CyberCNS V2 Release Notes -2022

• Fix for the lightweight agent scan issue when the system switches from sleep to active mode.

• Active Directory Scan fixes

• Added Companies count and Asset count in Remediation Plan at Global Level.

• Under Standard Reports, Active Directory Login Failures - Last 30 days report(Doc, Xlsx) has been added.

• Under Standard Reports, a Newly Discovered Assets - Last 48 Hours report(Doc, Xlsx) has been added.

• A Lightweight scan option for a single lightweight agent has been added to Global actions under Probes/Agents.

• Added Companies count and Asset count in Remediation Plan at Global Level.

• A Lightweight scan option for a single lightweight agent has been added to Global actions under Probes/Agents.

• Agent crash while patching and agent update fixes.

• Added Standard Reports for Agents at Global Level.

• Added Dark Mode option.

• Added time consume field in job section for Scan jobs and Report Jobs.

• Added First Discovered field in Toggle Table View under Active Assets.

• Added MFA status and Company Access for Users at Global Level.

• Optimisation for Active Directory scan performance.

• Optimisation for Active Directory scan performance.

• Patching fix: "- exec: ": executable file not found in %PATH%" the CyberCNS agent path error fix.

• For Lightweight agent, the update and restart are triggered at the same times which is causing an issue. So added a condition to not restart if updation is in progress.

• Enhanced Asset Discovery while Asset Inventory Scan.

If chocolatey is already installed on the agent machine, use it instead of attempting to reinstall it in the CyberCNS agent path.

• Agent update md5sum cross-check.

• Agent crash fix if ssh private key is invalid.

• Fix to extract nmap if the nmap/nmap.exe file is not available.

• Exchange server vulnerability fix.

• Added private key-based ssh authentication.

• Range discarding was added if all IPs discovered the same port and also if no mac address was discovered.

• Scanning 3300 ports twice, once in the initial scanner and once in the advanced scanner, discarding ports that have already been scanned with Nmap scan.

Server-side:

• Sending AD discarded IPs as asset scan range.

• Send the exclude list multiple times during the AD asset scan.

• Added killing Nmap and osquery while restarting the agent.

CyberCNS Agent 2.0.73 is released for the below fixes:

• Under Network Scan Findings - Added Microsoft Exchange Server vulnerability.

• The agent monitoring port is changed from 8087 to 32323.

• A new Reports job section has been added to the Jobs tab.

• The Scheduler type option in Scheduler includes two distinct sections (Standard report generation and Scans).:

• Upgraded Network Vulnerabilities.

• Lightweight agent scheduler improvement.

• Npcap empty folder installation Fix(Error in finding Uninstall file path).

• Added check for agent update, if cybercnsagentv2.exe is not available rename it to cybercnsagentv2.old exe.

• Probes/Agents xlsx download Fix.

• "IPC$" Anonymous access: Read -> showing as vulnerable is fixed. So we won't show it as vulnerable.

• Added server-level vulnerabilities under network scan findings.

• Added Azure Active Directory Xlxs Reports.

• Added agent entry under the add or remove programs.

• Agent Uninstall will remove add or remove programs entry.

• Skipping npcap installation if any issue in installing pcap driver.

• Skipping oscap installation check if the agent is running in ARM.

• Azure Active Directory fixes.

• CyberCNS Agent 2.0.68 was released for the below fixes:

>Lockout Threshold fix for Password Policy.

• External Scan Beta fixes.

• For PSA Integration Ticketing Rules have been added.

• Notification Rules fixes.

• For the PSA Integrations, the Notification Rules have been added.

• External Scan Beta fixes.

• For PSA Integration Ticketing Rules have been added.

• For the PSA Integrations, the Notification Rules have been added.

• Raspberry PI agent fixes.

• Scan fail issue fix.

• CyberCNS Agent 2.0.64 was released for the below fixes:

1. Agent crash issue fix.

2. Network vulnerability fix.

• CyberCNS Agent 2.0.65 was released for the below fixes:

1. Asset discovery scans will run in parallel threads.

2. The performance can be managed by adding the process count in discovery settings.

• Added External Scan Beta excel report.

