N-sight Mac Agent v3.10.2- General Availability

We’re releasing a new version of the N-sight Mac agent, version 3.10.2, as a General Availability today. This release includes security improvements.

Posted in N-sight | Comments Off on N-sight Mac Agent v3.10.2- General Availability

Introducing AI Services visibility in Assets View

Know What AI Is Running Across Every Managed Endpoint

AI tools are being installed across managed environments faster than IT teams can inventory them. N-central and N-sight now detect and classify AI tools as a distinct category, directly in Assets View, with no new agent and no new deployment.

  • Employees install ChatGPT desktop apps, Copilot and Claude IDE extensions, browser plug-ins, and local models — often without approval or governance.
  • IT has no visibility into what’s running.
  • Proprietary data, customer records, and source code can flow into tools entirely outside your control.

What’s new

A continuously updated AI inventory.

The existing endpoint agent now identifies every AI tool installed across managed devices and classifies each one by category (LLM, code assistant, image generation, transcription, and more), vendor, and model family. AI is treated as its own detection category.

  • LLMs, code assistants, image generators, transcription tools, and more are identified and classified automatically.
  • Install state is tracked over time, not as a point-in-time snapshot. You can see when tools appeared and how usage is shifting across your environment.

Visible where you already work.

  • A new AI Services column in Assets View shows which devices are running which AI tools at a glance.
  • A dedicated AI Services tab in Asset Details lets you drill into specifics: service name, vendor, detection method, process state, and file path.

Governed data across every surface.

  • AI signals are exposed through the GraphQL API, MCP Server, and N-zo, so your existing queries, automations, and AI-driven workflows can act on them immediately.
  • Same data, every surface, no manual export.

 

Why this matters now

Auditors are starting to ask for AI inventories. Cyber insurers are adding AI governance questions to renewal applications. Compliance frameworks increasingly expect evidence of AI oversight.

This gives you the answer: a structured, audit-ready record of what AI is running, where, and on which devices.

  • Enforce acceptable-use policies with data, not assumptions.
  • Meet data-residency and compliance obligations with evidence you can produce on demand.
  • Prove exactly what AI is running when auditors, insurers, or leadership ask.

What’s ahead

This release covers AI tools installed on endpoints: desktop apps, IDE plugins, browser extensions, CLIs, and portable executables.

A significant portion of AI usage also happens over the network through browser-based services and API-level access that endpoint-only discovery does not reach. Future releases will expand detection in this direction.

Posted in N-central, N-sight | Tagged | Comments Off on Introducing AI Services visibility in Assets View

Patch Management Engine (PME) 2.13.16 – General Availability

A new version of the Patch Management Engine is being made available to N-central and N-sight assets. This release focuses on improving patch scan data quality, delta-logic handling for N-sight devices, and network fallback resilience when connected probes are inaccessible.

Improvements Included

Improved patch scan data quality and reliability: Prioritises results from the most recent scan and reduces reliance on PME’s cached metadata, improving the quality and reliability of patch data returned to the server. (PMCM-11358)

Improved delta-logic handling for N-sight devices: Enhances how delta-logic is applied across all N-sight devices, improving patch detection efficiency and consistency. (PMCM-11721)

Improved network fallback resilience for patch operations: Enhances fallback to direct internet access when a connected probe is inaccessible, improving patch download reliability in environments with intermittent probe connectivity. (PMCM-652)

Version Details

Patch Management Engine: 2.13.16.5688 MSP Platform: 2.13.16.5133 Diagnostics: 2.14.0.5025 Third-Party Patch Engine: 2.13.16.5047

Security & Integrity Information

To assist customers using endpoint protection or application control software, hashes for the PME installer and associated components are provided below.

