{"id":4767,"date":"2026-10-19T11:36:29","date_gmt":"2026-10-19T08:36:29","guid":{"rendered":"https:\/\/support.withsecure.com\/?page_id=4767"},"modified":"2026-10-19T11:36:29","modified_gmt":"2026-10-19T08:36:29","slug":"exposure-management-including-xm-for-business-and-xm-frontline-add-on","status":"publish","type":"page","link":"https:\/\/support.withsecure.com\/en\/changelogs\/products\/exposure-management-including-xm-for-business-and-xm-frontline-add-on\/","title":{"rendered":"Exposure Management (including XM for Business and XM Frontline Add-on)"},"content":{"rendered":"<section\n    class=\"wp-block-support-banner edwp-block wp-block-support-banner--bg-light-gray layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n            <div class=\"wp-block-support-banner__container\">\n        <div class=\"wp-block-support-banner__content-wrapper\">\n                        <div class=\"wp-component-content wp-component-content--default wp-block-support-banner__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Changelogs<\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <h4>Exposure Management (including XM for Business and XM Frontline Add-on)<\/h4>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                            <div class=\"wp-block-support-banner__searchbar\">\n                    <div class=\"addsearch-standalone-searchbar-container\" data-addsearch-results-url=\"\/en\/search\"><\/div>\n                <\/div>\n                                <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-18T00:00:00+00:00\">September 18, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-09-18-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-09-18 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5 data-id=\"real-time-vulnerability-findings-from-software-inventory-and-cve-threat-intel\"><strong>Real-time vulnerability findings from software inventory and CVE threat intel<\/strong><\/h5>\n<p>Exposure Management (XM) will surface<strong> <\/strong>vulnerability findings automatically generated from your software inventory data cross-referenced against CVE threat intelligence \u2014 including CVSS score changes as they happen.<\/p>\n<p>What this means for you:<\/p>\n<ul>\n<li>Newly disclosed or updated CVEs affecting your installed software are detected automatically, without needing to manually check whether a given CVE applies to your environment or re-run scans to confirm.<\/li>\n<li>This extends vulnerability visibility to Mac and Linux devices via software inventory data, in addition to Windows.<\/li>\n<\/ul>\n<p>Currently, vulnerability findings are refreshed on a 24-hour cadence.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-03T00:00:00+00:00\">September 3, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-09-03-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-09-03 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p><strong>Pre-authorization for automatic response actions on identities<\/strong><\/p>\n<p>We&#8217;re introducing pre-authorization response actions, so response to identity-based threats can be authorized in advance. For each identity pre-authorization values can be set:<\/p>\n<p><strong>Manual actions<\/strong> &#8211; response actions action before it runs. This is the setting used when mitigation actions are triggered from a recommendation.<strong><br \/><\/strong><\/p>\n<p>Pre-authorization can be set for a single identity, for many at once, or governed by a company default that applies automatically to identities as they enter the environment. The company default is configured per organization, and all existing identities have already been set to it, so a consistent baseline is in place from day one.<\/p>\n<p><strong>Filter for AI-related identities in the Identity view<\/strong><\/p>\n<p>AI agents and automations increasingly appear as identities in customer environments, and they introduce new risk. The new AI Assets quick filter in the Identity view displays only the service principals classified as AI-related, allowing them to be located without manual searching.<\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42.png.webp 870w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42-300x100.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42-768x257.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42-447x150.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-42-436x146.png.webp 436w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"291\" width=\"870\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p>By selecting the filter, customers can view all AI-related identities in a single place, making it easier to review AI activity and address anything that requires attention.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-07-21T00:00:00+00:00\">July 21, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-07-21-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-07-21 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h4 data-id=\"clearer-identity-findings-and-recommendations-for-breach-exposure\"><strong>Clearer identity findings and recommendations for breach exposure<\/strong><\/h4>\n<p>We&#8217;ve renamed and updated the Identity findings and recommendations that deal with credential breaches so they&#8217;re easier to understand and act on. The names now describe exactly what each finding or recommendation covers, and for each one we&#8217;ve refreshed the supporting content &#8211; descriptions, risk explanations, details, immediate actions, and proactive actions \u2014 so the guidance is clearer and more actionable.