February 2023

IMPROVEMENT Main Menu facelift - 10:30 UTC

Description: The application main menu now has a new look and feel.
Case ID: SEC-741
Known limitations: N/A 
Affected Components: UI

IMPROVEMENT Compliance Rulesets Update - 10:30 UTC

Description: The first release of the AWS Hi-Trust v11 ruleset. AWS SOC2 enrichment; AWS rules improvements. A complete list can be found here.
Case ID: IN-6955, DFT-2373, DFR-2549
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

IMPROVEMENT Risk Management - AWS IAM User - 14:20 UTC

Description: Added support for IAM Sensitivity field on AWS IAM User.
Case ID: SEC-591
Known limitations: N/A
Affected Components: ERM

FIXED Azure Network Security Group - 10:00 UTC

Description: Fixed an issue in Azure Network security group that was created from AKS (Kubernetes cluster), and was disappearing from GSL results after deploying application to the cluster.
Case ID: DFT-2392
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE

FIXED AWS IAM Root User doesn't have a Dome9id - 10:00 UTC

Description: AWS IAM root user didn't have a Dome9id although having ARN. Issue was fixed.
Case ID: DFR-2639
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE

IMPROVEMENT Helm 2.19.1 - 10:00 UTC

Description: IA: Artifactory auto-discovery, CRI v1 etc.; RP: enhancements. for more information, click here.
Case ID: CON-4637
Known limitations: N/A
Affected Components: CONTAINERS

IMPROVEMENT Risk Management - Lambda Network Exposure - 16:00 UTC

Description: Lambda network exposure calculation will take “Function URL” into account.
Case ID: SEC-726
Known limitations: N/A 
Affected Components: ERM

IMPROVEMENT Intelligence Rulesets Update - 15:00 UTC

Description: New Intelligence rules for Azure A list can be found here
Case ID: IN-6805
Known limitations: N/A

IMPROVEMENT Azure Storage Account - 12:40 UTC

Description: Added support for ‘publicNetworkAccess’ & 'publicNetworkAccessAsDisplayedInPortal' properties in Azure Storage Account in Compliance engine, Protected Assets & API.
Case ID: DFT-2286
Known limitations: N/A
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS API

FIXED Risk Management - Kubernetes Vulnerabilities - 17:50 UTC

Description: Fixed an issue in Kubernetes entities vulnerabilities counters.
Case ID: SEC-742
Known limitations: N/A
Affected Components: ERM

IMPROVEMENT Compliance Rulesets Update - 10:30 UTC

Description: Kubernetes rulesets enrichments; AWS rules improvements. A complete list can be found here.
Case ID: IN-6888, DFT-1570, DFT-6741
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

IMPROVEMENT AWS IAM User - 12:00 UTC

Description: Added "SSHPublicKeys" property to AWS IAM User in Compliance Engine & Protected Assets.
Case ID: DFR-2591
Known limitations: N/A 
Affected Components: COMPLIANCE ENGINE PROTECTD ASSETS FETCHERS

FIXED Azure Data Warehouse Dome9Id - 13:00 UTC

Description: Fixed bug in 'Dome9Id' property in Azure Data Warehouse in compliance engine and API.
Case ID: IN-6778
Known limitations: No protected asset page for these entity, same as before.
Affected Components: COMPLIANCE ENGINE API

FIXED Azure SQL DB Dome9Id - 13:00 UTC

Description: Fixed bug in 'Dome9Id' property in Azure SQL DB in compliance engine and API.
Case ID: IN-6778
Known limitations: No protected asset page for these entity, same as before.
Affected Components: COMPLIANCE ENGINE API

IMPROVEMENT Risk Management - ECS Network Exposure Support - 13:00 UTC

Description: Added support for Network Exposure field on AWS ECS Service.
Case ID: SEC-324
Known limitations: N/A
Affected Components: ERM

IMPROVEMENT Compliance Rulesets Update - 11:30 UTC

Description: The first release of the PCI DSS v4.0 for Azure. New K8S rule publish; AWS rules improvements. A complete list can be found here.
Case ID: IN-6775
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

IMPROVEMENT Risk Management - Lambda Network Exposure Support - 15:00 UTC

Description: Added support for Network Exposure field on AWS Lambda functions.
Case ID: SEC-444
Known limitations: N/A
Affected Components: ERM

FIXED AWS IAM User assessment failure - 16:00 UTC

Description: Fixed bug in AWS IAM User assessments running.
Case ID: DFT-2381
Known limitations: N/A 
Affected Components: COMPLIANCE ENGINE

IMPROVEMENT Risk Management - Kubernetes Support - 15:00 UTC

Description: Added support for Kubernetes workloads in ERM. Risk score calculation is done only for Top Level workloads and includes CSPM findings and containers image vulnerabilities.
Case ID: CON-385
Known limitations: N/A
Affected Components: ERM

IMPROVEMENT Risk Management - Azure Virtual Machines - 14:30 UTC

Description: Support for Agentless Workload Posture for Azure Virtual Machines in ERM. This means that the risk score of Azure VMs will take into account vulnerabilities data from AWP.
Case ID: SEC-678
Known limitations: N/A
Affected Components: ERM

IMPROVEMENT Intelligence Rulesets Update - 10:30 UTC

Description: Updating Intelligence rules and bug fixes. A list can be found here
Case ID: IN-6670, IN-6759, IN-6788
Known limitations: N/A
Affected Components: INTELLIGENCE RULESETS

IMPROVEMENT Compliance Rulesets Update - 12:30 UTC

Description: New rules publish; AWS rules improvements. GCP rule deprecation (due to refactoring). A complete list can be found here.
Case ID: IN-6644, DFT-2292
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS