XM newsletter week 34

We identified a disruptions in delivery of XM recommendations as Security Events (visible in Elements portal under Events → Security Events). This issue is fixed now.

Version 4.35.4 released August 19th, 2025

• Improved performance and integration with Exposure Management.

Version 4.35.3 released August 12th, 2025

• Fixed multiple potential security issues.

XM newsletter week 32

Identity risk assessment

• Identity risks assessment tab has been enriched with data impacting the calculation of Identity’s risk factor. 

System Scan released, version (SystemScan 104009)

New features and improvements:

[RADAR-31529] – Capability to detect vulnerabilities in Apache Struts Extras in authenticated scanning
[RADAR-31527] – Capability to detect vulnerabilities in Malwarebytes Binisoft Windows Firewall Control in authenticated scanning for Windows
[RADAR-31515] – Capability to detect vulnerabilities in Apache Jena Fuseki in authenticated scanning
[RADAR-31514] – Capability to detect vulnerabilities in Elastic Beats in authenticated scanning for Windows
[RADAR-31492] – Capability to detect vulnerabilities in Comodo Dragon in authenticated scanning for Windows
[RADAR-31490] – Capability to detect vulnerabilities in BeeDrive for desktop in authenticated scanning for Windows
[RADAR-31441] – Capability to detect vulnerabilities in hMailServer in authenticated scanning for Windows

Version 4.35.2 released July 30th, 2025

• Fixed multiple potential security issues.

SystemScan 103849, released July 28, 2025

New features and improvements:

[RADAR-31436] – Capability to detect vulnerabilities in Logpoint AgentX Client in authenticated scanning for Windows
[RADAR-31396] – Capability to detect vulnerabilities in Reactor Netty in authenticated scanning
[RADAR-31382] – Capability to detect vulnerabilities in Apache Jackrabbit in authenticated scanning
[RADAR-31376] – Capability to detect vulnerabilities in Apache Commons Lang in authenticated scanning
[RADAR-31167] – Capability to detect vulnerabilities in Wazuh Agent for Windows in authenticated scanning for Windows

SystemScan 103813, released July 25, 2025

New features and improvements:

[RADAR-31454] – Capability to detect vulnerabilities in Veeam Backup for Microsoft 365 in authenticated scanning for Windows
[RADAR-31453] – Capability to detect vulnerabilities in MagicINFO Server in authenticated scanning for Windows
[RADAR-31452] – Capability to detect vulnerabilities in qBittorrent in authenticated scanning for Windows
[RADAR-31443] – Capability to detect vulnerabilities in Veeam Recovery Orchestrator in authenticated scanning for Windows

XM newsletter week 30

Improved workflow from recommendation details to related findings and assets

• Recommendations details page introduces a tabbed widget for Findings and Assets related to a recommendation
• Findings tab of the widget grouping the findings by finding type to avoid cluttered view by repeating finding instances on different assets.
• Findings table rows (having finding definitions now) can be expanded to visit the affected assets. e.g for CVE vulnerabilities there is now only a single row by expanding which, affected assets by that single CVE can be viewed.
• Findings widget shows first few findings only, to see them all in a fly out, “Show All” link on the top of the table has to be clicked on
• Simulated attack path visualization “preview” added to the recommendations detail page as a new widget
• Attack path preview widget with a best effort approach highlights the critical asset in the attack path

New EASM recommendations added for misconfigurations within web applications

• Requires setting up a vulnerability web scan against the target that runes the web application. Please refer to this document for how to set up a web scan.

SystemScan 103727, released July 22, 2025

New features and improvements:

Windows authenticated and endpoint agent scans capable of detecting latest Microsoft SharePoint Server Remote Code Execution Vulnerabilities (CVE-2025-53770 and CVE-2025-53771)