Product Updates

Vulnerability Management now supports auto remediation of CVEs for apps on Windows, when an update for the app is available from the Auto App catalog.

From the Vulnerability Response Library Item, select the Windows platform and define remediation rules (Enforce update upon detection, Enforce update on a timeframe, or no action) based on CVE severity...

Bulk Device Exclusion

Bulk Device Exclusion lets you exclude multiple devices from Vulnerability Management in a single action, and remove exclusions the same way. Excluding a device hides that device from all vulnerability views, detection counts, and alerts, which is useful for taking a machine temporarily out of scope, such as a device pending...

Vulnerability Management now supports excluding specific devices from vulnerability reporting.

You can exclude a device directly from its device record or from the Devices tab within any CVE detail view. Excluding a device removes it from all CVE affected device counts across your fleet and stops vulnerability notifications from being sent for that device....

Vulnerability Management now supports application and OS vulnerabilities on Windows.

Vulnerability Management now supports Windows devices with the same vulnerability detection and monitoring capabilities as macOS, including CVE dashboards, risk scoring, known exploit metrics, Slack and S3 integrations, accept risk functionality and enterprise API support.

...

The activity section has been updated to visually align with the rest of the web app interface.

This update includes a redesign of the interface with improved themes and colors, making activity more visually appealing and easier to navigate.

This update also applies to other pages that feature activity, such as Activity within the Devices page.

Note that...

Vulnerability Management now supports auto remediation of CVEs for apps on macOS, when an update for the app is available from the Auto App catalog.

With the new Vulnerability Response Library Item, you can define remediation rules (Enforce update upon detection, Enforce update on a timeframe, or no action) based on CVE severity (Critical, High, Medium,...

Vulnerability Management now supports accepting the risk of a CVE.

You can accept the risk of a CVE indefinitely or until a specified date. Accepting the risk suppresses notifications.

For more information, see our support article.