{"id":3847,"date":"2026-05-06T15:21:50","date_gmt":"2026-05-06T12:21:50","guid":{"rendered":"https:\/\/support.withsecure.com\/product-updates\/"},"modified":"2026-10-20T11:13:51","modified_gmt":"2026-10-20T08:13:51","slug":"product-updates","status":"publish","type":"page","link":"https:\/\/support.withsecure.com\/fi\/product-updates\/","title":{"rendered":"Product updates"},"content":{"rendered":"<section\n    class=\"wp-block-support-banner edwp-block wp-block-support-banner--bg-light-gray layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n            <div class=\"wp-block-support-banner__container\">\n        <div class=\"wp-block-support-banner__content-wrapper\">\n                        <div class=\"wp-component-content wp-component-content--default wp-block-support-banner__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Product updates<\/h2>                <\/div>                                <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-service-status edwp-block js-wp-block-service-status\"\n    >\n    <div class=\"wp-block-service-status__container\">\n                <div id=\"status-container\" class=\"banner-layout\" style=\"--status-max-width: 1476px\"><\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-2 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n                                                    <div class=\"wp-block-cards__cards row-load\">\n                    <article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                General product lifecycle policies        <\/h2>\n                    <\/div>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/support.withsecure.com\/en\/general-product-lifecycle-policies\/\">View<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:href='#arrow'><\/use>\n            <\/svg><\/a>                                            <\/div>\n            <\/div>\n<\/article>\n<article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                Supported product versions        <\/h2>\n                    <\/div>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/support.withsecure.com\/en\/supported-product-versions\/\">View<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:href='#arrow'><\/use>\n            <\/svg><\/a>                                            <\/div>\n            <\/div>\n<\/article>\n                <\/div>\n                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--none-top layout--none-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <h3 class=\"wp-component-heading text--h3 wp-block-one-column-block__heading fade-in\">\n    Elements announcements<\/h3>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-19T07:01:03+00:00\">19.10.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/new-roles-for-better-access-control-in-elements\/\">\n                <p class=\"wp-block-content-list__title\">New roles for better access control in Elements<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>We are introducing new Elements roles. New roles make it easier to manage access in the Elements portal.<\/p>\n<ul>\n<li><strong>Endpoints: Reading all<\/strong> &#8211; read access to servers, workstations and mobile devices. Does not grant permission to Device or profile management, Patch management, Device security posture, Software reputation, Security Events, Home\/Endpoint protection, Reports.<\/li>\n<li><strong>Endpoints: Editing all<\/strong> &#8211; editing access to servers, workstations, and mobile devices. Grants permission to security information, including device status, dashboard, security events, and software updates. Allows executing security operations such as removing or isolating devices and assigning profiles. Does not grant permission to manage profiles.<\/li>\n<li><strong>Endpoints: Editing non-servers<\/strong> &#8211; edit access to workstations and mobile devices; read access to servers. Grants access to workstation and mobile security information, including device status, dashboards, security events, and software updates. Allows security operations on workstations and mobile devices, such as removing or isolating them and assigning profiles. Does not permit profile management.<\/li>\n<li><strong>Endpoints: Editing servers<\/strong> &#8211; edit access to servers; read access to workstations and mobile devices. Grants access to server security information, including device status, dashboards, security events, and software updates. Allows security operations on servers, such as removing or isolating them and assigning profiles. Does not permit profile management.<\/li>\n<li><strong>Endpoints: Organizing non-servers<\/strong> &#8211; Edit access to non-server devices, excluding remote operations. Includes actions that affect device security configuration (e.g., profile assignment) or metadata (e.g., alias, label, asset group), but not actions that execute on the device itself. Also includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Organizing servers<\/strong> &#8211; edit access to server devices, excluding remote operations. Includes actions that affect device security configuration (e.g., profile assignment) or metadata (e.g., alias, label, asset group), but not actions that execute on the device itself. Also includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Non-server remote operations<\/strong> &#8211; allows execution of remote security operations on non-servers, such as removing or isolating devices. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Server remote operations<\/strong>  &#8211; allows execution of remote security operations on servers, such as removing or isolating devices. