Version 4.35.1 released July 15th, 2025

• Resolved a performance issue with delayed automatic enabling of vulnerability scanning for Endpoint Agents. It applied only to subscriptions that support automatic enabling — Vulnerability Management and Exposure Management.

SystemScan 103563, released July 14, 2025

New features and improvements:

[RADAR-11004] – Capability to detect vulnerabilities in ManageEngine Exchange Reporter Plus

Version 4.35.0 released July 10th, 2025

New features and improvements:

• Fixed multiple potential security issues.
• Removed deprecated API endpoints:
  • /ContentSecurityPolicyReport,
  • /Account/signin,
  • /Account/oauthsignin.

Number of Findings Reduced? – Here’s Why

We’ve introduced a new Azure-specific rule: Inconclusive MFA-based Conditional Access Policy for user

This rule runs at the tenant level and is related to two existing rules concerning Conditional Access Policies and MFA.

What’s changed? If the new tenant-level rule is violated, the related user-level rules will be skipped.

What to expect: You may notice a lower number of findings in your scan results and in the Cloud Security Trends dashboard. This is expected and reflects the improved logic.

Let us know if you have any questions or feedback!

XM newsletter week 28

Simulated Attack Path Visualization 

• Minor design improvements
• Terminology change – Attack path step “Simplicity” is now called “Complexity”.  

Version 4.34.9 released July 2nd, 2025

Fixed issues and minor improvements:

• [RADAR-31162] The Internet Discovery page now supports pagination, allowing access to all discovered services. Previously, the list was limited to 500 results. With this update, results beyond the initial 500 can be easily viewed on additional pages, making it simpler to explore the full set of findings.

XM newsletter week 27

• Correction to some of the links navigating to Asset or Findings page using filter where filter was not applied when navigating.
• Identity’s MFA status
  • New MFA status (Inconclusive) has been introduced for the cases where MFA status can’t be sufficiently determined at the moment due to the complexity of the used Conditional Access Policies.
• Recommendations list view: status indicators added as colored bullets to the Status column:
  • Red bullet: Indicating that the recommendation is new and requires attention
  • Yellow bullet: Indicating that a recommendation that has has been closed during the past 30 days, has been re-opened, mainly due to new findings and requires attention
  • Green bullet: Indicating that the recommendation has been resolved. mainly due to findings being mitigated and recommendation severity has dropped to “Inconclusive”. In this case, the recommendation also gets closed automatically.
• Summary report:
  • Recommendation Fixed chart shows the break down of fixed recommendation by actor. Actor can be either User (closing a recommendation manually) or Automation (explained the logic above on the Green bullet status above)

SystemScan 103339, released June 30, 2025

New features and improvements:

[RADAR-23503] – Capability to detect vulnerabilities in GoCD Agent and GoCD Server in authenticated scanning for Windows
[RADAR-28474] – Capability to detect vulnerabilities in KEPServerEX in authenticated scanning for Windows

SystemScan 103367, released July 1, 2025

New features and improvements:

[RADAR-10642] – Capability to detect vulnerabilities in Bitvise SSH Client in authenticated scanning for Windows
[RADAR-31251] – Capability to detect vulnerabilities in Streamline NX Client in authenticated scanning for Windows
[RADAR-31257] – Capability to detect vulnerabilities in Cyberduck and Mountain Duck in authenticated scanning for Windows
[RADAR-31277] – Capability to detect vulnerabilities in Apache EventMesh Runtime in authenticated scanning

SystemScan 103307, released June 27, 2025

New features and improvements:

[RADAR-30159] – Capability to detect vulnerabilities in TSplus in authenticated scanning for Windows