• Keycloak Users section 500 error fix.

• Added PDF format for Active Directory Users.

• Added PDF format for Password Policy.

• Added PDF format for Asset Users.

• Asset Level report - Asset firewall policy update time fix.

• Application Baseline fix.

• Process management option added in discovery settings under Probes/Agents.

• Added option to exclude IP in Active directory under Probes/Agents.

• CyberCNS Agent 2.0.63 was released for the below fixes:

1. For a Vulnerability scan, if scanning an AD asset, the scan is forcefully scanning even if the last time scan failed for the same credentials.

2. Added on option in agent to receive a message to delete local cached credentials.

3. Fixed proxy issue while agent installation.

4. Fixed windows agent installation issue.

5. Patching is created with a restore point functionality.

• Added CVSS Vector in CVE Remediation Report for Docx and Xlsx format.

• Added Assets Risk Score in Report Builder.

• Added filters for Scheduled Reports(Includes and Excludes filtering)Company Level.

• Report Filters for Schedulers (Company and Global Level).

• Added Overall Asset Vulnerability in Dashboard(Global Level).

• Added Overall Network Scan Findings in Dashboard(Global Level).

• Added Overall Vulnerability in Dashboard(Global Level).

• Added Asset Level Compliance in Report Builder.

• Added Essential Eight Compliance in Report Builder.

• Added Docs for all Compliance Reports.

• Added Report scheduler Jobs.

• Added filters for Scheduled Reports(Includes and Excludes filtering)Global Level.

• Added CVSS Vector in Vulnerabilities under Active Assets.

• Added the Name column for External Scan Beta.

• Added filters for Scheduled Reports(Includes and Excludes filtering)Company Level.

• Added filters for Scheduled Reports(Includes and Excludes filtering)Global Level.

• Filtered data fix in Probes/Agents.

• Validation Error fix in Scheduler under Standard Reports at Company Level.

• CyberCNS Agent 2.0.61 was released for the below fixes:

1. Removal of Win32_OperatingSystem.

2. Deprecated Assets getting discovered Fix.

3. Agent crash Fix.

4. Patching Crash fix.

5. Active Directory update failure Fix

• Share permission data issue Fix.

• Assessment upload Fix.

• Added Assessment pdf report color changes range-wise for antivirus, remote access etc.

• Assessment pdf download Fix.

• Table View name added for toggle option.

• While adding tags in IP address Fix.

• 500 error in patch jobs Fix.

• Added JobQueue folder while job is in process and removed it on completion.

• Job stuck issue Fix.

• Patching Fixes.

• Unquoted Paths Fix for CyberCNSMonitoring Service.

• CyberCNS Agent 2.0.55 released for removing netatemp file.

• Added API query for &fields to return requested values instead of all values.

• Added NTFS Permissions Report in Excel and Doc.

• Added Admin Audit under Login Audit.

• Added Bulk delete option under Probes/Agents to delete multiple agents at once.

• Application Baseline Fix.

• Internal Vulnerability PPT Report Fix.

• Quick External Scan Fix ( error Results Not Available for scans).

• Scheduler Fix (Scheduler inactive but scans were running).

• Quick External Scan Fix ( error Results Not Available for scans)

• Scheduler Fix (Scheduler inactive but scans were running)

• Added Admin Audit under Login Audit.

• Added Bulk delete option under Probes/Agents to delete multiple agents at once.

• Vulnerability Scan renamed to Offline Vulnerability Scan( under Probes/Agents section).

• CIS 8.0 rules remapped

• HIPAA Compliance Fix (Registry tool, Firewall/Anti virus , Windows error reporting rule Fix).

• Assessment Report Fix.

• Asset Report Excel is added with additional sheets for Vuls Scan Not Perfomed, Offline Vuls Scan Not Performed, Assets By Tags & Deprecated Assets By Tags.