FileSHA-256 Hash
PMESetup.exeDDC7EC3B287B6AFA0ADD41777A3E147CB4949A06DA0A5EEB171F600BCF79F2C9
FileCacheServiceAgentSetup.exe070DB72F621ED3A9AEE4468D0BF215D1621B16E543113677EECED852A14EECB7
RequestHandlerAgentSetup.exe98C5A7CE4ADDD61666E6A0BF8F7E2C55F096418E15C80890380C8F290B752DD2
PME unins000.exe5639211E43B8B9B3A7F44D7CB5CC1FD0A518E3E1173ADE2CD2CD77133AE35532
RequestHandlerAgent unins000.exe434AA36F53BC430295D04969C7983A3AEE844094A2AF2C77843969B4BFB3635C
FileCacheServiceAgent unins000.exe086DF895AC3E1D00E948F19FA6CDE8ADDE7032D00AED185701FD05801314D8F9
%TEMP%\is-*\pmesetup.tmp68293F932988E0C25680D8CF86EF3BDD42C5422CCCD192436F52186EDA4B3DE1
%TEMP%\is-*\FileCacheServiceAgentSetup.tmp1E0A3C6151AC9FD3A887B9BC2D9DC7E22729083F4298FC52F9264B30A9A84E5B
%TEMP%\is-*\RequestHandlerAgentSetup.tmpF204A544108489EF02BC0DCAEE5C5D161CB67DFFFA693EDBD4C90BB23813A193
ThirdPartyPatch_2.13.15.5047.exeB0EF21FFDEF99FF874B81318BC71059641F2E820B1349118962663BE5C86DF99
Posted in N-central, N-sight | Comments Off on Patch Management Engine (PME) 2.13.16 – General Availability

N-central Analytics: Report logos

Introducing report logos in N-central Analytics

We’re excited to announce that you can now include your company logo in Analytics reports, so the reports you share with customers clearly reflect your business and the service you deliver.

How does it work?

Upload and save the logo in the new Analytics settings space.

Any PDF or XLSX exports from the reports tab will automatically include the logo in the top-right corner.

How do I get started?

Make sure you are running N-central version 2026.2 and use a role with the Analytics ‘Manage Reports’ permission.

Learn more about the requirements of the logo file, setup, and behaviour of the feature in our online help.

Posted in N-central | Tagged , | Comments Off on N-central Analytics: Report logos

Shadow AI Visibility: Detect Unauthorised AI Tool Usage Across Your Environment (Release Date: June 9)

Adlumin now surfaces AI tool usage by processes, endpoints, and users; powered by existing technology already protecting your environment.

AI tools are spreading across organisations faster than security and compliance teams can track them. Employees reach for ChatGPT, Copilot, Gemini, Claude and dozens of other AI services to accelerate their work, often without approval, governance, or any visibility from IT. This is Shadow AI: unsanctioned, unmonitored, and increasingly risky.

Adlumin’s new Shadow AI Visibility capability gives security teams a continuously updated inventory of which AI tools are being used, on which machines, by which users, and through which processes; so you can enforce acceptable-use policies before sensitive data leaves the organisation and produce the user-level, machine-level compliance evidence auditors and regulators demand.

Continue reading
Posted in Adlumin | Comments Off on Shadow AI Visibility: Detect Unauthorised AI Tool Usage Across Your Environment (Release Date: June 9)

Release Take Control – Integrated Windows Agent 7.50.30

This release includes security updates and important stability fixes for N-central and N-sight Integrated Take Control Agent.

Improvements

  • Updated OpenSSL to version 3.5.6
  • Updated libcurl to version 8.20.0

Fixes

  • Fixed an issue where direct agent commands could fail after a gateway reassignment.
  • Resolved a System Health monitoring issue that could cause the component to become unavailable.
  • Fixed a proxy-related issue where some devices could incorrectly appear offline after updating.

This release improves security, connectivity, and overall agent reliability.

Posted in Take Control | Comments Off on Release Take Control – Integrated Windows Agent 7.50.30

Release Take Control – Standalone Windows Agent 7.50.30

This release includes security updates and important stability fixes.

