Product Updates

A new Auto App, Screaming Frog SEO Spider, has been added to the catalog and is now available for all customers.

See all available Auto Apps in the Library Items section of our website.

A new Auto App, LM Studio, has been added to the catalog and is now available for all customers.

See all available Auto Apps in the Library Items section of our website.

New Windows Auto Apps have been added to the catalog and are now available for all Iru Endpoint customers.

We’ve released Kandji Agent 4.7.5 (5374).

This release includes miscellaneous bug fixes and performance improvements.

Security

CVE-2026-39118 — An access control issue existed in the Kandji Agent (macOS). A local attacker with standard user privileges could invoke restricted functionality. This issue was addressed with improved validation.

Affected: Kandji...

Managed OS for iOS, iPadOS, and tvOS has been updated. The latest approved versions are now 26.4 and 18.7.7, with the following release dates:

iOS 26.4 : Mar 24, 2026

iOS 18.7.7 : Mar 24, 2026

iPadOS 26.4 : Mar 24, 2026

iPadOS 18.7.7 : Mar 24, 2026

tvOS 26.4 : Mar 24, 2026

Managed OS for macOS has been updated. The latest approved version for Tahoe is now 26.4; for Sequoia, 15.7.5; and for Sonoma, 14.8.5, with the following release dates:

macOS 26.4 : Mar 24, 2026

macOS 15.7.5 : Mar 24, 2026

macOS 14.8.5 : Mar 24, 2026

Control badges across the product now show the framework's native control code (for example, ISO's A.5.1) instead of a synthetic identifier, matching how auditors and admins actually refer to controls.

Actions now include an AI-suggested cadence (daily, weekly, quarterly, etc.) and an AI-suggested owner role on their detail page. The cadence suggestion is based on the underlying control's frequency requirements, and the owner role suggestion is based on the control's subject matter. Admins can accept either suggestion or override it.

The Windows Update Library Item gives you control over how and when updates install on Windows devices.

Configure auto update behavior with options ranging from notify-only to fully silent installs. Set active hours to protect users from disruptive restarts during the workday, and remove the ability for users to pause updates from the Windows Update...

Specific ADE Library Items can now be assigned directly to devices in the Awaiting Enrollment table, providing further flexibility to the ADE enrollment process. These assignments can be made on a one-off basis, in bulk, or via the enterprise API, and override what is assigned to the Blueprint or Blueprint Routing.

For more information, see our product...