Nucleus Product Update 3.1

You can access the Nucleus change log to view the complete, unedited version of release updates posted each week. Select the subscribe to the RSS feed option on this page if you would like to receive weekly change log updates. This new Nucleus Product Update is intended to fully summarize and outline those weekly changes for you, with more details, each month. The product updates include all the following features and improvements: 

Product Improvements (Performance, Experience, & Functionality) 

• Added Invicti/Netsparker tags as additional metadata, which can now be used in automation.  
• Improved speed of the Active Vulnerabilities details page. 
• Updated API documentation for PUT asset endpoint to include all supported fields. 
• Added the asset id in the response for the following endpoint: GET /projects/{project id}/findings/details/{finding number}   
• Improved the worker queue so that jobs run more quickly 
• Added the ability to add comments to findings via the PUT projects/{project_id}/findings API endpoint. 
• Improved scan ingestion for some connectors to allow for downloading of scan files whilst other files are being ingested into the project. 

Reporting Improvements 

• Added source column to the asset management export.    

Integration Improvements 

Checkmarx: 

• Improved the Checkmarx scan file download job to handle situations where Checkmarx’s report generation silently failed and never returned a report. 

Invicti/Netsparker: 

• Updated the Invicti/Netsparker connector to ingest data from Acunetix 360 after their headers changed.   

Prisma Cloud: 

• Sped up ingestion for the Prisma Cloud Connector. 
• The Prisma Cloud connector has been rewritten to implement faster downloading and ingestion of scans and improve the reliability of additional metadata. This improvement also adds significantly more metadata. 

Qualys: 

• Updated the Qualys connector to ignore queued scans when auto importing.   

Rapid7 

• Updated Rapid7 ingestion to align with changes made to their API. 
• Added the ability to select specific site scans when ingesting from Rapid7. 
• Added the ability to ingest additional operating system details from Rapid 7, which is also available as additional metadata 
• The Rapid7 InsightVM connector now stores and performs asset matching using AWS EC2 metadata. This change also includes removing connector generated reports automatically. 

ServiceNow: 

• Improved speed of the asset sync in the ServiceNow connector. 

Snyk: 

• Added additional metadata in the SNYK Connector around projects and targets by organization ID. 

Tenable.io: 

• Major Tenable.IO rework for upgraded functionality, better performance, and additional metadata.  
• Upgraded functionality: Added better tracking of dynamic assets over time and more reliable asset matching across cloud environments.  
• Better performance: Significant speed up for scan file downloads and ingestion.  
• Additional metadata: Added more asset metadata from Tenable.io, now available in asset management and automation. We have made performance improvements to the way that asset metadata is ingested for Tenable.io as well. 

Bug Fixes 

• Fixed an issue where finding processing rules could not run manually if finding criteria was set to “both” or “compliance.”  
• Fixed an issue where tags in the interface were not spaced correctly.    
• Fixed an issue with Acunetix failing to ingest in certain scenarios.  
• Fixed an issue with false booleans not displaying in the finding reference field. 
• Fixed an issue where InsightVM was not ingesting new scans. 
• Fixed an issue where hyphens in metadata did not allow rules to execute. 
• Fixed an issue where vulnerabilities in an active state were showing in the resolved page in certain edge cases.  
• Fixed an issue where the Executive Group Comparison report was not saving.  
• Fixed an issue where unrelated assets were being combined.  
• Fixed an issue where scheduled reports were losing saved filters after being edited.  
• Fixed an issue where .bmp files were not uploading correctly in the evidence section.  
• Updated the GET assets API endpoints to return an empty array if the asset_info is empty, to better align with API documentation 
• Fixed an issue where the Doesn’t Contain filter in the Asset Management page was not showing assets with no source.  
• Fixed an issue in the Crowdstrike connector where we were not ingesting additional metadata. 
• Fixed an issue where ServiceNow asset ingestion failed in limited scenarios. 
• Fixed an issue where asset group tags were showing as blank in the Asset Management page in certain scenarios. 
• Fixed an issue in asset processing automation where certain rules had the ability to run out of order in certain cases.  
• Fixed an issue where mitigated asset note findings were remaining in a mitigated state even though they were active in subsequent scans.  
• Fixed an issue where ingesting a json scan file with container image data was adding certain container image attributes to unrelated container image data in subsequent scan files.  
• Fixed an issue where some scheduled Nessus Pro jobs were failing to ingest new scans.