image.webp

December 15, 2025

Active Directory Device Organizational Unit Visibility

Improvement

ThreatDown now displays Active Directory device organizational structure and the user that is directly associated with that device in Entra/ Active Directory directly in your console. New Device OU columns are available across all major console areas Endpoint Management Center, Software Inventory, DNS Filtering, Device Control, Vulnerabilities, Patch Management, Application Block, and Detection Log.

Features and Improvements

  • View the user name column in the Endpoint management center. 

  • Filter endpoints by AD hierarchy, view Distinguished Name details, and configure OU-based notification rules. You can also quickly view

Issues Fixed

  • No fixes this release. 

image.jpg

December 11, 2025

User Audit Logs

Improvement

Track administrative actions with comprehensive audit logging. View detailed records of policy changes, schedule modifications, and group assignments with full before-and-after states. Filter, sort, and export audit records to support compliance, security investigations, and troubleshooting. Access via the Investigate tab.

Features and Improvements

  • Added filtering and sorting for columns inside of Events table.

  • Added Exporting of events inside of Events table.

Issues Fixed

  • No fixes this release. 

encryption status.png

December 10, 2025

Encryption Visibility for Windows BitLocker

Improvement

Nebula now provides centralized visibility into BitLocker encryption status for Windows endpoints. Admins can quickly see whether devices are fully encrypted, partially encrypted, not encrypted, or unknown, view per-drive encryption details (including drive name, storage usage, and encryption provider). This update helps simplify compliance, auditing, and risk management by making it easy to identify unprotected devices.

Features and Improvements

  • Nebula now provides centralized visibility into BitLocker encryption status for Windows endpoints.

Issues Fixed

  • No fixes this release. 

release-1-default1.png

December 9, 2025

Advanced Settings Browser Phishing Protection

Improvement

Introduced an Advanced Setting in the Browser Phishing Protection (BPP) policy to skip extension installation when registry-managed extensions are detected; if disabled, the agent appends BPP to the existing registry-managed list for coexistence without manual edits.

Features and Improvements

  • Added a new Advanced Setting in the Browser Phishing Protection policy: Skip extension installation if registry-managed extensions are detected.

    • When policy setting is enabled, the agent skips installing BPP if another extension list is enforced via registry.

    • When disabled, the agent will append Browser Phishing Protection to the existing registry-managed extension list, allowing coexistence without manual registry edits.

  • Made Firewall Management and Browser Phishing Protection available for TeamViewer customers.

Issues Fixed

  • No fixes this release. 

release-1-12225.png

December 2, 2025

Schedule Scan Improvements

Improvement

Schedules can now begin within a customizable time window, helping reduce network spikes and improve overall performance.

Features and Improvements

  • Schedules can now begin within a customizable time window, helping reduce network spikes and improve overall performance. 

    • New schedules use a default 60-minute window, which can be adjusted at any time to meet organizational needs. This update supports smoother, more reliable operations across environments.

Issues Fixed

  • NDEV-20811: Fixed an issue for Email Security that didn’t allow to add subdomains in Allow List.