Release notes · Mac Client · News · Release Notes

Mac Client 6.4.6 Ransomware and failed FileVault encryptions

Feature

  • Detection of a newly reported KeRanger Mac ransomeware variant.
  • Better detection of stalled FileVault Encryption attempts

Changes

  • Minor bug fixes and clarification for Carbon Copy Cloner, SMART and internal IP address plugins.

This build will track dormant copies of the KeRanger. Learn more about this new threat in a post by Palo Alto Networks.

More release notes

All release notes
Linux Client

Linux Agent Now Available for Ubuntu 26.04 LTS

The Watchman Monitoring Linux agent now installs on Ubuntu 26.04 LTS. Packages for both amd64 and arm64 are in our apt repository, using the same install command you already use for 22.04 and 24.04.

ChromeOS MonitoringDashboardLinux ClientMac ClientWindows Client

Monitoring Policies: Control Plugin Alerts Fleet-Wide

Today’s dashboard update adds Monitoring Policies: a named, reusable answer to the question “how should this plugin notify us?”, applied to as many computers as you like. No agent update is required. This is a server-side dashboard feature, and nothing changes until you apply a Policy. Every computer starts with no Policy, which behaves exactly…

Dashboard

Apple Business Manager Integration Improvements

Ten days ago we connected Watchman Monitoring to Apple Business Manager and Apple School Manager. Today’s dashboard update is the follow-up pass: the lists now show you every Mac instead of a sample, and the tables sort. Both Mac lists are paginated instead of truncating The enriched list and the “no agent installed” list each showed…

See what Watchman Monitoring finds on your fleet.

Start a free 30-day trial. Every feature, no credit card, and most teams see their first findings on the first check-in.