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices. <\/li>\n<li><strong>Profiles: Editing for non-servers<\/strong> &#8211; allows management of security configurations and profiles for workstations and mobile devices. Does not permit access to server profiles.<\/li>\n<li><strong>Profiles: Editing for servers<\/strong> &#8211; allows management of security configurations and profiles for servers. Does not permit access to workstation or mobile device profiles.<\/li>\n<li><strong>Profile assignment rules: Editing <\/strong>&#8211; allows management of profile assignment rules.<\/li>\n<li><strong>Security events: Managing<\/strong> &#8211; grants permission to take action on security events (e.g., acknowledging or allowing a website URL). Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Reports: Managing<\/strong> &#8211; allows managing reports. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-14T10:21:20+00:00\">14.10.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/why-incident-response-matters-fi\/\">\n                <p class=\"wp-block-content-list__title\">Miksi tapahtumien hallinta on t\u00e4rke\u00e4\u00e4?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>Kun kyberhy\u00f6kk\u00e4ys vaikuttaa yritykseesi, sinun on p\u00e4\u00e4tett\u00e4v\u00e4, mitk\u00e4 j\u00e4rjestelm\u00e4t voivat jatkaa toimintaansa ja mit\u00e4 on turvallista palauttaa. Sinun on my\u00f6s selvitett\u00e4v\u00e4, onko arkaluonteisia tietoja p\u00e4\u00e4ssyt vuotamaan ja onko hy\u00f6kk\u00e4\u00e4j\u00e4ll\u00e4 edelleen p\u00e4\u00e4sy j\u00e4rjestelm\u00e4\u00e4n. N\u00e4m\u00e4 p\u00e4\u00e4t\u00f6kset riippuvat luotettavasta kuvasta tapahtuneesta.<\/p>\n<p><strong>Digitaalinen rikostekninen tutkimus ja tietoturvapoikkeamien hallinta (DFIR) tarjoavat asiantuntemusta, jonka avulla n\u00e4m\u00e4 tosiseikat voidaan selvitt\u00e4\u00e4 ja ryhty\u00e4 tarvittaviin toimenpiteisiin.<\/strong>Kokeneet tutkijat ja tilanteeseen reagoivat asiantuntijat auttavat hallitsemaan tapahtumaa, ohjaamaan palautumista ja korjaamaan heikkouksia, jotka mahdollistivat hy\u00f6kk\u00e4yksen. Organisaatiollenne t\u00e4m\u00e4 voi tarkoittaa v\u00e4hemm\u00e4n h\u00e4iri\u00f6it\u00e4, paremmin perusteltuja p\u00e4\u00e4t\u00f6ksi\u00e4 ja v\u00e4hemm\u00e4n painetta sis\u00e4iselle teams.<\/p>\n<h4 data-id=\"building-on-your-existing-security-investment\">Nykyisten tietoturvainvestointienne pohjalta<\/h4>\n<p>Endpoint detection and response (EDR) tarjoaa n\u00e4kyvyytt\u00e4 laitteiden toimintaan sek\u00e4 ty\u00f6kaluja uhkien tutkimiseen ja torjumiseen. Managed detection and response (MDR) tuo mukaan asiantuntijoita, jotka valvovat, tutkivat ja reagoivat sovitun laajuuden puitteissa.<\/p>\n<p>N\u00e4m\u00e4 valmiudet ovat arvokkaita tietoturvaloukkauksen sattuessa. Erityinen DFIR-tiimi jatkaa t\u00e4t\u00e4 ty\u00f6t\u00e4, kun tilanne vaatii perusteellisempaa rikosteknist\u00e4 tutkintaa, laajemman ymp\u00e4rist\u00f6n kattavaa koordinointia tai lis\u00e4apua j\u00e4rjestelmien palauttamisessa. Tutkijat kokoavat todistusaineistoa p\u00e4\u00e4telaitteista, tunnistetiedoista, pilvipalveluista ja muista j\u00e4rjestelmist\u00e4 selvitt\u00e4\u00e4kseen tietoturvaloukkauksen laajuuden ja ohjatakseen seuraavia p\u00e4\u00e4t\u00f6ksi\u00e4.<\/p>\n<h4 data-id=\"what-dfir-can-uncover\">Mit\u00e4 DFIR voi paljastaa<\/h4>\n<p>Seuraavat esimerkkitilanteet osoittavat, miksi t\u00e4m\u00e4 laajempi selvitys on t\u00e4rke\u00e4.<\/p>\n<p><strong>Petollinen lasku luotettavassa keskustelussa:<\/strong>\u00a0Talousosasto saa uudet pankkitiedot osana olemassa olevaa s\u00e4hk\u00f6postikeskustelua toimittajan kanssa. Maksu n\u00e4ytt\u00e4\u00e4 lailliselta, kunnes toimittaja soittaa ja kysyy, miss\u00e4 se viipyy. DFIR-tutkijat paljastavat hakkeroidun s\u00e4hk\u00f6postilaatikon, jota hy\u00f6kk\u00e4\u00e4j\u00e4 k\u00e4ytti maksukeskustelujen seuraamiseen. He tunnistavat asiaan liittyv\u00e4t keskustelut ja piilotetut edelleenl\u00e4hetyss\u00e4\u00e4nn\u00f6t, mik\u00e4 auttaa yrityst\u00e4 turvaamaan tilins\u00e4, vastaamaan pankkien tiedusteluihin ja arvioimaan, mit\u00e4 tietoja on vuotanut.<\/p>\n<p><strong>Lunastusohjelmahy\u00f6kk\u00e4ys, joka alkoi jo muutama p\u00e4iv\u00e4 ennen j\u00e4rjestelm\u00e4n h\u00e4iri\u00f6t\u00e4:<\/strong>\u00a0EDR tunnistaa kiristysohjelman ja erist\u00e4\u00e4 tartunnan saaneen palvelimen. Tutkinnassa k\u00e4y ilmi, ett\u00e4 vaarantunutta j\u00e4rjestelm\u00e4nvalvojan tili\u00e4 on k\u00e4ytetty aiemmin ja ett\u00e4 hy\u00f6kk\u00e4\u00e4j\u00e4ll\u00e4 on ollut p\u00e4\u00e4sy my\u00f6s varmuuskopiointipalvelimeen. DFIR-tiimin j\u00e4senet tunnistavat j\u00e4ljell\u00e4 olevat p\u00e4\u00e4syreitit, arvioivat tietojen varastamista koskevat todisteet ja auttavat selvitt\u00e4m\u00e4\u00e4n, mihin varmuuskopioihin voi luottaa. Palautusvaiheessa voidaan sitten puuttua laajempaan tietoturvaloukkaukseen, mik\u00e4 v\u00e4hent\u00e4\u00e4 riski\u00e4 j\u00e4rjestelmien uudelleenkytkemisest\u00e4 tilanteessa, jossa hy\u00f6kk\u00e4\u00e4j\u00e4ll\u00e4 on edelleen p\u00e4\u00e4sy j\u00e4rjestelm\u00e4\u00e4n.<\/p>\n<p><strong>Arvokasta tietoa havitteleva huomaamaton tunkeutuminen:<\/strong>\u00a0Liiketoiminta jatkuu normaalisti, vaikka tunkeilija p\u00e4\u00e4see viikkojen ajan k\u00e4siksi arkaluonteisiin projektitiedostoihin. Ep\u00e4tavallinen kirjautuminen k\u00e4ynnist\u00e4\u00e4 tutkimuksen, jossa yhdistet\u00e4\u00e4n eri ty\u00f6asemien ja pilvipalveluiden v\u00e4linen toiminta. DFIR-asiantuntijat rekonstruoivat tapahtumien kulun, paljastavat mekanismit, joilla p\u00e4\u00e4sy\u00e4 on yll\u00e4pidetty, ja arvioivat todisteita tietojen ker\u00e4\u00e4misest\u00e4 ja siirt\u00e4misest\u00e4. Organisaatio saa selke\u00e4mm\u00e4n k\u00e4sityksen tietoturvariskist\u00e4 ja suunnitelman tunkeilijan poistamiseksi.<\/p>\n<h4 data-id=\"evidence-for-decisions-reporting-and-recovery\">P\u00e4\u00e4t\u00f6ksenteon, raportoinnin ja elvytyksen perustelut<\/h4>\n<p>Vaikka hy\u00f6kk\u00e4\u00e4j\u00e4 olisi jo aiheuttanut vahinkoa, tehokkaat vastatoimet voivat est\u00e4\u00e4 lis\u00e4vahingot ja suojata vahingoittumattomia toimintoja. Kokeneet vastatoimien toteuttajat auttavat asettamaan toimet t\u00e4rkeysj\u00e4rjestykseen liiketoiminnalle aiheutuvien vaikutusten perusteella ja s\u00e4ilytt\u00e4m\u00e4\u00e4n samalla tutkintaan tarvittavat todisteet.<\/p>\n<p>Selke\u00e4 raportointi tarjoaa johdolle tosiasioihin perustuvan pohjan p\u00e4\u00e4t\u00f6ksenteolle. Se my\u00f6s tukee\u00a0<strong>kybervakuutuskorvaushakemukset ja viranomaisraportointi<\/strong>\u00a0dokumentoitujen aikataulujen, vaikutuksen kohteeksi joutuneista j\u00e4rjestelmist\u00e4 ja tiedoista tehtyjen havaintojen sek\u00e4 toteutettujen vastatoimenpiteiden kirjausten avulla. Oikeudelliset ja s\u00e4\u00e4ntelyasioista vastaavat tahot teams voivat k\u00e4ytt\u00e4\u00e4 n\u00e4it\u00e4 havaintoja arvioidakseen ilmoitusvelvollisuuksia ja laatiakseen tarvittaessa NIS2-direktiivin ja GDPR-asetuksen mukaisia raportteja. Raporteissa erotetaan toisistaan vahvistetut havainnot ja arviot sek\u00e4 selitet\u00e4\u00e4n mahdolliset j\u00e4ljell\u00e4 olevat ep\u00e4varmuustekij\u00e4t.<\/p>\n<h4 data-id=\"expertise-available-when-you-need-it\">Asiantuntemusta saatavilla juuri silloin, kun sit\u00e4 tarvitset<\/h4>\n<p>WithSecurella,\u00a0<strong>onnettomuustilanteiden hallintatiimimme on t\u00e4ysin teknologiariippumaton<\/strong>. Toimimme toimittajista, alustoista ja ymp\u00e4rist\u00f6ist\u00e4 riippumatta yhteisty\u00f6ss\u00e4 asiakkaan nykyisten teams ja palveluntarjoajien kanssa. Tutkimuksemme kattavat yrityss\u00e4hk\u00f6postin v\u00e4\u00e4rink\u00e4yt\u00f6n, kiristysohjelmat, kybervakoilun ja sis\u00e4piirin uhat. Tai muut tarpeet.<\/p>\n<p>WithSecure DFIR -asiakassopimus tarjoaa\u00a0<strong>24\/7, SLA:n mukainen p\u00e4\u00e4sy asiantuntijoiden palveluihin<\/strong>, ja palvelut ovat saatavilla tarpeen mukaan ennalta sovituilla hinnoilla ilman velvollisuutta ostaa tutkimusp\u00e4ivi\u00e4 etuk\u00e4teen. Organisaatiollanne on vakiintunut yhteydenotto- ja aktivointiprosessi, mik\u00e4 lyhent\u00e4\u00e4 asiantuntijatuen j\u00e4rjest\u00e4miseen kuluvaa aikaa poikkeustilanteessa. Sis\u00e4iset teams saavat lis\u00e4kapasiteettia juuri silloin, kun heihin kohdistuvat vaatimukset ovat suurimmillaan.<\/p>\n<p>Autamme sinua valmistautumaan my\u00f6s seuraavien avulla:\u00a0<strong>r\u00e4\u00e4t\u00e4l\u00f6idyt p\u00f6yt\u00e4harjoitukset, toimintak\u00e4sikirjat ja suunnitelmien tarkastukset<\/strong>, joka kattaa tapahtumien hallinnan, kriisinhallinnan ja palautumisen. Jokainen toimeksianto on r\u00e4\u00e4t\u00e4l\u00f6ity vastaamaan asiakkaan toimintaymp\u00e4rist\u00f6\u00e4, liiketoiminnan painopisteit\u00e4 ja tiimin vastuualueita. Henkil\u00f6st\u00f6 voi harjoitella vaikeiden p\u00e4\u00e4t\u00f6sten tekemist\u00e4, testata eskalointireittej\u00e4 ja korjata puutteita ennen kuin todellinen tapahtuma asettaa n\u00e4m\u00e4 j\u00e4rjestelyt koetukselle.<\/p>\n<p>Tuloksena on organisaatio, joka on paremmin valmis ymm\u00e4rt\u00e4m\u00e4\u00e4n tapahtuman, tekem\u00e4\u00e4n perusteltuja p\u00e4\u00e4t\u00f6ksi\u00e4 ja palauttamaan toiminnan todisteisiin perustuvan varmuuden avulla.<\/p>\n<p>Lue lis\u00e4\u00e4 tapahtumien hallintapalveluistamme t\u00e4\u00e4lt\u00e4: <\/p>\n<div class=\"js-embed embedResponsive\">\n    <a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fwww.withsecure.com%2Fen%2Fexperiencing-a-breach%2F\" rel=\"nofollow noopener ugc\" target=\"_blank\"><\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"scDMqUNVsg\"><p><a href=\"https:\/\/www.withsecure.com\/en\/experiencing-a-breach\/\" target=\"_blank\" rel=\"noopener\">Experiencing a breach<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Experiencing a breach&#8221; &#8212; WithSecure\u2122\" src=\"https:\/\/www.withsecure.com\/en\/experiencing-a-breach\/embed\/#?secret=kOoh94Xcv5#?secret=scDMqUNVsg\" data-secret=\"scDMqUNVsg\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><br \/>\n    <\/a>\n<\/div>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-09T06:34:49+00:00\">9.10.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/new-feature-onboarding-assistant-in-elements-security-center\/\">\n                <p class=\"wp-block-content-list__title\">New Feature: Onboarding Assistant in Elements Security Center<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>We have introduced the Onboarding Assistant in Elements Security Center, a built-in virtual assistant that guides new users through their first steps in WithSecure\u2122 Elements. The assistant appears on first login and leads you through the setup actions needed for the products and services your organization has purchased.<\/p>\n<p>Until now, getting started often relied on hands-on help from a partner or a WithSecure solutions engineer. The Onboarding Assistant gives every customer the same clear, step-by-step path to a working setup, so you reach your first security outcomes faster and with less manual support.<\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant.png.webp 2457w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-300x176.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-1024x601.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-768x451.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-1536x901.png.webp 1536w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-2048x1202.png.webp 2048w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-447x262.