Bitsight Data Change Log

Use the Risk Vectors & Risk Categories directory to learn about Bitsight risk vectors; including what they are and how they are assessed. Risk vectors are introduced in beta status. They are evaluated for a period before being factored into Bitsight Security Ratings.

10-JUL-2025

2025 Ratings Algorithm Update (RAU). See changes.

18-JUN-2025

TeamCity 2025.03.3 released.

17-JUN-2025

Webmin:

• 2.402 released.
• 2.401 EOL.

02-JUN-2025

Webmin:

• 2.401 released.
• 2.400 EOL.

28-MAY-2025

SUSE Linux Enterprise Server 15 SP7 released.

25-MAY-2025

Webmin:

• 2.400 released.
• Webmin 2.303 EOL.

13-MAY-2025

Red Hat Enterprise Linux 10 released.

08-MAY-2025

TeamCity 2025.03.2 released.

17-APR-2025

Ubuntu "Plucky Puffin" released.

16-APR-2025

TeamCity 2025.03.1 released.

15-APR-2025

Fedora 42 released.

11-APR-2025

Exposed Credentials – Additional ‘sensitive’ breaches, underlying service upgrades, and minor UI updates.

09-APR-2025

OpenSSH:

• 10.0 released.
• 9.9 EOL.

20-MAR-2025

TeamCity:

• 2025.03 released.
• 2024.07.3 EOL.
• 2024.07.2 EOL.
• 2024.07.1 EOL.
• 2024.07 EOL.

17-MAR-2025

Webmin:

• 2.303 released.
• 2.302 EOL.

07-MAR-2025

TeamCity 2024.12.3 released.

05-MAR-2025

Webmin:

• 2.302 released.
• 2.301 EOL.

16-FEB-2025

Webmin:

• 2.301 released.
• 2.300 EOL.

14-FEB-2025

Webmin:

• 2.300 released.
• 2.202 EOL.

11-FEB-2025

WordPress:

• 6.7.2 released.
• 6.7.1 EOL.

03-FEB-2025

TeamCity 2024.12.2 released.

23-JAN-2025

Apache:

• 2.4.63 released.
• 2.4.62 end-of-life.

17-JAN-2025

TeamCity 2024.12.1 released.

31-DEC-2024

OpenSuse 15.5 end-of-life.

12-DEC-2024

Web Application Security – Assessment weights and finding grades. See evaluation for details.

05-DEC-2024

TeamCity:

• 2024.12 released.
• 2024.03.3 end-of-life.
• 2024.03.2 end-of-life.
• 2024.03.1 end-of-life.
• 2024.03 end-of-life.

23-NOV-2024

Fedora 39 end-of-life.

21-NOV-2024

WordPress:

• 6.7 EOL.
• 6.7.1 released.

12-NOV-2024

WordPress 6.7 released.

01-NOV-2024

Windows – Server 2025 released.

29-OCT-2024

Fedora 41 released.

22-OCT-2024

ServiceNow – Xanadu supported.

15-OCT-2024

TLS/SSL Certificates – Certain Entrust-signed certificates no longer trusted by Google and Mozilla.

10-OCT-2024

Ubuntu 24.10 released.

01-OCT-2024

TeamCity 2024.07.3 released.

11-SEP-2024

Data Feeds and Historical Analytics – Expanded available data.

29-AUG-2024

TeamCity 2024.07.2 released.

12-AUG-2024

Webmin:

• 2.202 released.
• 2.201 EOL.

06-AUG-2024

TeamCity 2024.07.1 released.

19-SEP-2024

OpenSSH:

• 9.9 released.
• 9.8 EOL.

25-JUL-2024

Groma Target Hostname List Expansion (v2)

23-JUL-2024

Webmin:

• 2.201 released.
• 2.200 EOL.

WordPress:

• 6.6.1 released.
• 6.6 EOL.

21-JUL-2024

Webmin:

• 2.200 released.
• 2.111 EOL.

18-JUL-2024

TeamCity:

• 2024.07 released.
• 2023.11 to 2023.11.4 EOL.

17-JUL-2024

Apache:

• 2.4.62 released.
• 2.4.61 EOL.

16-JUL-2024

WordPress 6.6 released.

10-JUL-2024

Ratings Algorithm Update – The Patching Cadence lifetime is decreased from 300 to 90 days.

03-JUL-2024

Apache:

• 2.4.61 released.
• 2.4.60 EOL.

01-JUL-2024

Apache 2.4.59 EOL.

OpenSSH:

• 9.7 EOL.
• 9.8 released.

27-JUN-2024

TeamCity 2024.03.3 released.

26-JUN-2024

SUSE Linux Enterprise Server 15 SP6 released.

24-JUN-2024

WordPress:

• 6.5.5 released.
• 6.5.4 EOL.
• 6.4.5 released.
• 6.4.4 EOL.
• 6.3.5 released.
• 6.3.4 EOL.
• 6.2.6 released.
• 6.2.5 EOL.
• 6.1.7 released.
• 6.1.6 EOL.
• 6.0.9 released.
• 6.0.8 EOL.
• 5.9.10 released.
• 5.9.9 EOL.
• 5.8.10 released.
• 5.8.9 EOL.
• 5.7.12 released.
• 5.7.11 EOL.
• 5.6.14 released.
• 5.6.13 EOL 24-JUN-2024
• 5.5.15 released.
• 5.5.14 EOL 24-JUN-2024
• 5.4.16 released.
• 5.4.15 EOL.
• 5.3.18 released.
• 5.3.17 EOL 24-JUN-2024
• 5.2.21 released.
• 5.2.20 EOL.
• 5.1.19 released.
• 5.1.18 EOL.
• 5.0.22 released.
• 5.0.21 EOL.
• 4.9.25 released.
• 4.9.26 EOL.
• 4.8.25 released.
• 4.8.24 EOL.
• 4.7.29 released.
• 4.7.28 EOL.
• 4.6.29 released.
• 4.6.28 EOL.
• 4.5.32 released.
• 4.5.31 EOL.
• 4.4.33 released.
• 4.4.32 EOL.
• 4.3.34 released.
• 4.3.33 EOL.
• 4.2.38 released.
• 4.2.37 EOL.
• 4.1.41 released.
• 4.1.40 EOL.

