Elements Security Center<\/h2>\nReminder: Always use elements.withsecure.com<\/strong> when accessing the Elements Security Center<\/h3>\nWhen we first launched Elements, it was part of the F-Secure family of products, and could be accessed using an f-secure.com URL. This old name is now fully deprecated, and users should always use the
\n
\n https:\/\/elements.withsecure.com
\n <\/a>
\n<\/span>
\n URL.<\/p>\nWe strongly recommend that users update their bookmarks to ensure the correct address is used.<\/p>\n
Elements Endpoint Protection<\/h2>\nElements Agent for Mac<\/h3>\n
WithSecure\u2122 Element Agent 23.2.51507 Update – Now Available for All Customers<\/p>\n
New Features:<\/strong><\/p>\n\n- macOS 14 Sonoma Support<\/strong>: The agent now supports macOS 14 Sonoma.<\/li>\n
- Automatic Auditd Activation<\/strong>: Auditd will automatically enable if needed for the sensor. Note: A reboot is required.<\/li>\n<\/ul>\n
Compatibility:<\/strong> WithSecure\u2122 Element Agent is compatible with the following macOS versions:<\/p>\n\n- macOS 11 Big Sur<\/li>\n
- macOS 12 Monterey<\/li>\n
- macOS 13 Ventura<\/li>\n
- macOS 14 Sonoma<\/li>\n<\/ul>\n
Elements Mobile Protection (Android) <\/h3>\n
An update to the WithSecure Elements Mobile Protection app for Android (23.5.0022636) has been released,<\/p>\n
This release includes the following new features and improvements:<\/p>\n
\n- The app now supports the following security parameters:\n
\n- Root device detection<\/li>\n
- Devices connected to an open WiFi<\/li>\n
- The app running on a simulator<\/li>\n<\/ul>\n<\/li>\n
- The app now supports the Infection deleted security event<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\nEVM: System Scan<\/h3>\n
The following capability has been added to the Online Network check:<\/p>\n
\n- Detect NetScaler ADC and NetScaler Gateway Sensitive information disclosure (“Citrix Bleed”)<\/li>\n<\/ul>\n
The following capability has been added to authenticated scanning for both Windows and Linux<\/p>\n
\n- Detect vulnerabilities in Elasticsearch for Apache Hadoop<\/li>\n<\/ul>\n
The following capabilities have been added to authenticated scanning for Windows:<\/p>\n
\n- Detect vulnerabilities in Trend Micro Apex One<\/li>\n
- Detect vulnerabilities in RVTools<\/li>\n
- Detect vulnerabilities in Rapid7 Insight Agent<\/li>\n
- Detect vulnerabilities in WD Discovery Desktop App<\/li>\n
- Detect vulnerabilities in Dell Command | Integration Suite for System Center<\/li>\n
- Detect vulnerabilities in Dell Command | Configure<\/li>\n
- Detect vulnerabilities in Dell Security Management Server<\/li>\n
- Detect vulnerabilities in Dell Command | Update<\/li>\n
- Detect vulnerabilities in Dell Command | Monitor<\/li>\n
- Detect vulnerabilities in Dell Update<\/li>\n
- Detect vulnerabilities in Dell SonicWALL Directory Connector<\/li>\n
- Detect vulnerabilities in Dell Encryption<\/li>\n
- Detect vulnerabilities in Dell Optimizer<\/li>\n
- Detect vulnerabilities in WPS Office<\/li>\n
- Detect vulnerabilities in Intel Chipset Device Software<\/li>\n<\/ul>\n
EVM: Scan Node Agent<\/strong><\/h3>\nNew versions of the Scan Node Agents have been released for Windows and Linux:<\/p>\n
Linux Scan Node Agent<\/strong><\/h4>\nThis release brings the following improvements<\/p>\n
\n- Migrate existing Linux SNA installations to use fsapi.com endpoints<\/li>\n
- Modify Linux SNA update process to use fsapi.com endpoints<\/li>\n<\/ul>\n
Windows Scan Node Agent<\/strong><\/h4>\nThis release brings the following improvements<\/p>\n
\n- Migrate Windows SNA to use fsapi.com endpoints<\/li>\n
- Remove user-visible references to f-secure.com<\/li>\n<\/ul>\n
Other items of interest<\/h2>\nMonthly Threat Highlights Report: November 2023<\/h3>\nExploited Vulnerabilities<\/strong><\/h4>\n\n- Apache ActiveMQ (CVE-2023-46604): This vulnerability allows a remote attacker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath. It is being actively targeted by ransomware groups including HelloKitty.<\/li>\n
- Atlassian Confluence (CVE-2023-22518): This vulnerability can result in significant data loss when exploited by an unauthenticated attacker. It is being actively targeted by threat actors including ransomware groups.<\/li>\n
- SysAid Server (CVE-2023-47246): This vulnerability is a path traversal vulnerability that leads to code execution. It was publicly disclosed on November 8, 2023, and was targeted by the Lace Tempest group on November 2, 2023.<\/li>\n
- F5 BIG-IP (CVE-2023-46747): Threat actors are exploiting this vulnerability together with CVE-2023-46748 as part of an exploit chain in observed attacks in the wild. Patches are available to fix this issue, and F5 have released relevant advice.<\/li>\n
- WinRAR (CVE-2023-38831): This vulnerability has been targeted by numerous threat actors since April 2023. In a recent campaign, it is alleged that Russia is using the vulnerability to target Azerbaijan, Greece, Romania, and Italy for the purposes of espionage.<\/li>\n<\/ul>\n
SolarWinds Lawsuit<\/strong><\/h4>\nThe SEC has filed a lawsuit against SolarWinds and its CISO, Timothy Brown, alleging that the defendants’ attitude and behaviors led to poor cybersecurity practices. The lawsuit alleges that SolarWinds’ public statements about its cybersecurity practices and risks painted a starkly different picture from internal discussions and assessments about the company’s cybersecurity policy violations, vulnerabilities, and cyberattacks.<\/p>\n