Below are the MD5 Checksum for CyberCNS agents:

c0db1fd49080b3bd30fe6ebadc28a56f cybercnsagent.exe
5ed52c03acc0410f70fa4e7259a3611a cybercnsagent_arm
7e3cf6acd1001f299e4c55065043d90f cybercnsagent_darwin
e233ed433c88ec90cb8d9350033772e6 cybercnsagent_linux

Below are the MD5 Checksum for CyberCNS agents:

b19094397cd0040d7b26fcac18212b02 cybercnsagent.exe
01e4baa0c23a241c091b7fa0990c5645 cybercnsagent_arm
fcd57364988afd1c4afdf5d0e98f9f48 cybercnsagent_darwin
324db939ec070f762d3328157bc1a7a6 cybercnsagent_linux

• Released CyberCNS Agent 2.0.51

> Removed nmap directory and also nmap.zip file from lightweight agents.

> File not found (open /opt/CyberCNSAgentV2/ntfastfind-x64.exe: no such file or directory) is fixed.

• Fix for Excel Report limit.

• Count for User(enabled/disabled)data fix in Assessment Report.

• CVE report link reverted in CVE Remediation Report.

• Fix for an inactive scheduler.

• Fixes for the Data Source filter in Report Builder.

• In Patching fix for Syncromsp ticket creation.

• Count for Computer never Logged in and User Logged in data fix in Assessment Report.

• For all Integrations, added the Company name, as well as the Hostname and IP address, to the ticket creation summary.

• Multiple job termination options are added in the Jobs section.

• Fix the agent name search in Jobs.

Released CyberCNS Agent 2.0.50

> OSquery consuming CPU and memory performance fix.

> HTTPS network vulnerability risk score was low, now updated to medium.

> Agent installation using proxy settings

• CyberEssential compliance and report is added.

• For Email, CyberCNS SES Email, and SFTP Integration, we now have the option to select all Companies at once.

• Fix for 500 error in the Asset Users download under Active Assets.

• For Email, CyberCNS SES Email, and SFTP Integration, we now have the option to select all Companies at once

• OSquery consuming more CPU and Memory issue Fix.

• Report builder Fix-> Data source filter multiple filter data.

• Added Microsoft error message as it is will be shown into for Azure Active Directory and Microsoft Secure Score sections.

• A company-level Scheduler has been added.

• In Active Assets, under Update Credentials, the network device option is removed.

Some bug fixes:

• Fix for adding the same filter multiple times in report builder—>data source filter.

• Microsoft Support Diagnostic Tool Dashboard has been added.

Some Bug Fixes:

• Fix for network security configuration compliance.

• Fix for MySQL 2008 version.

• Fix for CVE report execution failure.

• Fixes for 500 errors.

Released CyberCNS Agent 2.0.49

> cybercnsagentmonitor.exe (added from agent version 2.0.49 onwards to monitor agent status by creating CyberCNSMonitoringAgent service).

Some Bug Fixes:

• Fix for HIPAA compliance in the Windows firewall.

• Fix for asset report execution failure.

• Report on CVE remediation Fix for CVE URL removal.

• In Scheduler 500 error fix.

• In Report Builder, added the asset name to the Asset Users section.

• In all the Compliance Reports, a new field called Manufacturer has been included.

Some Bug Fixes:

• In Scheduler, Standard Reports fixes.

• Microsoft SQL fixes.

• In the share permission report, there is a fix for access control.

Some Bug Fixes:

• In Asset Users report added a few fields.

• In Scheduler, Standard Reports fixes.

Some Bug Fixes:

• In Probes/Agents the hostname filter fix.

Some Bug Fixes:

• Under Overview added Log4j Files in System table.

• Under Overview, Password Policy enhanced.

• If the company is deleted, Firewall data and report customization logo data are completely deleted.

• Evidence for Application baseline Applications/Services added fix.

• Bitdefender detection fixes added in security report card>local firewall.

• CIS_8.0 compliance rule for anti-malware software added.