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/onboarding-assistant-249x146.png.webp 249w\" sizes=\"auto, 100vw\" alt=\"onboarding_assistant.png\" height=\"1442\" width=\"2457\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<h4 data-id=\"what-s-new\">What&#8217;s new<\/h4>\n<ul>\n<li><strong>Guided first login:<\/strong> the assistant opens automatically when you log in to Elements Security Center for the first time and walks you through each required onboarding step<\/li>\n<li><strong>Organization onboarding:<\/strong> set up your organization, including users and single sign-on (SSO)<\/li>\n<li><strong>Device and profile onboarding:<\/strong> get your devices connected so that they are protected and visible in Elements<\/li>\n<li><strong>Steps tailored to your subscriptions:<\/strong> you only see the steps that are relevant to the Elements products and services your company has, so there is nothing extra to sort through<\/li>\n<li><strong>Help where you need it:<\/strong> each step includes contextual guidance, links to documentation, and prompts for the next action<\/li>\n<\/ul>\n<h4 data-id=\"who-sees-the-assistant\">Who sees the assistant<\/h4>\n<p>The assistant is shown to the first user who logs in with permission to manage users and access rights in the organization. This person can hand over product setup to other users by giving them access to Elements Security Center, so user and product administration can be split. In this release, the assistant is shown to customer users only, not to partner users with access to several companies.<\/p>\n<h4 data-id=\"how-to-get-started\">How to get started<\/h4>\n<p>Log in to Elements Security Center. The Onboarding Assistant opens on the right side of the portal and shows your onboarding progress. Select a step to see what needs to be done and follow the guidance until all the steps relevant to your subscriptions are completed.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-30T10:07:09+00:00\">30.9.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/introducing-withsecure-elements-ai-security\/\">\n                <p class=\"wp-block-content-list__title\">Introducing WithSecure Elements AI Security<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>We have launched AI Security Early Access for eligible WithSecure\u2122 Elements subscriptions. <\/p>\n<p>The new <strong>AI Security Dashboard <\/strong>gives users a single view into how AI is being used across organizations\u2019 IT environments.<\/p>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard.png.webp 1189w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard-300x120.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard-1024x410.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard-768x307.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard-447x179.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/ai-security-dashboard-365x146.png.webp 365w\" sizes=\"auto, 100vw\" alt=\"AI-Security-dashboard.png\" height=\"476\" width=\"1189\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p><strong>What&#8217;s new:<\/strong><\/p>\n<ul>\n<li><strong>Shadow AI discovery<\/strong>, through a dedicated AI Security Dashboard and Software Inventory that lists the AI tools in use across the organization, including tools that were never formally installed.<\/li>\n<li><strong>Agentic identity visibility<\/strong>, integrated with Microsoft Entra ID, to surface Service Principals attributed to AI agents, AI chat assistants, AI coding assistants, and other generative AI tools operating with their own credentials.<\/li>\n<li><strong>Browser extension tracking<\/strong>, surfacing AI-related browser plug-ins from chatbot sidebars to AI-powered productivity add-ons across every managed endpoint. To be added shortly after the initial release.<\/li>\n<\/ul>\n<figure class=\"entry-image display-large float-none\"><a class=\"embedImage-link\" href=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-scaled.png.webp\" rel=\"nofollow noopener ugc\" target=\"_blank\"><img decoding=\"async\" class=\"embedImage-img\" src=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-scaled.png.webp\" srcset=\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-scaled.png.webp 2560w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-300x84.png.webp 300w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-1024x287.png.webp 1024w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-768x215.png.webp 768w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-1536x431.png.webp 1536w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-2048x574.png.webp 2048w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-447x125.png.webp 447w, https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/elements-ai-assets-521x146.png.webp 521w\" sizes=\"auto, 100vw\" alt=\"elements-ai-assets.png\" height=\"842\" width=\"3004\" loading=\"lazy\" data-display-size=\"large\" data-float=\"none\" data-type=\"image\/png\" data-embed-type=\"image\"><\/img><\/a><\/figure>\n<p>The initial release of AI Security includes asset status for discovered AI software, helping you identify which AI tools are approved for use versus &#8221;shadow AI.&#8221; In this release, asset status doesn&#8217;t restrict AI software use since it&#8217;s intended for reporting purposes only.<\/p>\n<p><strong>Learn more:<\/strong><\/p>\n<p>To learn more about AI Security, including how to use the dashboard, software inventory, and asset status, see the <a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fsupport.withsecure.com%2Fuserguides%2Fproduct.html%23business%2Felements-welcome%2Flatest%2Fen%2Fabout_ai_security-latest-en\" target=\"_blank\" rel=\"nofollow noopener ugc\">AI Security section of the Elements User Guide<\/a>.