Elements Security Center<\/h2>\n
Reporting streamlined \u2013 Broad Context Detections are now reported in Security Events<\/strong><\/p>\n Security Events has started reporting EDR BCDs\u00a0that are severe, high or medium risk incidents.<\/p>\n They are also available via Elements Connector\u00a022.18\/22.19 release or through the API ().<\/p>\n A new version of the endpoint clients is now available.This release is for all variants of Elements Endpoint Protection, and updates them to version 22.4 (internal version 4.35.1073). The endpoints get automatically upgraded, without a reboot.<\/p>\n This release introduced new features and fixes. Several of the new features rely on portal changes, and naturally we have updated that to match. We do recommend that customers enable the Early access program on some of your computers to try new versions out before general release.<\/p>\n Features:<\/strong><\/p>\n The latest release of the Elements Endpoint Protection portal introduces changes to support the latest client features, many smaller fixes, and a new way that we present information in the Dashboard.<\/p>\n We are introducing a new dashboard view along with making the new devices view more easily available. These views won’t be made as defaults yet, but you can find a toggle from the Dashboard that allows you to switch back and forth between the versions.\u00a0<\/p>\n Things to note regarding new views:\u00a0<\/strong>The Dashboard will now look the same on both partner and company levels<\/p>\n Dashboard will list following:<\/strong><\/p>\n Devices that have severe or high EDR incidents<\/p>\n A new feature is activated in the Audit Log view. Next to the event timestamp\u00a0you are able to filter\u00a0by which administrator initiated the action.<\/p>\n Other Improvements<\/strong>:<\/p>\n \u00a0New features and noticeable changes:<\/strong><\/p>\n We have updated the .jar files which are needed to migrate from Business Suite to Elements. The Package details have also been updated to reflect our new corporate naming and version.<\/p>\n In some cases the migration installation could fail with the old installers. The faulty versions have been replaced. They can be found under the\u00a0Migrating computers<\/em><\/a>\u00a0section of the WithSecure\u2122 Elements Endpoint Protection online user guide.<\/p>\n Please download the latest jar (select the correct one for your Elements environment) and exchange them in your personal storages and \/ or what you already imported into the Policy Manager, before beginning or continuing your migration projects.\u00a0<\/p>\n Customized device isolation notification message<\/strong><\/p>\n New response action is introduced to “Retrieve event log entries” from Windows devices<\/strong><\/p>\n New version of response action \u201dKill process\u201d has been introduced<\/strong><\/p>\n Software reputation listing now includes breakdown of components under each software application<\/strong><\/p>\n Broad Context Detection list view supports opening of incidents in new tab.<\/strong><\/p>\n We have made multiple releases of Elements Collaboration Protection, and the following summarizes all the releases<\/p>\n New features and improvements<\/strong><\/p>\n You can find more information on this feature at the\u00a0dedicated community article<\/a>.<\/p>\n The team has made several releases for Elements Vulnerability management, and these bring the following:<\/p>\n New features and improvements:<\/strong><\/p>\n You can click the \u201ci\u201d next to Asset Risk, for more information in the portal.<\/p>\n \u00a0A new release 22.18 (Windows) \/ 22.19 (Linux) is rolled out with the following changes:<\/p>\n New features:<\/strong><\/p>\n \u00a0Fixed issues:<\/strong><\/p>\n \u00a0First time installers are now released and have also been delivered via automatic channel update, so your Connector should already be at the latest level.<\/p>\n Getting a list of\u00a0subscriptions for a company or a partner is now possible. Details in\u00a0<\/p>\n Did you know that WithSecure has a publicly available service that provides information about ongoing incidents? You can access this service here and it is even possible to subscribe to it so that you can be informed by several different methods. Simple click on “Subscribe to Updates” at the top, and choose the method you want, and ensure that you don’t miss any important status announcements. Customers who previously used the F-Secure status service should re-subscribe to this new service, as it caters for B2B customers exclusively.<\/p>\n As F-Secure Business is now WithSecure\u2122, we will shortly be moving the Elements portal and related services so they work under the withsecure.com domain. Once this change is made, the portal will be accessible using the URL\u00a0.<\/p>\n To aid partners and customers during this transition, we will be redirecting access made via\u00a0\u00a0automatically to the new domain. However, we do advise any partners or customers to ensure that they whitelist this new URL to ensure continued access.<\/p>\n In addition to the main portal access, the authentication URL used for sign-in will also change to one using a withsecure.com address.<\/p>\n Please note:\u00a0<\/strong>Once the new domains are taken into use, users who are logged in to the portal will need to re-authenticate. This is a one-time action, but is unfortunately unavoidable due to the change. To ease this transition, we will schedule the change so that it occurs during off-peak hours.<\/p>\n API access URLs are not affected by this change, and existing client installations continue to work without any changes being needed to Access Control Lists.