Monthly Release Notes - May 2025
Cobalt Strike
Version: 4.11.1
May 12, 2025
Enhancements
-
Added deprecation warning to the c2lint process when the "stage.rdll_loader" malleable c2 option is set to stomp loader.
Fixes
-
Fixed issue with Beacon crashing in a CFG enabled process, using module stomping, and using the default injection technique introduced in version 4.11.
-
Fixed issue with the "Use SSL" checkbox not being enabled when a self-signed SSL certificate is configured in the https-certificate Malleable C2 profile setting.
Digital Guardian
Analytics & Reporting Cloud
Version: 5.3.0
May, 2025
Enhancements
-
DG ARC now features an upgraded version of Angular, enhancing security and ensuring ongoing supportability. This update also improves performance, making page transitions smoother and more responsive, especially on pages with many interactive elements
Fixes
-
Customer reported issue where the Events Forensic grid in the Investigation tab did not display the pages option when initially loaded. This included missing items-per-page dropdown and page navigation controls. This issue is now resolved.
Server
Version: 9.0.0
May, 2025
New Features
-
Introducing Asynchronous Policy Import Feature
DGMC now supports Asynchronous Policy Import, designed to enhance productivity and user experience. Previously, imports were handled synchronously, which temporarily blocked the interface and disrupted workflows during lengthy imports. This often resulted in session timeouts, errors, and confusion about the import status, ultimately impacting user efficiency.
With the new Asynchronous Import feature, policy imports can now run in the background, allowing users to continue working without interruption. DGMC supports two policy import methods:
-
Synchronous Import: The traditional method that blocks the interface until the import is complete.
-
Asynchronous Import: A new feature that keeps the interface accessible while the import runs in the background.
This feature offers users enhanced control and flexibility, allowing them to select the option that aligns with their workflow requirements.
-
-
Transparent Proxy Network Extension for Mac Agents
Starting with release 9.0.0, DGMC introduces the Transparent Proxy Network Extension for Mac Agents. This feature simplifies network traffic management by automatically routing traffic from supported browsers and legacy Outlook through the proxy server without requiring user configuration. Additionally, the Explicit Proxy option allows users to manually set up proxy configurations, such as server address, PAC URL, and port, for precise traffic routing. Both options provide flexibility and efficiency in managing network traffic.
Enhancements
-
Enhanced Menu Organization & Visualization
As we prepare to streamline workflows in future updates, including our upcoming simplified Control Policy Manager, Fortra has made minor enhancements to the DGMC menu. These updates aim to align our product portfolio with a unified user experience. The key changes include the removal of feature icons from the menu options for a cleaner visual layout and renaming the 'Policies' menu to 'Advanced Policies' for improved clarity.
-
Enhanced Policy Import Report Tracking
DGMC now tracks policy imports more effectively in the console activity report log. The log includes detailed entries such as file names, durations, and error or warning messages. New log entries indicate whether the import was synchronous or asynchronous, making it easier to monitor progress and troubleshoot issues effectively.
Fixes
-
Resolved an issue where attempts to access the policy deployment schedule would time out after 5 minutes.
-
Resolved an issue where the Archive Restore tool failed to work with SQL 2022 with the DGMC 8.7 upgrade. Customers can fix this issue by upgrading the Archive Restore tool.
-
Resolved an issue where LDAP sync failed with exceptions in multiple environments.
-
Resolved an issue where dynamic user groups with a large number of inactive users could not be deleted.
-
Resolved an issue where parametrization changes applied in a TextBox control are not preserved upon saving. Users must upgrade their DGMC Server to the latest 8.7.0.94 build.
-
Resolved an issue where users were being logged out of DGMC when adding users for Screen Capture.
-
Resolved an issue where a duplicate domain appeared on the main login window of the DGMC.
-
Resolved an issue where custom report filters did not display the date label when the "Between" operator was selected as date criteria.