<\/p>\n<p><strong>How to get started:<\/strong><\/p>\n<p>AI Security is available as an Early Access feature for eligible WithSecure Elements subscribers, at no extra cost and with no installation or setup required, until further notice. <\/p>\n<p>If you&#8217;re an Elements user but aren&#8217;t currently subscribed to an eligible module, you can start a free 30-day trial via the Free Trials tab in Elements Security Center.<\/p>\n<p><strong>Eligibility:<\/strong><\/p>\n<ul>\n<li><strong>Software incl. Browser extension tracking:<\/strong> WithSecure Elements Protect and Proactive Bundles, WithSecure Elements XDR \/ Endpoint Detection and Response (EDR), WithSecure Elements Exposure Management (XM) for Business \/ Users \/ Devices.<\/li>\n<li><strong>Identity:<\/strong> WithSecure Elements Protect and Proactive Bundles, WithSecure XDR Identity Security, WithSecure Elements Exposure Management (XM) for Business \/ Users \/ Identities.<\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-24T10:00:27+00:00\">24.9.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/major-capricorn-update-for-endpoint-protection-october-2026-2\/\">\n                <p class=\"wp-block-content-list__title\">Major Capricorn update for Endpoint Protection &#8211; October 2026<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p><strong>UPDATE 2026-10-15: <\/strong>This has now been released to production with version &#8221;<strong>2026-10-14_01<\/strong>&#8221;<\/p>\n<p>We would like to inform you about a larger Virus Definition File (VDF) update than usual, scheduled for <strong>October 13, 2026.<\/strong><\/p>\n<h5 data-id=\"what-does-this-update-mean\"><strong>What does this update mean?<br \/><\/strong><\/h5>\n<p>As part of the regular maintenance cycle, the signature database is periodically reorganized \u2014 approximately twice a year. This update signifies that affected endpoints will download a larger, refreshed signature base of <strong>up to 130 MB<\/strong>, compared to the usual few KB to few MB size of standard updates.<\/p>\n<p>Standard updates will resume immediately afterward, returning to their normal size.<\/p>\n<h5 data-id=\"update-details\"><strong>Update Details<\/strong><\/h5>\n<ul>\n<li>Platform coverage: This update applies to <strong>all WithSecure Endpoint Protection products<\/strong> \u2014 across <strong>Windows, Mac, and Linux<\/strong> platforms that utilize the <strong>Capricorn engine.<\/strong><\/li>\n<\/ul>\n<h5 data-id=\"deployment\"><strong>Deployment<\/strong><\/h5>\n<ul>\n<li>The update will be <strong>delivered automatically<\/strong> through the regular VDF update mechanism.<\/li>\n<li>Updates containing this release will start with <strong>&#8221;WithSecure Capricorn Engine (2026-10-xx-xx)&#8221;.<br \/><\/strong><\/li>\n<\/ul>\n<p>Users of WithSecure Elements EPP may wish to consider taking the Elements Connector into use, to help reduce internet access, if they have several deployed endpoints. You can find more details of how to deploy this at:<\/p>\n<p><a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fsupport.withsecure.com%2Fuserguides%2Fdata%2Fpdf%2Fws_elements_connector_eng.pdf\" rel=\"nofollow noopener ugc\">https:\/\/support.withsecure.com\/userguides\/data\/pdf\/ws_elements_connector_eng.pdf<\/a><\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--none-top layout--none-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <h3 class=\"wp-component-heading text--h3 wp-block-one-column-block__heading fade-in\">\n    Business Suite announcements<\/h3>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-24T10:00:29+00:00\">24.9.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/major-capricorn-update-for-endpoint-protection-october-2026\/\">\n                <p class=\"wp-block-content-list__title\">Major Capricorn update for Endpoint Protection &#8211; October 2026<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p><strong>UPDATE 2026-10-15: <\/strong>This has now been released to production with version &#8221;<strong>2026-10-14_01<\/strong>&#8221;<\/p>\n<p>We would like to inform you about a larger Virus Definition File (VDF) update than usual, scheduled for <strong>October 13, 2026.<\/strong><\/p>\n<h5 data-id=\"what-does-this-update-mean\"><strong>What does this update mean?<br \/><\/strong><\/h5>\n<p>As part of the regular maintenance cycle, the signature database is periodically reorganized \u2014 approximately twice a year. This update signifies that affected endpoints will download a larger, refreshed signature base of <strong>up to 130 MB<\/strong>, compared to the usual few KB to few MB size of standard updates.<\/p>\n<p>Standard updates will resume immediately afterward, returning to their normal size.<\/p>\n<h5 data-id=\"update-details\"><strong>Update Details<\/strong><\/h5>\n<ul>\n<li>Platform coverage: This update applies to <strong>all WithSecure Endpoint Protection products<\/strong> \u2014 across <strong>Windows, Mac, and Linux<\/strong> platforms that utilize the <strong>Capricorn engine.<\/strong><\/li>\n<\/ul>\n<h5 data-id=\"deployment\"><strong>Deployment<\/strong><\/h5>\n<ul>\n<li>The update will be <strong>delivered automatically<\/strong> through the regular VDF update mechanism.<\/li>\n<li>Updates containing this release will start with <strong>&#8221;WithSecure Capricorn Engine (2026-10-xx-xx)&#8221;.<\/strong><\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-05-12T08:13:10+00:00\">12.5.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/tls-certificate-provider-update-for-guts2-backend-may-19-2026\/\">\n                <p class=\"wp-block-content-list__title\">TLS certificate provider update for GUTS2 backend (May 19, 2026)<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>We would like to inform you about an upcoming change to the TLS certificates used by the WithSecure GUTS2 Server (definition update backend), planned for <strong>May 19, 2026<\/strong>.