-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Tim Smith <[email protected]>
- Loading branch information
Showing
2 changed files
with
809 additions
and
703 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,87 @@ | ||
--- | ||
slug: mondoo-11.8-is-out/ | ||
title: Mondoo 11.8 is out! | ||
description: Announcing the 11.8 release of Mondoo, with fine grained asset scanning, FOO, BAR, BAZ, and more! | ||
author: Tim Smith | ||
author_title: Mondoo Core Team | ||
author_url: https://github.com/tas50 | ||
image: /img/featured_img/release-feature.jpg | ||
tags: [release, mondoo] | ||
--- | ||
|
||
## 🥳 Mondoo 11.8 is out! This release includes fine grained asset scanning, FOO, BAR, BAZ, and more! | ||
|
||
Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec) | ||
|
||
--- | ||
|
||
## 🎉 NEW FEATURES | ||
|
||
### Fine grained cloud asset scanning | ||
|
||
Bring greater visibility to your cloud security posture, with new fine grained asset scanning for Azure, GCP, and Mondoo hosted AWS integrations. With fine grained asset scanning Mondoo will scan common cloud resources such as load balancers, virtual networks, or storage buckets as individual assets, giving you improved visibility into the security posture of your most important cloud assets. | ||
|
||
DEETS: INVENTORY PICTURE HERE | ||
|
||
#### Expanded asset inventory | ||
|
||
With fine grained asset scanning you can quickly find and understand cloud assets accross multiple accounts and providers all within Mondoo. Using our exapanded search capabilities you can find resources by name or platform. | ||
Check failure on line 28 in releases/2024-06-11-mondoo-11.8-is-out.md GitHub Actions / Run spell check
|
||
|
||
DEETS: SEARCH PICTURE HERE | ||
|
||
#### Improved security visibility | ||
|
||
With fine grained asset scanning it's easier to understand where critical security vulnerabilities exist within your infrastructure since checks run directly on cloud resource assets instead of the account. For example a | ||
|
||
DEETS: CHECK PICTURE HERE | ||
|
||
#### Granular exceptions | ||
|
||
The world is full of exceptions and now you have the granularity to set them exactly where you want. With fine grained asset scanning you can create exceptions that run on the specific cloud resources instead of your entire account. This means you can disable or snooze a check without losing the visibility accross your whole infrastructure. | ||
|
||
DEETS: EXCEPTION PICTURE HERE | ||
|
||
#### Common questions | ||
|
||
**Q: Why is the cloud resource FOO not scanning as an asset?** | ||
|
||
**A**: Not all cloud resources will scan as assets initially. We've added common resources that include security checks in CIS Level 1 policies. We will be expanding our scanning coverage as time goes on and as new checks are developed. If there's a resource you'd love to see scanned as an asset in Mondoo let us know at [[email protected]](mailto:[email protected]). | ||
|
||
**Q: Will the increase in asset counts impact billing?** | ||
|
||
**A**: Billing shouldn't get in the way of having the granularity to solve critical security findings, so there will not be an additional charge for these assets. | ||
|
||
### Space wide software vulnerability page | ||
|
||
DEETS | ||
|
||
### Quick space and organization navigation | ||
|
||
DEETS | ||
|
||
## 🧹 IMPROVEMENTS | ||
|
||
### Oracle Unbreakable Enterprise Kernel CVE detection | ||
|
||
https://github.com/mondoohq/server/pull/8342 | ||
|
||
### Resource updates | ||
|
||
#### aws.applicationautoscaling.target | ||
|
||
- New `createdAt` field | ||
|
||
#### aws.ec2.image | ||
|
||
- New `deprecatedAt` field | ||
|
||
## 🐛 BUG FIXES AND UPDATES | ||
|
||
- Fix a type error querying data from the `aws.ecs.task` resource. | ||
- Display policies in preview on assets in grey. | ||
- Show the correct Microsoft icon on the console login page. | ||
- Fix the display of priority chart totals in light mode. | ||
- Expand Linux policies to support PowerPC and Arm based systems. | ||
- Improve icons on the workstation setup page. | ||
- Allow updating the AWS Mondoo hosted integration without re-entering credentials. | ||
- Improve policy score calculations when some policies are in preview. |
Oops, something went wrong.