WithSecure incident
WithSecure Elements might incorrectly show "Malware Protection disabled" after reboot
WithSecure experienced a minor incident on February 26, 2026 affecting Endpoint Protection, lasting 7d. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Feb 26, 2026, 01:43 PM UTC
We are investigating an issue where WithSecure Elements agent might show randomly that Malware Protection is disabled after reboot. We have confirmed that this issue is cosmetic and clients/servers remain protected. We are working on a fix.
- identified Feb 27, 2026, 01:13 PM UTC
We have identified the issue and are working on a fix. Please note: this issue is cosmetic and clients/servers remain protected.
- identified Mar 03, 2026, 01:29 PM UTC
We continue working on a fix for the issue.
- identified Mar 04, 2026, 07:49 AM UTC
We have created a fix, which is currently in testing. We will notify, when the fix is released.
- identified Mar 05, 2026, 08:53 AM UTC
We continue testing the fix and hope to release it today, but no later than tomorrow (6th of March)
- resolved Mar 05, 2026, 01:58 PM UTC
We have published a hotfix that fixes the issue. The hotfix is automatically downloaded and applied, no action is required from administrators. Additional information for administrators: The Hotfix ID is 76, Description: Scanning platform initial state calculation and Firewall initial state