<\/p>\n<p>We are transitioning from DigiCert to Let\u2019s Encrypt certificates. This update aligns our backend infrastructure with our existing services, where Let\u2019s Encrypt is already in use, and helps us streamline certificate management while maintaining industry\u2011standard security practices.<\/p>\n<h4 data-id=\"what-does-this-mean-for-you\"><strong>What does this mean for you?<\/strong><\/h4>\n<ul>\n<li>No changes are expected for the majority of environments.<\/li>\n<li>The change will be transparent if your system trusts the <strong>ISRG Root X1<\/strong> certificate (the root certificate used by Let\u2019s Encrypt).<\/li>\n<\/ul>\n<h4 data-id=\"common-environments-where-no-action-is-required\"><strong>Common environments where no action is required:<\/strong><\/h4>\n<ul>\n<li>Windows systems with Windows Update enabled<\/li>\n<li>Environments where automatic root certificate updates are allowed (not restricted by GPO \/ MDM policies)<\/li>\n<li>Systems where ISRG Root X1 is not explicitly removed or blocked<\/li>\n<\/ul>\n<h4 data-id=\"when-action-may-be-needed\"><strong>When action may be needed:<\/strong><\/h4>\n<ul>\n<li>Systems with restricted certificate updates<\/li>\n<li>Environments with custom trust stores<\/li>\n<li>Devices where ISRG Root X1 is missing or not trusted<\/li>\n<\/ul>\n<p>In such cases, please ensure that the <strong>ISRG Root X1<\/strong> root certificate is present in your trust store.<\/p>\n<p>WithSecure products currently require the following root certificates for TLS communication to WithSecure backends, therefore must be present on all machines, across all Operating Systems:<\/p>\n<ul>\n<li>Amazon Root CA 1\u00a0<\/li>\n<li>Amazon Root CA 2\u00a0<\/li>\n<li>Amazon Root CA 3\u00a0<\/li>\n<li>Amazon Root CA 4<\/li>\n<li>Starfield Class 2 Certification<\/li>\n<li>Starfield Services Root Certificate Authority \u2013 G2\u00a0<\/li>\n<li>DigiCert Global Root CA\u00a0<\/li>\n<li>ISRG Root X1<\/li>\n<li>ISRG Root X2<\/li>\n<\/ul>\n<p>All of these are included in the default trust stores of modern, up-to-date operating systems and should not require manual installation in the majority of deployments.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-05-07T06:31:59+00:00\">7.5.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/major-capricorn-update-for-endpoint-protection-may-2026\/\">\n                <p class=\"wp-block-content-list__title\">Major Capricorn update for Endpoint Protection &#8211; May 2026<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p><strong>UPDATE 2026-05-13: <\/strong>This has now been released to production with version &#8221;<strong>2026-05-13_01<\/strong>&#8221;<\/p>\n<p>We will soon be releasing a major update for our Capricorn engine, used by our Endpoint Protection products. This is expected to be released on\u00a0May\u00a012th\u00a02026.\u00a0<\/p>\n<p>This will result in a larger download as\u00a0an\u00a0updated version of the virus definition files are distributed.\u00a0<br \/>\n\u00a0<\/p>\n<h4 data-id=\"key-improvements\">\u00a0<br \/><strong>Key improvements<\/strong>\u00a0<\/h4>\n<p>Optimized databases through consolidation of overlapping detections, resulting in:\u00a0<\/p>\n<ul>\n<li>Smaller footprint: Size on disk expected to decrease by ~160MB, decreasing by about half.\u00a0<\/li>\n<li>Faster updates and reduced initialization disk I\/O due to reduced database size\u00a0<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<h4 data-id=\"update-details\"><strong>Update Details<\/strong>\u00a0<\/h4>\n<ul>\n<li>Platform coverage: This update applies to\u00a0<strong>all WithSecure Endpoint Protection products<\/strong>\u00a0\u2014 across\u00a0<strong>Windows, Mac, and Linux<\/strong>\u00a0platforms that\u00a0utilize\u00a0the\u00a0<strong>Capricorn engine.<\/strong>\u00a0<\/li>\n<li>Download size: All affected endpoints will now download a larger one-time update package of\u00a0<strong>approximately 130-150\u00a0MB<\/strong>\u00a0during the rollout.\u00a0<\/li>\n<\/ul>\n<p>\u202f\u00a0<\/p>\n<h4 data-id=\"deployment\"><strong>Deployment<\/strong>\u00a0<\/h4>\n<ul>\n<li>The update will be\u00a0<strong>delivered automatically.<\/strong>\u00a0<\/li>\n<li><strong>No manual action or configuration<\/strong>\u00a0is\u00a0required.\u00a0<\/li>\n<li>The release time will be confirmed 24 hours in advance through our community channels.\u00a0<\/li>\n<li>Updates\u00a0containing\u00a0this release will start with &#8221;WithSecure Capricorn Engine (2026-05-xx-xx)\u201d.\u00a0<\/li>\n<li>With this update, you can expect\u202f<strong>leaner, faster, and more efficient endpoint protection<\/strong>\u202f\u2014 without compromising security.\u00a0<\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--none-top layout--none-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <h3 class=\"wp-component-heading text--h3 wp-block-one-column-block__heading fade-in\">\n    General announcements<\/h3>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-04-16T14:17:04+00:00\">16.4.2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/cve-2026-40175-for-axios-javascript-library-2\/\">\n                <p class=\"wp-block-content-list__title\">CVE-2026-40175 for Axios JavaScript library<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <h4 data-id=\"what-is-axios\"><strong>What is Axios?<\/strong><\/h4>\n<p>Axios is a JavaScript library intended to ease interaction with internet HTTP services. It is used by some organizations to simplify their codebase compared to using standard browser functionality.<\/p>\n<h4 data-id=\"what-is-the-vulnerability\"><strong>What is the vulnerability?<\/strong><\/h4>\n<p>Prior to version 1.15.0, the Axios library is vulnerable to a specific &#8221;Gadget&#8221; attack chain that allows Prototype Pollution in any third-party dependency to be escalated into Remote Code Execution (RCE) or Full Cloud Compromise (via AWS IMDSv2 bypass).