-
Resolved an issue that caused duplicate rule entries when changing priority or severity, which led to unintended action blocking. Now, only the latest rule is applied, preventing errors and enhancing system stability
-
Resolved an issue where DGMC was skipping internal Mac users starting with an underscore. However, customers can now optionally enable these users by setting [SKIP_INTERNAL_MAC_USERS] to false in the database.
-
Resolved an issue where Mac agents were sending incorrect locale ID information during registration, preventing them from successfully registering with the DGMC.
-
Resolved an issue in which a limited set of new users, reported by DLP Agents for a specific endpoint machine, were not being registered by the DGMC. This situation only affects environments that do not have Active Directory synchronization configured. Additional logic was implemented to ensure this group is handled correctly.
-
Resolved an issue where the page would freeze when adding a rule to a policy.
-
Resolved an issue where rules deactivated in the Development environment were not remaining inactive when imported into the Production environment.
-
Resolved an issue affecting long-running LDAP sync jobs in both production and development environments due to db dead-locks.
-
Resolved an issue where exported data was not decrypting the fields properly.
-
Resolved an issue where pending settings were not clearing properly without the agent reporting status.
-
Resolved an issue where discrepancies in computer inventory between ARC and DGMC were causing inconsistencies.
-
Resolved an issue where DGMC performance was affected due to caching of static web assets such as fonts, images, css and javascript.
-
Resolved an issue where customers experienced an error when editing the LDAP filter and selecting the 'Test LDAP Query' button.
-
Resolved an issue where the Machine Removal API was not updating dynamic group exclusions correctly.
-
Resolved an issue where Old Sample Match tables were not being cleaned up as expected.
-
Resolved an issue where customers saw null values for user names in the DGMC Console Activity report.
-
Resolved an issue where DG Agents' pending tasks and settings were not clearing.
-
Resolved an issue by updating the Install and Upgrade Guide to specify the timezone used for upgrade options, improving clarity in upgrade scheduling.
-
Resolved an issue where the BundleArchive entry was missing from the DGMC dashboard component status after upgrading to version 8.6 or higher.
Agent for macOS
Version: 9.0.1
May, 2025
Fixes
-
The customer has reported an intermittent issue where browsing would break after rebooting the machine with Transparent Proxy enabled. This issue is now resolved.
Fortra
Endpoint Manager
May 5, 2025
New Features
-
Dynamic Groups are now available. Dynamic Groups use rules to dynamically add endpoints to groups.
Enhancements
-
The endpoints drawer displays a `Time Zone:` entry if the selected endpoint has agent version 1.1.0.14 or higher installed.
Fixes
-
Resolved security vulnerabilities and minor bug fixes.
Fortra platform
May 15, 2025
New Features
-
Managed File Transfer FTB Integration solutions can now be provisioned.
Enhancements
-
An email is now sent when a user resets their OTP.
-
A previously dismissed banner will reappear upon login if it has been updated.
Fixes
-
Resolved security vulnerabilities and minor bug fixes.
Powertech
Authority Broker for IBM i
Version 4.25
May 14, 2025
New Features
-
Authority Broker now supports sending the screen captures PDF to an IFS directory.
Enhancements
-
The End User License Agreement (EULA) has been updated.
Fixes
-
An issue printing the FireCall Log has been resolved.
-
An issue where the Event Report was not writing to the requested Directory File has been resolved.
BoKS Manager
Version 8.1 (version update)
May 15, 2025
Server s-8.1.0.16
New Features
-
certinfo improved support for certificate extensions.
Fixes
-
Master and servc services could prematurely discard valid client requests from the queue due to short timeouts.
-
Certain bccasd operations could block indefinitely, preventing subsequent WSI calls.
-
boks_keytabmd could enter infinite loop generating new password.
-
Running crldownload_ldap with debug level >= 5 coredumps.
-
Stop password hashes from appearing in monitoring files.
-
bccasd should not use wildcard matching when not intended.
Version 8.1 (version update)
May 9, 2025
Client c-8.1.0.22
New Features
-
Added optional logging of SSHD KEX parameters.
-
BoKS SSHD uses the new audit logging interface.
