Push notifications are sealed: your SIEMLess server encrypts each alert so only your phone can read it. Servers no longer need Cyber Automation's push certificate; an administrator turns pushes on under Settings → Mobile push, and notification settings say when that is still to do. EavesDrop, under More: review what OverWatch EavesDrop has found about your organisation, and add monitors with keywords such as a product name or “ransomware”. Needs a 2.3.212 server.

New EavesDrop screen, under More: see what OverWatch EavesDrop has found about your organisation and your keywords in Telegram channels and dark-web pages, review each finding, and read the server's notifications. Administrators add and change monitors, now with keywords such as a product name or “ransomware”. New "EavesDrop alerts" switch in notification settings: be alerted to new findings, or silence them. EavesDrop needs a SIEMLess 2.3.212 server connected to OverWatch EavesDrop.

Bug fixes and improvements.

New Security tab: vulnerabilities across your fleet by host, CVE or package, with known-exploited flags and the fix for each; package updates and reboots; and each host's compromise verdict from Check4Compromise and quick checks. Containers: health and detail for the containers on each host. Better handling of servers on older SIEMLess versions.

Improved CyberScore interface

User Interface improvements.