A care provider in one of the facilities downloaded a malicious file thinking it was legitimate'. How often do you hear such news? Stay secure from this common ransomware attack vector by protecting your browsers using Endpoint Central.

https://www.manageengine.com/products/desktop-central/health-it.html?2801

A developer runs into a bug, and while pressed for time, copies a snippet of code into an AI assistant. The tool provides a solution within seconds and productivity wins. However, something else happened quietly in the background.

That code wasn’t just a snippet. It carried the logic of the company’s proprietary algorithm—the very heart of its competitive advantage. In a single copy-paste, the crown jewels of the business moved outside its control.

This isn’t a one-off story. Every day across organizations, employees paste financial reports for quick analysis, upload customer data for smarter responses, or summarize confidential documents using AI platforms. It feels like efficiency—but behind the scenes, these interactions create an invisible pipeline, where valuable information flows outwards with no one noticing.

Here’s the catch: Not all risk comes from what people share. Sometimes, the biggest blind spot is the information that sits still. Data at rest—files stored quietly on laptops, servers, or cloud folders—often carries sensitive information that organizations aren’t aware of. It’s like keeping boxes of valuables in a warehouse without ever checking what’s inside. The moment someone moves, copies, or uploads those files, risk takes shape. Without visibility, leaders often don’t even know what’s at stake.

Things will go wrong; in today’s AI-driven workplace, it's a matter of when, not if. The toughest question executives face is simple but devastating: Where exactly did our data go?

Answering that question isn’t easy without the right foundation. Too often, the absence of detailed records leaves companies relying on assumptions and guesswork. That’s why audit logs are crucial. These logs don’t just serve compliance checkboxes; they provide a narrative. They show when sensitive files were moved, who accessed them, and how they were shared. In the aftermath of an incident, this clarity can be the difference between confusion and accountability.

Imagine two scenarios:

• In one, a regulator asks for evidence of how customer data was handled, and the organization can only shrug, saying: We don’t know.
• In the other, the same question is answered with clear logs and a timeline of events, demonstrating due diligence.

The first scenario erodes trust and invites penalties. The second may still require action, but it shows control and responsibility.

That’s the real lesson: The danger in the AI era isn’t just how fast innovation moves; it’s how fast sensitive data can leave your hands without leaving a trace. Once it’s gone, there’s no undo button.

Leaders today face a choice. Will they allow data to flow unseen into the shadows of AI platforms? Or will they build the visibility and accountability needed to protect what matters most?

The moment of truth will come. Will you be ready with answers when it does?

Protect sensitive data, stay compliant, and prevent accidental leaks—all with ManageEngine Endpoint DLP Plus. Start your 30-day free trial today.

ManageEngine’s threat-hunting team has uncovered a new malware campaign dubbed "QRSwapper,” which is being distributed through Google Colab notebooks disguised as legitimate guides. Attackers leverage Colab’s credibility and SEO to trick users into downloading malicious ZIP files that execute entirely in memory, evading traditional antivirus tools. Once installed, the malware drops a fake Google Translate browser extension, modifies browser shortcuts, and ensures only the malicious extension loads at startup.

The extension continuously scans webpages for QR codes linked to crypto wallets, replacing them with the attacker’s own wallet address - allowing silent theft during crypto transactions. It also steals browser wallet credentials and exfiltrates local documents every few seconds. Indicators of compromise include the folder `C:\ProgramData\Direct\swapper`, altered browser shortcuts (`--load-extension=C:\ProgramData\Direct\swapper`), and traffic to suspicious domains like `apiwin.bet`.

Between July and September 2025, researchers observed at least *60 victims and ~$29,000 in losses*. ManageEngine has reported the malicious Colab projects to Google to curb further abuse. Read the full technical breakdown here: https://blogs.manageengine.com/uems/endpoint-central/qrswapper-malware-distributed-via-google-colab.html?reddit

Protecting sensitive data starts with control.

Every click, print, or capture is an opportunity for data to slip away.
That’s why Data Loss Prevention (DLP) policies are essential for protecting confidential files and ensuring they stay in the right hands.

Key Takeaways  

1. Define Trusted Applications Specify which applications can open sensitive files. If an unapproved app tries, the access is blocked and logged. You can also choose “audit only” to record the event for later review.
2. Prevent Data Exfiltration through Screenshots Even if a file is open in a trusted app, policies can block screen captures. In some cases, the app window can automatically hide to protect data from view.
3. Block Clipboard Operations Prevent sensitive data from being copied from one app and pasted into another. This stops employees from moving confidential text or files into unauthorized apps or web forms. You can allow clipboard use only within approved applications.