Improvements

  • Updated OpenSSL to version 3.5.6
  • Updated libcurl to version 8.20.0

Fixes

  • Fixed an issue where direct agent commands could fail after a gateway reassignment.
  • Resolved a System Health monitoring issue that could cause the component to become unavailable.
  • Fixed a proxy-related issue where some devices could incorrectly appear offline after updating.

This release improves security, connectivity, and overall agent reliability.

Posted in Take Control | Comments Off on Release Take Control – Standalone Windows Agent 7.50.30

What’s New in Cove 26.5 – HaloPSA Integration GA

In Cove 26.5, our integration with HaloPSA is now generally available for all customers. This native integration is designed to streamline ticketing workflows by auto-creating tickets for detected backup failures directly in your HaloPSA environment.

Continue reading
Posted in Cove Data Protection, Cove Data Protection release notes | Tagged , , , | Comments Off on What’s New in Cove 26.5 – HaloPSA Integration GA

Patch Management Engine (PME) 2.13.15 – General Availability

A new version of the Patch Management Engine is being made available to N-central and N-sight assets. This release focuses on improving patch reliability, cache handling, End-of-Support filtering accuracy, security posture, and overall resilience of patch detection and installation workflows.

Improvements Included

  • Improved Extended Security Update (ESU) handling for Windows devices: Improves End-of-Support filtering so that Extended Security Update (ESU) licensing is consistently recognised across supported Windows operating systems, ensuring eligible devices continue to receive applicable updates. (PMCM-11363)
  • Improved cache integrity validation for patch distribution: Enhances CRC validation when patches are moved between cache locations, improving resilience and reducing the likelihood of patch corruption or transfer inconsistencies. (PMCM-11448)
  • Improved patch reporting accuracy for browser updates: Resolves an issue where certain browser patches could display incorrect installation timeline information, improving reporting consistency and avoiding impossible installation dates. (PMCM-11495)
  • Improved security posture of Third-Party Patch components: Removes bundled 7-Zip binaries from Third-Party Patch components, reducing security exposure and improving the overall security posture of the patching stack. (PMCM-11496)
  • Improved .NET patch uninstall handling: Resolves an issue where certain .NET patches using newer Microsoft naming conventions could fail during uninstall operations when processed via DISM. (PMCM-11521)
Continue reading
Posted in N-central, N-sight | Comments Off on Patch Management Engine (PME) 2.13.15 – General Availability

Advisory: SentinelOne Agent Flagging Older Agent Files as Malicious (Post 25.2 Upgrade)

We’re aware of an issue impacting environments where the SentinelOne agent has been upgraded from version 25.1 to 25.2.

In some cases, the updated SentinelOne agent (v25.2) is incorrectly identifying components of the older agent as malicious, specifically flagging them as ransomware activity.

This is a false positive and is not indicative of an actual threat in the environment.

  • Alerts may be generated unnecessarily, creating noise for SOC and operations teams
  • In certain scenarios, this could trigger automated responses depending on policy configuration

Current status

A fix for this behaviour has been identified and is planned for an upcoming SentinelOne agent release.

Recommended workaround

Until the fix is available, we recommend implementing a policy-level override to suppress these false positive detections.

  • Apply the recommended policy exception to prevent alert creation for these specific detections
  • Ensure this is scoped appropriately to avoid impacting broader detection coverage

👉 Refer to this article for step-by-step guidance on creating the policy override:https://me.n-able.com/s/article/SentinelOne-Agent-causing-Boot-Loop-during-Upgrade-from-Version-25-1-to-25-2

What you should do

  • If you are running agent version 25.2 and observe ransomware alerts linked to SentinelOne files, treat these as false positives in this context
  • Apply the recommended policy exception as a temporary mitigation
  • Continue to monitor release notes for the upcoming fix

If you run into issues or need help applying the workaround, please reach out to Support.

Posted in EDR, N-central, N-sight | Comments Off on Advisory: SentinelOne Agent Flagging Older Agent Files as Malicious (Post 25.2 Upgrade)