The update is related to the Countercept Agent’s FSBG components. The FSBG component is responsible for the core functionality (e.g. settings management and updates) of the Countercept Agent and does not affect the components responsible for telemetry collection or response.

Product Name: Countercept Agent for Linux – FSBG

Version: 1.0.931

Pilot Availability: 21/05/2026

General Availability: 01/06/2026

Predecessor: 1.0.930

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• Several auxiliary files have been added in this release.
• No changes to process, or service names.

Files Updated:

• Most files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Changes to the functionality not utilized by Countercept.
• Minor bug fixes and improvements.

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

The update is related to the Countercept Agent’s Response Engine (RE) Common Response Actions Module (CRAM) components. The Response Engine and Common Response Actions Module components of the Countercept Agent enable the Detection and Response Team to retrieve artefacts for analysis or contain any identified threats within the environment. 

Product Name: Countercept Agent for Linux – CRAM and RE

Version:

• Response Engine 3.3.3
• CRAM 1.26.137

Pilot Availability: 19/05/2026

General Availability: 26/05/2026

Predecessor:

• Response Engine 3.3.3
• CRAM 1.24.112

Release Purpose:

• Generic Maintenance

Customer Action Required

• N/A

Name Changes:

• No changes to process, or service names.

Files Updated:

• Numerous files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Bug fixes and general maintenance

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15 SP1 – SP3
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent might break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported operating system versions, or switching clients to managed updates in collaboration with the WithSecure Engagement team.

The update is related to the Countercept Agent’s Response components (FAMP). The Response
components (FAMP) of the Countercept Agent enable the Detection and Response Team to
retrieve artefacts for analysis or contain any identified threats within the environment.

Product Name: Countercept Agent for Linux – Response component (FAMP)

Version:

• 1.0.541.400

Pilot Availability: 14/04/2026

General Availability: 21/04/2026

Predecessor:

• 1.0.452.373

Release Purpose:

• Generic Maintenance and improvements

Customer Action Required

• N/A

Name Changes:

• No changes to process, or service names.

Files Updated:

• fampd
• famp.so

New Features and Enhancements:

• Updates to enable network isolation

Generic Maintenance:

• Bug fixes and general maintenance

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15 SP1 – SP3
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

The update is related to the Countercept Agent’s Sensor component. The Sensor component gathers data to be analyzed in the WithSecure backend to identify any malicious activity.

Product Name: Countercept Agent for Linux – Sensor Component

Version: 2026.1.188

Pilot Availability: 31/03/2026

General Availability: 07/04/2026

Predecessor: 2026.1.170

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• No changes to file, process, or service names.

Files Updated:

• sensor

New Features and Enhancements:

• N/A

Generic Maintenance:

• Dependency updates and bug fixes

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

The update is related to the Countercept Agent’s FSBG components. The FSBG component is responsible for the core functionality (e.g. settings management and updates) of the Countercept Agent and does not affect the components responsible for telemetry collection or response.

Product Name: Countercept Agent for Linux – FSBG

Version: 1.0.930

Pilot Availability: 09/03/2026

General Availability: 16/03/2026

Predecessor: 1.0.923

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• Several auxiliary files have been added in this release.
• No changes to process, or service names.

Files Updated:

• Most files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Changes to the functionality not utilized by Countercept.
• Minor bug fixes and improvements.

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

The update is related to the Countercept Agent’s Sensor component. The Sensor component gathers data to be analyzed in the WithSecure backend to identify any malicious activity.

Product Name: Countercept Agent for Linux – Sensor Component

Version: 2026.1.170

Pilot Availability: 24/02/2026

General Availability: 10/03/2026

Predecessor: 2025.2.185

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• No changes to file, process, or service names.