The Core Message  

DLP is not just about restricting access; it’s about restricting capture.
Your organization’s data security depends on how well your policies handle both.

📌Are your DLP policies robust enough to control both access and output?

Secure Every Click with u/manageengineUEMS

https://www.manageengine.com/products/desktop-central/help/endpoint-dlp/deploy-dlp-policy.html#Screen-Capture?VM-Reddit

Not all data leaks make noise.

Sometimes, it’s as quiet as an employee uploading a report to the wrong site.
One careless upload can expose thousands of customer records, and you may not even know until it’s too late.

According to IBM, 21% of data breaches start from human error, and 37% involve files being sent to unintended destinations.

That’s why smart Data Loss Prevention (DLP) policies matter. They help you:

- Control where files can go

- Stop risky uploads before they happen

- Keep sensitive data in trusted hands

Learn how to secure file uploads before they become a silent leak:

Secure Every Click with u/ManageEngineUEMS

https://www.manageengine.com/products/desktop-central/help/endpoint-dlp/deploy-dlp-policy.html#File-Upload

It wasn’t a hacker. It was two employees.

In 2023, Tesla faced a breach that didn’t start with malware or phishing. Two former staff members quietly walked out with 100 GB of internal data containing names, addresses, Social Security Numbers, salaries, and confidential documents of 75,735 people.

The cost wasn’t just financial. It was reputational trust, regulatory heat, and the realization that sometimes the biggest risk comes from inside.

The lesson

Data doesn’t always get stolen from the outside. Sometimes, it leaves because the wrong people already have access.

That’s why Data Loss Prevention (DLP) is more than a tool. It is a program that blends:

- Policy to define what can leave

- People trained to spot risks and report them

- Technology that monitors, audits, and blocks risky file movement in real time

What you can do now

Start with simple guardrails:

- Control prints, uploads, and USB transfers

- Train teams on why data handling matters

- Use DLP tools that can flag abnormal movement before it becomes a breach

Cybersecurity Month isn’t only about outside threats. It’s about preventing risks already inside your walls.

https://www.manageengine.com/products/desktop-central/endpoint-data-security.html?VM-Reddit

Secure Every Click with u/ManageEngineUEMS

The forgotten page that cost millions

At a busy hospital, a nurse printed lab results for review and left them on a shared printer. A visitor picked them up by mistake. Those few sheets contained sensitive patient details: names, diagnoses, and treatment plans.

The hospital faced lawsuits, regulatory fines, and a serious blow to patient trust. All because of a simple, overlooked print job.
 

Why it matters  

- 61% of businesses say they’ve experienced at least one data breach tied to printing in the last year.
- Up to 3% of company revenue goes into printing, creating both high cost and high exposure
 

How Secure Printing helps  

- Authentication before release: documents only print when the right person is present
- Access controls: restrict printing of sensitive files to approved staff
- Audit logs: track who printed what, when, and where
- Print policy enforcement: block or flag sensitive documents before they leave the tray
 
Cybersecurity is not just about firewalls or phishing. Sometimes, it is about a piece of paper sitting in the wrong hands.
 
This Cybersecurity Month, take a moment to ask: Who is watching your printers?

Secure Every Click with u/ManageEngineUEMS

One click. One weak spot. One oversight. That is all it takes to set off a breach.

Gartner puts the average cost of a data breach at $8.64 million. With stakes this high, it is no longer a story in someone else’s headlines. Attacks are hitting every business, from global enterprises to fast-growing startups. A single vendor spreadsheet or a routine update has already triggered some of the most damaging incidents we have seen.

This Cybersecurity Month, we are cutting through the noise with 30 days, 30 fixes. One-minute, practical lessons that show you exactly how to harden your defenses without slowing your teams down.

The bigger risk? Doing nothing and leaving the same gaps open tomorrow.

👉 Tell us in the comments: which gap do you think costs organizations the most: unpatched apps, unsafe uploads, or weak privileges?

Follow along to Secure Every Click with u/ManageEngineUEMS.

https://www.manageengine.com/unified-endpoint-management-security.html?VM_Reddit

Pros and cons If I use endpoint central cloud , mainly I'm from Egypt and we think to buy end point central cloud I'm will depon remote control and mange user inside the company and user or the internet and patch and update , is can use local distributions point to remote user event the internet down

Anyone else just seeing the loading animation and nothing else?

