Version 4.39.4 released October 6th, 2026

• Added Ukrainian translations for summary reports and notifications.
• Resolved an issue where German, French, and Japanese Excel summary reports showed the exposure risk column header in English instead of the local language.
• Overall performance improvements.

Version 4.39.5 released October 13th, 2026

• Resolved an issue where summary reports failed to generate when the scan data contained characters that are not supported in the report.
• Resolved an issue where scans could remain in the “Stopped awaiting” state for too long. Such scans are now cleaned up after 1 hour.

Version 4.39.3 released September 22nd, 2026

• Overall performance improvements.
• Overall security improvements.

Real-time vulnerability findings from software inventory and CVE threat intel

Exposure Management (XM) will surface vulnerability findings automatically generated from your software inventory data cross-referenced against CVE threat intelligence — including CVSS score changes as they happen.

What this means for you:

• Newly disclosed or updated CVEs affecting your installed software are detected automatically, without needing to manually check whether a given CVE applies to your environment or re-run scans to confirm.
• This extends vulnerability visibility to Mac and Linux devices via software inventory data, in addition to Windows.

Currently, vulnerability findings are refreshed on a 24-hour cadence.

Version 4.39.2 released September 15th, 2026

• Resolved an issue where vulnerability summary reports scheduled every two weeks could silently never run.

Version 4.39.1 released September 8th, 2026

• Resolved an issue where retrieving tags could time out for organizations with a large number of scans.
• Overall security improvements.

Pre-authorization for automatic response actions on identities

We’re introducing pre-authorization response actions, so response to identity-based threats can be authorized in advance. For each identity pre-authorization values can be set:

Manual actions – response actions action before it runs. This is the setting used when mitigation actions are triggered from a recommendation.

Pre-authorization can be set for a single identity, for many at once, or governed by a company default that applies automatically to identities as they enter the environment. The company default is configured per organization, and all existing identities have already been set to it, so a consistent baseline is in place from day one.

Filter for AI-related identities in the Identity view

AI agents and automations increasingly appear as identities in customer environments, and they introduce new risk. The new AI Assets quick filter in the Identity view displays only the service principals classified as AI-related, allowing them to be located without manual searching.

By selecting the filter, customers can view all AI-related identities in a single place, making it easier to review AI activity and address anything that requires attention.

Version 4.39.0 released September 1st, 2026

• Resolved an issue where device details were not being populated for assets already known through another WithSecure product.
• Resolved an issue where scheduled summary reports could fail to complete for companies with a very large number of scans.
• Overall security improvements.
• Overall performance improvements.

Version 4.38.9 released August 25th, 2026

• Resolved an issue where synchronization problems could cause some assets and related vulnerabilities to be missing from Finding details view and the Exposure Dashboard.
• Resolved an issue where the Scan Scheduling Templates page could time out or fail to load for accounts with a large number of scans.
• Overall security improvements.
• Overall performance improvements.

SystemScan 112563, released August 19, 2026

New features and improvements:

[RADAR-35661] – Capability to detect vulnerabilities in DriveLock Enterprise Service in authenticated scanning for Windows