Skip to main content

Mondoo 11.28 is out!

· 3 min read
Tim Smith
Tim Smith
Mondoo Core Team
Charles Johnson
Charles Johnson
Mondoo Core Team

🥳 Mondoo 11.28 is out! This release includes Azure DevOps ticketing, policy scoring configuration, updated policies, and more!​

Get this release: Installation Docs | Package Downloads | Docker Container

🎉 NEW FEATURES​

Create Azure DevOps issues from Mondoo​

Mondoo now supports creating remediation tickets in Azure DevOps. This option joins our existing support for ticketing with Jira, Zendesk, GitHub, GitLab, and email.

Mondoo can create tickets in these external systems and update them as it detects changes. When all the findings are remediated, Mondoo can automatically close tickets. When previously resolved findings regress, Mondoo can automatically open new cases to track remediation.

Cases in Azure DevOps

Policy scoring weight configuration​

Configure how Mondoo scores your policies with a newly redesigned policy page. The new page makes it easier to enable or disable a policy, share that policy with colleagues, and now to modify how that policy is scored. Select the scale icon from the top of any policy page to display five new scoring options.

Scoring

Learn more about scoring systems in the Mondoo documentation.

🧹 IMPROVEMENTS​

Updated CIS Windows benchmark policies​

Secure critical Windows servers with the latest CIS recommendations for Windows 2016 and 2019:

  • CIS Windows Server 2016 benchmark 3.0.0
  • CIS Windows Server 2019 benchmark 3.0.1

Creation and scan details for integrations​

Integration detail pages now expose creation and scan information to help with understand and troubleshooting integrations

  • Creation date
  • Last modification date
  • Last successful scan date
  • Last attempted scan date

Integration details

Fedora 41 support​

Mondoo now detects Fedora 41 servers, workstations, and containers including EOL and package CVE support.

Simplified policy property editing​

You can now modify policy property values directly on the policies page at Security -> Policies, making it easier to customize policies to your needs.

Editing properties

Resource updates​

asset​

  • New purl field

aws.ec2.instance​

  • New iamInstanceProfile field using the new aws.iam.instanceProfile resource

aws.iam​

  • New instanceProfiles field using the new aws.iam.instanceProfile resource

🐛 BUG FIXES AND UPDATES​

  • Fix formatting on sample commands in the workstation integration setup page.
  • Detect CVEs on recent VMware vCenter releases.
  • Improve password expiration checks in Windows policies.
  • Fix a failure loading the AWS integration details page with certain configuration options enabled.
  • Identify new M4 iMacs in the asset overview.
  • Improve the icon for uploading custom frameworks, policies, and query packs.
  • Fix package detection on the latest releases of openSUSE/SLES.
  • Use the asset name defined in inventory files when scanning assets over SSH.
  • Fix command line help for the Azure provider not showing all available flags.
  • Fix a failure scanning Microsoft 365.
  • Fix some AWS resources not fetching tags properly.
  • Don't show the filter search bar on the Policies page when there are no enabled policies.