<\/p>\n<p>Here&#8217;s what&#8217;s changed:<\/p>\n<p><strong>&#8220;User has old password&#8221; is now &#8220;Account exposed in breach after last password change&#8221;<\/strong><\/p>\n<p>The new name makes the finding&#8217;s purpose clear: it flags accounts whose credentials were exposed in a known breach and haven&#8217;t been changed since.<\/p>\n<p><strong>&#8220;Remind your users to change their password&#8221; is now &#8220;Reset passwords exposed in breaches&#8221;<\/strong><\/p>\n<p>The new name reflects the specific action that reduces risk \u2014 resetting passwords that have been exposed in breaches.<\/p>\n<p>\u00a0<\/p>\n<p><strong>&#8220;Remediate identity breach of multiple users&#8221; is now &#8220;Review identities with breaches&#8221;<\/strong><\/p>\n<p>The recommendation now includes clear guidance for addressing Identity breach findings. Since these findings belong to a unique category that can&#8217;t be resolved through standard means, they call for a different approach.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-07-14T00:00:00+00:00\">July 14, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-07-14-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-07-14 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5 data-id=\"pre-zero-day-exposure-detection-and-mitigation-actions-from-recommendations\"><strong>Pre-zero-day exposure detection and mitigation actions from Recommendations<\/strong><\/h5>\n<p>We&#8217;re extending Exposure Management (XM) with two capabilities that bring XM and Extended Detection and Response (XDR) closer together \u2014 helping you catch risk earlier and act on it faster, without leaving the Recommendation view.<\/p>\n<h6 data-id=\"pre-zero-day-exposure-detection\"><strong>Pre-zero-day exposure detection<\/strong><\/h6>\n<p>For customers running both XM and XDR, XM can now surface exposure risks that traditional vulnerability scanning misses entirely: privilege-escalation vulnerabilities spotted in real time from endpoint detection data, before a CVE even exists. You\u2019ll see a new finding and recommendation in your Exposure dashboard describing the risk and the recommended action, including guidance on next steps such as reinstalling or patching affected software.<\/p>\n<h6 data-id=\"take-mitigation-action-straight-from-a-recommendation\"><strong>Take mitigation action straight from a Recommendation<\/strong><\/h6>\n<p>For customers running both XM and XDR, the Recommendation view now offers response actions matched to the type of asset affected \u2014 so you can act immediately instead of switching tools.<\/p>\n<p>Depending on the type of fix the recommendation requires, you\u2019ll be able to isolate a device or update file permissions. Later on, recommendations related to Identities will offer the option to reset a password, block user access, or end a user&#8217;s active session..\u00a0<\/p>\n<p>Select the affected assets in the Recommendation view and trigger the action directly \u2014 no need to pivot to a separate XDR console.<\/p>\n<h5 data-id=\"web-scan-and-owasp-top-ten-2025\"><strong>Web Scan\u00a0 and OWASP Top Ten 2025<\/strong><\/h5>\n<p>Our Vulnerability Management Web Scan engine has been updated to detect and classify findings according to the latest <strong>OWASP Top Ten (2025) <\/strong>categories, alongside continued coverage of the 2017 and 2021 lists. Findings from Web Scan contain tags for OWASP categories.\u00a0<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-16T00:00:00+00:00\">June 16, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-06-16-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-06-16 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p>Vulnerability scanning now supported in OT and isolated network environments<\/p>\n<p>WithSecure Elements Vulnerability Management can now scan operational technology (OT) networks and other isolated or segmented environments by routing scan node traffic through an Elements Connector acting as a proxy.<\/p>\n<p>With this change, scan nodes deployed within isolated network segments can route all communication to the Elements backend over ports 80\/443 via a centrally deployed Elements Connector \u2014 without requiring internet access or additional firewall exceptions from within the segment.<\/p>\n<p><strong>Asset sub-type support in findings<\/strong><\/p>\n<p>Findings in Exposure Management now include asset sub-type information, giving users a more precise understanding of which type of asset a finding is associated with. <\/p>\n<p>Assets across all supported sources (Identity, ASM, VM, Cloud, and Device Service) now carry an optional sub-type property that provides a second-level classification beyond the primary asset type. For example, identity assets can be distinguished as <em>Member<\/em>, <em>Guest<\/em> while internet assets can be classified as <em>Domain<\/em>, <em>Subdomain<\/em>, or <em>IPv4 Address<\/em>.<\/p>\n<p>Asset sub-type data is now available in the Findings list (<em>Environment \u2192 Exposure \u2192 Findings<\/em>) via:<\/p>\n<ul>\n<li>A new <strong>&#8220;<\/strong>Asset sub-type<strong>&#8221; <\/strong>column (hidden by default, sortable, can be enabled via column settings)<\/li>\n<li>A new <strong>&#8220;<\/strong>Asset sub-type<strong>&#8221; <\/strong>filter to narrow findings down to a specific asset classification<\/li>\n<\/ul>\n<p>These improvements make it easier to prioritize and investigate findings based on the precise nature of the affected asset.