October Patch Tuesday updates
Hello everyone, Below is the list of updates from October 2020 Patch Tuesday New Security Bulletins : 2020-10 Security Update for Adobe Flash Player for Windows (KB4580325) KB4579977, 2020-10 Security and Quality Rollup for .NET Framework 4.5.2 for Windows
ManageEngine M365 Security Plus released new audit actions!
Hello Everybody! We are glad to announce the release of the latest build of ManageEngine M365 Security Plus – 4403. This build comes with the following bug fixes: Highlight: New audit reports: Track more events in OneDrive for Business, Microsoft Forms, Power BI, Power Apps, Power Automate and Exchange Online. Enhancements: The DOMAIN\username login format will be supported for Active Directory users. Issue fixed: The issue in fetching data for monitoring while the proxy is configured, has
End of Support for Internet Explorer
Dear Users, Beginning with the General Availability of the New UI, ServiceDesk Plus Cloud will not support Internet Explorer to take advantage of modern web standards and to deliver improved functionality, security, and the best possible user experience. We will continue to support Microsoft Edge. Why we are discontinuing At ManageEngine, superior customer experience and enhanced security are our primary goals. With ServiceDesk Plus Cloud, we always strive to provide a modern, intuitive, secure
[Tips & Tricks] ServiceDesk Plus built-in scribble pad can save you time everyday
Hello folks, Scribble notes are always fun. Aren't they? At work, it can be really effective and helpful to take quick notes or remind us of important things. ServiceDesk Plus built-in Scribble pad is an omnipresent feature as it can be accessed from anywhere within the application. Each technician will have their own personalized scribble pad and would not need to save what you have written, just one click opens the scribble pad and close it once you are done with taking down the notes. The content
ServiceDesk Plus MSP - version 10.5 - Build - 10512 Released
Dear User(s) We released ServiceDesk Plus MSP - version 10.5 - Build - 10512. Please refer to the Migration path table available here and upgrade to our latest build 10512. Issues fixed SDPMSP-14881: Under requester login, selecting OnBehalfOf user is not possible. SDPMSP-15332: Site is not set if the technician sends an email not configured as an account support address and also in the incoming mail list. SDPMSP-15346: When the template category is modified, templates cannot be reordered. SDPMSP-15359:
Security vulnerabilities fixed in Chrome stable channel 86.0.4240.75 update
Hello everyone, Chrome 86 has been promoted to stable channel Chrome 86.0.4240.75, for Windows, Mac and Linux. This update comes with several fixes and improvements. Below are the details of the security fixes: CVE ID Vulnerability Severity CVE-2020-15967 Use after free in payments Critical CVE-2020-15968 Use after free in Blink High CVE-2020-15969 Use after free in WebRTC High CVE-2020-15970 Use after free in NFC High CVE-2020-15971 Use after free in printing
Security vulnerabilities fixed in Chrome stable channel 86.0.4240.75 update
Hello everyone, Chrome 86 has been promoted to stable channel Chrome 86.0.4240.75, for Windows, Mac and Linux. This update comes with several fixes and improvements. Below are the details of the security fixes: CVE ID Vulnerability Severity CVE-2020-15967 Use after free in payments Critical CVE-2020-15968 Use after free in Blink High CVE-2020-15969 Use after free in WebRTC High CVE-2020-15970 Use after free in NFC High CVE-2020-15971 Use after free in printing
Security vulnerabilities fixed in Chrome stable channel 86.0.4240.75 update
Hello everyone, Chrome 86 has been promoted to stable channel Chrome 86.0.4240.75, for Windows, Mac and Linux. This update comes with several fixes and improvements. Below are the details of the security fixes: CVE ID Vulnerability Severity CVE-2020-15967 Use after free in payments Critical CVE-2020-15968 Use after free in Blink High CVE-2020-15969 Use after free in WebRTC High CVE-2020-15970 Use after free in NFC High CVE-2020-15971 Use after free in printing High
[Free e-book] 5 ways to create a chaos-free NOC
Hello folks! We happy to announce that we've just launched our new e-book, 5 ways to create a chaos-free NOC. What it's about: An organization's network operations center (NOC) is the central nervous system of IT that connects its people, processes, systems, tools, and technologies. Needless to say, it tends to be chaotic. This e-book shows you how to break free of this chaos, and establish seamless operations using advanced analytics.
