-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Tim Smith <[email protected]>
- Loading branch information
Showing
7 changed files
with
813 additions
and
703 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,91 @@ | ||
--- | ||
slug: mondoo-11.8-is-out/ | ||
title: Mondoo 11.8 is out! | ||
description: Announcing the 11.8 release of Mondoo, with fine grained asset scanning, FOO, BAR, BAZ, and more! | ||
author: Tim Smith | ||
author_title: Mondoo Core Team | ||
author_url: https://github.com/tas50 | ||
image: /img/featured_img/release-feature.jpg | ||
tags: [release, mondoo] | ||
--- | ||
|
||
## 🥳 Mondoo 11.8 is out! This release includes fine grained asset scanning, FOO, BAR, BAZ, and more! | ||
|
||
Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec) | ||
|
||
--- | ||
|
||
## 🎉 NEW FEATURES | ||
|
||
### Fine grained cloud asset scanning | ||
|
||
Bring greater visibility to your cloud security posture, with new fine grained asset scanning for Azure, GCP, and Mondoo hosted AWS integrations. With fine grained asset scanning Mondoo will scan common cloud resources such as load balancers, virtual networks, or storage buckets as individual assets, giving you improved visibility into the security posture of your most important cloud assets. | ||
|
||
![Granular Cloud Assets](/img/releases/2024-06-11-mondoo-11.8-is-out/granular_assets.png) | ||
|
||
#### Expanded asset inventory | ||
|
||
With fine grained asset scanning you can quickly find and understand cloud assets accross multiple providers or accounts all within Mondoo. Search for resources by name or type using our newly expanded search capabilities. | ||
|
||
![Asset search](/img/releases/2024-06-11-mondoo-11.8-is-out/search.png) | ||
|
||
Once you've found the right asset, quickly determine the location and owner with detailed asset overview data for each asset type. | ||
|
||
![Asset overview](/img/releases/2024-06-11-mondoo-11.8-is-out/asset_overview.png) | ||
|
||
#### Improved security visibility | ||
|
||
Understand where critical security vulnerabilities exist within your infrastructure with fine grained asset scanning. With checks applied directly to cloud assets, you can more easily see which assets are passing and which are failing without the need to dive into complex account-wide check output. | ||
|
||
![Granular security check](/img/releases/2024-06-11-mondoo-11.8-is-out/security_check.png) | ||
|
||
#### Granular exceptions | ||
|
||
The world is full of edge cases and now you have the granularity to account for those exceptions where necessary. With fine grained asset scanning you can create exceptions that run on the specific cloud resources instead of your entire account. This means you can disable or snooze a check without losing security visibility accross your whole cloud account. | ||
|
||
![Granular asset exceptions](/img/releases/2024-06-11-mondoo-11.8-is-out/exceptions.png) | ||
|
||
#### Common questions | ||
|
||
**Q: Why is the cloud resource FOO not scanning as an asset?** | ||
|
||
**A**: Not all cloud resources will scan as assets initially. We've added common resources that include security checks in CIS Level 1 policies. We will be expanding our scanning coverage as time goes on and as new checks are developed. If there's a resource you'd love to see scanned as an asset in Mondoo let us know at [[email protected]](mailto:[email protected]). | ||
|
||
**Q: Will the increase in asset counts impact billing?** | ||
|
||
**A**: Billing shouldn't get in the way of having the granularity to solve critical security findings, so there will not be an additional charge for these assets. | ||
|
||
### Space wide software vulnerability page | ||
|
||
DEETS | ||
|
||
### Quick space and organization navigation | ||
|
||
DEETS | ||
|
||
## 🧹 IMPROVEMENTS | ||
|
||
### Oracle Unbreakable Enterprise Kernel CVE detection | ||
|
||
https://github.com/mondoohq/server/pull/8342 | ||
|
||
### Resource updates | ||
|
||
#### aws.applicationautoscaling.target | ||
|
||
- New `createdAt` field | ||
|
||
#### aws.ec2.image | ||
|
||
- New `deprecatedAt` field | ||
|
||
## 🐛 BUG FIXES AND UPDATES | ||
|
||
- Fix a type error querying data from the `aws.ecs.task` resource. | ||
- Display policies in preview on assets in grey. | ||
- Show the correct Microsoft icon on the console login page. | ||
- Fix the display of priority chart totals in light mode. | ||
- Expand Linux policies to support PowerPC and Arm based systems. | ||
- Improve icons on the workstation setup page. | ||
- Allow updating the AWS Mondoo hosted integration without re-entering credentials. | ||
- Improve policy score calculations when some policies are in preview. |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+21.7 KB
static/img/releases/2024-06-11-mondoo-11.8-is-out/granular_assets.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Oops, something went wrong.