WithSecure incident
WithSecure Elements might incorrectly show "Malware Protection disabled" after reboot
Resolved after 7 days, affecting Endpoint Protection, on February 26, 2026.
We have published a hotfix that fixes the issue. The hotfix is automatically downloaded and applied, no action is required from administrators. Additional information for administrators: The Hotfix ID is 76, Description: Scanning platform initial state calculation and Firewall initial state
Affected components
Update timeline
- investigating Feb 26, 2026, 01:43 PM UTC
We are investigating an issue where WithSecure Elements agent might show randomly that Malware Protection is disabled after reboot. We have confirmed that this issue is cosmetic and clients/servers remain protected. We are working on a fix.
- identified Feb 27, 2026, 01:13 PM UTC
We have identified the issue and are working on a fix. Please note: this issue is cosmetic and clients/servers remain protected.
- identified Mar 03, 2026, 01:29 PM UTC
We continue working on a fix for the issue.
- identified Mar 04, 2026, 07:49 AM UTC
We have created a fix, which is currently in testing. We will notify, when the fix is released.
- identified Mar 05, 2026, 08:53 AM UTC
We continue testing the fix and hope to release it today, but no later than tomorrow (6th of March)
- resolved Mar 05, 2026, 01:58 PM UTC
We have published a hotfix that fixes the issue. The hotfix is automatically downloaded and applied, no action is required from administrators. Additional information for administrators: The Hotfix ID is 76, Description: Scanning platform initial state calculation and Firewall initial state
Your product runs on more than WithSecure
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.