[Community Digest] ServiceDesk Plus - September 2020
Here is the monthly rewind for September 2020! Version and Build releases: We had 3 build releases · 11126 (Released on 04th September 2020) · 11127 (Released on 22nd September 2020) · 11128 (Released on 29th September 2020) check this link for more details Product highlights: Framework Upgrade Information · Tomcat upgraded to 9 · jQuery upgraded to 3.4.1 User Education and Resources: Masterclass 2020 Series KB Articles: [ ForYourInformation ] Request template date field enhancement
Security Recommendations for Mobile Device Manager Plus MSP on-premises and Cloud!
With the growing number of cyberattacks on enterprises, we would like to share a few security recommendations that can help enhance the security of the corporate data that is accessed from the web console of both Mobile Device Manager Plus MSP on-premises and cloud editions. For Mobile Device Manager Plus MSP on-premises users, the first step to secure access to the server is to disable the default admin account provided when downloading the product. We recommend either creating a new administrator
Security Recommendations for Mobile Device Manager Plus on-premises and Cloud!
With the growing number of cyberattacks on enterprises, we would like to share a few security recommendations that can help enhance the security of the corporate data that is accessed from the web console of both Mobile Device Manager Plus on-premises and cloud editions. For Mobile Device Manager Plus on-premises users, the first step to secure access to the server is to disable the default admin account provided when downloading the product. We recommend either creating a new administrator and
[Webinar] Back to work: Re-strategizing your network monitoring practices
With restrictions being lifted, companies are focusing on calling only the employees who really need to work from office while the rest of them are remote. This has led to an imbalance in IT infrastructure once again. Apart from employee safety, factors like VPN and configuration management, network security, etc. need to be taken into consideration. Join this webinar to learn how a streamlined network management strategy
[Webinar] Back to work: Re-strategizing your network monitoring practices
With restrictions being lifted, companies are focusing on calling only the employees who really need to work from office while the rest of them are remote. This has led to an imbalance in IT infrastructure once again. Apart from employee safety, factors like VPN and configuration management, network security, etc. need to be taken into consideration. Join this webinar to learn how a streamlined network management strategy will
[Webinar] Back to work: Re-strategizing your network monitoring practices
With restrictions being lifted, companies are focusing on calling only the employees who really need to work from office while the rest of them are remote. This has led to an imbalance in IT infrastructure once again. Apart from employee safety, factors like VPN and configuration management, network security, etc. need to be taken into consideration. Join this webinar to learn how a streamlined network management strategy
[Webinar] Back to work: Re-strategizing your network monitoring practices
With restrictions being lifted, companies are focusing on calling only the employees who really need to work from office while the rest of them are remote. This has led to an imbalance in IT infrastructure once again. Apart from employee safety, factors like VPN and configuration management, network security, etc. need to be taken into consideration. Join this webinar to learn how a streamlined network management strategy will help deliver optimal business performance even during these uncertain
[Tips & Tricks] Approvals Made Easy With ServiceDesk Plus
One of the most difficult day to day tasks in an organization is achieving a proper approval workflow, which was mostly orchestrated through papers and manual signatures were attested and those records would be maintained then after in large storage rooms. Later these records were maintained in a.XLS sheets by making use of a 3 rd party vendor application. Now, what is the problem with this, can't this be followed in the long run. The answer is quite ambiguous at the moment !! But At the end of
Launching Vulnerability Manager Plus: Hunt down security loopholes with 100% precision
Amp up your endpoint security game with Manage Engine's all-new Vulnerability Manager Plus. Pinpoint, prioritize, and eliminate vulnerabilities with ease. With Vulnerability Manager Plus' 360-degree visibility, you can eliminate blind spots, uncover exposed areas of your network, and seal security loopholes before they lead to a breach. Vulnerability Manager Plus delivers the threat intelligence necessary to predict real risks from a plethora of vulnerabilities, and acts as a strategic partner
[Tips & Tricks] Password protected file attachment
Password-protected file attachment is a new enhancement released with 11128 builds of ServiceDesk Plus. No matter how big or small your business may be, there are critical documents that need to be secured, not many organizations manage their business
[What's Cooking] Upcoming new features and enhancements