• Standard Reports added as follows:
  AD groups PPT
  Asset vulnerability excel
  Asset level missing patches excel
  AD OU’s docx
  AD GPO’s docx
  Password policy excel

• CyberCNS user table Xlsx Download for all users under Users section fix.

• Compliance CSV report modified (added asset name, IP, OS, OS version).

Some Bug Fixes:

• Evidence for Application baseline Applications/Services added fix.

• Global users report fixes.

• Patching fixes.

Some Bug Fixes:

• 500 error fixed in Asset Users search.

• Network device option is removed in Master Credentials under Discovery Settings.

Some Bug Fixes:

• In Quick External Scan, changed from fetch results to fetch previously scan results.

Some Bug Fixes:

• In Network Scan Findings, selecting two to three assets at a time redirects to the Active Assets page. 

• Sort option added under Active Assets for Read-only users.

Released CyberCNS Agent 2.0.45

• External scan performance fixes.

• The external scan will take one company at a time and others will be in the queue for scanning.

• In Probe/External Scan currently, we are taking 50 IPs at a time for scanning from mentioned IP Ranges.

• Patching Fixes.

• External Scan fixes.

• Agent Performance fixes.

• Added Firewall integration for pfSense Firewall.

Some Bug Fixes:

1. Added asset users table in Asset details.

2. Separate times stamps are added for offline vulnerability scan and Vulnerability scan

3. Dutch and other language systems vulnerability scan fix.

4. Report builder-> Compliance fix.

5. For the performance overview, we have removed the external scan agent from the company level.

Some Bug Fixes:
·       Job-related fixes.
·       scheduled reports will download in .zip format instead of 7z.
·       One-time assessment fix.

Some Bug Fixes:
·       Job Details - Vulnerability Scan > Asset Job Status> sort by Vulnerability count fix.
·       Select Filter in Jobs section fix.
·       0 Ip is not allowed while adding new IPs.

Released CyberCNS Agent 2.0.43
·       LightWeight High CPU memory usage fix.
·       Agent jobs will perform in the queue.
·       Cyberutilities -->Firewall scan fix (Linux cyberutilities executable fix)
·       Offline vulnerability scan Fix (If there are no agents installed in the company we will not initiate any offline vulnerability scan).

Released CyberCNS Agent 2.0.42
> Italian language systems vulnerability scan fix.
Some Bug Fixes:
·       Patching Functionality.
·       Vulnerability Network Detailed Report.
·       Evidence Path in Remediation Plan.

Some Bug Fixes:
·       Patching Functionality

Some Bug Fixes:
·       Patching Functionality

Released CyberCNS Agent 2.0.41
Lightweight agents npcap uninstall is stopped.

Some Bug Fixes:
·       Enable Patching Status Fix.

Some Bug Fixes:
·       Sorting in Active Assets Fix.
·       Hostname missing fix in the Toggle Table view under Active Assets.

• Released CyberCNS Agent 2.0.40

• Lightweight agents npcap uninstall added

Some Bug Fixes
·       Mac OS detection Fix.
·       SFTP reports scheduler Fix.
·       Refresh button in Probes/Agents Fix.
·       Sorting in Active Assets Fix.

• Regex Application Baseline.

• Compliance subnet filter.

• Subnet IP added in compliance reports

• Active Directory groups report detailed -excel.

• Essential Eight report.

• Report builder compliance tables added.

• Report builder in asset section antivirus tables added.

• Added Regex Application Baseline.

• Compliance subnet filter.

Dashboard:-
·       Added External Scan Global dashboard
·       Added Network Scan Findings Global Dashboard.
·       Vulnerability trending and Top 10 assets by vulnerabilities are added.
Some Bug Fixes:
·       Company Overview dashboard: Vulnerability Trending graph added with a different query. The old graph was showing the wrong data from the time series.
·       External Scan dashboard: Modified some fields to be displayed.

• New CyberCNS Agent 2.0.39 released

Fixed the load issue once multiple subnets are added for a single agent.