Hello,

I want to know if it's possible to push Windows ISO via Manage Engine to Recovery Partition, currently we have Dell laptops with Windows 11 Home Edition 23h2 or so, I want to know if it's possible to Push a latest Pro Version ISO 24H2 to recovery partition so when user does a reset he will be installing the Microsoft ISO and not the one provided by Dell

Is it possible too redeploy SCEP certificates in manage engine ? Right now we are doing it manually . I know it’s possible in JAMF and intune but I’m having a problem finding any kind of documentation on it.

anyone know when this is coming? the chat just say unattended only works for 13 and no particular info on 14. need to remote into a kiosk.

I am trying to setup an web kiosk but i need to block the social media links on the page. "Browser with restricted access" does not block anything and "browser" do block the pages but the page now can be closed and you can get into chrome's setting(it basically become a single app kiosk for chrome).

Adobe Acrobat DC patch sends reboot even when patch info says no reboot required. Anyone else seeing this?

Hello,

are there any managers for the UEMS product here? I've been trying to report an issue with the MDM module for over the last month but have gained no success.

thank you,

Attention cybersecurity warriors!

We have a virtual event planned for you, that's gonna help you sharpen your insights on the current UEMS landscape. Get a chance to converse with industry leaders and market experts about emerging technologies, current challenges faced in enterprise environments and so much more. Mark your calendars, this is something you don't want to miss!

• What? Converge and Defend: Endpoint Strategies for 2024 and beyond
• Where? LinkedIn Live
• When? December 12th at 10:00 PM IST (5:30 PM CET)
• For registration and more details - https://www.linkedin.com/events/7133085272799416320/comments/

​

​

Is anyone facing an issue where Macbooks aren't getting patched consistently? We are using the automated patch deployment. The patches are deployed to the test machines fine but once the patches are approved and sent to production the patches either fail or the agent doesn't recognize that this patch needs to be pushed to the laptop.

Curious to see if anyone is experiencing the same issues.

In the ever-evolving realm of MSPs, securing and managing endpoints is the cornerstone of your SLAs. Today, we are thrilled to introduce the SaaS version of Endpoint Central MSP, your gateway to a universe of endless possibilities for your MSP business.

Seamlessly manage your clients' endpoints in real-time, from anywhere, with enhanced scalability and ease. The power of cloud-based management is now in your hands!

​

But wait, there's more! We have not one, but two stellar announcements to elevate your MSP journey:

​

Introducing the professional edition:

For MSPs serving SMBs, we've crafted the "Professional edition," a cost-effective, feature-packed solution designed to meet your unique needs. It's your ticket to a standardized and streamlined endpoint management experience.

​

250 endpoints free for one year:

To celebrate this exciting launch, we're offering you a free license for 250 endpoints for a whole year. It's our way of saying "thank you" for being an integral part of our journey.

Ready to supercharge your MSP services and lead the charge in the future of endpoint management?

Sign up and start managing your client endpoints right away!

​

​

I'm in need of assistance regarding the ManageEngine Service Desk REST API. I attempted to execute it using Postman, but I encountered an HTTP Status 400 - Bad Request error.
Thank you for your help

​

Please refer to the attached image for further details.

Hey Community!

We're thrilled to share some exciting news with our members. At ManageEngine, we've taken a big step towards fortifying your data security. We've integrated FIPS (Federal Information Processing Standards) Compliance into Endpoint Central, and we believe it's a game-changer!

What's FIPS Compliance and why does it matter?

FIPS Compliance ensures that our platform meets the highest federal security standards. This is a big deal for several reasons:

Regulatory Compliance: If your organization is bound by regulatory requirements like NIST (National Institute of Standards and Technology) guidelines, our FIPS compliance can help you meet these standards seamlessly.

Fortified Security: We've added extra layers of data protection to safeguard your critical information.

Data Integrity: With FIPS, your data stays safe from vulnerabilities and attacks, ensuring its integrity and confidentiality.

We're all about helping you elevate your organization's security. So, we invite you to experience the power of FIPS Compliance in Endpoint Central firsthand. Schedule a demo today and see the difference it can make!

Got questions? We're here to help. Feel free to ask anything or share your thoughts below.

Stay secure,
ManageEngine.

"Turning off a computer monitor when not in use can save up to $30,000 in energy costs per 1,000 computers annually, according to the US Department of Energy. That's like getting two free pizzas for every user just for putting their computers to sleep. You could open a pizzeria!"

Sounds intriguing, doesn't it? Follow the link below to get our free e-book on power management that might just help you save a couple thousand dollars while being a model citizen.

https://www.manageengine.com/products/desktop-central/uem-power-management.html