Elements Security Center<\/h2>\nMass acknowledgement of security events based on target<\/strong><\/h3>\nIt is now possible to perform a mass acknowledgement of security events<\/p>\n![\"Picture3.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture3-17.png.webp\")
<\/img><\/a><\/figure>\n![\"Picture4.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture4-18.png.webp\")
<\/img><\/a><\/figure>\nOther Improvements<\/strong><\/h3>\nDevices page<\/strong><\/h4>\nSearching for host name is now supported in the Device view<\/p>\n
Reports<\/strong><\/h4>\nWe have renamed the ‘Email Reports’ tab to ‘Email and Notification Report’ Additionally, we have clarified the accompanying information text. The purpose of this enhancement is to emphasize that this feature serves as a valuable tool for notifying users about non-compliant devices (e.g., devices with malware protection disabled) or for receiving alerts related to specific events (e.g. Malware blocked or EDR incident).<\/p>\n
Reports\/My report<\/strong><\/h5>\nIf a user has not yet created any reports, they will now see an option to access pre-defined widgets. This enhancement aims to help users understand the types of dashboards they can create.<\/p>\n
When adding a dashboard to ‘My Report’, the template name (data field) is now clearly displayed below the dashboard. This enhancement ensures transparency and helps users understand the data sources used to build their customized dashboards.<\/p>\n
We have expanded the device information available for creating reports within ‘My Reports’. Users now have access to a wider range of parameters when building their customized reports.<\/p>\n![\"Picture5.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture5-18.png.webp\")
<\/img><\/a><\/figure>\nReports\/Email and notification report<\/strong><\/h5>\nUsers can now send a test report directly from the ‘Reports\/Email and Notification Report’ section. This option simplifies the process of testing new email notifications or reports.<\/p>\n![\"Picture6.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture6-17.png.webp\")
<\/img><\/a><\/figure>\nElements Endpoint Protection<\/h2>\nElements Agent for Computers and Servers: Version 24.2<\/strong><\/h3>\nA new version of the endpoint clients is available and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
Features:<\/strong><\/h4>\nNew WithSecure Elements agent update mechanisms.<\/h5>\n
We are taking into use backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses<\/a> where the endpoints connect to. The switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/p>\nNote<\/strong> that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once the ACS issue is resolved).<\/p>\nFor more information see Changes in support on Microsoft Windows \u2013 Minimum patch level – WithSecure Community<\/a><\/p>\nSupport for Windows on ARM64 processors<\/h4>\n
We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:<\/p>\n
\n- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n
Elements Mobile Protection: Release new Mobile Protection<\/strong><\/h3>\nWe have now released a new version of Elements Mobile Protection for both Android and iOS devices.<\/p>\n
Briefly, this version brings the following benefits:<\/p>\n
Improve the overall user experience and reliability when browsing traffic is being protected<\/p>\n
\n- A new\u00a0Network Gateway<\/strong>\u00a0component to protect network traffic, also utilizing the WithSecure Security Cloud, for seamless and fast scanning<\/li>\n
- Note<\/strong>: The Network Gateway component on the device will replace the current VPN functionality<\/li>\n
- A new Browsing Protection plugin for Mobile Safari on iOS devices<\/li>\n
- Visibility to Elements Mobile Protection events in the Elements Security Center<\/li>\n<\/ul>\n
As some of the changes are quite significant, we have created an article with Frequently Asked Questions<\/a><\/p>\nElements Endpoint Detection and Response<\/h2>\nElement Endpoint Detection & Response: New status “Waiting for customer” available for Broad Context Detections<\/strong><\/h3>\nUser can now update the status for a BCD as \u201cWaiting for customer\u201d<\/p>\n