Updates
-
SSH machine-in-the-middle attack if VerifyHostKeyDNS option enabled (CVE-2025-26465).
Fixes
-
adjoin autoupdate failed if first entry in permitted_enctypes was not allowed by Active Directory.
-
Service user keytab file could be created outside the configured keytab/directory.
-
boksedit and sudoedit will tell who else is editing the same file.
-
Ensure boks_init is not started twice.
-
Updated information in boksinfo.
Terranova Security
Version: 1.113.1
May 13, 2025
Fixes
-
There was an issue where embedded images in the email phishing templates appeared as attachments instead of displaying within the body of the email. This issue has been resolved.
Titus
DCS for Windows
Version 6.0
May 15, 2025
New Features
-
Added support for targeting configurations to Microsoft Entra ID users and groups in cloud environments.
-
Added new options to install DCS for Windows with support for Microsoft Entra ID and Microsoft Information Protection.
-
Added support for additional configuration options for the Classification Preview Bar and the Classification Information Bar. If you are using the DCS Policy Manager, configure these options in App Settings. See Policy Manager documentation. If you are using the DCS Administration Console, you can use registry keys. See the Data Classification Suite for Windows Deployment Guide. The following options are supported:
-
Enabling/disabling showing the color associated with the selected classification.
-
Defining classification selection format and no classification text.
-
Enabling/disabling option to allow users to close the Classification Information Bar in Microsoft Office applications. You can configure the default display text that users click to show the bar after it has been closed.
-
-
Added support for showing Favorites in the Ribbon. If you are using the DCS Policy Manager, configure these options in App Settings. See Policy Manager documentation. If you are using the DCS Administration Console, you can use registry keys. See the Data Classification Suite for Windows Deployment Guide.
-
Added support for new CAD Embedded Metadata Adapter. Supported file extensions are .dwg and .dxf files for 2013 and later versions. Pre-2013 formatted .dwg and .dxf files are not supported.
-
Added support for configuring Content Validation Profiles in the DCS Policy Manager.
Enhancements
-
Confirmed support for Microsoft Office 2024.
-
Removed Log Collector feature.
-
Updated Fortra Titus logo to a Fortra Data Classification logo in dialogs.
-
Updated DecodedMetadata property to separate fields using a carriage return.
Fixes
-
Fixed issue with duplicate headers and footers.
-
Fixed issue with visual marking configurations not working as expected for headers, footers, and body tags.
-
Fixed issue with Fortra DCS tab being visible in inline replies.
-
Fixed issue with visual markings being duplicated in the footer of PowerPoint slides. This happened when copying a slide with visual markings from one presentation to another and using the "Use Source Formatting" paste option. When the PowerPoint with the copied information was saved, the visual markings were duplicated.
-
Fixed issue with text extraction related to CSV files.
-
Fixed issue with PDF/A being broken by PDF Keywords plug-in.
-
Fixed issue where mandatory fields associated with field condition selections did not always appear.
-
Fixed issue with the client trying to reach a multicast address.
-
Fixed issue with users being unable to copy text shown in policy alert dialogs.
-
Fixed issue with meeting invites losing original classification of an email when meeting invite is created with an in-line message.
-
Fixed issue with appointment/meeting item exception caused by BodyFormat property.
-
Fixed issue with recipient alert not showing the list of recipients that failed a policy check.
-
Fixed issue with AbandonedMutexException occurring when DCS for Windows is trying to read/write the UserSettings file from a Roaming Profile.
-
Fixed issue with response messages not retaining temporary MAPI properties when operating in online mode.
-
Fixed issue with classification metadata applied to a meeting invite not appearing when a user declines the invite.
-
Fixed issue with high memory consumption in virtual servers.
-
Added additional protection to the UserSettings file to prevent I/O exceptions when file in use by multiple DCS end points.
-
Fixed issues where third-party screen reader software was not properly reading configured DCS for Windows information:
-
HTML description content
-
Alert description content
-
Favorites
-
-
Policy Alert UI not handling resizing correctly when button captions contained large amounts of text.