Added Ciphers table under external scan summary.
·       Added selection of multiple assets while patching.
Some Bug Fixes
·       Sorting issue fix in probe/agents tab company and global level.
·       In an external scan when the data is scanned that data will be shown first in the results section fix.

• Reports: Internal vulnerabilities Xls report added

• Fortigate Firewall Integration: Updated the integration to accept API keys as it is more reliable than ssh.

• Removed the records of CIDR in Bulk upload IP.

• Released CyberCNS Agent 2.0.38

• Certificate update

• Released CyberCNS Agent 2.0.37

• New agent to support new proposed architecture.

Company mapping was removed for firewall integration.
Some Bug Fixes
·       Remediation Plan> Vulnerability sorting issue Fix.
·       External Scan agent creating duplicates while refreshing Fix.
·       Summary Compliance listing in Asset details Fix.

·       Released CyberCNS Agent 2.0.36
·       Lightweight Agent restart issue fixes with reduced API calls.
·       Npcap removed from Lightweight agent.
Some Bug Fixes
·       Installed Programs showing install path incorrect Fix.
·       Asset Level Remediation Plan > View Evidence information Fix.
·       CVE remediation report shows Unix entries for windows devices.
·       Executive Summary Report having execution fail while downloading issue Fix.

Some Bug Fixes
·       Company Name length Fix.
·       Remediation plan> Remediated list showing Patching symbol Fix.

• Released CyberCNS Agent 2.0.35
  Some Bug Fixes
  ·       Security Report Card not showing windows defender Fix.
  ·       Application Baseline docx report unique values Fix.
  ·       External Scan spell check Fix.
  ·       Log4j showing no vulnerability on dashboard issue Fix

•      Added Scheduler to Patching.
  Some Bug Fixes

• External Scan IP sort issue Fix.

• External Scan multiple tag issue Fix.

Some Bug Fixes
·       For HaloPSA integration, under Company mapping, an additional field for text search was added.
·       Under Active Assets > Security Report Card > Network Vulnerabilities issue Fix.

Some Bug Fixes

• External Scan Fixes.

• Assets missing issue while external and regular scans

• AD Password Policy report changes - Recommendations will be shown only for non-compliant items.

• Standard Reports date format changed to MM/DD/YYYY.

• AD Password Policy report changes - Recommendations will be shown only for non-compliant items.

• Standard Reports date format changed to MM/DD/YYYY.

Added Patching Status enable option under Global View>Settings
Some Bug Fixes
·       Risk score calculation Fix

• Added Patching Status enable option under Global View>Settings

• Added 3rd party application Patching capability from CyberCNS using Lightweight agent.

• Azure AD integration 500 Error Fix.

Added 3rd party application Patching capability from CyberCNS using Lightweight agent.
·       Azure AD integration 500 Error Fix.

Added IP address column in Internal vulnerability report

Added Probes/Agents added under Global view.
·       Halo PSA store credentials error text changed.
·       For Asset which fails authenticated scans text changed from "Not scanned" to "Credentials scan not performed"

CyberCNS Agent 2.0.33 released
New Agent is signed with an EV certificate valid for two years 08-Feb-2022 Release Notes
Backend:
·       Some Bug Fixes
·       Account lockout issue Fix.

CyberCNS Agent 2.0.32 released New Agent-In network scan finding ports were shown incorrectly Fix New Agent- Old assets are shown in Active Directory scan Fix
·       Added Login Audit under Global Settings.

·       Added Login Audit under Global Settings.

Some Bug Fixes
·       Kaseya Integration-Locations 500 error Fix.
·       Active Directory scan error Fix.
·       Vulnerabilities API 500 Error Fix
·       Log4j info 403 error Fix.
·       Deprecated assets error Fix.

Added Report Customisation watermark and file extension feature.
·       Added Azure Notification rules.
Some Bug Fixes
·       Ports not clearing if there are no open ports found Fix.
·       Dashboard Log4j critical vulnerability by company.
·       Notification rule service loading error Fix.
·       Asset version not showing on successful scan Fix
·       DattoRMM multiple company mapping error Fix

Some Bug Fixes
·       Active Directory Groups if false shows tick mark Fix.
·       Added Report Customisation watermark and file extension feature.