‘Waiting for Customer – The incident is now awaiting confirmation \/ response from the end customer before it can be progressed.’<\/p>\n![\"Picture7.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture7-16.png.webp\")
<\/img><\/a><\/figure>\n The user can also filter the BCDs by this status:<\/p>\n![\"Picture8.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture8-15.png.webp\")
<\/img><\/a><\/figure>\nThe dashboard also gives an overview of the status:<\/p>\n![\"Picture9.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture9-15.png.webp\")
<\/img><\/a><\/figure>\nElements Vulnerability Management<\/h2>\nEVM: System Scan<\/strong><\/h3>\nDetections have been added to check for vulnerabilities in the following products, in authenticated scanning on Windows:<\/p>\n
\n- Lenovo Diagnostics Tool<\/li>\n
- Lenovo System Update<\/li>\n
- Lenovo Service Bridge<\/li>\n
- Lenovo Power Management Driver<\/li>\n
- Lenovo Vantage<\/li>\n
- Lenovo System Interface Foundation<\/li>\n
- Dell Update<\/li>\n
- Dell Digital Delivery<\/li>\n
- Dell SupportAssist Enterprise<\/li>\n
- Dell SupportAssist and Dell SupportAssist for Business PC\u00a0<\/li>\n
- Intel Battery Life Diagnostic Tool<\/li>\n
- Intel Dynamic Tuning Technology<\/li>\n
- TeamViewer Meeting<\/li>\n
- TeamViewer Host<\/li>\n
- cURL<\/li>\n
- Devolutions Workspace<\/li>\n
- FontForge<\/li>\n
- Snow Inventory Agent<\/li>\n
- Puppet Bolt<\/li>\n
- PaperCut editions<\/li>\n
- Secure Connect Gateway – Application Edition<\/li>\n<\/ul>\n
Other items of interest<\/h2>\nMonthly Threat Highlights Report: February 2024<\/strong><\/h3>\nHere is more information on the key problems included in the February 2024 Threat Landscape Update report:<\/p>\n
\n- Mass Exploitation Incidents:<\/strong>\u00a0ongoing mass exploitation incidents involving vulnerabilities in Ivanti ConnectSecure and ConnectWise ScreenConnect, emphasizing the critical need for organizations to patch these vulnerabilities promptly to prevent widespread compromise.<\/li>\n
- Ransomware Attacks:<\/strong>\u00a0the continuation of ransomware attacks in February, with varying opinions and statistics on the state of the ransomware sector. This indicates the persistent threat posed by ransomware actors and the importance of robust cybersecurity measures to mitigate such attacks.<\/li>\n
- Machine Learning and LLMs for Malicious Activities<\/strong>: Machine Learning and Large Language Models (LLMs) for malicious activities such as fraud and autonomous hacking. This highlights the evolving tactics used by threat actors and the need for advanced detection and mitigation strategies in cybersecurity defenses.<\/li>\n
- Phishing\/Maldoc Exploits:\u00a0<\/strong>significant increases in phishing\/maldoc exploits targeting client software are noted in the report. Specific vulnerabilities such as CVE-2023-21716, CVE-2023-38831, CVE-2023-23376, and CVE-2023-23397 are highlighted, indicating the prevalence of these exploit techniques and the importance of timely detection and prevention measures.<\/li>\n
- Lazarus Group Exploiting Windows Driver Zero-Day: t<\/strong>he report mentions the Lazarus Group exploiting a Windows driver zero-day vulnerability (CVE-2024-21338) to disable security tools. This underscores the threat posed by sophisticated threat actors and the need for organizations to stay vigilant against such targeted attacks.<\/li>\n<\/ol>\n
Download report<\/a><\/p>\nIn case you missed it<\/h2>\nMulti-Factor Authentication Enforcement<\/strong><\/h3>\nFrom April 22nd 2024, we will start to enforce the use of Multi-Factor Authentication when accessing the WithSecure Elements Security Center. You can find out more details at our dedicated article<\/a><\/p>\nShare your ideas with us<\/strong><\/h2>\nOur purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n![\"Feedback.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/feedback-6.png.webp\")
<\/img><\/a><\/figure>\nFurther information<\/h2>\n
It is now possible to perform a mass acknowledgement of security events<\/p>\n Searching for host name is now supported in the Device view<\/p>\n We have renamed the ‘Email Reports’ tab to ‘Email and Notification Report’ Additionally, we have clarified the accompanying information text. The purpose of this enhancement is to emphasize that this feature serves as a valuable tool for notifying users about non-compliant devices (e.g., devices with malware protection disabled) or for receiving alerts related to specific events (e.g. Malware blocked or EDR incident).<\/p>\n If a user has not yet created any reports, they will now see an option to access pre-defined widgets. This enhancement aims to help users understand the types of dashboards they can create.<\/p>\n When adding a dashboard to ‘My Report’, the template name (data field) is now clearly displayed below the dashboard. This enhancement ensures transparency and helps users understand the data sources used to build their customized dashboards.<\/p>\n We have expanded the device information available for creating reports within ‘My Reports’. Users now have access to a wider range of parameters when building their customized reports.<\/p>\n Users can now send a test report directly from the ‘Reports\/Email and Notification Report’ section. This option simplifies the process of testing new email notifications or reports.<\/p>\n A new version of the endpoint clients is available and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n The endpoints automatically upgrade, without a reboot.<\/p>\n We are taking into use backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses<\/a> where the endpoints connect to. The switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/p>\n Note<\/strong> that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once the ACS issue is resolved).<\/p>\n For more information see Changes in support on Microsoft Windows \u2013 Minimum patch level – WithSecure Community<\/a><\/p>\n We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:<\/p>\n We have now released a new version of Elements Mobile Protection for both Android and iOS devices.<\/p>\n Briefly, this version brings the following benefits:<\/p>\n Improve the overall user experience and reliability when browsing traffic is being protected<\/p>\n As some of the changes are quite significant, we have created an article with Frequently Asked Questions<\/a><\/p>\n User can now update the status for a BCD as \u201cWaiting for customer\u201d<\/p>\n ‘Waiting for Customer – The incident is now awaiting confirmation \/ response from the end customer before it can be progressed.’<\/p>\n The user can also filter the BCDs by this status:<\/p>\n The dashboard also gives an overview of the status:<\/p>\n Detections have been added to check for vulnerabilities in the following products, in authenticated scanning on Windows:<\/p>\n Here is more information on the key problems included in the February 2024 Threat Landscape Update report:<\/p>\n Download report<\/a><\/p>\n From April 22nd 2024, we will start to enforce the use of Multi-Factor Authentication when accessing the WithSecure Elements Security Center. You can find out more details at our dedicated article<\/a><\/p>\n Our purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n<\/img><\/a><\/figure>\n<\/img><\/a><\/figure>\nOther Improvements<\/strong><\/h3>\n
Devices page<\/strong><\/h4>\n
Reports<\/strong><\/h4>\n
Reports\/My report<\/strong><\/h5>\n
<\/img><\/a><\/figure>\nReports\/Email and notification report<\/strong><\/h5>\n
<\/img><\/a><\/figure>\nElements Endpoint Protection<\/h2>\n
Elements Agent for Computers and Servers: Version 24.2<\/strong><\/h3>\n
Features:<\/strong><\/h4>\n
New WithSecure Elements agent update mechanisms.<\/h5>\n
Support for Windows on ARM64 processors<\/h4>\n
\n
Elements Mobile Protection: Release new Mobile Protection<\/strong><\/h3>\n
\n
Elements Endpoint Detection and Response<\/h2>\n
Element Endpoint Detection & Response: New status “Waiting for customer” available for Broad Context Detections<\/strong><\/h3>\n
<\/img><\/a><\/figure>\n<\/img><\/a><\/figure>\n<\/img><\/a><\/figure>\nElements Vulnerability Management<\/h2>\n
EVM: System Scan<\/strong><\/h3>\n
\n
Other items of interest<\/h2>\n
Monthly Threat Highlights Report: February 2024<\/strong><\/h3>\n
\n
In case you missed it<\/h2>\n
Multi-Factor Authentication Enforcement<\/strong><\/h3>\n
Share your ideas with us<\/strong><\/h2>\n
<\/img><\/a><\/figure>\nFurther information<\/h2>\n