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-05T00:00:00+00:00\">June 5, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-06-05-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-06-05 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h4 data-id=\"authenticated-scan-via-ssh-on-windows-hosts\">Authenticated scan via SSH on Windows hosts<\/h4>\n<h5 data-id=\"system-authenticated-scans-can-be-now-created-for-windows-targets-using-ssh-protocol\">System authenticated scans can be now created for Windows targets using SSH protocol.<\/h5>\n<p>In addition to WinRM which has been the main protocol for performing authenticated vulnerability scans on Windows hosts, SSH is now supported. This feature was previously enabled only for Linux targets<\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36.png.webp 721w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36-300x273.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36-447x406.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-36-161x146.png.webp 161w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"655\" width=\"721\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p><strong>This requires SSH service to be enabled on the target host. <\/strong>We have released a KB article to explain how to enabled SSH service on Windows at<strong> <\/strong><a href=\"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/32960-xm-authenticated-scanning-using-ssh-on-microsoft-windows\" rel=\"nofollow noopener ugc\" target=\"_blank\">Elements Announcements<\/a><strong>.<\/strong><\/p>\n<p>In order to access the wizard chose <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Security Configuration<\/code>\u2192 Network Scan templates \u2192 Add system scan template. Some new options will apply only if the target is Windows.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-05-07T00:00:00+00:00\">May 7, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-05-07-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-05-07 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p>New release include updates related to Identity views, reports, XM Recommendations, XM Findings and Devices views<\/p>\n<h4 data-id=\"identity\">Identity<\/h4>\n<h6 data-id=\"identity-details-entra-group-membership\"><strong>Identity Details \u2013&gt; Entra Group Membership<\/strong><\/h6>\n<p>Entra group membership is now visible in the Identity details pop-up, complementing the already-available Entra roles view.<\/p>\n<figure class=\"entry-image display-medium float-left\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27.png.webp 542w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27-300x99.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27-447x147.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-27-445x146.png.webp 445w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"178\" width=\"542\" loading=\"lazy\" data-display-size=\"medium\" data-float=\"left\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<h4 data-id=\"reports\">Reports<\/h4>\n<p><strong>XM vulnerabilities reports are now available in pdf format<\/strong><\/p>\n<p>Elements Vulnerability Management Reports, accessible from <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Reports -&gt; Email notification and report<\/code> menu are now also downloadable in pdf format from the same context menu as before. <\/p>\n<p><em>Note: This applies to only newly generated reports where the pdf. <\/em><\/p>\n<figure class=\"entry-image display-medium float-left\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28.png.webp 800w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28-300x293.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28-768x749.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28-447x436.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-28-150x146.png.webp 150w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"780\" width=\"800\" loading=\"lazy\" data-display-size=\"medium\" data-float=\"left\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<h4 data-id=\"devices\">Devices<\/h4>\n<p><strong>Device details page features recommendations list<\/strong><\/p>\n<p>The device details page<code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\"> Environment \u2192 Devices \u2192 (Computers &amp; Unmanaged devices) <\/code>features a new tab for showing XM recommendations only for the selected device.<\/p>\n<p><em>Note: This tab lists only open recommendations (status category = Open)<\/em><\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29.png.webp 1516w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29-300x79.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29-1024x268.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29-768x201.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29-447x117.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-29-558x146.png.webp 558w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"397\" width=\"1516\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<h4 data-id=\"recommendations-and-findings\">Recommendations and Findings<\/h4>\n<p><strong>Direct navigation from Finding instances to the affected device view is now possible. <\/strong><\/p>\n<p>Affected asset of the <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Environment -&gt; Exposure -&gt; Findings<\/code> view has a hyperlink which opens the details view of the affected asset in a new browser tab.<\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30.png.webp 1143w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30-300x74.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30-1024x253.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30-768x189.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30-447x110.