CyberCNS Agent 2.0.30 was released for Agent crash and Agent going offline issue.
·       The added Company Name field in companies created in the last 48 hours table under Global Assets By Company dashboard.
·       Added Password policy table under AD User Audit dashboard.
Some Bug Fixes
·       Firewall and SNMP devices Vulnerability Scans not running Fix.

Some Bug Fixes
·       Ticket creation successful without Notification Rules created Fix.
·       Connectwise Integration shows 500 error while saving Fix.
·       Cisco Meraki Company Mapping Fix.
·       Default Template under Integrations spelling mistake Fix.

CyberCNS Agent Install command changed with download from the self domain.
Some Bug Fixes
·       Connectwise integration error Fix.
·       Standard Report execution fails for PPT report Fix.
·       Remediated applications showing old version Fix.

Added Login page text update (product name) for Whitelabel Settings.
·       Asset level Update Credentials- removed port and protocol
·       Added General Customisation for xlsx reports under Report Customisation
·       Added Agent build Info and Assessment build info under Build Information.
Some Bug Fixes
·       Application Baseline spelling mistake Fix
·       Logo reset issue Fix

Some Bug Fixes
·       Assessment Report pdf Fix- if an Asset is Non-Compliant for any aspect it's shown now as Non-Compliant.

Added Excel Reports for Compliance CIS 8.0, ISO 20072, NIST 800 171.
·       Added Excel Reports for Security Report Card, Insecure Listening Ports.
·       Added CVE Remediation Report as Doc and excel.
·       Added Tags Column into External Scan Report.
Some Bug Fixes
·       In-Network Scan findings, Asset Level Vulnerability Fix.
·       In the Probes/Agents & External Scan section, Bulk upload IP Fix.
·       Global Dashboard> Asset dashboard>Company Count Fix. The default value is set to one year.
·       Alerts optimization

Some Bug Fixes
·       Integration Action Close alert Fix.
·       Assessment Compliance count Fix.
·       User Password duplicate entries Fix.
·       Compliance name incorrect number Fix.
·       Cisco Meraki integration 500 error Fix.

• CyberCNS Server Side Security Fixes.

Some Bug Fixes
·       SNMP and Firewall Vulnerabilities Scan Fix - Vulnerability count issue if no vulnerabilities are found.
·       New Domain Configuration Fix - Nginx not stopping properly before the new domain configuration

Some Bug Fixes
·       External Scan excel report Fix - Added additional information
·       Assessment pdf Report Fix - Blank Page issue
·       Remediation Action>Integration Action issue Fix

Added Reset MFA at the user level
Some Bug Fixes
·       Executive Summary Report Fix
·       Consolidated Report Fix
·       Assessment Report Fix
·       Insights Error Fix

Added Reset MFA at a User level
·       Added Asset By Company under Global Dashboard
Some Bug Fixes
·       Application Baseline Fix

Some Bug Fixes
·       CyberCNS API Fixes

Some Bug Fixes
·       Notification Rules Fixes

• Added additional information to Asset Xlsx report

New Notification Engine
·       Added Global Log4shell Vulnerability Analysis Dashboard
Some Bug Fixes
·       Released New CyberCNS Agent 2.0.28. Agent Fixes for SMB Signing Issues and SMB List Shares Not Available
·       Meraki Firewall Scan Fix.
·       Fixed Assessment Login issues when OTP configured
·       Fixed Agent Registration timing issue
·       Fixed Lastlogon time issue in Active Directory Dashboard data

·       Added Log4shell Vulnerability Analysis under Global Dashboard.
·       Added Log4Shell Vulnerability Analysis under Standard Reports.
·       Added Active Directory Password Policy doc report under Standard Reports.
·       Added Log4Shell Vulnerability Analysis block under Report Builder.
Some Bug Fixes
·       Assessment login with OTP Fix.