Ransomware Trends and Notable Reports<\/strong><\/h4>\n\n- Increase in ransomware activity: There has been a 25% increase in ransomware activity compared to October 2023, which is a return to “normal” figures.<\/li>\n
- LockBit\u2019s CitrixBleed Campaign: This campaign highlights the danger associated with CVE-2023-4966 “Citrix Bleed,” a vulnerability in Citrix NetScaler ADC and Gateway which has allowed attackers to steal session cookies\/tokens and therefore gain initial access into networks.<\/li>\n<\/ul>\n
Stay informed about the latest cybersecurity threats and trends.<\/p>\n
In case you missed it<\/h2>\nUpcoming changes to the Elements Security Center<\/h3>\n
As part of our ongoing work to improve the usability of the Elements Security Center for administrators, we will be introducing some changes in January 2024. You can find out more details in a dedicated\u00a0Community article<\/a><\/p>\nAccount Security<\/h3>\n
The security of your Elements account is important to us, and should be important to you too. We\u2019ve recently added extra options for using Multi-Factor Authentication with Elements, and there\u2019s\u00a0an article about it too<\/a><\/p>\nIn addition, we have raised the minimum standard for passwords in Elements.\u00a0Further details are available<\/a><\/p>\nClient changes in 2024<\/h3>\n
In February 2024, we will be releasing new client installers for the Elements products. While most of the changes are small, there are some slightly larger changes that Administrators need to be aware of<\/strong>. We have a separate article<\/a> in the Community that lists these in more detail.<\/p>\nShare your ideas with us<\/h2>\n
Our purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n![\"Feedback.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/feedback-3.png.webp\")
<\/img><\/a><\/figure>\nFurther information<\/h2>\n
When we first launched Elements, it was part of the F-Secure family of products, and could be accessed using an f-secure.com URL. This old name is now fully deprecated, and users should always use the We strongly recommend that users update their bookmarks to ensure the correct address is used.<\/p>\n WithSecure\u2122 Element Agent 23.2.51507 Update – Now Available for All Customers<\/p>\n New Features:<\/strong><\/p>\n Compatibility:<\/strong> WithSecure\u2122 Element Agent is compatible with the following macOS versions:<\/p>\n An update to the WithSecure Elements Mobile Protection app for Android (23.5.0022636) has been released,<\/p>\n This release includes the following new features and improvements:<\/p>\n The following capability has been added to the Online Network check:<\/p>\n The following capability has been added to authenticated scanning for both Windows and Linux<\/p>\n The following capabilities have been added to authenticated scanning for Windows:<\/p>\n New versions of the Scan Node Agents have been released for Windows and Linux:<\/p>\n This release brings the following improvements<\/p>\n This release brings the following improvements<\/p>\n The SEC has filed a lawsuit against SolarWinds and its CISO, Timothy Brown, alleging that the defendants’ attitude and behaviors led to poor cybersecurity practices. The lawsuit alleges that SolarWinds’ public statements about its cybersecurity practices and risks painted a starkly different picture from internal discussions and assessments about the company’s cybersecurity policy violations, vulnerabilities, and cyberattacks.<\/p>\n Stay informed about the latest cybersecurity threats and trends.<\/p>\n As part of our ongoing work to improve the usability of the Elements Security Center for administrators, we will be introducing some changes in January 2024. You can find out more details in a dedicated\u00a0Community article<\/a><\/p>\n The security of your Elements account is important to us, and should be important to you too. We\u2019ve recently added extra options for using Multi-Factor Authentication with Elements, and there\u2019s\u00a0an article about it too<\/a><\/p>\n In addition, we have raised the minimum standard for passwords in Elements.\u00a0Further details are available<\/a><\/p>\n In February 2024, we will be releasing new client installers for the Elements products. While most of the changes are small, there are some slightly larger changes that Administrators need to be aware of<\/strong>. We have a separate article<\/a> in the Community that lists these in more detail.<\/p>\n Our purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n
\n
\n https:\/\/elements.withsecure.com
\n <\/a>
\n<\/span>
\n URL.<\/p>\nElements Endpoint Protection<\/h2>\n
Elements Agent for Mac<\/h3>\n
\n
\n
Elements Mobile Protection (Android) <\/h3>\n
\n
\n
Elements Vulnerability Management<\/h2>\n
EVM: System Scan<\/h3>\n
\n
\n
\n
EVM: Scan Node Agent<\/strong><\/h3>\n
Linux Scan Node Agent<\/strong><\/h4>\n
\n
Windows Scan Node Agent<\/strong><\/h4>\n
\n
Other items of interest<\/h2>\n
Monthly Threat Highlights Report: November 2023<\/h3>\n
Exploited Vulnerabilities<\/strong><\/h4>\n
\n
SolarWinds Lawsuit<\/strong><\/h4>\n
Ransomware Trends and Notable Reports<\/strong><\/h4>\n
\n
In case you missed it<\/h2>\n
Upcoming changes to the Elements Security Center<\/h3>\n
Account Security<\/h3>\n
Client changes in 2024<\/h3>\n
Share your ideas with us<\/h2>\n
<\/img><\/a><\/figure>\nFurther information<\/h2>\n