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-30-592x146.png.webp 592w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"282\" width=\"1143\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p><strong><\/strong><\/p>\n<p><strong>CVE-based findings being part of any Attack Paths, get an enhanced AI-generated description.\u00a0<\/strong><\/p>\n<p>Finding details page, explicitly shows an icon to indicate whether the description is AI-generated. e.g:<\/p>\n<p>Note: <em>Not available to all CVEs, only if CVE is part of any attack paths to help with understanding the attack path step<\/em><\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31.png.webp 939w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31-300x99.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31-768x253.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31-447x147.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-31-444x146.png.webp 444w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"309\" width=\"939\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p><strong><\/strong><\/p>\n<p><strong>Device Security posture issues are now advised in XM as recommendations (requires EPP license).<\/strong><\/p>\n<p>In case of EPP subscription is already active for a company, security posture issues are already visible via Elements portal at <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Environment -&gt; Device Security Posture<\/code> menu. However if the company has XM subscription on top of EPP, all device security posture issues now presented also as XM recommendations. This will help with how to prioritize device security posture recommendations over all other recommendations.\u00a0<\/p>\n<p>Device Security Posture recommendations are visible from <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Environment -&gt; Exposure -&gt; Recommendations<\/code> list view also their Findings from <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">Environment -&gt; Exposure -&gt; Findings<\/code> \u00a0by applying filter <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">FindingType = 'Device Security Posture'<\/code><\/p>\n<p><em>Note: Security Posture Recommendations are only guaranteed for the newly found device posture issues which are created after the date of this release.<\/em><\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32.png.webp 790w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32-300x109.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32-768x278.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32-447x162.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-32-403x146.png.webp 403w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"286\" width=\"790\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-03-27T00:00:00+00:00\">March 27, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-03-27-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-03-27 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p>New release includes following updates in the external assets list (Network-&gt;External assets):<\/p>\n<p><strong>A Record History<\/strong><\/p>\n<p>External asset details now display only the latest DNS resolution result. Previously, the full DNS resolution history was shown.<\/p>\n<p><strong>External Asset Source<\/strong><\/p>\n<p>A new Source column has been added to the table, indicating how each external asset was discovered. List of assets can be filtered using Source. Possible values include:<\/p>\n<ul>\n<li><strong>User import<\/strong> \u2013 Manually imported by a user via CSV.<\/li>\n<li><strong>Internet<\/strong> \u2013 Manually added from the Internet Discovery page.<\/li>\n<li><strong>DNS resolution<\/strong> \u2013 Automatically resolved via DNS from another asset.<\/li>\n<li><strong>Subdomain discovery<\/strong> \u2013 Discovered through automated subdomain enumeration.<\/li>\n<li><strong>Webscan<\/strong> \u2013 Automatically added based on Webscan activity.<\/li>\n<\/ul>\n<p><strong>External Asset Exposure Risk<\/strong><\/p>\n<p>A new Exposure Risk column has been introduced, showing the exposure risk of an external asset. Risk calculation is available only for assets with findings.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-01-14T00:00:00+00:00\">January 14, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2026-01-14-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2026-01-14 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p>New release includes updates in the Identity onboarding process and Recommendations page partner level view:<\/p>\n<p>\nNear Real-Time Identities for Newly Onboarded Tenants<\/p>\n<ul>\n<li>Identity onboarding process has been improved. Until now, the list of identities for a newly onboarded Microsoft Entra tenant could take up to 24 hours to populate. With our new functionality, list of identities will populate in near real-time<strong>\u00a0<\/strong> for successfully onboarded tenant. Instead of waiting hours, the process now completes in minutes, depending on scanning time and current processing queues.<\/li>\n<li>This improvement is part of our ongoing commitment to provide up to date data in near real time including changes in the Identities data. Stay tuned for more updates as we continue to work on the improvements!<\/li>\n<\/ul>\n<p>Recommendation list &#8211; partner level view<\/p>\n<ul>\n<li>Recommendation list (Environment -&gt; Exposure -&gt; Recommendations) page is now available in the partner level views also. Page contains a list of recommendations for all organizations for which partner has access to.