Dear Users, We are happy to inform you all that the following features are queued for release with one of the upcoming service packs. Multi-Level CAB Approval Add multiple approvals to any change stage. Apart from the CAB approval, you can add up to 10 approval https://pitstop.manageengine.com/portal/en/community/topic/whats-cooking-multi-level-cab-approval-for-changes Disable Concurrent Login You can now disable concurrent user login from different IP addresses. Can be configured from Admin > General
SysAdmin Day 2020
A very special date is just around the corner again: Friday, July 31, 2020 - the SysAdmin Day 2020! This day gives us the perfect opportunity to thank and honor the System and IT administrators around the world for all the times they’ve come to rescue to keep the business infrastructure up & running 24/7. ManageEngine loves you all so much! Celebrate this day with ManageEngine and express your gratitude to the Warriors of the IT and walk away with exciting prizes. Visit: http://mnge.it/sysadmnday
ServiceDesk Plus 11128 Released
Dear Users, SDP 11128 has been released and can be downloaded from the URL below, https://www.manageengine.com/products/service-desk/service-packs.html Enhancements : Frame Upgrade Information Tomcat upgraded to 9 jQuery upgraded to 3.4.1 Multi Level CAB Approval Add multiple approvals to any change stage. Apart from the CAB approval, you can add up to 10 approval Problem Support Group Support groups can be assigned to work on problems and group-based permissions can be configured for problems. Reports
[ForYourInformation -49] Request template date field enhancement in build 11126
In ServiceDesk Plus, tickets can be classified as Incidents and Services. In general Incident, tickets will be raised in organizations by end-users for an unplanned event that disrupts the usual work or something that is not working properly or could be broken. Service tickets can be defined as a formal request from the user to avail of services that are offered by the organization. Like access to servers, access to an application, password reset, and much more. The Service and Incident templates
Launching threat and vulnerability management add-on for Desktop Central
We're so glad to inform you with the all new threat and vulnerability management add-on for Desktop Central, you can easily extend an array of security features to machines that are already managed by Desktop central. The security capabilities of the add-on includes: Vulnerability assessment and prioritization Automatic correlation of patches Security configuration management Web server hardening End-of-life audit High risk software uninstallation Port audit Dive right in to learn more about its
Desktop Central - Free Training Series
Join us for the Desktop Central free training series which will begin on October 14, 2020. This is a 5-week training program which will focus on all the major modules of ManageEngine's Unified Endpoint Management solution - Desktop Central. The weekly sessions will be hosted at 6.30 AM GMT and 11.30 AM EDT. The following topics will be covered on October 14. Patch Management: Automating the patch deployment process Managing third-party applications Updating patches in the remote work environment
Secure your Desktop Central server from unauthenticated access!
Dear Customer's, At ManageEngine, we consider security as our top priority. That’s why we bring it to your immediate attention, that some versions of Desktop Central Server instances that were hosted as edge devices with weak password policies might be compromised (reported by BleepingComputer). A cyberthreat actor has claimed that the Desktop Central servers hosted as edge devices (publicly accessible) that do not have two-factor authentication enabled and use the default credentials to authenticate
[Free training webinars]: Overcome complex application performance hurdles with ease!
A conventional business infrastructure is bound to have a substantial amount of performance disruptions on a regular basis from time to time. However, there are instances where even the minuscule of issues might get overlooked, but are intricate enough
Password Manager Pro new build 11001
Hi, Password Manager Pro 11001 has been released and is now available for download. This is a minor release with a few important security fixes, and a bug fix related to the Ticketing system. For detailed information, please see our Release Notes of this upgrade pack (build 11001). How to Upgrade to Build 11001? If you are an existing customer of Password Manager Pro, download the upgrade pack from the following page: https://www.manageengine.com/products/passwordmanagerpro/upgradepack.html
Firefox 81 and Firefox ESR 78.3 patches high severity vulnerabilities
Mozilla patched high-severity vulnerabilities with the release of Firefox 81 and Firefox ESR 78.3. The CVE IDs addressed in the latest version are as follows: CVE ID Description Severity CVE-2020-15677 Download origin spoofing via redirect Moderate CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element Moderate CVE-2020-15678 When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario
Firefox 81 and Firefox ESR 78.3 patches high severity vulnerabilities
Mozilla patched high-severity vulnerabilities with the release of Firefox 81 and Firefox ESR 78.3. The CVE IDs addressed in the latest version are as follows: CVE ID Description Severity CVE-2020-15677 Download origin spoofing via redirect Moderate CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element Moderate CVE-2020-15678 When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario
Firefox 81 and Firefox ESR 78.3 patches high severity vulnerabilities