<\/p>\n<p>Ref: <a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fnvd.nist.gov%2Fvuln%2Fdetail%2FCVE-2026-40175\" rel=\"nofollow noopener ugc\" target=\"_blank\">https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-40175<\/a><\/p>\n<h4 data-id=\"has-the-vulnerability-been-fixed\"><strong>Has the vulnerability been fixed?<\/strong><\/h4>\n<p>This vulnerability has been fixed in 1.15.0.<\/p>\n<h4 data-id=\"what-are-withsecure-s-recommendations-for-partners-and-customers\"><strong>What are WithSecure\u2019s recommendations for partners and customers?<\/strong><\/h4>\n<p>We recommend partners and customers who use Axios act immediately to ensure their systems are not vulnerable.<\/p>\n<p><strong>WithSecure Exposure Management<\/strong> can detect and notify partners and customers that they have a vulnerable version.<\/p>\n<p>Detection for vulnerable versions is available in unauthenticated scanning, and we are investigating the possibility to detect them on hosts via authenticated scans<\/p>\n<h4 data-id=\"what-is-the-status-of-withsecure-systems-in-relation-to-this-vulnerability\"><strong>What is the status of WithSecure systems in relation to this vulnerability?<\/strong><\/h4>\n<p>WithSecure has thoroughly checked its own systems, and has confirmed that all services using Axios are using the latest version which is not vulnerable.<\/p>\n<h4 data-id=\"are-any-withsecure-products-affected\"><strong>Are any WithSecure products affected?<\/strong><\/h4>\n<p>WithSecure Policy Manager does contain a vulnerable version of the Axios library, and we have created a hotfix for this issue.  We advise all our Business Suite partners and customers to apply this hotfix at the earliest opportunity.<\/p>\n<p>The risk can further be mitigated by ensuring that Policy Manager\u2019s Web Reporting interface is not accessible from the internet. This can be done with external firewall configurations.<\/p>\n<p>The hotfix can be downloaded from the <a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fsupport.withsecure.com%2Fen%2Fsupport%2Fproduct-support%2Fbusiness-suite%2Fpolicy-manager%23download\" target=\"_blank\" rel=\"nofollow noopener ugc\">WithSecure Download Center<\/a>.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2024-09-12T06:09:08+00:00\">12.9.2024<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/major-capricorn-update-for-endpoint-protection-fi\/\">\n                <p class=\"wp-block-content-list__title\">Merkitt\u00e4v\u00e4 Capricorn-p\u00e4ivitys Endpoint Protection<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p><strong>P\u00c4IVITYS: 2024-09-25<\/strong>: T\u00e4m\u00e4 p\u00e4ivitys on nyt julkaistu nimell\u00e4 <strong>WithSecure Capricorn Engine (2024-09-25_04).<\/strong> Huomaa, ett\u00e4 koska asiakkaat tarkistavat p\u00e4ivitykset, jotkut asiakkaat saavat t\u00e4m\u00e4n vasta hieman my\u00f6hemmin p\u00e4iv\u00e4ll\u00e4. My\u00f6hemm\u00e4t Capricorn-p\u00e4ivitykset sis\u00e4lt\u00e4v\u00e4t my\u00f6s t\u00e4m\u00e4n muutoksen.<\/p>\n<p><strong>P\u00c4IVITYS 2024-09-24:<\/strong> Odotamme, ett\u00e4 t\u00e4m\u00e4 p\u00e4ivitys toimitetaan asiakkaillemme 25.09.2024 kello 9.00 UTC, mutta tarkkaa aikaa ei valitettavasti ole mahdollista antaa, koska asiakasasennukset tarkistavat p\u00e4ivitykset. P\u00e4ivityksen koko on ~39MB, eik\u00e4 aiemmin ilmoitettu 42,6MB.<\/p>\n<p>Aiomme julkaista suuren Capricorn-tietokantap\u00e4ivityksen 24. syyskuuta 2024.<\/p>\n<h4 data-id=\"what-does-this-update-mean\"><strong>Mit\u00e4 t\u00e4m\u00e4 p\u00e4ivitys tarkoittaa?<\/strong><\/h4>\n<p>T\u00e4m\u00e4 p\u00e4ivitys tarkoittaa, ett\u00e4 kaikki Withsecure Endpoint -tuotteet &#8211; Windows-, Mac- ja Linux-alustoilla (jotka k\u00e4ytt\u00e4v\u00e4t Capricorn-moottoria) lataavat nyt suuremman p\u00e4ivityspaketin, joka on noin 42,6 Mt tavanomaisen 5 Mt:n sijasta.<\/p>\n<p>Suuria ymp\u00e4rist\u00f6j\u00e4 hallinnoiville tai kaistanleveysrajoituksista k\u00e4rsiville asiakkaille n\u00e4m\u00e4 tiedot voivat olla erityisen t\u00e4rkeit\u00e4. Lis\u00e4ksi k\u00e4ytt\u00e4j\u00e4t voivat odottaa parempia alustusaikoja ja pienemp\u00e4\u00e4 muistinkulutusta osana p\u00e4ivityksen etuja.<\/p>\n<p>P\u00e4ivitys on<strong> automaattisesti<\/strong> eik\u00e4 se vaadi lis\u00e4konfigurointia.<\/p>\n<ul>\n<li>Julkaisuajankohta ilmoitetaan 24 tuntia etuk\u00e4teen community -kanavissamme. <\/li>\n<li>T\u00e4m\u00e4n julkaisun sis\u00e4lt\u00e4v\u00e4t p\u00e4ivitykset alkavat sanoilla &#8221;WithSecure Capricorn Engine (2024-09-xx-xx-xx)&#8221;.<\/li>\n<li>WithSecuren Elements EPP:n k\u00e4ytt\u00e4j\u00e4t voivat harkita Elements Connectorin k\u00e4ytt\u00f6\u00f6nottoa internet-yhteyden v\u00e4hent\u00e4miseksi, jos heill\u00e4 on useita k\u00e4yt\u00f6ss\u00e4 olevia p\u00e4\u00e4telaitteita. Lis\u00e4tietoja t\u00e4m\u00e4n k\u00e4ytt\u00f6\u00f6notosta on osoitteessa <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fwww.withsecure.com%2Fuserguides%2Fdata%2Fpdf%2Fws_elements_connector_eng.pdf\" rel=\"nofollow noopener ugc\" target=\"_blank\">https:\/\/www.withsecure.com\/userguides\/data\/pdf\/ws_elements_connector_eng.pdf<\/a> <\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2024-09-05T06:54:43+00:00\">5.9.2024<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/fi\/announcements\/important-reminder-all-protection-for-f-secure-branded-b2b-products-ends-completely-on-december-31st-2024-fi\/\">\n                <p class=\"wp-block-content-list__title\">T\u00e4rke\u00e4 muistutus: Kaikki F-Secure-merkkisten B2B-tuotteiden suojaus p\u00e4\u00e4ttyy kokonaan 31. joulukuuta 2024.