Starting from\u00a0March 1, 2023<\/strong>\u00a0Elements Vulnerability Management will start using CVSS v3.1<\/a><\/p>\n Changes in Elements and Endpoint Protection API<\/strong><\/p>\n Companies endpoints are deprecated<\/strong>: Clients should use instead\u00a0Organizations endpoint from Elements API<\/strong>.<\/a><\/p>\n Support for Companies endpoint will end by 31.07.2023<\/p>\n Elements API changes in existing endpoints<\/strong><\/p>\n Devices endpoint<\/strong> now supports filtering by device serial number. You can find durther information at <\/p>\n Our crack team of Threat Analysts have created an in-depth article about a new threat from North Korea\u2019s Lazarus Group, which targets the Medical Research and technology sectors.<\/p>\n As the analysis progressed, our teams created detections for both our EPP and EDR solutions, helping to protect our customers.<\/p>\n You can read more about this on our Labs website<\/a><\/p>\n Monthly highlights:<\/p>\n Ransomware: Trends and notable reports<\/p>\n Other notable highlights in brief<\/p>\n \u00a0Research highlights<\/p>\n You can download the full report here: Download Report<\/strong><\/a><\/p>\n Monthly highlights:<\/p>\n Ransomware: Trends and notable reports<\/p>\n Other notable highlights in brief<\/p>\n You can download the full report here: Download report<\/strong><\/a><\/p>\n The Elements Quarterly Launch is here again, highlighting the key developments of Q4\/2022.<\/p>\n This time we introduce two major Elements evolutions: Microsoft Teams protection in\u00a0WithSecure\u2122 Elements Collaboration Protection and Server share protection against ransomware in\u00a0WithSecure\u2122 Elements Endpoint Protection.<\/p>\n Read more on the campaign page:\u00a0<\/p>\n Elements Vulnerability Management will soon be updated to use CVSSv3 ratings, instead of the current CVSSv2. You can find out more information about this change, including potential actions you will need to take, at our dedicated Community article<\/a><\/p>\n Our purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n Changelogs and Release Notes for all parts of WithSecure\u2122 Elements can be found at the\u00a0Help Center<\/a>\u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n https:\/\/community.withsecure.com\/categories\/withsecure-elements-vulnerability-management<\/a>Elements Security Center<\/h2>\n
![\"Picture1.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture1-6.png.webp\")
<\/img><\/a><\/figure>\n![\"download.jpg\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/download.jpg.webp\")
<\/img><\/a><\/figure>\n![\"Picture3.jpg\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture3.jpg.webp\")
<\/img><\/a><\/figure>\n![\"Picture4.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture4-7.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture5.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture5-9.png.webp\")
<\/img><\/a><\/figure>\n\n
\n
![\"Picture6.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture6-7.png.webp\")
<\/img><\/a><\/figure>\n\n
Elements Endpoint Protection<\/h2>\n
Elements Agent 23.1<\/strong><\/h3>\n
![\"Picture7.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture7-6.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture8.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture8-7.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture9.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture9-6.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture10.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture10-5.png.webp\")
<\/img><\/a><\/figure>\nElements Endpoint Detection and Response<\/h2>\n
![\"Picture11.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture11-5.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture12.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture12-4.png.webp\")
<\/img><\/a><\/figure>\nElements Collaboration Protection<\/h2>\n
![\"Picture13.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture13-3.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture14.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture14-3.png.webp\")
<\/img><\/a><\/figure>\n\n
Elements Vulnerability Management<\/h2>\n
![\"Picture15.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture15-2.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture16.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture16-2.png.webp\")
<\/img><\/a><\/figure>\nIntegrations<\/h2>\n
Other items of interest<\/h2>\n
Threat Analysis: No Pineapple!<\/strong><\/h3>\n
December 2022 –\u00a0\u00a0Threat Highlights Report<\/strong><\/h3>\n
\n
\n
\n
January 2023 – Threat Highlights Report <\/strong><\/h3>\n
\n
\n
\n
WithSecure\u2122 Elements Quarterly Launch<\/strong><\/h3>\n
In case you missed it<\/h2>\n
Share your ideas with us<\/strong><\/h3>\n
![\"Picture17.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture17-2.png.webp\")
<\/img><\/a><\/figure>\nFurther information<\/h2>\n
![\"clip_image026.png\"](\"file:\/\/\/C:\/Users\/fawcan\/AppData\/Local\/Temp\/msohtmlclip1\/01\/clip_image026.png\")
<\/img><\/a><\/figure>\n