Mozilla patched high-severity vulnerabilities with the release of Firefox 81 and Firefox ESR 78.3. The CVE IDs addressed in the latest version are as follows: CVE ID Description Severity CVE-2020-15677 Download origin spoofing via redirect Moderate CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element Moderate CVE-2020-15678 When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario
CISA's Emergency Directive 20-04 mandates federal agencies to mitigate CVE-2020-1472 (Netlogon Elevation of Privilege Vulnerability)
This advisory applies to: All Federal Executive Branch Departments and Agencies, Except for the Department of Defense, Central Intelligence Agency, and Office of the Director of National Intelligence. On August 11, 2020, Microsoft issued a security update to mitigate CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability in Windows Server operating systems. This vulnerability exists within the Microsoft Windows Netlogon Remote Protocol (MS-NRPC), an interface used for user and machine authentication
CISA's Emergency Directive 20-04 mandates federal agencies to mitigate CVE-2020-1472 (Netlogon Elevation of Privilege Vulnerability)
This advisory applies to: All Federal Executive Branch Departments and Agencies, Except for the Department of Defense, Central Intelligence Agency, and Office of the Director of National Intelligence. On August 11, 2020, Microsoft issued a security update to mitigate CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability in Windows Server operating systems. This vulnerability exists within the Microsoft Windows Netlogon Remote Protocol (MS-NRPC), an interface used for user and machine authentication
CISA's Emergency Directive 20-04 mandates federal agencies to mitigate CVE-2020-1472 (Netlogon Elevation of Privilege Vulnerability)
This advisory applies to: All Federal Executive Branch Departments and Agencies, Except for the Department of Defense, Central Intelligence Agency, and Office of the Director of National Intelligence. On August 11, 2020, Microsoft issued a security update to mitigate CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability in Windows Server operating systems. This vulnerability exists within the Microsoft Windows Netlogon Remote Protocol (MS-NRPC), an interface used for user and machine authentication
Google Chrome releases stable channel update 85.0.4183.121
Hello folks, Google Chrome has recently updated the stable channel to 85.0.4183.121. The CVE IDs addressed in the latest version and their corresponding severity are as follows: CVE-2020-15960 - High CVE-2020-15961 - High CVE-2020-15962 - High CVE-2020-15963 - High CVE-2020-15965 - High CVE-2020-15966 - Medium CVE-2020-15964 - Low Desktop Central now supports patches to address the aforementioned CVEs and update Google Chrome to the latest version 85.0.4183.121 for Windows, Mac, and Linux.
Google Chrome releases stable channel update 85.0.4183.121
Hello folks, Google Chrome has recently updated the stable channel to 85.0.4183.121. The CVE IDs addressed in the latest version and their corresponding severity are as follows: CVE-2020-15960 - High CVE-2020-15961 - High CVE-2020-15962 - High CVE-2020-15963 - High CVE-2020-15965 - High CVE-2020-15966 - Medium CVE-2020-15964 - Low Patch Manager Plus now supports patches to address the aforementioned CVEs and update Google Chrome to the latest version 85.0.4183.121 for Windows, Mac, and Linux.
Google Chrome releases stable channel update 85.0.4183.121
Hello folks, Google Chrome has recently updated the stable channel to 85.0.4183.121. The CVE IDs addressed in the latest version and their corresponding severity are as follows: CVE-2020-15960 - High CVE-2020-15961 - High CVE-2020-15962 - High CVE-2020-15963 - High CVE-2020-15965 - High CVE-2020-15966 - Medium CVE-2020-15964 - Low Vulnerability Manager Plus now supports patches to address the aforementioned CVEs and update Google Chrome to the latest version 85.0.4183.121 for Windows, Mac,
M365 Security Plus - Fixes and Enhancements [2021]
O365 Manager Plus Release Notes Release Notes for build 4500 - Dec 31, 2021 Issue fixed: To prevent Log4j vulnerability (CVE-2021-45105) we have upgraded Apache Log4j version 2.16 to 2.17. Release Notes for build 4425 - Dec 16, 2021 Enhancement: Enhanced
The launch of ServiceDesk Plus' new UI is right around the corner
Hi there! After a successful beta test, ServiceDesk Plus' revamped user interface is all set to launch for a global audience very soon. We are very excited to bring you this latest update. To ensure that you and your team have a smooth switchover to the new UI, the first session of the Masterclass advanced series will be focus on the new user experience where our product experts will take a deep dive, demonstrating the improved interface and the new functionalities. Webinar details: Masterclass
ServiceDesk Plus Cloud - Custom Apps[Add On] Scheduled downtime for EU users on September 27th, 2020
Dear Customers, This downtime announcement is specific to ServiceDesk Plus Cloud users/organisations signed up in EU and for those who have enabled "Custom Apps" add-on. During this downtime, add-on "Custom Apps" in ServiceDesk Plus Cloud application alone won't be accessible and all other features & functionalities of the helpdesk will be accessible and work as intended We want to make you aware that we've scheduled a maintenance activity at our EU data centers on Sunday, September 27th, 2020, from
Next Page