<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>Jos k\u00e4yt\u00e4t <strong>F-Secure<\/strong> br\u00e4nd\u00e4tty B2B-tuote, ole hyv\u00e4 ja lue eteenp\u00e4in, koska <strong>t\u00e4m\u00e4 artikkeli sis\u00e4lt\u00e4\u00e4 tietoja, joita tarvitset suojauksen ja toimivuuden varmistamiseksi.<\/strong> jatkuu vuonna 2025.<\/p>\n<p>Olemme jo aiemmin ilmoittaneet kumppaneillemme ja loppuasiakkaillemme, ett\u00e4 tuki on <strong>F-Securen tuotemerkill\u00e4<\/strong> tiloissa olevat tuotteet loppuvat kokonaan vuoden 2024 lopulla. T\u00e4m\u00e4 tieto julkaistiin my\u00f6s <a href=\"https:\/\/community.withsecure.com\/en\/kb\/articles\/31335-important-information-end-of-support-for-old-versions-of-on-premises-products\" target=\"_blank\" rel=\"nofollow noopener ugc\">t\u00e4ss\u00e4 artikkelissa<\/a>.<\/p>\n<p>Vanhojen tuotteiden p\u00e4ivityspalvelimet lakkautetaan osana infrastruktuurimuutoksia, jotka liittyv\u00e4t F-Securesta irtautumiseen. <strong>Tuki p\u00e4\u00e4ttyy<\/strong> N\u00e4iden vanhempien tuotteiden suojausp\u00e4ivitykset loppuvat useimmissa tapauksissa syyskuun lopussa, mutta pyrimme jatkamaan suojausp\u00e4ivitysten toimittamista vuoden loppuun asti.<\/p>\n<p>Vuoteen 2025 tultaessa se on <strong>IMPOSSIBLE<\/strong> ett\u00e4 voimme tarjota tukea n\u00e4ille tuotteille, koska meill\u00e4 ei ole mahdollisuutta tarjota p\u00e4ivityksi\u00e4 n\u00e4ihin tuotteisiin. <strong>Tuotteet lakkaavat saamasta p\u00e4ivityksi\u00e4, eiv\u00e4tk\u00e4 ne en\u00e4\u00e4 tarjoa suojaa.<\/strong>.  Varmistaaksesi p\u00e4ivitysten jatkuvan toimittamisen ja siten j\u00e4rjestelmiesi suojaamisen, <strong>on eritt\u00e4in t\u00e4rke\u00e4\u00e4, ett\u00e4 j\u00e4rjestelm\u00e4t p\u00e4ivitet\u00e4\u00e4n ennen m\u00e4\u00e4r\u00e4aikaa.<\/strong>.<\/p>\n<p>T\u00e4m\u00e4 muistutus tuen p\u00e4\u00e4ttymisest\u00e4 koskee erityisesti seuraavia tuotteita, <strong>mukaan lukien<\/strong> Premium-versiot. L\u00f6yd\u00e4t tuetun v\u00e4himm\u00e4isversion.<\/p>\n<div class=\"tableWrapper\">\n<table>\n<thead>\n<tr>\n<th>\n<p><strong>Vanha F-Secure-tuote<\/strong><\/p>\n<\/th>\n<th>\n<p><strong>Korvaaminen turvallisella tuotteella<\/strong><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\n<p>F-Secure Business Suite<\/p>\n<\/td>\n<td>\n<p>WithSecure Business Suite 16 series<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Client Security<\/p>\n<\/td>\n<td>\n<p>WithSecure Client Security 16.x<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Client Security for Mac  <\/p>\n<\/td>\n<td>\n<p>WithSecure Client Security for Macille 16.x<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Server Security<\/p>\n<\/td>\n<td>\n<p>WithSecure Server Security 16.x<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Policy Manager &amp;amp; Policy Manager Proxy (my\u00f6s Linux-versiot)<\/p>\n<\/td>\n<td>\n<p>WithSecure Policy Manager 16.x<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure S\u00e4hk\u00f6posti- ja palvelinturva<\/p>\n<\/td>\n<td>\n<p>WithSecure Email and Server Security 16.x -palvelimen kanssa<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Linux Security<\/p>\n<\/td>\n<td>\n<p>WithSecure Linux Security 12.0.482<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p>F-Secure Atlant<\/p>\n<\/td>\n<td>\n<p>WithSecure Atlant 1.0.319<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>Kaikista n\u00e4ist\u00e4 tuotteista on saatavilla korvaavia WithSecure-merkkisi\u00e4 versioita osoitteessa osoitteessa <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fwww.withsecure.com%2Fen%2Fsupport%2Fdownload\" target=\"_blank\" rel=\"nofollow noopener ugc\">latauskeskus<\/a>. <\/p>\n<p><strong>Huomaa<\/strong> ett\u00e4 jotkin palveluverkko-osoitteet ovat muuttuneet n\u00e4iden WithSecure-br\u00e4nd\u00e4ttyjen tuotteiden osalta, ja asiakkaidemme on varmistettava, ett\u00e4 yhteys uusiin osoitteisiin sallitaan. L\u00f6yd\u00e4t <a href=\"https:\/\/community.withsecure.com\/en\/kb\/articles\/31208-network-addresses-for-withsecure-on-premise-products\" rel=\"nofollow noopener ugc\" target=\"_blank\">lis\u00e4tietoja on erillisess\u00e4 artikkelissa<\/a><\/p>\n<p>Yhteisty\u00f6kumppanit ja asiakkaat ovat jo saaneet avainkoodit uusia versioita varten.<\/p>\n<p>WithSecure-tuotemerkill\u00e4 varustettuja tiloissa olevia tuotteita ja kaikkia WithSecure Elements -tuotteita tuetaan edelleen. <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fwww.withsecure.com%2Fen%2Fsupport%2Fproduct-lifecycle-announcements\" rel=\"nofollow noopener ugc\" target=\"_blank\">niiden julkaistuun k\u00e4ytt\u00f6i\u00e4n p\u00e4\u00e4ttymisp\u00e4iv\u00e4\u00e4n asti<\/a>.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <\/div>\n    <\/div>\n<\/section>\n\n\n    <section\n        class=\"wp-block-buttons edwp-block wp-block-buttons--align-center wp-block-buttons--align-center-mobile layout--spacing-m-top layout--spacing-m-bottom\"\n            >\n        <div class=\"wp-block-buttons__container row-load\">\n            <a class=\"wp-component-button btn btn--primary\" href=\"https:\/\/support.withsecure.com\/en\/announcements\/\">View all announcements<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:href='#offsite'><\/use>\n            <\/svg><\/a>        <\/div>\n    <\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":12,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3847","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/pages\/3847","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/comments?post=3847"}],"version-history":[{"count":2,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/pages\/3847\/revisions"}],"predecessor-version":[{"id":8952,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/pages\/3847\/revisions\/8952"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/media?parent=3847"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}