Rumble 1.14 UX Updates, Security, and mDNS!

|
Updated

Rumble v1.14 #

A new release of Rumble is live with user interface updates, security improvements, and a host of new fingerprints that include mDNS replies. Read on for the full list of changes since v1.13.

User Experience Updates #

  • Autocompletion is now available for Inventory search terms and the keywords have been revised to be more consistent. The older keywords will be gradually phased out as the search interface evolves.

  • Autocompletion is now available for asset tags using the top 50 most-used tags within the organization. This works from the asset details page as well as when applying tags from the Inventory view. The top 50 asset tags are now also available in the dashboard as a new column.

  • Subnet tags that apply to a given asset are now displayed in the Inventory table view, alongside the asset-specific tags. In addition, the asset details page now shows the subnet tags (if any) in the upper left section. The asset details page also received a light update to improve readability.

  • Breadcrumbs at the top of each page are now clickable and the page titles have been simplified.

  • The Subnet Grid report is now faster and supports RTT, TTL, and Age color modes.

  • CSV exports of the Services Inventory are now significantly faster.

  • Scan speed is now listed in the task details page.

Security Improvements #

The Account link in the sidebar now directs superusers to an Account Settings page with new security-related settings:

  • Require multi-factor authentication for all users will force all users to enable a MFA security token in order to use the platform.

  • Disable support access to your account can prevent Rumble support staff from having access to your account via our internal support console.

  • Maximum idle session time lets you force web sessions to be logged out if there has been no activity for a certain number of minutes.

  • Maximum login duration lets you force users to re-authenticate at least once every so many hours.

These options apply to all organizations and users associated with your billing account.

Agent communication to the Rumble cloud is now limited to two static IPv4 addresses (13.248.161.247, 76.223.34.198) and two static IPv6 addresses (2600:9000:a415:cd87:fbe5:476a:3533:69f2, 2600:9000:a716:ee91:85f9:3c9:48c9:59b9) using a single hostname (console.rumble.com). This simplifies firewall rules for networks with strict egress policies.

In addition to the changes above, the platform received a number of security fixes and additional hardening as part of our most recent security audit.

Fingerprints & Scanning #

  • mDNS (Bonjour/ZeroConf) fingerprint support has been expanded to cover additional response types. New mDNS fingerprints include coverage for recently released Apple hardware and many popular HomeKit devices.

  • The scan engine is now more reliable on Macintosh computers running macOS 11 Big Sur.

  • SMB fingerprinting has been improved for devices that support both SMBv1 and SMBv2.

  • Rumble now avoids even more bogus service replies automatically.

  • BACnet scans now support the use of multiple port numbers.

Release Notes #

The complete release notes for v1.14.0 can be found in our documentation.

If you haven't had a chance to try Rumble before, or would like to play with the new features, sign up for a free trial and let us know what you think!

Written by HD Moore

HD Moore is the founder and CEO of runZero. Previously, he founded the Metasploit Project and served as the main developer of the Metasploit Framework, which is the world's most widely used penetration testing framework.

More about HD Moore
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Explore more runZero

Product
Announcing runZero 4.9: Unmask attack paths and segmentation gaps with advanced topology and deep OT device intelligence
With runZero 4.9, visualize attacker lateral movement, harden network choke points, gain deep OT telemetry to secure converged environments, and more.
Webcasts
runZero Hour, Ep. 30: Segmentation - stop assuming & start verifying with runZero 4.9
See runZero 4.9 in action! Join HD Moore and Tod Beardsley to learn how interactive attack path mapping and advanced OT intelligence expose hidden...
Product Videos
runZero 4.9: Advanced topology, attack path mapping, & deep OT intelligence
With runZero 4.9, visualize attacker lateral movement, harden network choke points, gain deep OT telemetry to secure converged environments, and more.
runZero Perspective
Dawn of the apex agentic adversary
When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...
Webcasts
runZero Hour, Ep. 31: The New Rules of Risk: EPSS v5 and Agentic Adversaries
In this episode, learn how your security team can use EPSS v5 to inform daily risk decisions in a world increasingly targeted by the apex agentic...
Webcasts
Beyond the Zero-Day: Mapping the network attackers actually see
Breaches are inevitable. Learn from HD Moore how attackers exploit the seams between IT, IoT, and OT networks — and how to fix the segmentation...
Podcasts
Risky Biz Interview: Navigating the AI vibe shift with HD Moore
runZero Founder and CEO HD Moore drops by in this week's Risky Biz sponsor interview to talk about the concerning AI vibe shift and what to do...
Podcasts
From two weeks to three days: The KEV deadline debate
Former CISA insider Todd Beardsley joins Greg to reveal what it takes to land on the KEV catalog and why ultra-short patching deadlines might...

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.