Announcements - WithSecure Community

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Elements Role Assignments changes - 15 December 2025
Last year, we announced that we are making changes to how user roles are assigned in WithSecure Elements. The next step will be to disable the user and permission management capabilities for the following roles, on organizations that have the Identity and Access Management (IAM) role defined. Exposure Management > Exposure…
Elements Vulnerability Management: changes to features
EDIT January 15, 2026: Update on feature changes and known issues (January 15, 2026) This is an update on changes to the Vulnerability assets list that was discontinued at the end of December 2025, since the changes have caused the following known issues that will be addressed shortly: Device Details Page for Unmanaged…
WithSecure Ultralight Core Update
This notice relates to an upcoming release of Ultralight core that is expected to go to GA production on Thursday the 16th of April 2026. During deployment, the update process may take slightly longer than usual, and in some cases the end-user might see a warning pop-up notification momentarily while the update is in…
Network addresses for WithSecure Elements (cloud-managed products)
Update: accessory.radar-prd.fsapi.com replaced with cve.accessory.elements.withsecure.com Update: Removed information on SPI servers, as these are no longer in use. See this article for the reason why. Update: Removed all F-Secure.com addresses. These are no longer available, and all customers and partners should use the…

Introducing Role-Based Access Control (RBAC) for WithSecure Elements
We're introducing a new Role-Based Access Control (RBAC) model for WithSecure Elements, giving partners and companies more granular, flexible, and secure control over who can access what within their organization. What's new: Full Microsoft Entra ID integration — sync users and security groups automatically, so day-to-day…
New Feature: Support Assistant — AI-powered help, right in Elements Security Center
We've added Support Assistant to the Support page in Elements Security Center. It combines instant search and conversational chat, right where you already go for help — so you can find your own answers without leaving the portal. Why we built this Finding the right answer used to mean leaving Elements to search the…
System Maintenance (minor): Upgrade of WithSecure Elements MDR backend service
On Thu 27th August 2026, 16:00 UTC we are planning to upgrade WithSecure Elements MDR backend service in production environment. This operation is expected to take a maximum of 60 minutes. During the maintenance, users can’t update the Contact Details of their MDR subscriptions. An error message will be shown if attempted.…
Network addresses for WithSecure Elements (cloud-managed products)
Update: accessory.radar-prd.fsapi.com replaced with cve.accessory.elements.withsecure.com Update: Removed information on SPI servers, as these are no longer in use. See this article for the reason why. Update: Removed all F-Secure.com addresses. These are no longer available, and all customers and partners should use the…
Collaboration Protection: Transitioning Exchange Protection to Microsoft Graph API
Microsoft is retiring Exchange Web Services (EWS) for Exchange Online as part of its ongoing platform modernization. To stay aligned with Microsoft’s recommended architecture, WithSecure Collaboration Protection is transitioning Exchange protection from EWS to Microsoft Graph API. This transition ensures that Collaboration…

Major Capricorn update for Endpoint Protection - May 2026
UPDATE 2026-05-13: This has now been released to production with version "2026-05-13_01" We will soon be releasing a major update for our Capricorn engine, used by our Endpoint Protection products. This is expected to be released on May 12th 2026. This will result in a larger download as an updated version of the virus…
TLS certificate provider update for GUTS2 backend (May 19, 2026)
We would like to inform you about an upcoming change to the TLS certificates used by the WithSecure GUTS2 Server (definition update backend), planned for May 19, 2026. We are transitioning from DigiCert to Let’s Encrypt certificates. This update aligns our backend infrastructure with our existing services, where Let’s…
Release to Manufacturing: WithSecure Policy Manager 16.11 Hotfix 1
We have now released a hotfix for the Windows and Linux versions of WithSecure Policy Manager 16.11. This hotfix addresses a vulnerability on the Axios library used by Policy Manager Web Reporting. WithSecure Policy Manager is not itself vulnerable, but we strongly advise our partners and customers to update to Hotfix 1 at…

CVE-2026-40175 for Axios JavaScript library
What is Axios? Axios is a JavaScript library intended to ease interaction with internet HTTP services. It is used by some organizations to simplify their codebase compared to using standard browser functionality. What is the vulnerability? Prior to version 1.15.0, the Axios library is vulnerable to a specific "Gadget"…
Network Addresses for WithSecure Countercept
In May 2024 we are releasing new versions of Countercept Agents for Windows, Linux and Mac platforms. Managed clients will get all these changes automatically. A little later we will publish new release groups to switch clients using managed updates in collaboration with the WithSecure Engagement team.After the upgrade new…
Support Status: Windows 8/8.1
As Microsoft Extended Support for all Windows 8/8.1 versions ended during 2023, WithSecure will stop supporting these versions of Microsoft Windows from 31st March 2024. This applies to all WithSecure products. This change does not affect the overall support for those products when they are used on supported operating…