\u00a0<\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2025-12-02T00:00:00+00:00\">December 2, 2025<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/changelogs\/exposure-management-2025-12-02-update\/\">\n                <p class=\"wp-block-content-list__title\">Exposure Management &#8211; 2025-12-02 Update<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <p>New release includes updates on the Attack Path visualization and Environment\u2192Network page: <\/p>\n<p>AttackPath visualization: <\/p>\n<ul>\n<li>The AttackPath visualization has now been updated to show verified connections between nodes\u00a0in the attack path diagrams.\u00a0\u00a0<\/li>\n<li>An option to show verified network connections has been added to the main Attack\u00a0\u00a0\u00a0<br \/>\nPath visualization view. This option is enabled by default and may be toggled through\u00a0\u00a0\u00a0<br \/>\nthe control panel.\u00a0\u00a0\u00a0<\/li>\n<li>Connections are green when verified connection findings are available. Connections\u00a0\u00a0\u00a0<br \/>\nare shown as dashed lines where verifications are unavailable. Verifications will not be\u00a0\u00a0\u00a0<br \/>\npossible if the source node does not have the EDR agent installed. The step flyout now\u00a0\u00a0\u00a0<br \/>\nincludes fields that show which ports are reachable from the source node.\u00a0\u00a0<\/li>\n<li>The legend panel includes new explanatory text and a key for the new line styles.\u00a0\u00a0<\/li>\n<li>The Attack Path simulator discards findings older than 30 days.<\/li>\n<\/ul>\n<figure class=\"entry-image display-medium float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11.png.webp 2348w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-300x156.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-1024x533.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-768x400.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-1536x799.png.webp 1536w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-2048x1066.png.webp 2048w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-447x233.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/image-11-281x146.png.webp 281w\" sizes=\"auto, 100vw\" alt=\"image.png\" height=\"1222\" width=\"2348\" loading=\"lazy\" data-display-size=\"medium\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p>Environment \u2192 Network page:<\/p>\n<ul>\n<li>List of company external assets in now default landing page on the Environment \u2192 Network page\n<ul>\n<li>Page design has been updated while preserving all of the functionality as before<\/li>\n<\/ul>\n<\/li>\n<li>Internet tab is moved as a secondary tab providing possibility to search for the publicly visible assets\n<ul>\n<li>Page design has been updated while preserving all of the functionality as before<\/li>\n<li>Search results now contain also an indicator (checkmark) if publicly visible assets is already added to the scan group<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure class=\"entry-image display-medium float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1.png.webp 2362w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-300x93.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-1024x316.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-768x237.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-1536x475.png.webp 1536w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-2048x633.png.webp 2048w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-447x138.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-1-472x146.png.webp 472w\" sizes=\"auto, 100vw\" alt=\"Pasted Graphic 1.png\" height=\"730\" width=\"2362\" loading=\"lazy\" data-display-size=\"medium\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<figure class=\"entry-image display-medium float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2.png.webp 2368w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-300x78.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-1024x265.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-768x198.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-1536x397.png.webp 1536w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-2048x529.png.webp 2048w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-447x116.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/pasted-graphic-2-565x146.png.webp 565w\" sizes=\"auto, 100vw\" alt=\"Pasted Graphic 2.png\" height=\"612\" width=\"2368\" loading=\"lazy\" data-display-size=\"medium\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <nav class=\"wp-block-content-list__pagination\" aria-label=\"Pagination\">\n                    \n                                                                        <span class=\"wp-block-content-list__pagination-link wp-block-content-list__pagination-link--current\" aria-current=\"page\">1<\/span>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4767?cl_page=2\">2<\/a>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4767?cl_page=3\">3<\/a>\n                                            \n                                            <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4767?cl_page=2\" rel=\"next\">Next<\/a>\n                                    <\/nav>\n                            <\/div>\n    <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":0,"featured_media":0,"parent":4744,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4767","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=4767"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4767\/revisions"}],"predecessor-version":[{"id":8136,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4767\/revisions\/8136"}],"up":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4744"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=4767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}