<\/p>\n As we have separated our B2B (Business) and B2C (Consumer) businesses, we are in the process of updating our License Terms and Privacy Policies to better reflect this. The new License Terms will take effect during September, and the Privacy Policies are being updated on a slightly different schedule.<\/p>\n There are no substantive changes to the Privacy Policies. The main changes in the License Terms were to remove the B2C references, update the changing process and to make the text clearer and easier to follow. You can find out\u00a0more details of the\u00a0upcoming License\u00a0Terms\u00a0changes here<\/a>.<\/p>\n May 2022 highlights<\/strong><\/p>\n BPFDoor, an insidious backdoor<\/p>\n \u00a0Access the May Threat Highlights Report PDF \u2013\u00a0following this link<\/a>.<\/p>\n June 2022 highlights<\/strong><\/p>\n Law enforcement takes down\u00a0Flubot<\/p>\n \u00a0Access the June Threat Highlights Report PDF \u2013\u00a0following this link<\/a>.<\/p>\n July 2022 highlights<\/strong><\/p>\n \u00a0Access the July Threat Highlights Report PDF \u2013\u00a0following this link<\/a>.<\/p>\n You may have seen that WithSecure has released several Security Advisories relating to the products we have in use with our customers.<\/p>\n We have started publishing these for any vulnerability in the interests of \u201cbeing open\u201d. We believe that only by being transparent with our customers, can we truly stand beside our customers. We will hide nothing when it comes to vulnerabilities. You can always find the latest information on vulnerabilities in our software at the\u00a0Security Advisories page on our public website<\/a>.<\/p>\n One thing that we are really proud of is the fact that virtually all of the vulnerabilities found in our Elements software can be patched, fully automatically,\u00a0without the customer needing to do anything at all<\/strong>.<\/p>\n WithSecure\u00a0has discovered an ongoing operation<\/a>, dubbed “DUCKTAIL”, that targets individuals and organizations operating on Facebook’s Ads and Business platform. Based upon analysis and gathered data, WithSecure has high confidence that the operation is conducted by a Vietnamese threat actor. The chain of evidence suggests that the threat actor’s motives are financially driven.<\/p>\n \u00a0<\/p>\n Detection<\/strong><\/p>\n WithSecure Endpoint Detection and Response<\/strong><\/p>\n WithSecure\u2019s Endpoint Detection and Response detects multiple stages of the attack lifecycle. This will generate a single incident with detailed detections, including:<\/p>\n WithSecure Endpoint Protection<\/strong><\/p>\n WithSecure Endpoint Protection offers multiple detections that detect the malware and its behavior. Ensure that real-time protection as well as DeepGuard are enabled. You may run a full scan on your endpoint. Our products currently offer the following detections against the malware:<\/p>\n Early Access is available in the general settings section of the Mac and Windows profiles. After a device is assigned a profile with this setting enabled, it will receive the latest product version before it is released to channels for the silent upgrade. The upgrade will still happen silently and identical to the regular update. We reserve up to 2 weeks for the build to be available in Early Access before it is pushed to all the clients. We also may reduce the early access stage to the minimum in case a release contains some urgent vulnerability fixes. We strongly encourage using the Early Access feature to verify upcoming changes, before they are applied to the real production fleet environment.<\/p>\n Our purpose is to co-secure the world with you \u2013\u00a0now as WithSecure\u2122. To co-create the best possible cyber security products and services, we warmly recommend you share your ideas via our Ideas Portal, now accessible directly from WithSecure\u2122 Elements Security Center.<\/p>\n Changelogs and Release Notes for all parts of WithSecure\u2122 Elements can be found at the\u00a0Help CenterElements Endpoint Protection<\/h2>\n
Elements Endpoint Agent 22.4<\/strong><\/h3>\n
\n
![\"Picture1.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture1-1.png.webp\")
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\nElements Endpoint Protection portal<\/strong><\/h3>\n
Introducing a toggle to enable new Dashboard and Devices views<\/strong><\/h4>\n
\n
\n
Elements Endpoint Protection Audit Log<\/strong><\/h4>\n
<\/img><\/a><\/figure>\n\n
F-Secure CP&RDR upgrade to WithSecure\u2122 Element Agent 22.3.45064 has started for Mac clients participating in Early Access<\/strong><\/h3>\n
\n
Business Suite Client\/Server to Elements migration installers updated (bs2cp)<\/strong><\/h3>\n
<\/img><\/a><\/figure>\nElements Endpoint Detection and Response\u00a0<\/h2>\n
\n
\n
\n
\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\nElements Collaboration Protection<\/h2>\n
\n
<\/img><\/a><\/figure>\n<\/img><\/a><\/figure>\nElements Vulnerability Management<\/h2>\n
\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
<\/img><\/a><\/figure>\n\n
Integrations<\/h2>\n
Elements Connector release<\/strong><\/h3>\n
\n
\n
Provisioning API updates<\/strong><\/h3>\n
Other items of interest<\/h2>\n
Getting the latest information on WithSecure\u2122 service status<\/h3>\n
Domain changes for accessing WithSecure\u2122 Elements<\/h3>\n
Changes in WithSecure\u2122 License Terms and Privacy Policies<\/h3>\n
WithSecure\u2122 Threat Highlights Reports<\/h3>\n
\n
\n
\n
\n
\n
Security Advisories<\/h3>\n
WithSecure Detects New Infostealer Malware DUCKTAIL<\/h3>\n
<\/img><\/a><\/figure>\n\n
\n
In case you missed it<\/h2>\n
Early Access for pre-release builds is now available for Mac and Windows<\/strong><\/h3>\n
Share your ideas with us<\/h3>\n
<\/img><\/a><\/figure>\nFurther information<\/h2>\n