Files Updated:

• sensor

New Features and Enhancements:

• CPU improvements on heavy load systems
• Extended file attributes for file metadata 
• Improved security of scanning results 
• Improved file event info gathering 
• Extended firewall monitoring 

Generic Maintenance:

• Dependency updates and bug fixes

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

The update is related to the Countercept Agent’s Response Engine (RE) Common Response Actions Module (CRAM) components. The Response Engine and Common Response Actions Module components of the Countercept Agent enable the Detection and Response Team to retrieve artefacts for analysis or contain any identified threats within the environment. 

Product Name: Countercept Agent for Linux – CRAM and RE

Version:

• Response Engine 3.3.3
• CRAM 1.24.112

Pilot Availability: 03/02/2026

General Availability: 10/02/2026

Predecessor:

• Response Engine 3.3.2
• CRAM 1.24.112

Release Purpose:

• Generic Maintenance

Customer Action Required

• N/A

Name Changes:

• No changes to process, or service names.

Files Updated:

• Numerous files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Bug fixes and general maintenance

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15 SP1 – SP3
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent might break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported operating system versions, or switching clients to managed updates in collaboration with the WithSecure Engagement team.

The update is related to the Countercept Agent’s Sensor component. The Sensor component gathers data to be analyzed in the WithSecure backend to identify any malicious activity.

Product Name: Countercept Agent for Linux – Sensor Component

Version: 2025.2.185

Pilot Availability: 10/11/2025

General Availability: 17/11/2025

Predecessor: 2025.2.168

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• No changes to file, process, or service names.

Files Updated:

• sensor

New Features and Enhancements:

• N/A

Generic Maintenance:

• Dependency updates and bug fixes

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent will break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported versions of the operating system, or switching clients to managed updates in collaboration with the WithSecure Engagement team.

The update is related to the Countercept Agent’s FSBG components. The FSBG component is responsible for the core functionality (e.g. settings management and updates) of the Countercept Agent and does not affect the components responsible for telemetry collection or response.

Product Name: Countercept Agent for Linux – FSBG

Version: 1.0.923

Pilot Availability: 04/11/2025

General Availability: 11/11/2025

Predecessor: 1.0.922

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• Several auxiliary files have been added in this release.
• No changes to process, or service names.

Files Updated:

• Most files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Changes to the functionality not utilized by Countercept.
• Minor bug fixes and improvements.

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent might break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported operating system versions, or switching clients to managed updates in collaboration with the WithSecure Engagement team.

The update is related to the Countercept Agent’s FSBG components. The FSBG component is responsible for the core functionality (e.g. settings management and updates) of the Countercept Agent and does not affect the components responsible for telemetry collection or response.

Product Name: Countercept Agent for Linux – FSBG

Version: 1.0.922

Pilot Availability: 06/10/2025

General Availability: 13/10/2025

Predecessor: 1.0.921

Release Purpose:

• Generic Maintenance

Customer Action Required:

• N/A

Name Changes:

• Several auxiliary files have been added in this release.
• No changes to process, or service names.

Files Updated:

• Most files are updated with this release.

New Features and Enhancements:

• N/A

Generic Maintenance:

• Changes to the functionality not utilized by Countercept.
• Minor bug fixes and improvements.

OS Support:

• AMD64
  • AlmaLinux 8.4 – 9.x
  • Amazon Linux 2
  • CentOS 7, 8
  • Debian 10, 11, 12
  • Oracle Linux 7, 8, 9 (RHCK and UEK)
  • RHEL 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12 SP3 – SP5
  • SUSE Linux Enterprise Server 15
  • Ubuntu 18.04, 20.04, 22.04, 24.04
• ARMv8/AArch64
  • Debian 11, 12
  • Rocky 9
  • Ubuntu 22.04, 24.04

Please note that CentOS 6 and RHEL 6 are not supported. The Countercept Agent might break with this update, on endpoints where these operating systems are in use. WithSecure recommends upgrading these endpoints to the supported operating system versions, or switching clients to managed updates in collaboration with the WithSecure Engagement team.