10-JUN-2024

OpenSUSE 15.6 released.

07-JUN-2024

ServiceNow – Washington supported.

05-JUN-2024

WordPress:

• 6.5.3 EOL.
• 6.5.4 released.

29-MAY-2024

• TLS/SSL Certificates – Use the Certificate Serial Number as the finding identifier.
• TeamCity 2024.03.2 released.

07-MAY-2024

WordPress:

• 6.5.3 released.
• 6.5.2 EOL.

09-APR-2024

WordPress:

• 6.4.4 released.
• 6.4.3 EOL.
• 6.3.4 released.
• 6.3.3 EOL.
• 6.2.5 released.
• 6.2.4 EOL.
• 6.1.6 released.
• 6.1.5 EOL.
• 6.0.8 released.
• 6.0.7 EOL.

27-MAR-2024

TeamCity:

• 2024.01 released.
• 2023.05 EOL.

11-MAR-2024

OpenSSH:

• 9.7 released.
• 9.6 EOL.

09-MAR-2024

TeamCity 2023.11.4 released.

08-FEB-2024

Infrastructure Data Quality & Collection:

• Increased asset discovery capability. We believe that our expanded ability to discover hostnames and IPs would be a contributing factor to a steady increase in findings.
• Improved data quality: ul
• Improved internet scanning techniques to support not only the Web Application Header and TLS/SSL Configuration risk vectors, but also the rest of the Diligence risk vectors, including the Open Ports, Server Software, TLS/SSL Certificates, and Patching Cadence.
• TLS/SSL Configuration - Support for different certificate versions and ciphers.

31-JAN-2024

SUSE Linux Enterprise Server 15 SP1 EOL.

30-JAN-2024

TeamCity 2023.11.3 released.

29-JAN-2024

Groma Target Hostname List Expansion (v1)

25-JAN-2024

Ubuntu 23.04 "Lunar Lobster" EOL.

18-JAN-2024

TeamCity 2023.11.2 released.

31-DEC-2023

OpenSUSE 15.4 EOL.

18-DEC-2023

OpenSSH:

• 9.6 released.
• 9.5 EOL.

12-DEC-2023

ServiceNow – Vancouver supported.

28-NOV-2023

TeamCity:

• 2023.11 released.
• 2022.10.3 EOL.
• 2022.10.2 EOL.
• 2022.10.1 EOL.
• 2022.10 EOL.

21-NOV-2023

Delegated Security Controls:

• Findings in assets that are owned by the organization but are partially or fully controlled by their customers are excluded from the organization’s Bitsight rating.
• Findings in assets identified as not having delegated controls (i.e., assets for which the company has full responsibility over security controls) will keep impacting the corresponding risk vector grade.

09-NOV-2023

WordPress:

• 6.4.1 released.
• 6.4 EOL.

08-NOV-2023

Webmin:

• 2.105 released.
• 2.104 EOL.

07-NOV-2023

Fedora 39 released.

WordPress:

• 6.4 released.
• 6.3.2 EOL.

01-NOV-2023

• Appweb 9 released.
• Appweb 8 EOL.

31-OCT-2023

Mobile Application Analysis – Android and iOS tests, version 2023.

30-OCT-2023

Vulnerability Intelligence – A Bitsight cybersecurity data solutions product. Data is delivered (.csv) via a Bitsight-developed tool that automatically delivers files according to each configuration and purchased product.

19-OCT-2023

Apache:

• 2.4.58 released.
• 2.4.57 EOL.

16-OCT-2023

Webmin:

• 2.104 released.
• 2.103 EOL.

12-OCT-2023

Ubuntu 23.10 “Mantic Minotaur” released.

WordPress:

• 6.3.2 released.
• 6.3.1 EOL.

08-OCT-2023

Webmin:

• 2.103 released.
• 2.102 EOL.

04-OCT-2023

OpenSSH:

• 9.5 released.
• 9.4 EOL.

18-SEP-2023

TeamCity 2023.05.4 released.

07-SEP-2023

• OpenSSH 9.4 released.
• Web Application Security – Released.

29-AUG-2023

WordPress:

• 6.3.1 released.
• 6.3 end-of-life.

24-AUG-2023

Supported Server Software:

• TeamCity 2023.05.3 released.
• Webmin 2.101 end-of-life.

10-AUG-2023

OpenSSH 9.3 end-of-life.

08-AUG-2023

Webmin 2.100 end-of-life.

WordPress:

• 6.3 released.
• 6.2.2 end-of-life.

07-AUG-2023

Webmin 2.101 released.

25-JUL-2023

TeamCity 2023.05.2 released.

23-JUL-2023

Webmin:

• 2.102 released.
• 2.021 end-of-life.

20-JUL-2023

Supported Operating Systems: Ubuntu 22.10 end-of-life.

11-JUL-2023

TeamCity 2023.05.1 released.